Author Archives: Andy Brist

Nagios Plugins 2.1.1 Released

The Nagios Plugins Development Team is proud to announce that nagios-plugins 2.1.1 has been released and is available for download.

Dang release gremlins.

FIXES
lib/utils_cmd.c – Reverted to fix check_procs segfault (abrist)

Download Nagios-Plugins 2.1.1 here.

Thanks to all who have contributed toward this release. If you need assistance installing or using the plugins, please visit our general support forum. Bug reports, feature requests, and additional comments are welcome and may be posted to our plugin development forum.

Nagios Plugins 2.0.3 Released

The Nagios Plugins Development Team is proud to announce that nagios-plugins 2.0.3 has been released and is available for download.

This release is mostly small bug fixes and additional protections against the SUID vulnerability discovered by Dawid Golunski. As we are now using coverity to scan for small bugs, there will be a number of small commits in the near future.

The mailq autodetection commits were reverted as there were issues with parsing performed by the awk script. We decided to use FindBin in lieu of shimming the awk regex. You can try out the proposed FindBin changes in the branch “findbin”.  Expect the branches findbin and timeout_state to be merged into the next major release (2.1.0).

A full list of included enhancements and fixes are listed below:

SECURITY FIXES

  • parse_ini.c – Additional fixes for the SUID plugins vulnerabilities (sreinhardt)
  • Added Gnulib module idpriv-droptemp (weiss)

FIXES

  • check_dns.c – Resolved issues with reverse lookup (sreinhardt)
  • check_dns.c – Changed query types from ALL to ANY (sreinhardt)
  • common.h – Include fixes for esoteric AIX compile issues (emislivec)
  • negate.c – Small fixes from coverity (66479) (66480) (sreinhardt)
  • check_dhcp.c – Small fix from coverity (66488) (sreinhardt)
  • check_http.c – Potential memory leak and overflow fixed from coverity (66514) (sreinhardt)
  • check_ntp.c – Small fix from coverity (66524) (sreinhardt)
  • utils_cmd.c – Small file descriptor fix from coverity (66502) (sreinhardt)
  • check_apt.c – Small fix for from coverity (66531) (sreinhardt)

REVERTS

  • check_mailq – Reverted autodetection commits to avoid awk parsing issues. Autodetection will return in version 2.1.0 as part of the changes in the FindBin branch (abrist)

Thanks to all who have contributed toward this release. If you need assistance installing or using the plugins, please visit our general support forum. Bug reports, feature requests, and additional comments are welcome and may be posted to our plugin development forum.

Nagios Plugins 2.0.2 Released

The Nagios Plugins Development Team is proud to announce that nagios-plugins 2.0.2 has been released and is available for download.

This release was prompted a bit earlier than originally expected by a newly discovered security vulnerability reported by Dawid Golunski on exploit-db. It concerned an arbitrary file access vulnerability with the SUID binaries (check_icmp, check_dhcp) and the extra-opts configure flag (which is enabled by default).  Fixes were applied globally, so the new restrictions on fopen should apply to all plugins.

Additionally, a few plugins were updated to successfully build on windows under cygwin, and some small changes were made to plugin output and verbosity.

A full list of included enhancements and fixes are listed below:

SECURITY FIXES

  • Fixed file access vulnerability with SUID binaries (check_icmp, check_dhcp) and extra-opts.  Fixes were applied globally, so the new resrictions on fopen should apply to all plugins. Special thanks to Dawid Golunski for the submission. More information: http://www.exploit-db.com/exploits/33387/  (sreinhardt) (emislivec)

ENHANCEMENTS

  • check_disk – Now compiles in cygwin on windows (Gunnar Beutner)
  • check_ping – Now compiles in cygwin on windows (Gunnar Beutner)
  • check_users – Now compiles in cygwin on windows (Gunnar Beutner)
  • netutils.c – Connection error verbosity increased. C plugins will now differentiate file socket errors from connection errors (Davide Madrisan)

FIXES

  • check_nt.c – Changed ‘Mb’ to ‘MB’ in MEMUSE output for clarity (abrist)

Thanks to all who have contributed toward this release. If you need assistance installing or using the plugins, please visit our general support forum. Bug reports, feature requests, and additional comments are welcome and may be posted to our plugin development forum.

Nagios Plugins 2.0 Released

The Nagios Plugins Development Team is proud to announce that nagios-plugins 2.0 has been released and is available for download.  In addition to numerous bug fixes and new options, we have included a new plugin – check_uptime (only supported on Linux at the moment – more platforms to follow in the future).

ADDITIONS

  • check_uptime – New plugin (only supports Linux due to dependency on clock.gettime()).  More supported platforms to follow.

