[Nagiosplug-help] check_http -S problem after upgrade to 1.4.5
Marcel Mitsuto Fucatu Sugano
msugano at uolinc.com
Fri Dec 1 19:43:06 CET 2006
Sorry replying my own post, but there is a little bit of information
about it...
On Fri, 2006-12-01 at 12:34 -0200, Marcel Mitsuto Fucatu Sugano wrote:
> Hello,
>
> I need to upgrade check_http, and when put into production, all SSL
> based checks are troubled. Does anyone has seen anything like this or
> has gone through the same problem before?
>
> Thanks in advance.
>
> Marcel
>
> ---------------------------------cut------------------------------------
> bash-2.05# ~/check_http --version
> check_http (nagios-plugins 1.4.5) 1.96
> bash-2.05# ~/check_http -S -I 10.6.19.13 -f critical -p 443 -H
> visitante.sac.uol.com.br -u /esqueci-senha.html -w 10 -c 20 -t 30 -v
> CRITICAL - Cannot make SSL connection
> GET /esqueci-senha.html HTTP/1.0
> User-Agent: check_http/1.96 (nagios-plugins 1.4.5)
> Host: visitante.sac.uol.com.br
>
>
> Error on receive
> bash-2.05# ./check_http -S -I 10.6.19.13 -f critical -p 443 -H
> visitante.sac.uol.com.br -u /esqueci-senha.html -w 10 -c 20 -t 30
> HTTP ok: HTTP/1.1 200 OK - 0.560 second response time |time= 0.560
> bash-2.05# ./check_http --version
> check_http (nagios-plugins 1.3.0) 1.24
> The nagios plugins come with ABSOLUTELY NO WARRANTY. You may
> redistribute
> copies of the plugins under the terms of the GNU General Public License.
> For more information about these matters, see the file named COPYING.
> bash-2.05#
Here is the network dump from the old 1.3.0 check_http plugin:
13:04:31.531397 IP 10.3.1.20.59376 > 10.6.19.13.443: S 3974884947:3974884947(0) win 64240 <nop,nop,sackOK,mss 1460>
13:04:31.531406 IP 10.6.19.13.443 > 10.3.1.20.59376: S 3551455748:3551455748(0) ack 3974884948 win 5840 <mss 1460,nop,nop,sackOK>
13:04:31.531788 IP 10.3.1.20.59376 > 10.6.19.13.443: . ack 1 win 64240
13:04:31.533640 IP 10.3.1.20.59376 > 10.6.19.13.443: P 1:146(145) ack 1 win 64240
13:04:31.533657 IP 10.6.19.13.443 > 10.3.1.20.59376: . ack 146 win 5840
13:04:31.556936 IP 10.6.19.13.443 > 10.3.1.20.59376: . 1:1461(1460) ack 146 win 5840
13:04:31.556948 IP 10.6.19.13.443 > 10.3.1.20.59376: P 1461:1498(37) ack 146 win 5840
13:04:31.557665 IP 10.3.1.20.59376 > 10.6.19.13.443: . ack 1461 win 64240
13:04:31.652170 IP 10.3.1.20.59376 > 10.6.19.13.443: . ack 1498 win 64240
13:04:32.009900 IP 10.3.1.20.59376 > 10.6.19.13.443: P 146:336(190) ack 1498 win 64240
13:04:32.027527 IP 10.6.19.13.443 > 10.3.1.20.59376: P 1498:1549(51) ack 336 win 6432
13:04:32.028921 IP 10.3.1.20.59376 > 10.6.19.13.443: P 336:514(178) ack 1549 win 64240
13:04:32.030964 IP 10.6.19.13.443 > 10.3.1.20.59376: . 1549:3009(1460) ack 514 win 7504
13:04:32.030978 IP 10.6.19.13.443 > 10.3.1.20.59376: . 3009:4469(1460) ack 514 win 7504
13:04:32.030990 IP 10.6.19.13.443 > 10.3.1.20.59376: . 4469:5929(1460) ack 514 win 7504
13:04:32.031337 IP 10.6.19.13.443 > 10.3.1.20.59376: FP 5929:6220(291) ack 514 win 7504
13:04:32.031753 IP 10.3.1.20.59376 > 10.6.19.13.443: . ack 3009 win 64240
13:04:32.032247 IP 10.3.1.20.59376 > 10.6.19.13.443: . ack 5929 win 64240
13:04:32.032259 IP 10.3.1.20.59376 > 10.6.19.13.443: . ack 6221 win 64240
13:04:32.036647 IP 10.3.1.20.59376 > 10.6.19.13.443: P 514:543(29) ack 6221 win 64240
13:04:32.037833 IP 10.3.1.20.59376 > 10.6.19.13.443: F 543:543(0) ack 6221 win 64240
13:04:32.037846 IP 10.6.19.13.443 > 10.3.1.20.59376: . ack 544 win 7504
And here, the dump from the new version (1.4.5):
13:04:44.400687 IP 10.3.1.20.59477 > 10.6.19.13.443: S 2294435900:2294435900(0) win 64240 <nop,nop,sackOK,mss 1460>
13:04:44.400719 IP 10.6.19.13.443 > 10.3.1.20.59477: S 3568789567:3568789567(0) ack 2294435901 win 5840 <mss 1460,nop,nop,sackOK>
13:04:44.401115 IP 10.3.1.20.59477 > 10.6.19.13.443: . ack 1 win 64240
13:04:44.431394 IP 10.3.1.20.59477 > 10.6.19.13.443: F 1:1(0) ack 1 win 64240
13:04:44.431861 IP 10.6.19.13.443 > 10.3.1.20.59477: . ack 2 win 5840
13:04:44.432071 IP 10.6.19.13.443 > 10.3.1.20.59477: F 1:1(0) ack 2 win 5840
13:04:44.432389 IP 10.3.1.20.59477 > 10.6.19.13.443: . ack 2 win 64240
Actually, I have not much knowledge telling what is going only by
looking this information. But as I can see, at the sixthieth column, on
the rigth plugin execution dump, there is a "P" flag, which in the
troubled plugin execution dump is set to "F".
