Vault7: CIA Hacking Tools Revealed
Navigation: » Latest version
Owner: User #14587667
RANCID - Test Range
RANCID is up and running in the Test Range. this is a separate server from the one running in the NDBNetwork Devices Branch lab. The TR-Core network device configs are queried every hour, and they are saved to CVSSource code management software if there are changes. The current config, previous configs, and config changes can be viewed by accessing the RANCID server's web page.
RANCID is currently "monitoring" the following devices:
IP |
Device Description |
|---|---|
| 10.9.8.1 | TR Core Switch |
To access the RANCID web page from DEVLAN, open a browser and go to:
http://10.9.8.98/viewvc/
You will see a listing of projects. If you click on one of the IP addresses, you can view the revision history and the differences from the previous config versions.
Note: When viewing a config it will also include information regarding VLANs, interfaces, etc. The current config (result of the "show run" command) starts after this other information.
Add a new RANCID project
To add a new project to RANCID, run the script "add_rancid_project.sh" and follow the prompts.
# sudo ./add_rancid_project.sh
Delete a CVSSource code management software project
Delete the project from disk: sudo rm -rf /usr/local/rancid/var/CVS/<project_name>
Remove project name from rancid.conf (Remove from line that reads: LIST_OF_GROUPS="project1 project2"): sudo vi /usr/local/rancid/etc/rancid.conf
Rebuild CVS: sudo /usr/local/viewvc/bin/cvsdbadmin rebuild /usr/local/rancid/var/CVS/CVSROOT
Restart apache: sudo service apache2 restart
Notes
Add network device: sudo vi /usr/local/rancid/var/networking/router.db
Add/Change Username/Password: sudo vi /usr/local/rancid/.cloginrc
Run RANCID: sudo -i -u rancid /usr/local/rancid/bin/rancid-run
Execute command: sudo -i -u rancid /usr/local/rancid/bin/clogin -c "<command>" <ip address>
Execute list of commands on multiple devices: sudo -i -u rancid /usr/local/rancid/bin/clogin -x "commands.txt" `cat ip_list.txt`
commands.txt should contain the commands you want to run (one line per command). Note: Use "\n" if you command requires confirmation
ip_list.txt should contain the IP addresses of the devices you would like to run the commands on (one line per IP addrress)
Refer to the RANCID - NDB Lab attachments for RANCID configuration instructions.