Clean up the package a little, and merge in patches from the shared
nagios-plugin-* packages to avoid duplication. Changes since 2.0.3:
2.2.1 2017-04-19
FIXES
check_users: not accepting zero as the threshold
check_http: reports warning where it should report ok with -e
check_snmp: does not work with -6 --ipv6 flags
check_swap: threshold calculation in bytes requires subtracting 65
check_uptime: fixed backward help text for thresholds
check_http: Don’t prematurely report success when checking HTTP TLS cert validity
check_http: fix parsing the last header
check_mailq: Fix for Postfix and better Sudo Checking
configure.ac: Fix spelling error
check_ntp_peer: requires newline when there is a socket timeout (fix in netutils.c)
check_users: segmentation fault if both thresholds are not provided
check_dns: DNS CRITICAL - expected ‘{hostname}.’ but got 'name = {hostname}.'
check_mailq: Nullmailer Regex is not working for Ubuntu 16.04
check_swap: Downstream Fedora patch: Prevent check_swap from returning OK, if no swap activated
Building RPMs on Amazon Linux - Add 'install-root' on line 165 of spec file
2.2.0 2017-01-19
ENHANCEMENTS
check_flexlm: if `-F <license file>` is not specified, will use `LM_LICENSE_FILE` environment var
check_load: Added per cpu load average message
check_smtp: add -L flag to support LMTP (LHLO instead of HELO/EHLO)
FIXES
check_http: -e breaks -f
check_mrtg: Add state to status output
check_ping: ping runs 30 times when host is down
check_icmp: does not have the -p argument in the help
check_dns: Segfaulting with timeout > 26 sec
check_disk: missing -lrt on Solaris
check_http: segmentation fault
check_http: help text update for virtual hosts
check_snmp: Thresholds were being shown twice
check_hpjd: some jd 610 cards have a false flag that printer is offline
check_http: Handle reference redirect like //www.site.org/test
check_disk: alerts issued too soon
fix: Allocator sizeof operand mismatch
fix: Dead assignment
Shellcheck: fix most of the shellcheck warnings.
check_ntp: touch ntp servers at most once every seconds
check_dns: authoritative test (-A) is broken
check_dns: reports TXT records incorrectly
check_file_age: does not handle filenames WITHOUT space!
de,fr.po: fix syntax errors end-of-line within string
lib/parse_ini.c: fix gcc warning: implicit declaration of function ‘idpriv_temp_drop’ and ‘idpriv_temp_restore’
add openssl 1.1 support
2.1.4 2016-11-17
FIXES
check_http: Don't include default Accept header if one is provided
check_disk: added "fuse.gvfsd-fuse" to list of fs types to ignore
check_http: Fixed non-text chunked-encoded decoding
check_http: segmentation fault (FreeBSD)
check_dns: Update IF_RECORD to not erase query_found
check_http: SSL Certificate check returns 12:00:00AM <local timezone>
check_http: -u is misleading. Changed help text
check_file_age: does not handle filenames with space
check_snmp: units label option outputs the label in the incorrect location
plugins-root/check_dhcp.c: fix a potential segfault
check_users: not correctly detecting thresholds
2.1.3 2016-09-12
ENHANCEMENTS
SNI support in check_tcp (ddbilik)
check_disk_smb.pl: add support for -k for kerberos authentication
check_file_age.c: allow wildcard matching
FIXES
check_tcp.c: tools/build_perl_modules hardcodes the perl used
check_game.c: reports ping as number of players (Jason Rivers)
fix some gcc5 warnings (Mario Trangoni)
check_cluster.c: Update wording in comments (Troy Lea)
check_nagios.c: could not locate a running nagios process
check_swap.c: does not accept threshold of zero
check_swap.c: uses inconsistent checks on negative thresholds
check_snmp.c: --offset does not appear to do anything (Troy Lea)
sslutils.c: output has first line of "SSL Version: xxxxxx"
effects anything using sslutils including check_http, check_dhcp
and others
utils_cmd.c: when using ssh (or check-by-ssh) with ControlMaster/ControlPersist,
nagios times out the first time and one gets zombie processes (Gordon Messmer)
2.1.2 2016-08-01
SECURITY FIXES
ENHANCEMENTS
check_snmp's performance data now also includes warning/critical
thresholds
New check_snmp "-N" option to specify SNMPv3 context name
New check_nt "-l" parameters: seconds|minutes|hours|days
New check_mailq -s option which tells the plugin to use sudo(8)
New -W/-C option for check_ldap to check number of entries (Gerhard Lausser)
The check_http -S/--ssl option now accepts the arguments "1.1" and "1.2"
to force TLSv1.1 and TLSv1.2 connections, respectively
The check_http -S/--ssl option now allows for specifying the desired
protocol with a "+" suffix to also accept newer versions
New check_disk "-v" option to show troubled partition in verbose mode
check_log.sh: Added a parameter -w (--max_warning) defining upper value to return a warning code
check_ldap: Add support for LDAP URIs.
