[113120] in North American Network Operators' Group
RE: Nipper and Cisco configuration results
daemon@ATHENA.MIT.EDU (=?iso-8859-1?B?Sm+i?=)
Thu Apr 2 22:06:48 2009
From: =?iso-8859-1?B?Sm+i?= <jbfixurpc@gmail.com>
To: <castellan2004-nsm@yahoo.com>,
<nanog@nanog.org>
Date: Thu, 2 Apr 2009 22:03:17 -0400
In-Reply-To: <213756.88298.qm@web30803.mail.mud.yahoo.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Subba,
I've not heard or used this product (Nipper) before, so I cannot =
confirm
what the reasoning is for this. I can tell you that
based on the captures at the wire this appears to be a false-positive. =
It
appears there is a simuliar question being
asked on their (Nipper's) forums. My guess is it (Nipper) is using the
logging from the Cisco devices in error to claim this as an issue. If =
it=92s
not given access to the Cisco devices other than a network feed not
snmp/logins/syslogging/works/etc, I as well as many others would surely =
be
interested.=20
Forum reference (which hasn't been answered at this time)
Ref:
http://nipper.titania.co.uk/forums/viewtopic.php?f=3D3&t=3D72&sid=3D8f7bc=
0ec62d41b
09cd977eb7e72d1f6e
I would be interested to know if you find out the reasoning for this, of
course offlist would be fine.
Regards,
-Joe Blanchard
________________________________
From: Subba Rao [mailto:castellan2004-nsm@yahoo.com]=20
Sent: Thursday, April 02, 2009 9:43 PM
To: nanog@nanog.org; Jo=A2
Subject: RE: Nipper and Cisco configuration results
=09
=09
Joe,
=09
Thank you for replying. I am asking about the Nipper complaint.
Why is Nipper report saying "Rlogin" is enabled when I don't see any ACL =
in
the config?
=09
Using IOS 12.4
=09
Cheers,
=09
Subba Rao
=09
