<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
On 20/07/12 12:41, vishesh kumar wrote:
<blockquote
cite="mid:CAKpaJ1z4y8omwO0jKGxgz5BSDGGWDJuZNkZssn+DjV5SUAUjdw@mail.gmail.com"
type="cite">Hi Members,<br>
<br>
I wrote below script to monitor ssh traffic <br>
<br>
+++++++++++++++++++++++++++++++++++++++++++<br>
a=$(/usr/bin/sudo /sbin/iptables -vL|/bin/grep ':ssh'|/bin/awk
'{print $1}')<br>
if [ $a -gt 3 ]; then<br>
echo "SSH aatempt is TOO High | $a"<br>
exit 2<br>
else<br>
if [ $a -gt 2 ]; then<br>
echo "SSH aatempt is Average | $a"<br>
exit 1<br>
else<br>
echo "No SSH attempts | $a"<br>
exit 0<br>
fi<br>
fi<br>
exit 3<br>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br>
<br>
This script is working fine on shell and returning "SSH attempt is
too high" . But when i run it via nagios the output returned OK
and print "No SSH attempts".<br>
<br>
What I can notice that variable a not holding any value while
running via nagios , while its working fine when running via
shell.<br>
<br>
Can you please drive me in right direction ?<br>
<br>
<br>
Thanks<br>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. <a class="moz-txt-link-freetext" href="http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/">http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/</a></pre>
<pre wrap="">
<fieldset class="mimeAttachmentHeader"></fieldset>
_______________________________________________
Nagios-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/nagios-users">https://lists.sourceforge.net/lists/listinfo/nagios-users</a>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null</pre>
</blockquote>
Is your nagios user defined as allowed to use sudo ?<br>
</body>
</html>