ENHANCEMENTS

  • check_mysql_query – Added performance data (sreinhardt)
  • check_file_age – New option -i/–ignore-missing which returns OK if file is missing (waja)
  • check_nt – Added performance data to UPTIME -l seconds|minutes|hours|days (abrist)
  • check_hpjd – New -p option for port specification (abrist)
  • check_disk – new -n option for multi-line output (tmcnag)
  • check_mysql_query – New -f/-g options for reading for mysql options file (awiddersheim)
  • check_mailq – New -M option for nullmailer support in the mailserver (Luca Corti)
  • check_dig – New -r option for specifying number of retries (abrist)
  • check_ntp_peer – Added state output for each checked metric (abrist)
  • check_dns – Warning and critical thresholds added to perfdata (jccomputing) (abrist)
  • check_dns – New -q options for several query types (AAAA,TXT,SRV,MX) (sreinhardt)
  • check_tcp – Status output now includes hostname when host_specified is set (madrisan)
  • check_mysql – New -n/–ignore_auth option to ignore authentication failure (Julius Kriukas)
  • check_ssh – New -P/–remote-protocol option to monitor the ssh protocol version (monitoring-user)
  • check_ntp – New -o/–time-offset option to compensate for the ntp server’s offset relative to the local server (monitoring-user)
  • configure.ac – Added support for –disable-maintainer-mode (weiss)

FIXES

  • check_http – The -C option no longer resets SSL version if e.g. -S 1 -C 5 is specified
  • check_ide_smart – Now defaults to nagios-compatible output (sreinhardt)
  • Fixed misleading timeout message for non-network plugins (sreinhardt)
  • check_swap – Now fails with 100% usage and a new status output when swap is disabled or missing (abrist)
  • check_ifstatus – Removed commas from perfdata – should now output valid perfdata in nagios format (waja)
  • check_ping – Now gracefully handle the “time of day goes back” error.  This issue is rare, most will not notice the change (waja)
  • check_disk – Help output was clarified that it supports mount paths or partitions instead of just paths and partitions (waja)
  • check_ide_smart – Fixed attribute comparison (waja)
  • check_ntp_time – Fixed average time calculation (larsi)
  • NPTest.cache – Empty or Missing file no longer blocks writing to the file (dermoth)
  • parse.ini – Fixed newlines in output (dermoth)
  • check_dig – Fixed wrong IPv6 arguments order (Stéphane Bortzmeyer)
  • check_dig – Now honors timeout value specified by switch -t (Jethro Carr) (abrist)
  • configure.in – Renamed to configure.ac to avoid deprecation warning (abrist)
  • configure.ac – The option –enable-extra-opts is now enabled by default (dermoth)
  • check_snmp – Now handles negative values properly (Stephane Lapie)

WARNINGS

  • check_procs – Now ignores its parent process to avoid unexpected results when invoked via certain shells
  • utils.sh – No longer defines ECHO (weiss)
  • check_ide_smart now default to nagios output, -n kept for legacy support (sreinhardt)
  • check_ntp_peer – Status output changed, now includes individual state for offset, truechimers, stratum, and jitter (abrist)
  • check_tcp – Status output has changed, now includes hostname (madrisan)

TESTS

  • check_procs – Performance data tests added (dermoth)
  • check_snmp – Added tests for negative thresholds (dermoth)
  • check_hpjd – Added tests for port options (abrist)
  • check_dns – Added new tests for query types (abrist)
  • check_pop – Added option to enable ssl for the test (abrist)
  • check_jabber – Fixed status output tests to account for hostname (abrist)
  • check_procs – Tests no longer fail if uid 501 is not present (sni)
  • check_mysql – Test prompts clarified (dermoth)
  • check_file_age – Added tests for –ignore-missing (waja)

OTHER

  • Numerous small typos fixed.
  • Help output has been changed in many places for clarity and verbosity.

Thanks to all who have contributed toward this release. If you need assistance installing or using the plugins, please visit our general support forum. Bug reports, feature requests, and additional comments are welcome and may be posted to our plugin development forum.

Questions for the Community

I am excited to be the new lead for the nagios-plugins project and look forward to working with the community and other plugin developers to better the project.  Even though we have started to fix some low hanging issues, we have larger plans for the project overall.  Once we finish setting up the automated build and testing servers, the team will open the project up for new plugin submissions.  I have a few questions for the community below, which you can respond to through the mailing lists (Nagiosplugin-commits, Nagiosplugin-devel, Nagiosplugin-help), forum, or directly in the comments below.

1. What distributions (if any) have had problems with building in the past and should be targeted for the automated tests?

2. Are there any plugins that you wish were included in the official nagios-plugins package? (We will be perusing the exchange for popular abandoned gpl perl/c plugins, but user input and submissions are always appreciated)

-Andy Brist