| blob | 5ddadf4de2f13896c24cda8aa204af37c1a3686b |
1 This file documents the major additions and syntax changes between releases.
3 2.3.5 18th Oct 2023
4 FIXES
5 * Include maxfd.h in lib Makefile
7 2.3.4 18th Oct 2023
8 ENHANCEMENTS
9 * check_curl: added --cookie-jar and doing proper cleanup of libcurl
10 * check_curl: Include all IPs from getaddrinfo() in curl DNS cache
11 * check_dhcp: Add dhcp rogue detection
12 * check_disk: add ignore-missing option to return OK for missing fs
13 * check_disk_smb: allow checking 0-sized resource (ex. IPC$)
14 * check_disk: The options to include or exclude specific file systems now allow the usage of regex(7)
15 * check_icmp: Add support to Jitter, MOS and Score
16 * check_mysql: Detect running mysqldump and handle it more gracefully
17 * check_procs: Implement --exclude-process to exclude specific processes
18 * check_smtp: add new longoption --tls
19 * check_smtp: Add option to prefix PROXY header
20 * check_smtp: Add support for SMTP over TLS
21 * check_smtp: Add support for SNI
22 * check_snmp: Implement option to ignore mib file parsing errors
23 * check_users: prefer systemd-logind over utmp
25 FIXES
26 * check_disk: Display SI units correctly
27 * check_ircd: use pack_sockaddr_in rather than hand-rolled
28 * check_log/check_oracle/check_sensors: fixed the outputs of the help functionality
29 * check_mysql: Add mysql_close to avoid spamming the server logs
30 * check_smtp: add missing -r option in usage
31 * check_snmp: disable multiplier when unused
32 * check_wave: Use compile time determined path to snmpget
34 GENERAL
35 * Sync with the Gnulib code 668c0b8ffa
36 * Set autoconf prerequisite version to 2.64
37 * Remove sha1 and use sha256 in some parts of the plugin structure
38 * A lot of compiler warnings were fixed
39 * Some code was refactored a little bit
41 2.3.3 2nd Feb 2023
42 ENHANCEMENTS
43 using PRId64 and PRIu64 instead of %ld directly
44 check_http: Make faster with larger files
45 check_snmp: add 'multiplier' to modify current value
46 check_http: Implement chunked encoding decoding
47 check_http/check_curl: add chunked encoding test
48 check_log: Added --exclude to exclude patterns
49 check_log: Add tests
50 check_disk: Clarify usage possibilities
52 FIXES
53 fixed two PRId64 to PRIu64 in perfdata_uint64
54 check_pgsql: Removing is_pg_dbname altogether,using postgres API.
55 check_http: Remove superfluous CRLF in HTTP-Requests
56 check_curl: detect ipv6
57 check_icmp: fix parsing help/version long options
58 check_http: fix test plan
59 check_disk: Find accessible mount path if multiple are available
60 check_apt: Fix unknown escape sequence error output
61 check_curl: fix checking large bodys
62 check_snmp: Improve tests for check_snmp & multiply option
63 check_snmp: always apply format when applying multiplier
64 check_http: Use real booleans instead of ints
65 check_http: Document process_arguments a little bit better
66 check_http: Remove dead code
67 check_http: Fix several bug in the implementation of unchunking
68 check_http: Reformat a part to increase readability
69 check_apt: Put upgrade options in the root sections
70 check_apt: Fix comment
71 check_apt: Use real booleans
72 check_mailq: Fixing nullmailer regex
73 check_snmp: Fix regex matches
74 check_log: Fixed a bug when using --all
75 check_log: Cleaned up duplicated code in the args
76 check_http: Fix memory reallocation error in chunk decoding logic
77 check_http: Add space for ending NULL byte in array for chunked encoding
79 2.3.2 20th Oct 2022
80 GENERAL
81 Use netcat-openbsd for debian explicitly (by @RincewindsHat #1704)
82 Replace egrep with grep -E (by @RincewindsHat #1791)
83 Use silent automake by default (by @RincewindsHat #1747)
85 SINGLE PLUGINS
86 check_by_ssh: added option to exit with an warning, if there is output on STDERR (by @nafets #1301)
87 check_by_ssh: Add "-U" flag (#1123). (by @archiecobbs #1774)
88 check_by_ssh: Let ssh decide if a host is valid, enables usage of ssh .config file (by @RincewindsHat #1691)
89 check_curl: Add an option to check_curl to verify the peer certificate & host using the system CA's (by @bazzisoft #1669)
90 check_curl: fixed -ffollow for HTTP/2.0 (Fixes #1685): added major_version parsing to PicoHTTPParser (by @andreasbaumann #1742)
91 check_curl: fixes check_curl: "CRITICAL - Cannot retrieve certificate subject." (by @andreasbaumann #1689)
92 check_curl: fix if http header contains leading spaces (by @sni #1666)
93 check_curl: Update check_curl.c to display a specific human-readable error message where possible (by @bazzisoft #1668)
94 check_curl: verify certificates option should not force SSL to be used (by @bazzisoft #1688)
95 check_disk: Description for -M was the wrong way around (by @RincewindsHat #1746)
96 check_disk: Fixing the stuff that is broken on btrfs (by @waja #1388)
97 check_disk: Fix perfdata for big values for check disk (by @RincewindsHat #1714)
