Xymon Mailing List Archive search

Invalid client message

7 messages in this thread

list Christian Schlüter · Mon, 12 Sep 2005 12:03:44 +0200 ·
The hobbitd section reports the following status message:

Latest errormessages:
Invalid client message - blank hostname

Now I would like to see the IP of the server sending this invalid client message to solve the Problem.
In general the IP-Adresses of the senders should be checked by comparing it with a nslookup of the hostname, because it's a security issue when any host can send the reports for another host (It works - I just tried!) which could be damaged without that the HobbitMon notices it...

Thanks an regards

Christian
list Henrik Størner · Mon, 12 Sep 2005 12:41:06 +0200 ·
quoted from Christian Schlüter
On Mon, Sep 12, 2005 at 12:03:44PM +0200, Christian Schlüter wrote:
The hobbitd section reports the following status message:

Latest errormessages:
Invalid client message - blank hostname

Now I would like to see the IP of the server sending this invalid client message to solve the Problem.
OK, added this for the next version.
In general the IP-Adresses of the senders should be checked by comparing it with a nslookup of the hostname, because it's a security issue when any host can send the reports for another host (It works - I just tried!) which could be damaged without that the HobbitMon notices it...
DNS lookups are expensive, and a host may not have a DNS entry at all.
So it's done differently - check the hobbitd(8) man-page for the "--status-senders" option. What you've seen is just the default
behaviour.


Regards,
Henrik
list Asif Iqbal · Mon, 24 Apr 2006 17:39:54 -0400 ·
Hi

I am seeing this on `hobbitd' column 

Latest errormessages:
Invalid client message from 2.3.0.5 - blank hostname

where 2.3.0.5 is the hobbit server.

tail on /var/log/hobbit/hobbitd.log shows this line showing up every 5
mins

2006-04-23 02:20:15 Invalid client message from 2.3.0.5 - blank hostname

What is the easy way to find out which script causing this?

I am using hobbit 4.1.2 on Solaris 9

Thanks


-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi
list Henrik Størner · Tue, 25 Apr 2006 07:49:08 +0200 ·
quoted from Asif Iqbal
On Mon, Apr 24, 2006 at 05:39:54PM -0400, Asif Iqbal wrote:
Latest errormessages:
Invalid client message from 2.3.0.5 - blank hostname

where 2.3.0.5 is the hobbit server.
What's the first line of your ~hobbit/client/tmp/msg.txt file?

This message means that hobbitd couldn't make out the hostname
sent by a Hobbit client. That hostname is the first line of the
data sent by the client.


Regards,
Henrik
list Asif Iqbal · Tue, 25 Apr 2006 04:50:05 -0400 ·
quoted from Henrik Størner
On Tue, Apr 25, 2006 at 07:49:08AM, Henrik Storner wrote:
On Mon, Apr 24, 2006 at 05:39:54PM -0400, Asif Iqbal wrote:
Latest errormessages:
Invalid client message from 2.3.0.5 - blank hostname
where 2.3.0.5 is the hobbit server.
What's the first line of your ~hobbit/client/tmp/msg.txt file?
client .solaris

What should it say? And how do I go by fixing it? My `uname -n' for the
hobbit server matches the entry in bb-hosts file
quoted from Asif Iqbal
This message means that hobbitd couldn't make out the hostname
sent by a Hobbit client. That hostname is the first line of the
data sent by the client.


Regards,
Henrik

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi
list Henrik Størner · Tue, 25 Apr 2006 11:50:43 +0200 ·
quoted from Asif Iqbal
On Tue, Apr 25, 2006 at 04:50:05AM -0400, Asif Iqbal wrote:
On Tue, Apr 25, 2006 at 07:49:08AM, Henrik Storner wrote:
On Mon, Apr 24, 2006 at 05:39:54PM -0400, Asif Iqbal wrote:
Latest errormessages:
Invalid client message from 2.3.0.5 - blank hostname

where 2.3.0.5 is the hobbit server.
What's the first line of your ~hobbit/client/tmp/msg.txt file?
client .solaris

What should it say? And how do I go by fixing it? My `uname -n' for the
hobbit server matches the entry in bb-hosts file
It should say "client your,host,name.solaris"

Hmm... I think this is a bug in the way the client environment is
setup. The quick fix is to add a MACHINE setting to the
~hobbit/client/etc/hobbitclient.cfg file with

   MACHINE="your,host,name"


Henrik
list Asif Iqbal · Tue, 25 Apr 2006 10:03:53 -0400 ·
quoted from Henrik Størner
On Tue, Apr 25, 2006 at 11:50:43AM, Henrik Storner wrote:
On Tue, Apr 25, 2006 at 04:50:05AM -0400, Asif Iqbal wrote:
On Tue, Apr 25, 2006 at 07:49:08AM, Henrik Storner wrote:
On Mon, Apr 24, 2006 at 05:39:54PM -0400, Asif Iqbal wrote:
Latest errormessages:
Invalid client message from 2.3.0.5 - blank hostname
where 2.3.0.5 is the hobbit server.
What's the first line of your ~hobbit/client/tmp/msg.txt file?
client .solaris
What should it say? And how do I go by fixing it? My `uname -n' for the
hobbit server matches the entry in bb-hosts file
It should say "client your,host,name.solaris"

Hmm... I think this is a bug in the way the client environment is
setup. The quick fix is to add a MACHINE setting to the
~hobbit/client/etc/hobbitclient.cfg file with

   MACHINE="your,host,name"
Excellent!! That fixed it
quoted from Asif Iqbal
Henrik

-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi