From samc at silence.org Tue Feb 5 19:25:35 2013 From: samc at silence.org (Sam Clippinger) Date: Tue, 5 Feb 2013 12:25:35 -0600 Subject: [Nagiosplug-devel] [PATCH] Outbound connections from alternate interfaces Message-ID: <91BAC3C2-9B94-41BF-986A-A11F312EE77D@silence.org> Hey, thanks for a great package! It's been a lifesaver! Most of my servers have multiple IP addresses and today I needed the ability to check outbound SMTP from those secondary addresses instead of always using the primary address. (I use check_smtp to test if my mail servers are blocked by blacklists that can't be checked through DNS (e.g. AT&T) and some of my servers use alternate interfaces for delivery.) So I came up with this patch. It adds a "-I" argument to check_smtp that will accept a hostname, IP or IPv6 address. If the argument is supplied and the address is bound to the local machine, it will use it for the outgoing connection. If it can't bind to the address, it will print an error and exit with UNKNOWN status. Since the meat of the changes are in netutils.[ch], it should be trivial to add a similar argument to other tests as well, if anyone wants to. The patch is against version 1.4.16. It compiles cleanly and works on CentOS 5.9. -- Sam Clippinger -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: outbound_interface.patch Type: application/octet-stream Size: 5310 bytes Desc: not available URL: -------------- next part -------------- An HTML attachment was scrubbed... URL: From noreply at sourceforge.net Mon Feb 11 15:54:10 2013 From: noreply at sourceforge.net (SourceForge.net) Date: Mon, 11 Feb 2013 06:54:10 -0800 Subject: [Nagiosplug-devel] [ nagiosplug-Bugs-3602488 ] check_snmp can't do IPv6 Message-ID: Bugs item #3602488, was opened at 2013-01-29 01:32 Message generated for change (Comment added) made by lftsy You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3602488&group_id=29880 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: General plugin execution Group: None Status: Open Resolution: None Priority: 5 Private: No Submitted By: Seegras (seegras) Assigned to: Nobody/Anonymous (nobody) Summary: check_snmp can't do IPv6 Initial Comment: root at monitor1:/usr/src/nagiosplug/plugins# ./check_snmp --version check_snmp v1.4.16.72.gf4bbd (nagios-plugins 1.4.16) root at monitor1:/usr/src/nagiosplug/plugins# ./check_snmp -H 'ipv6.hostname.example' -C 'public' -o '.1.3.6.1.2.1.25.1.1.0' External command error: getaddrinfo: ipv6.hostname.example Name or service not known Neither can 1.4.14. ---------------------------------------------------------------------- Comment By: Marc LEURENT (lftsy) Date: 2013-02-11 06:54 Message: Good afternoon, I am having the same problem, I cannot use check_snmp and set an IPv6 format address in -H parameter like for other checks (check_ssh / check_http / check_imap / ...) I need to specify the ip with an "udp6" prefix, so I cannot integrate snmp check as easily as the other checks I s someone with enough C knowledge to adapt the check_snmp to be able to identify IPv6 address like the other checks Thanks 1) Here you can see that IPv6 format is allowed in check_ssh (SCREEN):root at centreon-01-dev:[~/nagios-plugins]# ./check_ssh -H "::1" SSH OK - OpenSSH_6.0p1 Debian-3 (protocol 2.0) | time=0.391935s;;;0.000000;10.000000 2) Here you can see that the same IPv6 format is now allowed in check_snmp (SCREEN):root at centreon-01-dev:[~/nagios-plugins]# ./check_snmp -H "::1" -C public -o .1.3.6.1.2.1.1.3.0 External command error: snmpget: Unknown host (::1:161) (No such file or directory) zsh: exit 3 3) Here you can see that we have to specify "udp6" prefix + "[]" to have the check working in IPv6, but this will be harder to integrate to check services based on the IP of the host (SCREEN):root at centreon-01-dev:[~/nagios-plugins]# ./check_snmp -H "udp6:[::1]" -C public -o .1.3.6.1.2.1.1.3.0 SNMP OK - Timeticks: (232327) 0:38:43.27 | ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3602488&group_id=29880 From noreply at sourceforge.net Tue Feb 12 07:36:35 2013 From: noreply at sourceforge.net (SourceForge.net) Date: Mon, 11 Feb 2013 22:36:35 -0800 Subject: [Nagiosplug-devel] [ nagiosplug-Bugs-3604201 ] Nagios NRDP Message-ID: Bugs item #3604201, was opened at 2013-02-11 22:36 Message generated for change (Tracker Item Submitted) made by macling66 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3604201&group_id=29880 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: General plugin execution Group: None Status: Open Resolution: None Priority: 5 Private: No Submitted By: MacLing (macling66) Assigned to: Nobody/Anonymous (nobody) Summary: