<div dir="ltr">Bill,<div><br></div><div>I will check that out, looks like it could be handy.</div><div><br></div><div>My solution for the time being is to send all syslog messages to a solarwinds server. That server looks for NAK's and checks for the OUI of the gear I'm using and passes it off to another script to sleep and process the reboot command. Then solarwinds discards all messages from the DHCP server. I will be looking for a server that I can setup standalone as I don't care for solarwinds much and certainly don't like the fact that it runs on windows, but it does seem to be a good logging server and there aren't any licensing fees attached to that(since we already have the Orion software). Splunk would be a great option if they weren't also so proud about their software.</div><div><br></div><div>Thanks for all the input for those that chimed in!</div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><br><div><div style="font-size:small">Mark Spring<br></div><span style="font-size:small">Information Systems Manager</span><br></div></div></div></div></div></div>
<br><div class="gmail_quote">On Fri, Jul 21, 2017 at 3:14 AM, Bill Shirley <span dir="ltr"><<a href="mailto:bill@c3po.polymerindustries.biz" target="_blank">bill@c3po.polymerindustries.biz</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
You might look into Simple Event Correlator (SEC)
<a class="m_-323584048796695910moz-txt-link-freetext" href="https://simple-evcorr.github.io/" target="_blank">https://simple-evcorr.github.<wbr>io/</a><br>
<br>
It can monitor your log files and trigger events. It's an rpm on
Fedora; don't know about<br>
other distros. There's a mailling list and Risto, the author, is
always responsive.<span class="HOEnZb"><font color="#888888"><br>
<br>
Bill</font></span><div><div class="h5"><br>
<br>
<div class="m_-323584048796695910moz-cite-prefix">On 7/19/2017 8:18 PM, Mark Spring
wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<div dir="ltr">I am having some issues with network gear, and
while arguing with vendors about who's problem it really is..I
noticed that my device receives a NAK before it receives the
proper IP address from our server(when the gear comes back
online). If I can track this down in the logs then I can look
for the ACK that follows, login to the device and reboot it
properly.
<div><br>
</div>
<div>I wrote a script to try and tail the log file with bash and
I have been able to pick off the traffic but the buffer when
tailing in bash leaves me with a case where time before the
device is handled is indefinite.</div>
<div><br>
</div>
<div>I have read about the "on commit" in the config and that
doesn't seem to help, the expiry and other options don't seem
to fit my needs either.</div>
<div><br>
</div>
<div>I'm not necessarily committed to BASH, it just seemed to be
the quickest go to without a lot of fluff...considered PERL
PHP or Python. Don't have a lot of experience with one
particular language, just use what works for each scenario.</div>
<div><br>
</div>
<div>Let me know where I can fill in blanks! <br clear="all">
<div>
<div class="m_-323584048796695910gmail_signature" data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr"><br>
<div>
<div style="font-size:small">Mark Spring<br>
</div>
<span style="font-size:small">Information Systems
Manager</span><br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
</div></div><span class=""><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">NKTelco</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">301
W. South St.</span>
<div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">New
Knoxville, OH 45871</span></div>
<div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)"><br>
</span></div>
<div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Phone:
1-888-NKTELCO</span></div>
<div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Fax:
<a href="tel:(419)%20753-2950" value="+14197532950" target="_blank">419-753-2950</a></span>
<div><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">This
message and the file(s) attached are confidential and
proprietary</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">information
of NKTelco for the sole use of the intended recipient. Any </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">unauthorized
review, distribution, disclosure, copying, use, or </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">dissemination,
either whole or in part, is strictly prohibited. Do not </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">transmit
these documents, in any form, to any third party without
the </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)">
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">expressed
written permission of NKTelco.</span></div>
</div>
<br>
<fieldset class="m_-323584048796695910mimeAttachmentHeader"></fieldset>
<br>
<pre>______________________________<wbr>_________________
dhcp-users mailing list
<a class="m_-323584048796695910moz-txt-link-abbreviated" href="mailto:dhcp-users@lists.isc.org" target="_blank">dhcp-users@lists.isc.org</a>
<a class="m_-323584048796695910moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/dhcp-users" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/dhcp-users</a></pre>
</span></blockquote>
<br>
</div>
<br>______________________________<wbr>_________________<br>
dhcp-users mailing list<br>
<a href="mailto:dhcp-users@lists.isc.org">dhcp-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/dhcp-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/dhcp-users</a><br></blockquote></div><br></div>
<br>
<span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">NKTelco</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">301 W. South St.</span><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">New Knoxville, OH 45871</span></div><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)"><br></span></div><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Phone: 1-888-NKTELCO</span></div><div><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">Fax: 419-753-2950</span><div><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">This message and the file(s) attached are confidential and proprietary</span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">information of NKTelco for the sole use of the intended recipient. Any </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">unauthorized review, distribution, disclosure, copying, use, or </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">dissemination, either whole or in part, is strictly prohibited. Do not </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">transmit these documents, in any form, to any third party without the </span><br style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;background-color:rgb(255,255,255)"><span style="font-family:arial,sans-serif;font-size:small;color:rgb(34,34,34);background-color:rgb(255,255,255)">expressed written permission of NKTelco.</span></div></div>