xymon

Check-in [a6c792952f]
Login

Many hyperlinks are disabled.
Use anonymous login to enable hyperlinks.

Overview
Comment:Use forest mode with 'ps' output when available git-svn-id: http://svn.code.sf.net/p/xymon/code/branches/4.3.19@7618 44351d6e-118b-4698-b696-ce33095ecaa4
Downloads: Tarball | ZIP archive | SQL archive
Timelines: family | ancestors | descendants | both | trunk | origin/4.3.19
Files: files | file ages | folders
SHA3-256: a6c792952f629396be4400f03a8dd8f9f527591d964d0ce2fc609b4ebc987156
User & Date: jccleaver@users.sf.net 2015-03-30 03:27:16
Context
2015-03-31
05:44
Release 4.3.19 git-svn-id: http://svn.code.sf.net/p/xymon/code/branches/4.3.19@7619 44351d6e-118b-4698-b696-ce33095ecaa4 Leaf check-in: 9d82bf5914 user: jccleaver@users.sf.net tags: trunk, origin/4.3.19
2015-03-30
03:27
Use forest mode with 'ps' output when available git-svn-id: http://svn.code.sf.net/p/xymon/code/branches/4.3.19@7618 44351d6e-118b-4698-b696-ce33095ecaa4 check-in: a6c792952f user: jccleaver@users.sf.net tags: trunk, origin/4.3.19
2015-03-25
07:04
Changelog/RELEASENOTES/CREDITS for 4.3.19 (rc1) git-svn-id: http://svn.code.sf.net/p/xymon/code/branches/4.3.19@7617 44351d6e-118b-4698-b696-ce33095ecaa4 check-in: 001ecb4d01 user: jccleaver@users.sf.net tags: trunk, origin/4.3.19
Changes
Hide Diffs Unified Diffs Ignore Whitespace Patch

Changes to Changes.

1
2
3
4
5
6
7
8
9
10
11


12
13
14
15
16
17
18
Changes from 4.3.18 -> 4.3.19 (2x Mar 2015)
===========================================

* rev 76xx

* Don't crash when receiving an AAAA DNS response (BSD, thanks Mark Felder)
* xymonclient.sh running in --local mode was generating reports that were
  marked as duplicates (and thus being ignored). Reported by Guillaume Chane.
* Building with old versions of libpcre not supporting PCRE_FIRSTLINE should
  once again work
* Memory reporting on FreeBSD and OpenBSD has been fixed (Mark Felder)


* clientlog, hostinfo, and modify messages are now tracked in xymond stats
* In environment config files (xymonserver.cfg, xymonclient.cfg, and cfgoptions.cfg)
  an initial "export " line (as if it were actually a shell script) will be
  ignored and the remainder of the line parsed as normal.
* headermatch will now match the headers of an HTTP response even if the body
  is empty (eg, matching for a 302 Redirect)
* --debug mode in most daemons should cause *much* less of a performance hit, and
|










>
>







1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
Changes from 4.3.18 -> 4.3.19 (30 Mar 2015)
===========================================

* rev 76xx

* Don't crash when receiving an AAAA DNS response (BSD, thanks Mark Felder)
* xymonclient.sh running in --local mode was generating reports that were
  marked as duplicates (and thus being ignored). Reported by Guillaume Chane.
* Building with old versions of libpcre not supporting PCRE_FIRSTLINE should
  once again work
* Memory reporting on FreeBSD and OpenBSD has been fixed (Mark Felder)
* The process list visible in the 'procs' test of Linux and FreeBSD clients
  is now generated in ASCII "forest" mode for increased legibility.
* clientlog, hostinfo, and modify messages are now tracked in xymond stats
* In environment config files (xymonserver.cfg, xymonclient.cfg, and cfgoptions.cfg)
  an initial "export " line (as if it were actually a shell script) will be
  ignored and the remainder of the line parsed as normal.
* headermatch will now match the headers of an HTTP response even if the body
  is empty (eg, matching for a 302 Redirect)
* --debug mode in most daemons should cause *much* less of a performance hit, and

Changes to RELEASENOTES.

28
29
30
31
32
33
34
35
36
37
38
39
40
41
42



43
44
45
46
47
48
49
Client logs with multiple trigger lines found are guaranteed to have all
the sections returned, even if this exceeds the "maxbytes" specified (up to
the compiled-in limit). Additionally, the "current" location of new log 
data written since the last time xymonclient was run is now marked for 
reference. (Thanks, Franco Gasperino)

A new "deltacount" option is available in client-local.cfg. It functions
similarly to "linecount", but only counts lines written in the log
file since the last run.