I've compiled with --with-openssl=/usr/local/ssl, openssl version is
0.9.8d from sunfreeware, the system is SunOS 5.8.
Relevant information:
---------------------------------cut------------------------------
check_http-v1.3.0:
bash-2.05# ldd check_http
libnsl.so.1 => /usr/lib/libnsl.so.1
libsocket.so.1 => /usr/lib/libsocket.so.1
libresolv.so.2 => /usr/lib/libresolv.so.2
libkvm.so.1 => /usr/lib/libkvm.so.1
libelf.so.1 => /usr/lib/libelf.so.1
libc.so.1 => /usr/lib/libc.so.1
libdl.so.1 => /usr/lib/libdl.so.1
libmp.so.2 => /usr/lib/libmp.so.2
/usr/platform/SUNW,Ultra-2/lib/libc_psr.so.1
check_http-v1.4.5:
bash-2.05# ldd ~/check_http
libnsl.so.1 => /usr/lib/libnsl.so.1
libresolv.so.2 => /usr/lib/libresolv.so.2
libsocket.so.1 => /usr/lib/libsocket.so.1
libssl.so.0.9.8 => /usr/lib/libssl.so.0.9.8
libcrypto.so.0.9.8 => /usr/lib/libcrypto.so.0.9.8
libc.so.1 => /usr/lib/libc.so.1
libdl.so.1 => /usr/lib/libdl.so.1
libmp.so.2 => /usr/lib/libmp.so.2
libgcc_s.so.1 => /usr/local/lib/libgcc_s.so.1
/usr/platform/SUNW,Ultra-2/lib/libc_psr.so.1
bash-2.05# pkginfo -l SMClibgcc
PKGINST: SMClibgcc
NAME: lgcc
CATEGORY: application
ARCH: sparc
VERSION: 3.3
BASEDIR: /usr/local/lib
VENDOR: Free Software Foundation
PSTAMP: Steve Christensen
INSTDATE: Jul 22 2004 15:08
EMAIL: steve at smc.vnet.net
STATUS: completely installed
FILES: 15 installed pathnames
1 directories
4 executables
60374 blocks used (approx)
bash-2.05#
-----------------------------cut---------------------------------
Thanks in advance.
Marcel.
AVISO: A informação contida neste e-mail, bem como em qualquer de seus anexos, é CONFIDENCIAL e destinada ao uso exclusivo do(s) destinatário(s) acima referido(s), podendo conter informações sigilosas e/ou legalmente protegidas. Caso você não seja o destinatário desta mensagem, informamos que qualquer divulgação, distribuição ou cópia deste e-mail e/ou de qualquer de seus anexos é absolutamente proibida. Solicitamos que o remetente seja comunicado imediatamente, respondendo esta mensagem, e que o original desta mensagem e de seus anexos, bem como toda e qualquer cópia e/ou impressão realizada a partir destes, sejam permanentemente apagados e/ou destruídos. Informações adicionais sobre nossa empresa podem ser obtidas no site http://sobre.uol.com.br/.
NOTICE: The information contained in this e-mail and any attachments thereto is CONFIDENTIAL and is intended only for use by the recipient named herein and may contain legally privileged and/or secret information. If you are not the e-mail´s intended recipient, you are hereby notified that any dissemination, distribution or copy of this e-mail, and/or any attachments thereto, is strictly prohibited. Please immediately notify the sender replying to the above mentioned e-mail address, and permanently delete and/or destroy the original and any copy of this e-mail and/or its attachments, as well as any printout thereof. Additional information about our company may be obtained through the site http://www.uol.com.br/ir/.
More information about the Help
mailing list