EEM And Tcl scripts

Hi
Please teach me. How to implementation EEM.
I want use EEM this situation.
When gi1/1 detect down EEM scripts enable.
In case gi1/1 is up  within 3 seconds then finish the EEM scripts.
Another case gi1/1 down time is over 3 seconds, Then shutdown gi1/2 and gi1/3.
IOS version 12.2(46)SG.

You have a tight time margin here, but these EEM applet policies should work:
event manager environment quote "event manager applet int-down event syslog pattern "LINEPROTO-5-UPDOWN.*GigabitEthernet1/1.*changed state to down" action 1.0 cli command "enable" action 2.0 cli command "config t" action 3.0 cli command "event manager applet int-down-countdown" action 3.1 cli command "event timer countdown time 3" action 3.2 cli command "action 1.0 cli command enable" action 3.3 cli command "action 2.0 cli command $quote config t$quote" action 3.4 cli command "action 3.0 cli command $quote int gi1/2$quote" action 3.5 cli command "action 4.0 cli command $quote shutdown$quote" action 3.6 cli command "action 5.0 cli command $quote int gi1/3$quote" action 3.7 cli command "action 6.0 cli command $quote shutdown$quote" action 3.8 cli command "action 7.0 cli command $quote no event manager applet int-down-countdown$quote" action 3.9 cli command "action 8.0 cli command $quote end$quote" action 4.0 cli command "end"event manager applet int-up event syslog pattern "LINEPROTO-5-UPDOWN.*GigabitEthernet1/1.*changed state to up" action 1.0 cli command "enable" action 2.0 cli command "config t" action 3.0 cli command "no event manager applet int-down-countdown" action 4.0 cli command "end"

Similar Messages

  • Using EEM and TCL scripts for voice

    HI all,
    I'd like to use eem to check Sip dial-peer status+interface BRI status, when sip dial-peer has no answer to invite and bri interface is down the LAN interface must be shutted down. Is it possible to avhieve it using eem? I didn't find anything for eem monitoring sip dial-peers...
    thanks
    Massimiliano

    EEM doesn't have any ability to control the data plane currently.  Therefore, there is no direct voice tie-in.  There is a way to do Tcl scripting of some voice operations (e.g. IVR scripts), but those do not relate to EEM.
    That said, if there are some show commands which provide you the data you need, you can create an EEM timer policy (i.e. one that runs periodically), parsers the show command output, and takes further action if the output contains certain patterns.  Depending on the version of IOS, this may require an EEM Tcl script, or you may be able to do it within an EEM applet.
    If you need further assistance, you will need to provide your IOS version, and the exact commands (and output) which would tell you if the SIP peer isn't getting an answer and the BRI interface is truly down (I'm imagining something like "show isdn status" for this one).
    Please support CSC Helps Haiti
    https://supportforums.cisco.com/docs/DOC-8895
    https://supportforums.cisco.com

  • EEM and TcL Script to Disable Inactive Ports

    I've browsed around to the other  support strings to make sure I didn't miss anything, but I can't seem to  get this to work.  I have the latest sl_suspend_ports.tcl and  tm_suspend_ports.tcl created by Joseph Clarke from strings that verified they worked as planned.   Here are the commands I issued to register the scripts -
    Directory of flash:/policies/
        9  -rwx        3101   May 3 2013 07:58:03 +00:00  sl_suspend_ports.tcl
       10  -rwx        4669   May 3 2013 07:58:44 +00:00  tm_suspend_ports.tcl
    conf t
    event manager directory user policy flash:/policies
    event manager policy sl_suspend_ports.tcl
    event manager environment suspend_ports_days 1
    event manager environment suspend_ports_config flash:/susp_ports.dat
    event manager policy tm_suspend_ports.tcl
    #show run | inc event manager environment
    event manager environment suspend_ports_days 1
    event manager environment suspend_ports_config flash:/susp_ports.dat
    It doesn't appear to work though.  Essentially, we have a  need to make sure all computers are always on and all ports not active  for >24 hours to be shutdown and moved to a designated vlan (I added  the 'lappend' statement to the script to specify the additional command of assigning the vlan)
    I'm running 12.2(55)SE7 on Catalyst 3560s and 3750s
    Is there a way to manually run the script?  Did I miss anything in the configuration?
    Thanks for your help!
    Chris