check_file_age: Provide performance data
check_by_ssh: added --hostname support
check_ifstatus.pl: Add check_ifstatus option to ignore interfaces by name
check_snmp: Introduce support for SNMPv3 context using "-N" option
check_snmp.c: Added IPv6 support
check_http: Added support for checking SSL-Websites through Proxies
FIXES
check_dig can now also use "drill" instead of "dig"
check_dig honor the -4 and -6 switches
check_ntp_peer: do not use uninitialized results for max state
check_log.sh, check_oracle.sh, check_sensors.sh: Setting PATH at first
check_log.sh: droping path from basename while evaluating PROGNAME
check_tcp: Fix check_jabber to work with Openfire servers
check_ifstatus.pl: Fix "-n" and "-u" options to ignore if either is set, not just both
check_mrtgtraf: Fix perfdata to comply with perfdata UOM definition
check_real, check_ntp: fix null termination
check_apt: fix memset
check_ssh: change warning to critical for protocal/version errors
utils_cmd.c: avoid a segfault, if ulimit is set to unlimited
utils_cmd.c: make constants from maxfd values
configure.ac: Added particular ps command for HP-UX
check_disk: Fix pthread start routine type
check_http: Make header_value() and chunked-encoding decoding more robust
check_http: fix Host header if explicitly set with -k
sslutils.c: Forcing furter restriction of ciphers for current security concerns
check_nagios, check_procs: Enable check_proc to monitor processes in PID name-spaced environments.
check_dhcp.c: use /dev/urandom if available
check_http.c: Don't decode page if it's not there
check_disk.c: Prevent large tide values from truncation
pst3.c: Fix for unclosed filehandle in pst3 on Solaris
check_snmp: Timeticks are not being parsed correctly before performance data
multiple *.h files: standardized header include fences
multiple plugins/*.c files: fix unsafe signal handling
sslutils.c: Fix compilation with GnuTLS which doesn't provide SSL_CTX_check_private_key()
check_mailq.pl: fixed mailer names
check_swap.c: Improving output when swap space has zero size
check_icmp.c: Use kernel reception time on ICMP packets to compute rtt.
check_icmp.c: make use of MSG_CONFIRM optional
check_ldap.c: add counting of entries to check_ldap
utils.c: add sperfdata() function which can handle threshold ranges
sslutils.c: Check if OpenSSL supports SSLv3.
check_dhcp.c: Fixes segfaults when running via monitoring worker (off-by-one)
check_fping.c: autodetect ipv6 addresses
sslutils.c: optimize output if certificate expires in less then 24h
check_smtp.c: Let "-D" option imply "-S". Also QUIT SMTP connection when "-D" is used
check_smtp.c: modified SSL check for use with -e
check_tcp.c: Validate sent data size
check_dns.c: conditional assignment
check_dns.c: macro querytypes and auto cnames
utils_cmd.c, utils_base.c: Multiple resource leaks
check_http.c: Increase MAX_RE_SIZE from 256 to 2048
check_procs.c: Changed the ps command args from axwo to axwwo allowing for longer output
check_http.c: Allow a server to reply using only 'HTTP/1.x 200 OK' and a
body, with no headers
check_nt.c: check_nt does not correctly report a DNS entry it cannot resolve
check_dhcp.c: check_dhcp broken on BSD
TESTS
check_procs.t: Add delay after forking in test to avoid race condition
test.pl.in: Use "C" locale when running test suite
check_http.t: Adjust date strings to the now-localized output
check_dns.t - Fix Perl Warning. perl doesn't understand /d within "".