Additional filtration options are available for the xymondboard command,
including the full body of the message, and acknoweldgement and disable
comments. Also, inequalities can be used to filter an epoch timestamp
against any of: lastchange, logtime, validtime, acktime, or disabletime.
See the xymon(1) man page for details.





Changes for 4.3.18
==================
4.3.18 fixes a buffer overflow vulnerability in the acknowledge.cgi
script (CVE-2015-1430). All users are encouraged to upgrade.








|
|






>
>
>







28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
Client logs with multiple trigger lines found are guaranteed to have all
the sections returned, even if this exceeds the "maxbytes" specified (up to
the compiled-in limit). Additionally, the "current" location of new log 
data written since the last time xymonclient was run is now marked for 
reference. (Thanks, Franco Gasperino)

A new "deltacount" option is available in client-local.cfg. It functions
similarly to "linecount" for a given log: entry, but only counts matching 
lines written in the log file since the last run.

Additional filtration options are available for the xymondboard command,
including the full body of the message, and acknoweldgement and disable
comments. Also, inequalities can be used to filter an epoch timestamp
against any of: lastchange, logtime, validtime, acktime, or disabletime.
See the xymon(1) man page for details.

The process list visible in the 'procs' test of Linux and FreeBSD clients
is now generated in ASCII "forest" mode for increased legibility.


Changes for 4.3.18
==================
4.3.18 fixes a buffer overflow vulnerability in the acknowledge.cgi
script (CVE-2015-1430). All users are encouraged to upgrade.

Changes to client/xymonclient-freebsd.sh.

50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
netstat -i -b -n | egrep -v "^lo|<Link"
echo "[netstat]"
netstat -s
echo "[ports]"
(netstat -Wna -f inet; netstat -Wna -f inet6) | grep "^tcp"
echo "[ps]"
# Dont use "args". "command" works also in FreeBSD 4.x.
ps -ax -ww -o pid,ppid,user,start,state,pri,pcpu,cputime,pmem,rss,vsz,command

# $TOP must be set, the install utility should do that for us if it exists.
if test "$TOP" != ""
then
    if test -x "$TOP"
    then
        echo "[top]"







|







50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
netstat -i -b -n | egrep -v "^lo|<Link"
echo "[netstat]"
netstat -s
echo "[ports]"
(netstat -Wna -f inet; netstat -Wna -f inet6) | grep "^tcp"
echo "[ps]"
# Dont use "args". "command" works also in FreeBSD 4.x.
ps -axd -ww -o pid,ppid,user,start,state,pri,pcpu,cputime,pmem,rss,vsz,command

# $TOP must be set, the install utility should do that for us if it exists.
if test "$TOP" != ""
then
    if test -x "$TOP"
    then
        echo "[top]"

Changes to client/xymonclient-linux.sh.

70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# Bug in RedHat's netstat spews annoying error messages. 
netstat -antu 2>/dev/null
echo "[ifstat]"
/sbin/ifconfig 2>/dev/null
# Report mdstat data if it exists
if test -r /proc/mdstat; then echo "[mdstat]"; cat /proc/mdstat; fi
echo "[ps]"
ps -Aww -o pid,ppid,user,start,state,pri,pcpu,time:12,pmem,rsz:10,vsz:10,cmd

# $TOP must be set, the install utility should do that for us if it exists.
if test "$TOP" != ""
then
    if test -x "$TOP"
    then
        echo "[top]"







|







70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# Bug in RedHat's netstat spews annoying error messages. 
netstat -antu 2>/dev/null
echo "[ifstat]"
/sbin/ifconfig 2>/dev/null
# Report mdstat data if it exists
if test -r /proc/mdstat; then echo "[mdstat]"; cat /proc/mdstat; fi
echo "[ps]"
ps -Aww f -o pid,ppid,user,start,state,pri,pcpu,time:12,pmem,rsz:10,vsz:10,cmd

# $TOP must be set, the install utility should do that for us if it exists.
if test "$TOP" != ""
then
    if test -x "$TOP"
    then
        echo "[top]"

Changes to debian/changelog.

