In the referenced message, David Daley said: <snip> > 4) There isn't anything to track non sanctioned changes to the network > (i.e.: hacker induced re-configurations) I would be really surprised if anything other than mom-and-pop shops didn't have _at least_ this. rtrmon or rancid can do great config archiving and provide difference output.