    SUCCESS!  AWESOME!
    I added one more line to the lappend statements to add a description with the time stamp, here's what happened -
    Port      Name               Status       Vlan       Duplex  Speed Type
    Fa0/2     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/3     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/4     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/5     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/6     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/7     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/8     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/9     Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    Fa0/10    Disable by Inactiv disabled     666          auto   auto 10/100BaseTX
    #sh run int fa0/2
    Building configuration...
    Current configuration : 408 bytes
    interface FastEthernet0/2
    description Disable by Inactivity Script last used on Tue May 14 04:32:10 ZULU 2013
    switchport access vlan 666
    shutdown
    end
    So to recap for any future folks that stumble upon this thread and want to use this method. 
    1. Create a TACACS service account or use a TACACS/RADIUS account that has a high enough privilege to edit the config.
    2. Create a "policies" directory on flash and copy the attached scripts to it.
    3. Register the scripts using the following commands -
    #conf t
    (config)#event manager directory user policy flash:/policies
    (config)#event manager policy sl_suspend_ports.tcl
    (config)#event manager environment suspend_ports_days 1    "<--Or the number of days inactive you choose"
    (config)#event manager environment suspend_ports_config flash:/susp_ports.dat
    (config)#event manager policy tm_suspend_ports.tcl
    (config)#event manager session cli username "svc.eemscript"  "<---The account you created to run in step 1"
    The output of "show event manager policy registered" should then show the following -
    #show event manager policy registered
    No.  Class     Type    Event Type          Trap  Time Registered           Secu  Name
    1    script    user    syslog              Off   Fri May 3 10:20:26 2013   2048  sl_suspend_ports.tcl
    pattern {LINEPROTO-5-UPDOWN}
    nice 0 queue-priority normal maxrun 600.000 scheduler rp_primary
    2    script    user    timer cron          Off   Tue May 14 05:25:42 2013  2048  tm_suspend_ports.tcl
    cron entry {0 0 * * *}
    nice 0 queue-priority normal maxrun 600.000 scheduler rp_primary
    NOTE: On lines 140-145 of the tm_suspend_ports.tcl file, you can edit the commands you want the script to execute to your liking.  I have it adding a description as seen in the above output and moving to an isolated non-routable VLAN of my network.
    Thanks Joe Clarke for the awesome script and assistance in getting it running!

  • I need an EEM for TCL script

    Hello All,
    This is my first time here and hope this is right place to post this:
    I have a TCL script written by a very help person that sends a tone over my PA System from my CME.  I would like to have an EEM script to automatically run the script at certain times a day.  Please be advised this is my introduction to both TCL and EEM.  Any help is appreciated.
    application
    service paging flash:paging_89.tcl
      param prompt-1 flash:500hz.au

    I don't think you can schedule this script to run using EEM.  It's an IVR script, and I think it has to be configured the way you have it.  I'm not an IVR expert, though.  You might want to ask on one of the voice communities here if this script can be run manually.  If it can, then you can use EEM to schedule it.

  • EEM and TCL Interface

    Hi.
    I need help. How to implementation EEM.
    I want use EEM this situation.
    If the syslogmessage "Interface.., changed state to down" comes than the Router should Reload.
    IOS 12.4(15)T8/T12
    Sry for my bad english

    This policy should work for you.
    event manager applet syslog-reload event syslog pattern "LINEPROTO-5-UPDOWN.*changed state to down" action 1.0 reload
    You may want to get a bit more specific as to which interface triggers this, though.  For example:
    event manager applet syslog-reload event syslog pattern "LINEPROTO-5-UPDOWN.*Interface GigabitEthernet0/1, changed state to down" action 1.0 reload

  • OWB Paris and OMB Scripting

    Will my OMB and tcl scripts written in OWB 10g (for metadata management and deployment to production) upgradable when I go to next version of OWB code named 'Paris'?
    Thanks and Regards,
    Ayaz.

