[Xymon] Understanding the protocol.cfg file and ssh test

[Don Kuhlman]

Thanks very much for clarifying Jeremy!

On 3/12/12 11:33 PM, "Jeremy Laidman" <jlaidman at rebel-it.com.au> wrote:

>On Sat, Mar 10, 2012 at 9:26 AM, Don Kuhlman
>
>> 1) So, is the ssh|ssh1|ssh2 test in protocols.cfg supposed to make the
>> connection to the target host via port 22, then send it that string in
>>red
>> above - "SSH-2.0-OpenSSH_4.1\r\n" ?
>
>Yes.
>
>> 2) If so, why would it send this, as we don't want to tell that to the
>>host
>> do we?
>
>This is how an ssh/sftp client talks to an ssh server.  It connects,
>waits for the SSH-* banner, then sends its own SSH-* banner.
>
>> 3) Then is it expecting the host to reply with only "SSH" or is it
>>looking
>> for anything matching that in the reply?
>
>It looks for a banner that starts with "SSH".  It looks only in the
>banner for this string.
>
>> 4) Is the options banner line supposed to say it's okay to send us all
>>that
>> other stuff back or not?
>
>The "banner" line causes Xymon to log what it receives from the
>server, but before sending the "send" string.  All of the other data
>should not be logged.
>
>Cheers
>Jeremy