Xymon Mailing List Archive search

Unusual dnsreg behaviour

6 messages in this thread

list Richard Jones · Tue, 30 Aug 2016 15:26:48 +0100 ·
Hi all.

I have recently added in the dnsreg script from the xymon.com site
https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg All appears to be
working well apart from I am getting some strange behaviour for a couple of
domains.

For some domains I am simply not receiving any data back, which is causing
the test to show red with the following line of information:

Domain somedomain.co.uk expires on

Normally I would see the expiration date here, but it simply doesn't show.
I have tested the domain using whois on the server, and this all returns
fine. So I'm not too sure why this is happening. Any ideas?

*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.
list Phil Crooker · Wed, 31 Aug 2016 00:13:06 +0000 ·
It looks like the EXPIRESTRING compilation is empty for those domains:


EXPIRESTRING="`whois $DOMAIN | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:" | head -n 1 | cut -d: -f2- | sed -e's/^[     ]*//'`"


Try running it manually with the various parts, eg:

whois somedomain.co.uk | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

and see that at each pipe point (the '|') it actually returns something. Compare outputs between those domains that work and those that don't. Probably the whois output is different for the domains that don't work and you'll probably need to adjust the above filter.


cheers, Phil


From: Xymon <xymon-bounces at xymon.com> on behalf of Richard Jones <user-6806fa693bf5@xymon.invalid>
Sent: Tuesday, 30 August 2016 11:56 PM
To: xymon at xymon.com
Subject: [Xymon] Unusual dnsreg behaviour

Hi all.

I have recently added in the dnsreg script from the xymon.com<http://xymon.com>; site https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg All appears to be working well apart from I am getting some strange behaviour for a couple of domains.

For some domains I am simply not receiving any data back, which is causing the test to show red with the following line of information:

Domain somedomain.co.uk<http://somedomain.co.uk>; expires on
quoted from Richard Jones

Normally I would see the expiration date here, but it simply doesn't show. I have tested the domain using whois on the server, and this all returns fine. So I'm not too sure why this is happening. Any ideas?

Rich Jones | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk<http://www.corporationpop.co.uk/>;
quoted from Richard Jones
This email message (and any attached file) is intended only for the use of the individual or entity to whom the sender intended it to be addressed and may contain information that constitutes a trade secret, or that is privileged, confidential or subject to copyright. No part of it may be circulated, quoted, or reproduced without prior written approval from Corporation Pop Ltd. The contents of this document are strictly confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop Ltd. All rights reserved. Corporation Pop is a limited company registered in England + Wales. Company number 4869229. VAT number 533 8932 26.
list Bruce Ferrell · Tue, 30 Aug 2016 17:24:21 -0700 ·
I had this problem.  Not all whois commands are alike and behave differently. 

On my scientific linux install (jwhois), I had to swap in the whois from OpenSUSE.

sigh
quoted from Phil Crooker

On 08/30/2016 05:13 PM, Phil Crooker wrote:
It looks like the EXPIRESTRING compilation is empty for those domains:


EXPIRESTRING="`whois $DOMAIN | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:" | head -n 1 | cut -d: -f2- | sed -e's/^[     ]*//'`"


Try running it manually with the various parts, eg: 

whois somedomain.co.uk | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

and see that at each pipe point (the '|') it actually returns something. Compare outputs between those domains that work and those that don't. Probably the whois output is
different for the domains that don't work and you'll probably need to adjust the above filter.


cheers, Phil


*From:* Xymon <xymon-bounces at xymon.com> on behalf of Richard Jones <user-6806fa693bf5@xymon.invalid>
*Sent:* Tuesday, 30 August 2016 11:56 PM
*To:* xymon at xymon.com
*Subject:* [Xymon] Unusual dnsreg behaviour
 
Hi all.

I have recently added in the dnsreg script from the xymon.com <http://xymon.com>; site https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg All appears to be working well apart from
quoted from Phil Crooker
I am getting some strange behaviour for a couple of domains. 

For some domains I am simply not receiving any data back, which is causing the test to show red with the following line of information:

Domain somedomain.co.uk <http://somedomain.co.uk>; expires on 
quoted from Phil Crooker

Normally I would see the expiration date here, but it simply doesn't show. I have tested the domain using whois on the server, and this all returns fine. So I'm not too sure why
this is happening. Any ideas?

