RE: [Activity logging & archiving tool]

["Christopher L. Morrow" <chris () UU NET>]

On Tue, 25 Nov 2003, Scott McGrath wrote:

> CiscoWorks also polls the devices for configuration changes and generates
> a diff if you so desire.  If you have set up AAA you will have an audit
> log of when changes were applied and who applied them.
>
>                             Scott C. McGrath

I'm fairly certain that the tacacs standard implementations available on
the cisco routers log out changes to the config made by users... That and
a little log parsing magic and you have this data also. Be cautious that
some of the EMS systems will grab configs through snmp WRITE initiated
tftp writes, this could be dangerous if your routers are publicly
accessible :)

-Chris