Re: What's wrong with provisioning tools?

In the referenced message, David Daley said: <snip>

4) There isn't anything to track non sanctioned changes to the network (i.e.: hacker induced re-configurations)

I would be really surprised if anything other than mom-and-pop shops didn't have _at least_ this. rtrmon or rancid can do great config archiving and provide difference output.