check_snmp.t: skip extented snmp tests if snmpd has no perl support
check_snmp.t: fix snmp test for included threshold
check_http.t: fix tests for certificates expire date with seconds
check_http.t: add faketime based tests for check_http
LOCALIZATION
2.1.0 30th July 2015
SECURITY FIXES
ssl_utils.c - Disable SSLv3 & SSLv2 autonegotiation by default to limit poodle and other weak cipher attacks (sreinhardt)
ENHANCEMENTS
Timeout States Implemented - Plugins that support a timeout state will now also support specifying the exit state in case of timeout with the syntax -t <timeout>:<state> (abrist)
Perl plugins now use FindBin for path discovery, obsoleting the nasty AWK script (evgeni, abrist)
check_http.c - Added support for chunked transfer-encoding (koenwtje, dermoth, sreinhardt)
check_radius.c - Added support for the FreeRADIUS Client library (weiss)
check_snmp.c - Added thresholds to performance data (seemuellera)
check_snmp.c - Added new option (-N) for SNMPv3 context (Johannes Engel)
check_snmp.c - Added IPv6 support (abrist)
check_ldap.c - Added a new option (-U) for LDAP URI support (qris)
check_ifstatus.pl - Added new option (-n) to exclude interfaces (peelman, weiss)
check_file_age.pl - Performance data output added (hggh)
check_mailq.pl - Now supports sudo (Christopher Schultz, weiss)
check_log.sh - Added a new option (-w) defining upper value to return a warning code (arvanus)
FIXES
check_by_ssh.c - Added --hostname support (sni)
check_dbi.c - Spelling corrections (sreinhardt)
check_dig.c - Fixed to work with dig/drill tools and ip version switch is now respected (abgandar)
check_disk.c - Fix for hanging filesystems (Gerhard Lausser)
check_disk.c - Partitions in problem state now reported in verbose mode (waja)
check_disk.c - Prevent large tide values from truncation (JesperForsberg)
check_dns.c - Server specific fixes and other cleanup (sreinhardt)
check_http.c - Some small changes for readability (koenwtje)
check_mrtgtraf.c - Added verbose output (sreinhardt)
check_mrtgtraf.c - Perfdata now complies with UOM definition (Bobzikwick)
check_ntp_peer.c - No longer uses uninitialized results for max state (sni)
check_procs.c - Rare race condition fixed (Mikael Falkvidd)
check_ssh.c - Now exits with CRITICAL when version/protocol string check fails to match (sni)
check_tcp.c - Help description of escape characters now correct (Sebastian Herbszt)
check_tcp.c - Fix to support Openfire servers with check_jabber (weiss)
check_ups.c - Spelling corrections (sreinhardt)
pst3.c - Fix for unclosed file handle in pst3 on Solaris (jwinkle01)
plugins-scripts/*.sh - Trusted path fixes (waja)
netutils.h - Decreased max path to 104 bytes to compensate for BSD paths (sreinhardt)
configure.ac - Fix for HP-UX ps command (Tontonitch)
lib/utils_cmd.c - Fix for potential segfault when ulimits are set to unlimited (nafets)
lib/parse_ini.c - Many small fixes from coverity scans and the community (sreinhardt, weiss)
lib/util_base.c - Code cleanup (sreinhardt)
lib/utils_base.c - Add EIUD to state retention path for multi-user permissions support (sreinhardt)
po/* - Spelling corrections (sreinhardt)
Multiple resource leaks fixed (sreinhardt)
Many other small fixes and cleanup caught by coverity (multiple contributors)
TESTS
Many small fixes to tests (multiple contributors)
LOCALIZATION
Many small fixes for locales and localizations (multiple contributors)
Make sure the configure script finds the ping or ping6 command on NetBSD, don't
rely on /sbin being in $path of the builder.
Not sure if similar change is needed for other $OPSYS.
Add a comment to patch-ad explaining why some plugins are disabled here.
Do it for all packages that
* mention perl, or
* have a directory name starting with p5-*, or
* depend on a package starting with p5-
like last time, for 5.18, where this didn't lead to complaints.
