I use a script to alert me of duplicate MAC address on router interfaces, by running script via the RULESET.

The trap contains the  address of the mac thief in CISCO format ie.. "0030.6537.6231".

This is passed to script as variable.

When I receive the trap via email/pager it shows up with the backslash before each "decimal point", as the Netview documentation indicates it would.   "0030\.6537\.6231"

Q1  If I just use SED to replace the "\." with "." in my script that is run from the RULESET via ovactionsvr,  isn't this just circumventing the security hole?  The doc states that the ovactionsvr ESCAPES the "-" and "." characters;  My scripts removes the ESCAPE or is it SAFE at this point.

I know I can disable this feature but choose not too.
 

Thanks for any help.
 
 

Jeff Fitzwater
OIT Systems & Networking
Princeton University