[Xymon] xymon File has MD5 hash (No MD5 data) - should be

[Ciprian Parfon]

Ermm .. sry, about this. Seems they appeared after all. :)

Thanks Henrik.


On 02/04/2014 12:29 PM, Ciprian Parfon wrote:
> Hello Henrik
>
> I took your advice and modified client-local.cfg and replaced the 
> hashes with 'md5'. Unfortunatelly it still doesn't work. In my browser 
> when I click on "client data" I see this (in the files section):
>
> [file:/etc/shadow]
> type:100000 (file)
> mode:0 (----------)
> linkcount:1
> owner:0 (root)
> group:0 (root)
> size:2229
> clock:1391509248 (2014/02/04-10:20:48)
> atime:1369319982 (2013/05/23-14:39:42)
> ctime:1369849694 (2013/05/29-17:48:14)
> mtime:1369849694 (2013/05/29-17:48:14)
>
> [file:/etc/passwd]
> type:100000 (file)
> mode:644 (-rw-r--r--)
> linkcount:1
> owner:0 (root)
> group:0 (root)
> size:2025
> clock:1391509248 (2014/02/04-10:20:48)
> atime:1376392921 (2013/08/13-11:22:01)
> ctime:1376392921 (2013/08/13-11:22:01)
> mtime:1376392921 (2013/08/13-11:22:01)
>
> There isn't any md5 hash in there. :|
>
>
> On 02/04/2014 12:04 PM, henrik at hswn.dk wrote:
>> Den 2014-02-04 10:44, Ciprian Parfon skrev:
>>> Hello
>>>
>>> I came to you again, with hope that someone bumped into this problem
>>> and could give me some help.
>>>
>>> I have configured XYmon to check some files with MD5 but it doesn't
>>> work as expected. My Xymon server is 4.3.10. On the server I edited
>>> 'client-local.cfg' like so
>>>
>>> [dev]
>>> file:/etc/passwd:4736b427730af4ae0d5e11c098be4ff6
>>> file:/etc/shadow:aadf4e9f14a8cceab31d635f9ea5fdb8
>>
>> You don't include the hash in client-local.cfg - you just tell the 
>> client what kind of hash it should calculate. So this should be
>>
>> [dev]
>> file:/etc/passwd:md5
>> file:/etc/shadow:md5
>>
>>> Also, I have in analisys.cfg the following entry:
>>>
>>> HOST=%dev*
>>> FILE /etc/passwd MD5=4736b427730af4ae0d5e11c098be4ff6 COLOR=red
>>> FILE /etc/shadow MD5=aadf4e9f14a8cceab31d635f9ea5fdb8 COLOR=red
>>
>> Your pattern match will find a host name "dev", but it will in fact 
>> match any host that has "de" in the hostname. '*' is not a wilcard, 
>> it is a counter meaning "0 or more of the preceding character" - 'v' 
>> in this case - and you haven't anchored the 'de'.
>>
>> You probably want
>> HOST=%^dev
>>
>>
>> Regards,
>> Henrik
>>
>> _______________________________________________
>> Xymon mailing list
>> Xymon at xymon.com
>> http://lists.xymon.com/mailman/listinfo/xymon
>
>
> -- 
> Ciprian Parfon
> System & Network Engineer
> +40 721879113
> ciprian.parfon at gmail.com


-- 
Ciprian Parfon
System & Network Engineer
+40 721879113
ciprian.parfon at gmail.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20140204/68bf0be9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3898 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20140204/68bf0be9/attachment.bin>