Let me know if you have any this time.
a) refer 'perl' in their Makefile, or
b) have a directory name of p5-*, or
c) have any dependency on any p5-* package
Like last time, where this caused no complaints.
- Add pst3 to PLIST.
- Make sure dig/nslookup are found on SunOS.
- Use MACHINE_ARCH to avoid 64bit builds with ABI=32 on SunOS.
- Disable large file support on SunOS and ABI=32 (fixes swap plugin).
Currently it's possible to install Nagios plugins independently of
net/nagios-base. However, the directories that the plugins install
into are created and owned by net/nagios-base, so it has to be
installed first to avoid unwanted directory removal when the only
plugin is deinstalled.
Changes since 3.2.3:
ENHANCEMENTS
* Added support for same host service dependencies with servicegroups (Mathieu Gagné)
* Empty hostgroups referenced from services now optionally generate a warning instead of an error.
* Documentation links now point to online resources
* Matt Wall's Exfoliation theme is now installed by default. You can reinstall the classic theme with "make install-classicui"
* Downtime delete commands made "distributable" by deleting by host group name, host name or start time/comment (Opsview team)
* Allow status.cgi to order by "host urgency" (Jochen Bern)
* Added news items and quick links to main splash page
* Added ability to authenticate to CGIs using contactgroup name (Stephen Gran)
FIXES
* Fixes status.cgi when called with no parameters, where host should be set to all if none specified (Michael Friedrich)
* Fixes possible validation error with empty hostgroups/servicegroups (Sven-Göran Bergh)
* Performance-data handling and checking is now thread-safe so long as embedded perl is not used.
* Children should no longer hang on mutex locks held in parent for localtime() (and similar) calls.
* Debug logging is now properly serialized, using soft-locking with a timeout of 150 milliseconds to avoid multiple threads competing for the privilege to write debug info.
* Fixed extraneous alerts for services when host is down
* Fixed incorrect parsing of multi-line host check results (Jochen Bern)
* Fixed bug with passive host checks being incorrectly sent to event brokers as active checks
* Fixed bug where passive host check status updates were not being propagated to event brokers
* Reverted 'Fix for retaining host display name and alias, as well as service display name' as configuration information stored incorrectly over a reload
* Fixed compile warnings for size_t (Michael Friedrich)
* Fixed problem where acknowledgements were getting reset when a hard state change occurred
* Removed duplicated unlinks for check result files with multiple results
* Fixed race condition on flexible downtime commands when duration not set or zero (Michael Friedrich)
* Fixed flexible downtime on service hard state change doesn't get triggered/activated (Michael Friedrich)
* Fixed XSS vulnerability in config.cgi and statusmap.cgi (Stefan Schurtz)
* Fixed segfault when sending host notifications (Michael Friedrich)
* Fixed bug where unauthorized contacts could issue hostgroup and servicegroup commands (Sven Nierlein)
This release contains several enhancements, including rate calculation in check_snmp. There are also lots of bug fixes.
* New check_ntp_peer -m and -n options to check the number of usable time sources ("truechimers")
* New check_disk_smb -a option which allows for specifying the IP address of the remote server
DragonFly base.
* check_dhcp also installed as suid root. while here use ${SETUID_ROOT_PERMS}.
* marked as DESTDIR ready (not user-destdir, for the previous reason).
Bump PKGREVISION.
This is a bug fix release, which includes some important fixes to --extra-opts (a way of specifying command line options within files).
* check_http has options to specify the HTTP method (#2155152)
* check_users thresholds were not working exactly as documented (>= rather
than >)
to 1.4.13. Approved by tonnerre@
main CHANGES since 1.4.11:
- lots of bug fixes
- Added ./check_nt -v INSTANCES to count number of instances (Alessandro Ren)
- New check_icmp -s option to specify the source IP address
- check_dns now sorts addresses for testing results for more than one
returned IP (Matthias Urlichs)
- check_disk should now work with large file systems (2TB+) on all archs
that supports it
- check_ntp_peer now checks for the LI_ALARM flag
- check_procs now accepts --ereg-argument-array for a regular expression
match to the argument array
- check_dig can now pass arguments to dig by using -A/--dig-arguments
- check_dns now allow to repeat -a to match multiple possibly returned address
(common with load balancers)
- check_mysql and check_radius now try clearing password in processlist
just like check_mysql_query
- check_mysql and check_mysql_query now support sockets explicitely
(-s, --socket)
- negate now has the ability to replace the status text as well
(-s, --substitute)
- Added performance data to check_ping (Christian Schneemann)
- On non-skipped stderr, check_by_ssh now returns UNKNOWN or worse
(result from command) instead of always UNKNOWN.