    Hi Maurice. It seems like Oracle is trying to reduce number of licenses with the OLAP option, since it should be possible to have both OLTP and OLAP systems in the very same instance.
    In the other hand, Oracle seems to want more money for "advanced ETL options", such as scheduling, metadata management, bla bla bla...
    But those "advanced" functions seems to me as something every ETL tool should provide. For free...

  • Signing byte-encoded TCL script for EEM

    Good day,
    I am trying to figure out how to sign a TCL script which is distributed in byte-encoded form.
    The byte coding is performed with TCL pro (http://sourceforge.net/projects/tclpro/files/TclPro-1.4.1/)
    Any pointers on how to do it will be much appreciated.
    Regards,
    Alexei

    EEM 3.4 should support third party signing of Tcl policies.  As to whether or not byte-code compiled policies will be supported is uncertain.  However, you should be able to sign a byte-code compiled Tcl script (regular Tcl script, and not EEM policy) by putting the signature after the closing tbcload '}'.  I assume the same thing will eventually be doable with EEM.

  • EEM TCL script configuration issue

    Hi Experts,
    I need help with an EEM TCL script for the CRS platform that generates a SYSLOG message after the CPU reaches a threshold value and then stays over the threshold value for 15 minutes, I've already tryied several thing and the last TCL script that I tested generated the SYSLOG message when the CPU reaches the threshold but I can't seem to find any way to make it wait the 15 min over the threshold and then generate the message.
    My current script looks like this:
    ::cisco::eem::event_register_wdsysmon timewin 900 sub1 cpu_tot op ge val 70
    namespace import ::cisco::eem::*
    namespace import ::cisco::lib::*
    array set event_details [event_reqinfo]
    action_syslog msg "sub1 is $event_details(sub1)"
    action_syslog msg "High CPU threshold value over 70%"
    puts ok
    I've tryied using the 'period' option for the 'cpu_tot' variable but the TCL script was'nt recognized and couldn't be registered, and I'm using the 'timewin' option here but it seems to be wrong as it says it's the time it has for multiple sub-events to ocurr in order for the script to execute.
    timewin
    (Optional) Time window within which all of the subevents have to occur in order for an event to be generated and is specified in SSSSSSSSSS[.MMM] format. SSSSSSSSSS format must be an integer representing seconds between 0 and 4294967295 inclusive. MMM format must be an integer representing milliseconds between 0 and 999).
    Also, the 'period' option I believe wouldn't have worked because I understand that it referrs to the time period that the script will take to monitor the CPU:
    •1. cpu_tot [op gt|ge|eq|ne|lt|le] [val ?] [period ?]
    op
    (Optional) Comparison operator that is used to compare the collected total system CPU usage sample percentage with the specified percentage value. If true, an event is raised.
    val
    (Optional) Percentage value in which the average CPU usage during the sample period is compared.
    period
    (Optional) Time period for averaging the collection of samples and is specified in SSSSSSSSSS[.MMM] format. SSSSSSSSSS format must be an integer representing seconds between 0 and 4294967295, inclusive. MMM format must be an integer representing milliseconds between 0 and 999. If this argument is not specified, the most recent sample is used.
    As I said, I couldn't try this because the script send an error when I tried to register using the following line:
    ::cisco::eem::event_register_wdsysmon sub1 cpu_tot op ge val 70 period 900
    This is the error message that appeared:
    RP/0/RP0/CPU0:CRS(config)#event manager policy test.tcl username cisco
    RP/0/RP0/CPU0:CRS(config)#commit
    Thu Aug 29 12:35:43.569 CDT
    % Failed to commit one or more configuration items during a pseudo-atomic operation. All changes made have been reverted. Please issue 'show configuration failed' from this session to view the errors
    RP/0/RP0/CPU0:CRS(config)#sh conf fail
    Thu Aug 29 12:35:52.427 CDT
    !! SEMANTIC ERRORS: This configuration was rejected by
    !! the system due to semantic errors. The individual
    !! errors with each failed configuration command can be
    !! found below.
    event manager policy test.tcl username cisco persist-time 3600
    !!% Embedded Event Manager configuration: failed to retrieve intermediate registration result for policy test.tcl
    end
    Anyway, to make this work I understand that I need nested TCL scripts that do the following:
    •1. Monitor the CPU and when it reaches the threshold install another TCL policy that counts down 15 min.
    •2. If the second TCL policy reaches zero then it should generate the SYSLOG message.
    •3. Monitor the CPU while this is running and if it falls below the threshold it should stop the second TCL policy.
    I don't know how I can acomplish this so if anyone can help me with this or show me another way to do this I would really appreciate it.
    Thanks in advance for all your help!

