Need to find out what has been modified to running-config

Hello,
When I enter the "reload" command, Cisco ASA 5510 asks me
a question: System config has been modified Save? [Y]es/[N]o:
All I did was issuing a few "show" commands before the "reload" command. I definitely need to find out what
has been modified before the reboot
Is there any way to find out what has been modified to the running configuration.
Thanks!

If you want to know when changes are made, but don't want to setup TACACS (and you have a syslog server setup), you can have the router syslog all commands entered while in config mode:
devcorert01#conf t
devcorert01(config)#archive
devcorert01(config-archive)#log config
devcorert01(config-archive-log-cfg)#hidekeys
devcorert01(config-archive-log-cfg)#logging enable
devcorert01(config-archive-log-cfg)#notify syslog
Anytime someone enters any command while in config mode, the command will be sent to your syslog server.
Examples:
Jul 21 10:15:41 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:do sh run
Jul 21 10:17:33 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:interface GigabitEthernet2/2
Jul 21 10:17:38 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:shutdown
Jul 21 10:17:42 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:no shutdown
Note the "do show run". Even thought that is not a config command per se, it was entered while in config mode. Also notice the user is "console". If it was from a telnet session, you would see
Jul 21 10:17:33 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:interface GigabitEthernet2/2
Jul 21 10:17:38 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:shutdown
Jul 21 10:17:42 EDT: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:no shutdown
Mike

Similar Messages

  • How to find out what has been restored to a database instance?

    I'm using RMAN to back up and restore/recover. How to find out what has been restored/recovered to a database instance?
    Oracle version is 11gR2 but compatibility is set to 10.
    Edited by: 881656 on Aug 28, 2012 1:54 AM

    select output
    from V$rman_output
    order by stamp;
    select *
    from V$rman_status
    order by start_time desc;
    Regards
    Asif Kabir
    Handle:      881656
    Status Level:      Newbie
    Registered:      Aug 25, 2011
    Total Posts:      52
    Total Questions:      *30 (30 unresolved)*
    -- please close all the answered threads and mark your helpful post as correct/helpful

  • HT1689 How do we find out what has been purchased and for how much on an IPhone 4

    How do we find out what has been purschased and for how much on an IPhone 4?

    View Purchase History
    http://support.apple.com/kb/HT2727

  • Is there a way of finding out what has been accessed on my MacBook Pro whilst in the possession of an apple authorised service centre?

    Hi Guys,
    I'm a bit new to this discussion group thing although I've been using Macintosh computers for many years (showing my age).
    I handed my MacBook Pro to be repaired at an authorised apple service centre. When I handed it in they said they needed to keep hold of it to run some diagnostics and requested my password. I've owned various models of mac for the the past 17 years and this is the first hardware problem I have encountered, hence I have never bothered to set up user accounts. 
    As I live in quite a remote part of Sweden I am paranoid that some untrusted technician is going to make a copy of my music (11,000 tracks) or share some of my personal information (scanned copies of my birth certificate, passport, certificates, photos, etc.) on the web. Is there a way of finding out what activity has taken place whilst they've had it in their possession?
    I appreciate any advice you guys can offer.
    Thanks!
    PS: I've already thought about the 'recently opened' menu and The machine in question is a MacBook Pro 17" (2011) running OS X 10.6.8 (need Rosetta).

    I am paranoid that some untrusted technician is going to make a copy of my music (11,000 tracks) or share some of my personal information (scanned copies of my birth certificate, passport, certificates, photos, etc.) on the web.
    If you put your info into the computer and hand it to another, you have to assume they will copy everything.
    Why are you putting scanned copies of valuable identity information into a computer than can be hacked, stolen, lost or compromised by a dirty tech?
    Have you lost your mind?
    Is there a way of finding out what activity has taken place whilst they've had it in their possession?
    No. The tech would just deny it if he did, or tell the truth which the answer would be "NO" in either case.
    The employer won't ask that sort of questions without solid proof, less they make a enemy of the employee and/or risk being sued for defamation of character.
    It's not like they bother to have a team of people watching over his shoulder that he doesn't stick a USB thumb drive of your data into his pocket to take home.
    I am paranoid that some untrusted technician is going to make a copy of my music (11,000 tracks)
    If it's iTunes music, it has your personal ID embedded into the song files. Most IT techs know this though.
    I appreciate any advice you guys can offer.
    Too late now, all you can do is not worry about it.
    Take your personal info out of the machine and if you need it, burn cd/dvd copies, a few USB thumb drives, Iron Keys or self encrypting external storage drives with key and/or keypad.