*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808

www.corporationpop.co.uk <http://www.corporationpop.co.uk/>;
quoted from Phil Crooker
This email message (and any attached file) is intended only for the use of the individual or entity to whom the sender intended it to be addressed and may contain information
that constitutes a trade secret, or that is privileged, confidential or subject to copyright. No part of it may be circulated, quoted, or reproduced without prior written
approval from Corporation Pop Ltd. The contents of this document are strictly confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop Ltd. All rights reserved.
Corporation Pop is a limited company registered in England + Wales. Company number 4869229. VAT number 533 8932 26.

list Richard Jones · Wed, 31 Aug 2016 09:04:21 +0100 ·
Gave that a shot, and I get back the following:

whois problemdomain1.co.uk | egrep -i
"Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

        Expiry date:  06-Nov-2016

whois okaydomain.co.uk | egrep -i
"Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

        Expiry date:  05-Jun-2018

whois problemdomain2.uk | egrep -i
"Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

        Expiry date:  08-Mar-2017


Which I think is the expected result.
quoted from Bruce Ferrell

*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 31 August 2016 at 01:13, Phil Crooker <user-e8e31cd73303@xymon.invalid> wrote:
It looks like the EXPIRESTRING compilation is empty for those domains:


EXPIRESTRING="`whois $DOMAIN | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:" | head -n 1 | cut -d: -f2- | sed -e's/^[     ]*//'`"


Try running it manually with the various parts, eg:

whois somedomain.co.uk | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

and see that at each pipe point (the '|') it actually returns something.
Compare outputs between those domains that work and those that don't.
Probably the whois output is different for the domains that don't work and
you'll probably need to adjust the above filter.


cheers, Phil


*From:* Xymon <xymon-bounces at xymon.com> on behalf of Richard Jones <
user-6806fa693bf5@xymon.invalid>
*Sent:* Tuesday, 30 August 2016 11:56 PM
*To:* xymon at xymon.com
*Subject:* [Xymon] Unusual dnsreg behaviour

Hi all.

I have recently added in the dnsreg script from the xymon.com site
https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg All appears to be
working well apart from I am getting some strange behaviour for a couple of
domains.

For some domains I am simply not receiving any data back, which is causing
the test to show red with the following line of information:

Domain somedomain.co.uk expires on

Normally I would see the expiration date here, but it simply doesn't show.
I have tested the domain using whois on the server, and this all returns
fine. So I'm not too sure why this is happening. Any ideas?

*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.
--

Please consider the environment before printing this e-mail

This message from ORIX Australia may contain confidential and/or
privileged information. If you are not the intended recipient, any use,
disclosure or copying of this message (or of any attachments to it) is not
authorised. If you have received this message in error, please notify the
sender immediately and delete the message and any attachments from your
system. Please inform the sender if you do not wish to receive further
communications by email.

The ORIX Australia Privacy Policy outlines what kinds of personal
information we collect and hold, how we collect and handle it and your
rights in regards to your personal information. Our Privacy Policy is
available on our website <http://www.orix.com.au>;.

We do not accept liability for any loss or damage caused by any computer
viruses or defects that may be transmitted with this message. We recommend
you carry out your own checks for viruses or defects.
list Richard Jones · Wed, 31 Aug 2016 13:34:00 +0100 ·
Just done a little digging and found the following in Xymon... it seems
that it has worked for a day or so and then decided not to.
Weird...

Mon Aug 29 22:10:14 2016 blue 1 days 15:21:40
Mon Aug 29 10:58:17 2016 red 11:11:57
Sat Aug 27 10:58:13 2016 green 2 days 0:00:04
Wed Aug 24 17:19:56 2016 blue 2 days 17:38:17
Wed Aug 24 17:19:14 2016 red 0:00:42
Tue Aug 23 17:14:15 2016 green 1 days 0:04:59
Tue Aug 23 17:09:49 2016 blue 0:04:26
Tue Aug 23 17:09:12 2016 red 0:00:37
Tue Aug 23 17:04:11 2016 green 0:05:01
Tue Aug 23 16:43:42 2016 blue 0:20:29
Tue Aug 23 16:32:20 2016 red 0:11:22
Tue Aug 23 16:24:17 2016 green 0:08:03
quoted from Richard Jones


*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 31 August 2016 at 09:04, Richard Jones <user-6806fa693bf5@xymon.invalid> wrote:
Gave that a shot, and I get back the following:

whois problemdomain1.co.uk | egrep -i "Expires.*:|Expiration.*:|
Renewal.*:|expir.*date:"

        Expiry date:  06-Nov-2016

whois okaydomain.co.uk | egrep -i "Expires.*:|Expiration.*:|
Renewal.*:|expir.*date:"

        Expiry date:  05-Jun-2018

whois problemdomain2.uk | egrep -i "Expires.*:|Expiration.*:|
Renewal.*:|expir.*date:"
quoted from Richard Jones

        Expiry date:  08-Mar-2017


Which I think is the expected result.