    Neither option is likely to do what you want.  The timewin is for correlating multiple events, and period is the polling interval.  What you want is to create a timer when the CPU is first detected as being high, countdown 15 minutes, then alert you.  You can do this with a nested EEM policy.  For example, you can add the following to your existing policy:
    proc get_pol_dir { fd } {
        set res {}
        set output [cli_exec $fd "show event manager directory user policy"]
        set output [string trim $output]
        regsub -all "\r\n" $output "\n" result
        set lines [split $result "\n"]
        foreach line $lines {
            if { $line == "" } {
                continue
            if { ! [regexp {\s} $line] && ! [regexp {#$} $line] } {
                set res $line
                break
        if { $res == {} } {
            return -code error "The user policy directory has not been configured"
        return $res
    if { [catch {cli_open} result] } {
        error $result $errorInfo
    array set cli $result
    set output [cli_exec $cli(fd) "show event manager policy registered | inc tm_alert_high_cpu.tcl"]
    if { [regexp {tm_alert_high_cpu.tcl} $output] } {
        exit 0
    set poldir [get_pol_dir $cli(fd)]
    set polname "${poldir}/tm_alert_high_cpu.tcl"
    set fd [open $polname "w"]
    puts $fd "::cisco::eem::event_register_timer countdown time 900"
    puts $fd "namespace import ::cisco::eem::*"
    puts $fd "namespace import ::cisco::lib::*"
    puts $fd "action_syslog msg \"CPU has been over 70% for 15 minutes\""
    close $fd
    cli_exec $cli(fd) "config t"
    cli_exec $cli(fd) "event manager policy tm_lert_high_cpu.tcl username eem"
    cli_exec $cli(fd) "commit"
    cli_exec $cli(fd) "end"
    catch {cli_close $cli(fd) $cli(tty_id)}
    Additionally, you'll want another permanently configured policy that checks for a low CPU threshold.  Something like:
    ::cisco::eem::event_register_wdsysmon sub1 cpu_tot op le val 10
    namespace import ::cisco::eem::*
    namespace import ::cisco::lib::*
    if { [catch {cli_open} result] } {
        error $result $errorInfo
    array set cli $result
    cli_exec $cli(fd) "config t"
    cli_exec $cli(fd) "no event manager policy tm_alert_high_cpu.tcl"
    cli_exec $cli(fd) "commit"
    cli_exec $cli(fd) "end"
    catch {cli_close $cli(fd) $cli(tty_id)}