- check_dig now returns CRITICAL instead of WARNING when no answer section
is found
- check_procs now captures stderr in external command and adds to plugin output
- check_snmp now only prints perfdata for non numeric values (#1867716)
- check_icmp now supports packet size modification
- check_http -e now accepts a comma-delimited list of expected status
codes (Sven Nierlein)
- check_ntp_peer/check_ntp_time used to show port in --help but ignored
the argument - now implemented
crashes on various architectures and system, such as, for example,
the check_icmp bus error on sparc64.
Changes in 1.4.4:
- check_ntp is now written in C instead of Perl.
- check_disk bugfixes.
- check_udp2, check_udp and check_tcp are now united.
- check_mailq now reports mailq errors better.
- check_snmp now compiles with a sane amount of effort.
Changes in 1.4.5:
- Fixed bug in perl's is_hostname routine.
Changes in 1.4.6:
- check_ping and netutils.c now do less DNS lookups.
- alloca.h related compile fixes.
- check_swap now works on Solaris too.
- check_disk perf data can now be monitored.
- check_procs had a buffer overflow.
- Fixed UNIX socket error handling.
- check_by_ssh now can pass -q and -o to ssh.
- GNUlib sync.
- check_jabber can now return things different from a warning.
Changes in 1.4.7:
- check_procs uses /usr/ucb/ps on Solaris which fixes pst3 problems.
- check_smtp does a non-broken HELO now.
- check_icmp can now have a minimum number of required hosts and also
works if running for a long time on BSDs.
- check_ping timeout reduced.
- Everybody can now execute SUID check plugins unless indicated otherwise
to configure.
Changes in 1.4.8:
- check_disk now has an extra option for regex matching and grouping of FSes.
- check_ntp various fixes.
Changes in 1.4.9:
- New plugin check_cluster (not built by pkgsrc).
- check_by_ssh now has improved stderr/stdout handling options (-E/-S).
- check_ldap, check_radius and check_pgsql compile fixes.
- check_snmp 64-bit counter support.
- Better underflow checking for check_time.
- check_http output is more consistent now.
- check_http HTTP redirect segfault fixes.
- check_tcp doesn't segfault anymore when multiple expect strings are given.
- check_tcp now supports -A to check if all expect strings match.
Changes in 1.4.10:
- check_http redirect buffer overflow vulnerability fixed (was fixed
in pkgsrc before).
- check_http now shuts down HTTP/1.1 keepalive connections cleanly.
- check_ldaps doesn't guess anymore whether to use SSL or STARTTLS.
- check_disk now calls stat on all file systems.
- check_disk now supports the -L flag for local file system checks.
- check_disk now supports -i/-I for ignoring paths/partitions by regex.
- check_disk now supports -A to select all file systems explicitly.
- check_disk now needs to have the -E flag passed before -p or -r/-R.
- check_disk is no longer buggy when case sensitive and insensitive regexes
are mixed.
- check_dhcp now supports -u (unicast) to emulate a relay.
- check_dhcp now lets you specify the MAC address in the request using -m.
- check_dhcp -r and -s options now accept host names.
- check_icmp no longer bus errors on various platforms.
- check_smtp now handles multiple-packet server responses properly.
- Negate command line options are no longer evaluated twice by the shell.
- Negate commands to be run must now be fully qualified.
- Negate can now remap custom states.
- check_radius now supports radius-client-ng (was already in pkgsrc).
- check_by_ssh now supports multiline output.
- check_ntp now honors ntp flags.
Changes in 1.4.10:
- check_ntp returns UNKNOWN rather than WARNING if no jitter is available.
- check_cluster now accept all valid characters in its thresholds.
- check_ntp is now deprecated in favor of check_ntp_peer and check_ntp_time.
- check_disk no longer reports OK if disk usage exceeds 100%.
- check_load handles non-triplet arguments correctly now.
- Nagios::Plugin updated to 0.22.