*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use of
the individual or entity to whom the sender intended it to be addressed and
may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.

On 31 August 2016 at 01:13, Phil Crooker <user-e8e31cd73303@xymon.invalid> wrote:
It looks like the EXPIRESTRING compilation is empty for those domains:


EXPIRESTRING="`whois $DOMAIN | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:" | head -n 1 | cut -d: -f2- | sed -e's/^[     ]*//'`"


Try running it manually with the various parts, eg:

whois somedomain.co.uk | egrep -i "Expires.*:|Expiration.*:|Renewal.*:|expir.*date:"

and see that at each pipe point (the '|') it actually returns something.
Compare outputs between those domains that work and those that don't.
Probably the whois output is different for the domains that don't work and
you'll probably need to adjust the above filter.


cheers, Phil


*From:* Xymon <xymon-bounces at xymon.com> on behalf of Richard Jones <
user-6806fa693bf5@xymon.invalid>
*Sent:* Tuesday, 30 August 2016 11:56 PM
*To:* xymon at xymon.com
*Subject:* [Xymon] Unusual dnsreg behaviour

Hi all.

I have recently added in the dnsreg script from the xymon.com site
https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg All appears to be
working well apart from I am getting some strange behaviour for a couple of
domains.

For some domains I am simply not receiving any data back, which is
causing the test to show red with the following line of information:

Domain somedomain.co.uk expires on

Normally I would see the expiration date here, but it simply doesn't
show. I have tested the domain using whois on the server, and this all
returns fine. So I'm not too sure why this is happening. Any ideas?

*Rich Jones* | Web Developer
Corporation Pop
21-23 Shudehill
Manchester M4 2AF
0161 838 0808
www.corporationpop.co.uk
This email message (and any attached file) is intended only for the use
of the individual or entity to whom the sender intended it to be addressed
and may contain information that constitutes a trade secret, or that is
privileged, confidential or subject to copyright. No part of it may be
circulated, quoted, or reproduced without prior written approval from
Corporation Pop Ltd. The contents of this document are strictly
confidential and owned by Corporation Pop Ltd. Copyright © Corporation Pop
Ltd. All rights reserved. Corporation Pop is a limited company registered
in England + Wales. Company number 4869229. VAT number 533 8932 26.
--

Please consider the environment before printing this e-mail

This message from ORIX Australia may contain confidential and/or
privileged information. If you are not the intended recipient, any use,
disclosure or copying of this message (or of any attachments to it) is not
authorised. If you have received this message in error, please notify the
sender immediately and delete the message and any attachments from your
system. Please inform the sender if you do not wish to receive further
communications by email.

The ORIX Australia Privacy Policy outlines what kinds of personal
information we collect and hold, how we collect and handle it and your
rights in regards to your personal information. Our Privacy Policy is
available on our website <http://www.orix.com.au>;.

We do not accept liability for any loss or damage caused by any computer
viruses or defects that may be transmitted with this message. We recommend
you carry out your own checks for viruses or defects.
list Henrik Størner · Thu, 01 Sep 2016 14:03:52 +0200 ·
 
Den 30-08-2016 16:26, Richard Jones skrev: 
Hi all. 
I have
recently added in the dnsreg script from the xymon.com [1] site
https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg [2] All appears to be
quoted from Richard Jones
working well apart from I am getting some strange behaviour for a couple
of domains. 

For some domains I am simply not receiving any data
back, which is causing the test to show red with the following line of
information:

Domain somedomain.co.uk [3] expires on
I have this
happening on xymon.com also from time to time. I believe it is the whois
lookup that times out, those servers are notoriously unreliable.


Regards, Henrik 
 
Links:
[1] http://xymon.com
[2]
https://www.xymon.com/xymon-cgi/viewconf.sh?dnsreg
[3]
http://somedomain.co.uk