  • EEM-TCL Script to switch config from interface X to interface Y

    Hello Guys,
    I’m trying to create a script which is controlled by an EEM-UPDOWN event of an interface. What I’m trying to do is, if interface X is down for some reason it should copy the interface configuration to interface Y.
    So my problem is I’m very new to eem-tcl scripting and I have some basic problem hopefully u can help me =) I’m working on a ASR9K !
    So what i have done so fare:
    ::cisco::eem::event_register_syslog occurs 1 pattern ".*CHANGED.*$_sat_1_link_1.*" maxrun 90   
    namespace import ::cisco::eem::*
    namespace import ::cisco::lib::*
    array set arr_einfo [event_reqinfo]
    if {$_cerrno != 0} {
        set result [format "component=%s; subsys err=%s; posix err=%s;\n%s" \
          $_cerr_sub_num $_cerr_sub_err $_cerr_posix_err $_cerr_str]
        error $result
    if [catch {cli_open} result] {
        error $result $errorInfo
    } else {
        array set cli1 $result
    action_syslog priority emergencies msg "start script testv1_1"
    #puts "\nEXECUTE CLI COMAND :\n"
    set out {cli_exec $cli1(fd) "show running-config formal interface $_sat_1_link_1"}
    set xout [split $out \n]
    #puts "DEBUG : $xout \n\n"
    set anz [llength $xout]
    #puts "DEBUG : count rows = $anz \n\n"
    for {set ii "0"}  {$ii < $anz } {incr ii} {
           set indexout [lindex $out $ii]
        regexp  {([\w]+)[ ]([\w\d/]+)\s(.*)} $indexout a b c d
        #puts "\nDEBUG START"
        #puts "\nindex Nr  $ii"
        #puts "Full Match: $a"
        #puts "Sub Match1: $b"
        #puts "Sub Match2: $c"
        #puts "Sub Match3: $d"
        #puts "DEBUG END\n"
        set intsrc {cli_exec $cli1(fd) "no $b $_sat_1_link_1 $d"}
        set intdest {cli_exec $cli1(fd) "$b $_sat_1_link_2 $d"}
    if [catch {cli_exec $cli1(fd) "commit"} result] {
        error $result $errorInfo
    if [catch {cli_exec $cli1(fd) "end"} result] {
        error $result $errorInfo
    action_syslog priority emergencies msg "End script testv1_1"
    ps. $_sat_1_link_1 and $_sat_1_link_2 are globaly set per cli in the event manager env.
    Thanks for your help and hopefully u can help me with this script

    Hey
    after show running-config formal interface TenGigE 0/0/2/1 the cli output example is :
    interface TenGigE0/0/2/1 description Test: 0-43
    interface TenGigE0/0/2/1
    interface TenGigE0/0/2/1 shutdown
    and now i want to split the config with my regex
    regexp  {([\w]+)[ ]([\w\d/]+)\s(.*)} $indexout a b c d
    As example line 1
    set x= "TenGigE0/0/2/2"                  --> =dest_interface
    a= interface TenGigE0/0/2/1 description Test: 0-43
    b= interface
    c= TenGigE0/0/2/1
    d= description Test: 0-43
    do this
    cli_exec $cli1(fd) "no $b $c $d"      --->no interface TenGig E0/0/2/1 description Test: 0-43
    cli_exec $cli1(fd) " $b $x $d"          ---> interface TenGigE0/0/2/2 description Test: 0-43
    and from this point it shoud do this until there are no config lines  =)
    as a final result is should copy the whole config from interface X to interface Y  if the trigger is active
    but as i see, the main problem is to get the CLI output in a format like this
    set xy = interface TenGigE0/0/2/1 description Test: 0-43\ninterface TenGigE0/0/2/1\ninterface TenGigE0/0/2/1 shutdown
    or in an index like this:
    Index | command
    1         interface TenGigE0/0/2/1 description Test: 0-43
    2         interface TenGigE0/0/2/1
    3         interface TenGigE0/0/2/1 shutdown
    Thx

  • Tcl script to shut and no shut interface

    Hi, I have problem with DMVPN I tried some configurations but any works.
    The problem is that tunnel with ipsec protection does not support keepalives I have one hub and one spoke the spoke has two interfaces with dynamic ip and the hub has one interface with static ip the two devices have two tunnels gre. The spoke has track to the source and backup comand on tunnels one active and one for backup the problem is when the active tunnel is down (only protocol it is in this way coz the source is down down)the other tunnel comes up and its ok everything is working but when the tunnel active comes back the vpn does not come up until the tunnel is shutdown and not shutdown by manual way. I like to know if is possible to shut and no shut the tunnel when the source comes back with tcl script. (And if is possible that you help me to do the script).
    Thanks in advance.

