Strange characters in output when using check_logfiles with 3.0a5
Ingo Lantschner
ingo.lists at vum.at
Tue Jul 10 16:20:45 CEST 2007
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi,
using check_logfiles to search for Portscans in /var/log/snort/alert
I get this output:
&#-56;&#-99;h&#-22;> - (3 errors in
check_logfiles.protocol-2007-07-06-11-08-53) - [**] [122:1:0]
(portscan) TCP Portscan [**] ...
The wired characters starting with & and ending with > should read
CRITICAL. Similar garbage is returned with OK, just shorter.
The characters *change* with each (re)check and they are NOT shown if
check_logfiles is called from the command-line.
I already contacted the author of the plugin, he never has seen this
before - so I guess there is a relation to the Nagios release 3.x
Other plugins (check_load, check_users, etc. from 1.4.9) do NOT show
this behavior.
Looking into nagios.log I find lines related to check_logfiles with
"Additional Info: \n\nI" and similar.
Nagios 3.0a5 on Ubuntu Server 6.01 with Apache 2.0.55 and
check_logfiles v2.2.4.1.
Any idea?
Cheers, Ingo
- --
Ingo Lantschner
Vienna/Austria
Mob (+43-664) 143 84 18
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (Darwin)
iD8DBQFGk5W9encxbxkaIHoRAkT9AJ0flIFfK+srTv6jb4HkBAMEDQJQ9wCeOJJX
SLJ9GEbYilouL98e/EpYA5U=
=mqOM
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
More information about the Developers
mailing list