5
6
7
8
9
10
11


12
13
14
15
16
17
18
..
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
   
   * Don't crash when receiving an AAAA DNS response (BSD, thanks Mark Felder)
   * xymonclient.sh running in --local mode was generating reports that were
     marked as duplicates (and thus being ignored). Reported by Guillaume Chane.
   * Building with old versions of libpcre not supporting PCRE_FIRSTLINE should
     once again work
   * Memory reporting on FreeBSD and OpenBSD has been fixed (Mark Felder)


   * clientlog, hostinfo, and modify messages are now tracked in xymond stats
   * In environment config files (xymonserver.cfg, xymonclient.cfg, and cfgoptions.cfg)
     an initial "export " line (as if it were actually a shell script) will be
     ignored and the remainder of the line parsed as normal.
   * headermatch will now match the headers of an HTTP response even if the body
     is empty (eg, matching for a 302 Redirect)
   * --debug mode in most daemons should cause *much* less of a performance hit, and
................................................................................
   * ifstat and netstat output from the new Windows PowerShell client is now graphed properly.
   * Hostnames beginning with a number (allowed by RFC1123) are now supported in combo.cfg
   * When a Windows service's status has been changed (ie, stopped or started), the relevant line
     in the 'svcs' test will now be updated to reflect this. (Reported by Gavin Stone-Tolcher and
     Neil Simmonds)
   * Various build issues, compiler fixes, and valgrind complaints have been fixed.

 -- Japheth Cleaver <cleaver-xymon@terabithia.org>  XXX, 2x Mar 2015 XX:XX:XX -0700


xymon (4.3.18) unstable; urgency=medium

   * rev 7494

   * Fix CVE-2015-1430, a buffer overflow in the acknowledge.cgi script.







>
>







 







|







5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
..
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
   
   * Don't crash when receiving an AAAA DNS response (BSD, thanks Mark Felder)
   * xymonclient.sh running in --local mode was generating reports that were
     marked as duplicates (and thus being ignored). Reported by Guillaume Chane.
   * Building with old versions of libpcre not supporting PCRE_FIRSTLINE should
     once again work
   * Memory reporting on FreeBSD and OpenBSD has been fixed (Mark Felder)
   * The process list visible in the 'procs' test of Linux and FreeBSD clients
     is now generated in ASCII "forest" mode for increased legibility.
   * clientlog, hostinfo, and modify messages are now tracked in xymond stats
   * In environment config files (xymonserver.cfg, xymonclient.cfg, and cfgoptions.cfg)
     an initial "export " line (as if it were actually a shell script) will be
     ignored and the remainder of the line parsed as normal.
   * headermatch will now match the headers of an HTTP response even if the body
     is empty (eg, matching for a 302 Redirect)
   * --debug mode in most daemons should cause *much* less of a performance hit, and
................................................................................
   * ifstat and netstat output from the new Windows PowerShell client is now graphed properly.
   * Hostnames beginning with a number (allowed by RFC1123) are now supported in combo.cfg
   * When a Windows service's status has been changed (ie, stopped or started), the relevant line
     in the 'svcs' test will now be updated to reflect this. (Reported by Gavin Stone-Tolcher and
     Neil Simmonds)
   * Various build issues, compiler fixes, and valgrind complaints have been fixed.

 -- Japheth Cleaver <cleaver-xymon@terabithia.org>  Mon, 30 Mar 2015 XX:XX:XX -0700


xymon (4.3.18) unstable; urgency=medium

   * rev 7494

   * Fix CVE-2015-1430, a buffer overflow in the acknowledge.cgi script.

Changes to xymond/client_config.c.

3258
3259
3260
3261
3262
3263
3264






3265
3266
3267
3268
3269
3270
3271
				 * present in the string we got from "ps". So you can setup
				 * the config to look for "cron" and it will actually find "/usr/sbin/cron".
				 */
				if (strstr(pname, pwalk->rule->rule.proc.procexp->pattern))
					pwalk->rule->rule.proc.pcount++;
			}
			else {






				if (namematch(pname, pwalk->rule->rule.proc.procexp->pattern, pwalk->rule->rule.proc.procexp->exp))
					pwalk->rule->rule.proc.pcount++;
			}
			break;

		  case C_DISK:
			if (!pwalk->rule->rule.disk.fsexp->exp) {







>
>
>
>
>
>







3258
3259
3260
3261
3262
3263
3264
3265
3266
3267
3268
3269
3270
3271
3272
3273
3274
3275
3276
3277
				 * present in the string we got from "ps". So you can setup
				 * the config to look for "cron" and it will actually find "/usr/sbin/cron".
				 */
				if (strstr(pname, pwalk->rule->rule.proc.procexp->pattern))
					pwalk->rule->rule.proc.pcount++;
			}
			else {
				/* 
				 * Strip the initial spaces, pipes and so forth seen if an ASCII forest was generated
				 * This allows PCRE regexes using a '^' to remain useful.
				 */
				pname += strspn(pname, " |\\_");
				if (!pname) break;
				if (namematch(pname, pwalk->rule->rule.proc.procexp->pattern, pwalk->rule->rule.proc.procexp->exp))
					pwalk->rule->rule.proc.pcount++;
			}
			break;

		  case C_DISK:
			if (!pwalk->rule->rule.disk.fsexp->exp) {