  • Is it possible to find out what has been downloaded on my phone as for some reason my data usage doubled in one month but I have no idea how

    Hi
    Need some help regarding downloads and data usage on my Iphone 4. In one month my usage doubled and I had 6 downloads which used up half of my data allowance (250mb). I hadn't used my phone any differently and I do not download music/movies/tv programmes etc. Orange are being really useless with helping me and I would like to be able to find out what sites were visited or what was downloaded on certain days as some of the high usage is when I'm at work and not able to use my phone.

    Hi
    Need some help regarding downloads and data usage on my Iphone 4. In one month my usage doubled and I had 6 downloads which used up half of my data allowance (250mb). I hadn't used my phone any differently and I do not download music/movies/tv programmes etc. Orange are being really useless with helping me and I would like to be able to find out what sites were visited or what was downloaded on certain days as some of the high usage is when I'm at work and not able to use my phone.

  • How to find out what has been archived with ABAP

    Hello Xperts,
    as most everybody knows who has been using archiving in BW: when attempting to load data which has already been archieved in a BW infoprovider an exception is raised ("records locked by archiving request").
    For that reason we need to implement a solution to exclude in the filter within the DTP (on e.g. InfoObject 0CALDAY) data that has already been archived.
    Hence, anybody know/have a program/FM/class-method with which to read which data - i.e. InfoObject restriction - has already been successfully archived for a certain archiving object/infoprovider???
    Any assistance would be highly appreciated. Thanks.

    select output
    from V$rman_output
    order by stamp;
    select *
    from V$rman_status
    order by start_time desc;
    Regards
    Asif Kabir
    Handle:      881656
    Status Level:      Newbie
    Registered:      Aug 25, 2011
    Total Posts:      52
    Total Questions:      *30 (30 unresolved)*
    -- please close all the answered threads and mark your helpful post as correct/helpful

  • Every time I sign into my Macbook, I get an error message from Automator; "The data couldn't be read because it has been corrupted.". I have never created an Automator workflow. How do I find out what Automator is trying to run and stop it?

    Every time I sign into my Macbook, I get an error message from Automator; "The data couldn't be read because it has been corrupted.". I have never created an Automator workflow. How do I find out what Automator is trying to run and stop it?

    Maybe it's set as a login item:
    - System Preferences: Users and Groups:
    - Highlight your user account in the left pane/list
    - Click "Login" tab at the top.
    See if you have an Automater action on the list
    - Note, you can select it, then right-click, and can then select "Reveal in Finder". That way you might have an idea what installed it.

  • I'm having network security issues, how can I find out who has been seeing my information on my laptop

    How can I find out who has been loging on or attached to my network and on to my computer remotly.

    Dartrath--
    Please give us much more pecific information as to why you think someone is doing this?
    What signs and symptoms are you experiencing?

  • I need to find out what a charge was for?

    I need to find out what a charge was for on my account?

    Check your Purchase History
    http://support.apple.com/kb/ht2727

  • I need to find out what my key code is to connect another pc to my airport, I am running snow leopard. I need the hexidecimal code, 12 characters. How can I find it?

    anybody have a suggestion? I need to find out what my key code is to connect another pc to my airport, I am running snow leopard. I need the hexidecimal code, 12 characters. How can I find it?

    You can get the Equivalent Network Password from the menu options of the AirPort Utility as follows:
    Start the AirPort Utility; select the AirPort, and then, select Manual Setup.
    From the Utility's menu bar, select Base Station, and then, Equivalent Network Password to reveal the hexidecimal key code.

  • I just formatted my hard drive and I need to find out what my "wireless password is"

    I just formatted my hard drive and I need to find out what my "wireless password is". I was in a hurry when I did format my PC that when I got to given my wireless a password, I used the same one as before. Now I have tried to finding what it is for my other products, I don't know where to look. Do I or can I change the password without losing anything? Need help PLEASE
    [Personal Information Removed]

    Hi:
    You need to read your router's configuration instructions on how to access the router's menu.
    Hopefully you can access that and in the wireless security menu you will find the passkey to use.
    Paul

  • I have an old TC (500GB) and I need to find out what's on it.

    Currently I have a 2TB TC backing up my iMac. I have an older, smaller TC (500GB) that I think came from a previous HD failure on an older iMac, and I think any info was migrated to a new HD. If I unplug the current TC and plug in the older one, will I see what's on it? If so, and it's contents have already been transferred (which is why I want to see), how can I wipe the TC clean to use as storage? If the data from this old TC was migrated to a new HD, would the old TC be wiped clean? This was done at the Apple store. Am I clear on this? I'm concerned the small TC will begin a backup of my iMac , which isn't my purpose, as I'm looking to start over with this smaller TC. I was unable to find a discussion which answers this. Thanks.