Nagios NRDP Initial Comment: I have configure the NRDP in Server side. Submit Nagios Command ==> there is response EXTERNAL COMMAND: DISABLE_HOST_NOTIFICATIONS;somehost but Submit Check Data ==> No response. Anyone can give advice ? BR, ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3604201&group_id=2988 From noreply at sourceforge.net Tue Feb 12 09:26:28 2013 From: noreply at sourceforge.net (SourceForge.net) Date: Tue, 12 Feb 2013 00:26:28 -0800 Subject: [Nagiosplug-devel] [ nagiosplug-Bugs-3604201 ] Nagios NRDP Message-ID: Bugs item #3604201, was opened at 2013-02-11 22:36 Message generated for change (Comment added) made by hweiss You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3604201&group_id=29880 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: General plugin execution Group: None >Status: Closed >Resolution: Invalid Priority: 5 Private: No Submitted By: MacLing (macling66) Assigned to: Nobody/Anonymous (nobody) Summary: Nagios NRDP Initial Comment: I have configure the NRDP in Server side. Submit Nagios Command ==> there is response EXTERNAL COMMAND: DISABLE_HOST_NOTIFICATIONS;somehost but Submit Check Data ==> No response. Anyone can give advice ? BR, ---------------------------------------------------------------------- >Comment By: Holger Weiss (hweiss) Date: 2013-02-12 00:26 Message: We (the Nagios Plugins Development Team) don't maintain NRDP, sorry. You might want to ask in the Nagios Support Forum: http://support.nagios.com/forum/ ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3604201&group_id=29880 From noreply at sourceforge.net Thu Feb 14 10:30:31 2013 From: noreply at sourceforge.net (SourceForge.net) Date: Thu, 14 Feb 2013 01:30:31 -0800 Subject: [Nagiosplug-devel] [ nagiosplug-Bugs-3602488 ] check_snmp can't do IPv6 Message-ID: Bugs item #3602488, was opened at 2013-01-29 01:32 Message generated for change (Comment added) made by lftsy You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3602488&group_id=29880 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: General plugin execution Group: None Status: Open Resolution: None Priority: 5 Private: No Submitted By: Seegras (seegras) Assigned to: Nobody/Anonymous (nobody) Summary: check_snmp can't do IPv6 Initial Comment: root at monitor1:/usr/src/nagiosplug/plugins# ./check_snmp --version check_snmp v1.4.16.72.gf4bbd (nagios-plugins 1.4.16) root at monitor1:/usr/src/nagiosplug/plugins# ./check_snmp -H 'ipv6.hostname.example' -C 'public' -o '.1.3.6.1.2.1.25.1.1.0' External command error: getaddrinfo: ipv6.hostname.example Name or service not known Neither can 1.4.14. ---------------------------------------------------------------------- Comment By: Marc LEURENT (lftsy) Date: 2013-02-14 01:30 Message: Maybe http://nagiosplug.git.sourceforge.net/git/gitweb.cgi?p=nagiosplug/nagiosplug;a=commitdiff;h=261ad186706422af00ec7e67dc128a99c4603b8c work on the check_dig.c can inspire to build a patch for this pluging too ---------------------------------------------------------------------- Comment By: Marc LEURENT (lftsy) Date: 2013-02-11 06:54 Message: Good afternoon, I am having the same problem, I cannot use check_snmp and set an IPv6 format address in -H parameter like for other checks (check_ssh / check_http / check_imap / ...) I need to specify the ip with an "udp6" prefix, so I cannot integrate snmp check as easily as the other checks I s someone with enough C knowledge to adapt the check_snmp to be able to identify IPv6 address like the other checks Thanks 1) Here you can see that IPv6 format is allowed in check_ssh (SCREEN):root at centreon-01-dev:[~/nagios-plugins]# ./check_ssh -H "::1" SSH OK - OpenSSH_6.0p1 Debian-3 (protocol 2.0) | time=0.391935s;;;0.000000;10.000000 2) Here you can see that the same IPv6 format is now allowed in check_snmp (SCREEN):root at centreon-01-dev:[~/nagios-plugins]# ./check_snmp -H "::1" -C public -o .1.3.6.1.2.1.1.3.0 External command error: snmpget: Unknown host (::1:161) (No such file or directory) zsh: exit 3 3) Here you can see that we have to specify "udp6" prefix + "[]" to have the check working in IPv6, but this will be harder to integrate to check services based on the IP of the host (SCREEN):root at centreon-01-dev:[~/nagios-plugins]# ./check_snmp -H "udp6:[::1]" -C public -o .1.3.6.1.2.1.1.3.0 SNMP OK - Timeticks: (232327) 0:38:43.27 | ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=3602488&group_id=29880 From Willis.Ralph at asx.com.au Wed Feb 27 03:36:09 2013 From: Willis.Ralph at asx.com.au (Willis Ralph) Date: Wed, 27 Feb 2013 13:36:09 +1100 Subject: [Nagiosplug-devel] question about check_log2.pl Message-ID: <20327_1361932578_r1R2aIfW017110_55C0E0E4978E0E42A6036F2DA27F8405012E882FC9@PMAIL204.asxprod.asx.com.au> Hi, I have been making use of check_log2.pl. It works fine. When I ran it from the command line on my Nagios server the output is correct. /usr/local/nagios/libexec/check_nrpe -H server111 -c check_logfiles This brings back WARNING: (3): [LOG|ERROR|27 Feb 2013 10:52:36,683|com.example.Bean|Worker-2|-] The trouble is that the Nagios monitoring screen output in the Status Information field treats the first "| " as a delimiter and truncates the output to [LOG| Is there a way to make Nagios display the complete line ? Regards, Willis Willis Ralph | Systems Administrator ASX Limited | 20 Bridge Street | Sydney NSW 2000 t: +61 2 9227 0661 | m: 0417 652755 | e: w: www.asx.com.au P Please consider the environment before printing this email PRIVACY COLLECTION STATEMENT ASX uses and discloses your personal information only for the purpose for which you provided it. Your personal information will not be disclosed or used for any other purpose unless you consent or ASX is otherwise permitted to do so under the Privacy Act 1988 (Cth). CONFIDENTIAL EMAIL The information in this email is confidential and may be privileged or subject to copyright. It is intended for the exclusive use of the addressee(s). If you are not an addressee, do not copy, distribute or otherwise act on the email. If you have received the email in error, please contact the sender immediately and delete the email. The unauthorised use of this email may result in liability for breach of confidentiality, privilege or copyright. E-mail transmissions cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for errors or omissions in the contents of this message which arise as a result of e-mail transmission. -------------- next part -------------- An HTML attachment was scrubbed... URL: From lists at catsnest.co.uk Wed Feb 27 13:06:55 2013 From: lists at catsnest.co.uk (lists) Date: Wed, 27 Feb 2013 12:06:55 +0000 Subject: [Nagiosplug-devel] question about check_log2.pl In-Reply-To: <20327_1361932578_r1R2aIfW017110_55C0E0E4978E0E42A6036F2DA27F8405012E882FC9@PMAIL204.asxprod.asx.com.au> References: <20327_1361932578_r1R2aIfW017110_55C0E0E4978E0E42A6036F2DA27F8405012E882FC9@PMAIL204.asxprod.asx.com.au> Message-ID: On 27 February 2013 02:36, Willis Ralph wrote: > ** ** > > Hi,**** > > ** ** > > I have been making use of check_log2.pl. It works fine. When I ran it > from the command line on my Nagios server the output is correct.**** > > ** ** > > ** ** > > /usr/local/nagios/libexec/check_nrpe -H server111 -c check_logfiles**** > > ** ** > > This brings back **** > > ** ** > > ** ** > > WARNING: (3): [LOG|ERROR|27 Feb 2013 > 10:52:36,683|com.example.Bean|Worker-2|-]**** > > ** ** > > ** ** > > The trouble is that the Nagios monitoring screen output in the Status > Information field treats the first ?| ? as a delimiter and truncates the > output to **** > > ** ** > > [LOG|**** > > ** ** > > Is there a way to make Nagios display the complete line ?**** > > ** > This will be becouse Nagios treats anything after a | in the output of a check as performance data. You will need to etit the script to work with your data, I think if the output is quoted the | will be ignored, if that does not work try urlencoding it instead. e.g. In the version of check_log2.pl.i have the output line looks like this: print "($pattern_count): $pattern_line"; you could try print "($pattern_count): \"$pattern_line\""; -- Regards, Ritchie ** > > Regards,**** > > Willis**** > > ** ** > > *Willis Ralph* | Systems Administrator > ASX Limited | 20 Bridge Street | Sydney NSW 2000 > *t:* +61 2 9227 0661 |* **m:* 0417 652755 |* **e: * > *w:* www.asx.com.au **** > > *P** **Please consider the environment before printing this email* **** > > > > > > > > > **** > > ** ** > > PRIVACY COLLECTION STATEMENT > ASX uses and discloses your personal information only for the purpose for > which you provided it. Your personal information will not be disclosed or used > for any other purpose unless you consent or ASX is otherwise permitted to do > so under the Privacy Act 1988 (Cth). > > CONFIDENTIAL EMAIL > The information in this email is confidential and may be privileged or subject > to copyright. It is intended for the exclusive use of the addressee(s). If you > are not an addressee, do not copy, distribute or otherwise act on the email. > If you have received the email in error, please contact the sender immediately > and delete the email. The unauthorised use of this email may result in > liability for breach of confidentiality, privilege or copyright. E-mail > transmissions cannot be guaranteed to be secure or error-free as information > could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, > or contain viruses. The sender therefore does not accept liability for errors > or omissions in the contents of this message which arise as a result of e-mail > transmission. > > > > ------------------------------------------------------------------------------ > Everyone hates slow websites. So do we. > Make your web apps faster with AppDynamics > Download AppDynamics Lite for free today: > http://p.sf.net/sfu/appdyn_d2d_feb > _______________________________________________________ > Nagios Plugin Development Mailing List > Nagiosplug-devel at lists.sourceforge.net > Unsubscribe at > https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel > ::: Please include plugins version (-v) and OS when reporting any issue. > ::: Messages without supporting info will risk being sent to /dev/null > -------------- next part -------------- An HTML attachment was scrubbed... URL: From noreply at sourceforge.net Wed Feb 27 23:33:12 2013 From: noreply at sourceforge.net (SourceForge.net) Date: Wed, 27 Feb 2013 14:33:12 -0800 Subject: [Nagiosplug-devel] [ nagiosplug-Bugs-2550254 ] check_ldap with starttls requires hostname to match cert nam Message-ID: Bugs item #2550254, was opened at 2009-01-30 12:54 Message generated for change (Comment added) made by fleish You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=2550254&group_id=29880 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: General plugin execution Group: Release (specify) Status: Open Resolution: None Priority: 5 Private: No Submitted By: Jan Wagner (cyco_dd) Assigned to: Nobody/Anonymous (nobody) Summary: check_ldap with starttls requires hostname to match cert nam Initial Comment: Version: 1.4.10-1 The following Bugreport we got against our debian package: Serverside: slapd 2.4.7-3 with TLS (not ldaps) enabled. It's running on a VM with a hostname of 'utilserver.domain.org', and its SSL cert has a CN of 'utilserver', since usually only internal users interact with it. $ /usr/lib/nagios/plugins/check_ldap -T -H utilserver -b `grep BASE /etc/ldap/ldap.conf| awk '{print $2}'` LDAP OK - 0.041 seconds response time|time=0.040605s;;;0.000000 $ host utilserver utilserver.domain.org has address 192.168.20.20 $ /usr/lib/nagios/plugins/check_ldap -T -H 192.168.20.20 -b `grep BASE /etc/ldap/ldap.conf| awk '{print $2}'` Could not init startTLS at port 389! $ /usr/lib/nagios/plugins/check_ldap -T -H utilserver.domain.org -b `grep BASE /etc/ldap/ldap.conf| awk '{print $2}'` Could not init startTLS at port 389! It appears (though I haven't confirmed since my C-fu is weak) that the -T flag co-opts the hostname as specified in the -H and uses that in its TLS handshake. But that overload is not always good: my nagios checks, which use the FQDN, fail. Suggestion: -T is currently a boolean flag. How about -T [optional hostname for certificate handshake if -H isn't good enough]? I can't think of anything else you might want after -T, myself. Thanks! You can track the bugreport via http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463355 Thanks and kind regards, Jan. ---------------------------------------------------------------------- Comment By: Fleish (fleish) Date: 2013-02-27 14:33 Message: I have a similar problem with an ldaps server. The below check syntax used to work fine and was used to validate a pool of ldap servers that all service the CN "ldap". But since changing over to gnutls from openssl, I can't specify a numerical IP for -H anymore without getting a TLS error. If I replace the IP with ldap and put an /etc/hosts entry in place the check returns successfully. Unfortunately, this means I cannot check the status of the individual servers directly. I too would appreciate a way to overcome this. Something like check_http's -H & -I options which allow you to specify a hostname and a specific IP address seems like it would solve this /usr/local/nagios/libexec/check_ldaps -H 10.x.x.x -S -3 -t 3 -v ldap_bind: Can't contact LDAP server (-1) additional info: TLS: hostname does not match CN in peer certificate ---------------------------------------------------------------------- Comment By: jlec (jlec) Date: 2011-11-29 05:23 Message: Simple add a -v in your line and you will see that openssl cannot verify your cert chain. This might relate to https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/396818 http://rt.openssl.org/Ticket/Display.html?id=977&user=guest&pass=guest ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=397597&aid=2550254&group_id=29880