    Ok thanks everybody jaja it`s done. Solution cryto maps on interfaces and do not put tunnel ipsec protected on the tunnel interface on the hub.
    DOC. DMVPN DUAL TIER ARCHITECTURE

  • How to register EEM Tcl script

    Hello,
    I've a EEM tcl script in bootflash. How to register EEM script. I did the following but it couldn't locate the script in bootflash.
    switch2(config)#event manager policy bootflash:eem-stuckcpu.tcl type user
    EEM configuration: policy file bootflash:eem-stuckcpu.tcl could not be found
    switch2(config)#
    switch2(config)#event manager policy eem-stuckcpu.tcl type user          
    EEM configuration: policy file eem-stuckcpu.tcl could not be found
    Thanks,
    /aa

    You need to configure:
    event manager directory user policy bootflash:
    Then use:
    event manager policy eem-stuckcpu.tcl

  • IP SLA EEM/Tcl Scripts

    Hello Community,
    I have been testing a EEM/Tcl scripts for IP SLA. However, after testing I realised that the script didn't go far enough in identifying the link(s) that has actually gone down.
    I was wondering if someone knows any good EEM/Tcl scripts for IP SLA?
    Cheers
    Carlton

    What about it doesn't work?  Is the policy not triggering?  Is the IPSLA operation not transitioning state?

  • Stopping EEM/TCL script

    How can I stop a pending EEM/TCL script?  I have a Catalyst 4506 version 12.2(40)SG.  The command 'event manager scheduler clear' isn't available.  The output of 'show event manager policy pending' shows:
    No.  Time of Event             Event Type          Name
    1    Wed Mar 3  09:39:31 2010  none                script: test_err.tcl
    2    Wed Mar 3  10:56:42 2010  timer watchdog      script: free_mem.tcl
    3    Wed Mar 3  11:43:19 2010  syslog              applet: Login-Fail
    So the policies coming after the stuck policy won't run.  I've tried to un-register/re-register the policy, but it didn't help.

    If your device does not support "event manager scheduler clear" the only way to terminate a stuck, or long-running EEM policy is to reboot.

  • EEM / Tcl Script Help Please

    Hello Community,
    I have been evaluating a Tcl Script posted here sometime ago, designed to help monitor track interfaces and routes, see attached.
    I believe I have applied the configurations correctly, however when I test the script by shutting down interfaces nothing happens.
    I'm sure its something very simple that I'm missing.
    I wonder if someone could take a look at the configs and let me know what I'm doing wrong. I have also attached a diagram.
    Cheers
    Carlton

    Joseph,
    I did read again and I got it to work :-)
    Cheers
    On a slightly different topic, is it possible to 'track' a static ip address?
    For example, I have the following tracking configured:
    track 1 ip route 0.0.0.0 0.0.0.0 reachability
    track 2 interface FastEthernet0/0 ip routing
    track 3 interface FastEthernet0/1 ip routing
    track 4 ip route 180.80.8.4 255.255.255.255 reachability
    track 5 ip route 170.70.7.4 255.255.255.255 reachability
    R3#show track brie
    Track   Object                         Parameter        Value
    1       ip route  0.0.0.0/0            reachability     Up (static)
    2       interface FastEthernet0/0      ip routing       Up
    3       interface FastEthernet0/1      ip routing       Up
    4       ip route  180.80.8.4/32        reachability     Down (no route)
    5       ip route  170.70.7.4/32        reachability     Down (no route)
    However, you will see that track 4 and 5 are down. This is because, although I can ping 180.80.8.4 and 170.70.7.4 the actual ip addresses don't appear in the routing table:
    Gateway of last resort is 0.0.0.0 to network 0.0.0.0
         170.70.0.0/24 is subnetted, 1 subnets
    C       170.70.7.0 is directly connected, FastEthernet0/0
         10.0.0.0/24 is subnetted, 1 subnets
    C       10.1.1.0 is directly connected, FastEthernet1/0
         180.80.0.0/24 is subnetted, 1 subnets
    C       180.80.8.0 is directly connected, FastEthernet0/1
         150.50.0.0/24 is subnetted, 1 subnets
    C       150.50.5.0 is directly connected, Ethernet2/0
    S*   0.0.0.0/0 is directly connected, FastEthernet1/0
    R3#
    Therefore, is there way of creating a track for /32 ip addresses?
    I hope that makes sense.
    Cheers

