mailing list archives
verify currently running software on ram
From: Tassos Chatzithomaoglou <achatz () forthnet gr>
Date: Mon, 13 Jan 2014 12:26:02 +0200
I'm looking for ways to verify that the currently running software on our Cisco/Juniper boxes is the one that is also
in the flash/hd/storage/etc.
Something that will somehow compare the running software in ram with the software on flash/hd/storage/etc, so that i
can verify that nobody has actually messed with the running software (by whatever means that's possible).
Besides the "install verify" command on IOS-XR (which i'm not 100% sure if it suits my needs), i haven't managed to
find anything else. And the vendors say that indeed there is nothing more.
All other options are about verifying the software file integrity before it gets loaded into ram.
Have you ever done such an exercise? Are there maybe any external tools (or services) that offer this capability?
Re: verify currently running software on ram Valdis . Kletnieks (Jan 13)
Re: verify currently running software on ram Michael Costello (Jan 14)