    Let me answer the last bit first.
    I'm concerned the small TC will begin a backup of my iMac
    A TC is a dumb as a board hard disk in an airport router.. it will do nothing.. it will sit on the network and do nothing at all. All smarts for backup are Time Machine which is software on the computer.. and TM will not start doing new backups unless you tell it.
    If I unplug the current TC and plug in the older one, will I see what's on it?
    Yes.
    Unplug a computer from the network.. your imac.. !! And plug in the old TC. LAN to LAN port.
    Do a factory reset of the TC if the computer cannot then access the TC.
    The Factory Reset.
    Power down the TC.
    Hold in reset. and keep holding it in. Be Gentle! It is a tiny surface mount switch with a plastic lever.. Attempting to push it out the other side of the TC will not make the switch turn on better.
    (I fix TC and have several reset levers bent over and jammed or broken off).
    Power on the TC.. remember with the reset held in.. this needs three arms.. a friend or power switch you can get to with your feet..
    Keep holding in reset for about 10sec until the front LED flashes rapidly.
    Release reset and wait .. the boot will be slow as it deletes previous setting.. only from router side and pulls out the factory defaults. No files are deleted on the hard disk.. but the name of the TC may change.
    If the data you are trying to find is in TM backup it is not easy to find out what you are missing.
    Please follow the instructions here.
    http://pondini.org/TM/17.html
    If the data from this old TC was migrated to a new HD, would the old TC be wiped clean?
    The apple store will not wipe the old TC .. or at least that would not be good practice. It is your data and your job to keep or delete it.
    If you want to wipe the TC open the airport utility and go to the disk tab and select erase.. if you are keeping the TC for yourself.. just do a quick erase.. takes a minute or two.. if you want to sell it then do a one pass erase which will take a few hours.
    If you want to use the old TC .. remember it is now 4 years old.. maybe nearer 5years.. it has done its time.. it will die shortly.. suddenly and without recourse. If you put info on it you need.. you will regret it.

  • 11.1.2- Need to find out what reports are being executed by a user

    Hi,
    We have financial reports executed from workspace.In essbase session , only the user id is displayed and the Request type- mdxreport is displayed. We also tried searching the log for Financial report didnt find anything relevant.
    Is there a way to find out what reports are being executed by the user.
    Thanks in advance.
    Regards,
    Saumya

    STAT will give you the information for a limited period of time and is limited to the server which you are logged onto yourself. Beyond 24 hours it is of even less use even if you change the selection screen values.
    If you want it for a period way back into the past, then you need to use ST03N.
    There are at least 2 dependencies and 1 confusion:
    1 dependency) The length of period is determined by the size (length) of the file. You can change this in ST03N (default 50MB) via the menu settings.
    2 dependency) The stat collector jobs need to be scheduled to write the information to ST03N (once per hour is a legal requirement in some non-banana republic countries).
    1 confusion) There is an obscure function which converts a report submit to a transaction name (there is not much difference anyway) and an even more obsure one which filters what ST03N will record and therefore whether you can read it. You can (un)filter these things away if you search the SAP Marketplace for the term "MONI".
    What is of particular value from this control is that you can even detect a submission of an abap which only existed temporarily.
    Also note that having this information is potentially very powerfull with respect to the users (some of them are human too), so you should expose and use it responsibly.
    You should also ensure that only responsible users / auditors have access to S_TOOLS_EX.

  • How can i find out what or why mac is running so slow ?

    My Mac is running as slow as a week in jail , how can i find out what is causing it , I have 1TB memory , using 635 of it at the moment. i'm using version 10.7.1 , lion. It just seems so slow to respond to anything , start up , open an app , go from one song to another in iTunes , go from one event to another in iPhoto , everything is slow . any ideas out there folks ? I'd appreciate the help.
    Thanks .

    Here is all the information i can muster , I still can't find RAM .
    Processor  3.2 GHz Intel Core i3
    Memory  4 GB 1333 MHz DDR3
    Graphics  ATI Radeon HD 5670 512 MB
    Software  Mac OS X Lion 10.7.1 (11B26)

  • How do I find-out what version OS I'm running?

    New Apple user - how do I find out what OS I'm running on my Macbook Pro?

    Click the Apple logo in the top left corner and select "About this Mac"
    Version:
    10.8 = Mountain Lion
    10.7 = Lion
    10.6 = Snow Leopard
    10.5 = Leopard

Maybe you are looking for