  • Cisco's Network Registrar and LDAP (tcl script)

    Hi all,
    I use CNR version 7.1. I use ldap for authentication user. I have a problem if ldap server not available. I want with tcl script to know what ldap not available and send to user default configuration (ip,dns) 
    How I can transfer in tcl a script that the server ldap isn't accessible? where i can found error code for this ?
    Thanks
    Roman

    Hi Habeel,
    I've answered this question before. If you search the forum for "ldap healtcheck script" - and yes the typo is real then you'll see what I did.
    The text is here:
    The easiest way is to capture a packet with the authentication credentials and then replace the hex bind string in the example.
    The alternative is to handcode the BER coded ASN.1 data string - which while more fun is time consuming. The remainder of the script can stay the same.
    I've done this on an ACE module. You have to be aware that 300c02010160 in the example script string is a sort of "header" that holds the request id (1). This will be different in your packet capture.
    If you look at the decomposition of the example you'll be able to see how it is put together and what you need to change.
    0x30 The start of a universal constructed sequence
    0x0c The length of the sequence minus the tag and length bytes = 12 bytes
    0x02 Next field is an integer
    0x01 The length of the next field (1 byte)
    0x01 Value (this is the message ID)
    0x60 Application, number 0, use RFC2251 to decode. This is a Bind Request
    0x07 Length of data to follow.
    0x02 Integer
    0x01 Length 1
    0x03 3 - this is the LDAP version.
    0x04 String
    0x00 Length 0
    0x80 Simple Authentication
    0x00 Length 0
    Just keep the id the same in the unbind.
    The string I use is:
    302d02010160280201030418636e3d41636550726f78792c6f3d556e69766572736974798009ffffffffffffffffff
    where I've replaced the 9 character password with 9*x'ff'.
    The username for binding is AceProxy. If you want to use the same script then create that username and set the password in the string above (in hex). If for example you set the password to Example12 then you need to set the 9*x'ff' to '4578616d706c653132' - which is the hex representation of the ASCII.
    Note that if you use fewer or more than 9 characters then you'll need to change other values in the string because they refer to lengths.
    HTH
    Cathy

Maybe you are looking for

  • Hot synch manager

    Hi guys! I have a new computer with windows 7 and cannot hot synch.  I have downloaded the new devices r successfully and it still won't work.  the problem with it is there is no option for a usb port to check on the hot synch manager. Can you help??

  • Should I be able to read burned DL DVD's?

    The Superdrive in out first generation iMac G5 doesn't appear to read dual-layer DVD's that I burned on my G5 tower. The disks are Verbatim DVD+R DL. The same disks (obviously) read fine on the tower, as well as on an older Sony firewire drive attach

  • File encription and decription XML file

    Hi friends, I have a scenario like Third party system sending file with PGP encription and drop at FTP server(filename.tar.gz). xi has to pick that encripted file using file adapter and decript the file and process in XI and send it to SAP as idoc. I

  • HT4818 how do i clean up my start up disk? i have no idea.

    How do I clean my start up disk?I have no idea. Please help.

  • A different version or older version loads with firefox than explorer

    When i use my browser for netflix i get a what seems like a older version of the website verses when i use explorer I get pictures and a much better looking website even though i use the same address what be could be wrong. why does some websites loo