98 check_disk_smb: Add configfile feature (by @Napsty #1402)
99 check_disk_smb: Add timeout (by @cdruee #1770)
100 check_dns: Add --expect-nxdomain (by @Jonny007-MKD #1623)
101 check_dns: split multiple IP addresses passed in one -a argument (by @DerDakon #1649)
102 check_file_age: Make size parameter a little bit more intelligible (by @RincewindsHat #1730)
103 check_fping: Implements 'host-alive' mode (Closes. #1027) (by @waja #1740)
104 check_game: Update Url to qstat (by @RincewindsHat #1725)
105 check_http: changed 'STATE_CRITICAL' to 'STATE_WARNING' for infinite loop (by @xFuture603 #1690)
106 check_http: Increase regexp limit (by @hydrapolic #1566)
107 check_http: Support http redirect (by @waja #1449)
108 check_icmp: buffer offerflow (by @RincewindsHat #1733)
109 check_icmp: delay set_source_ip() until address_family is detected (by @ghciv6 #1735)
110 check_icmp: Fix "Invalid Argument" from sendmsg() under FreeBSD 13.1 and "setsockopt failed" for TTL setting (by @eriksejr #1771)
111 check_icmp: Fix pkt perfdata in check_host mode (by @sjoegren #1721)
112 check_ldap: Allows check_ldap to read password from environment variable (by @mullumaus #1724)
113 check_load: add LOAD prefix to load plugin (by @haraldj #1694)
114 check_load: Display total and scaled load values if check_load scales the values (by number of CPUs by @RincewindsHat #1778)
115 check_log: Missing oldlog now aborts check_log (by @RincewindsHat #1732)
116 check_mailq: Add mailq -C option for config dir or config file (by @leeclemens #1490)
117 check_mailq: Check mailq domain specific warnings (by @RincewindsHat #1731)
118 check_mailq: Fix regexp for nullmailer "mailq" output (by @darksoul42 #1493)
119 check_mysql: fix segfaults with mysql-connector-c #1562 (by @ghciv6 #1644)
120 check_pgsql: add --queryname parameter to check_pgsql (by @datamuc #1741)
121 check_ping: Do not show RTA if no connection was possible (by @RincewindsHat #1697)
122 check_ping: understang ping6 output from iputils package (by @glensc #1412)
123 check_proc: Fix check proc ps detection (by @sni #1712)
124 check_procs: exchange needle and haystack in strstr() for proper st… (by @wolfgangkarall #1654)
125 check_smtp: add -L flag to support LMTP (LHLO instead of HELO/EHLO). (by @ghen2 #1715)
126 check_snmp: Added option for null zero length string exit codes (by @FracKenA #1496)
127 check_snmp: fix performance thresholds when using multiple oids (by @sni #1722)
128 check_snmp fix segfaults (by @adrb #1589)
129 check_snmp: put the "c" (to mark a counter) after the perfdata value (by @lausser #1465)
130 check_swap: fix parsing swap values (by @sni #1780)
131 check_swap: Fix perfdata for check swap (by @RincewindsHat #1707)
132 check_swap: Fix unit for total in perfdata (by @RincewindsHat #1779)
133 check_swap: Handle cached swap (by @mdavranche #1642)
134 check_swap: Small fix to threshold validation and style (indentation) fixes (by @RincewindsHat #1723)
135 check_ups: Fix possible overflow in check_ups (by @phibos #1727)
136 check_uptime: Add option to report uptime in days instead of seconds (by @amotl #1750)
137 check_uptime: Fix/improve output message "Uptime is ..." (by @amotl #1751)
139 MULTIPLE PLUGINS
140 check_http, check_curl: added --max-redirs=N option (feature #1684) (by @andreasbaumann #1744)
141 check_http, check_curl: Enhancement --continue-after-certificate (backport from nagios-plugins) (by @andreasbaumann #1762)
142 check_http, check_curl: Remove check_http and check_curl test which are somehow always failing (by @RincewindsHat #1777)
143 check_log, check_oracle, check_sensors: Several fixes shellcheck complaining about (by @waja #1459)
144 sslutils: use chain from client certificates (by @tobiaswiese #1664)
146 NON FUNCTIONAL CHANGES
147 Trivial source code whitespace formatting fixes to standard. (by @ziesemer #1424)
148 docs: fix simple typo, conspicuosly -> conspicuously (by @timgates42 #1652)
149 Migrate to GitHub actions (by @jacobbaungard #1686)
150 Point to Icinga Exchange instead of dead Monitoring Exchange (by @RincewindsHat #1737)
151 github actions: fix check_users test case (by @sni #1713)
152 Add CodeQL checks (by @phibos #1682)
153 Fix some QL problems (by @RincewindsHat #1729)
154 Update CodeQL and update runner before installing (by @RincewindsHat #1775)
155 check_disk: Check disk compiler warnings (by @RincewindsHat #1758)
156 check_disk: Trivial printf fix and a little bit of code style (by @RincewindsHat #1695)
157 check_http: Docs: make -C obvious (by @stblassitude #1554)
158 check_ifoperstatus: Re-attach a comment to where it actually belongs (by @peternewman #1699)
159 check_ircd: Restrict the nickname length of the test user for check_ircd (by @RincewindsHat #1710)
160 check_load: Check load compiler warnings (by @RincewindsHat #1759)
161 check_log: Modernize check log (by @RincewindsHat #1692)
162 check_mailq: remove duplicate W=i/C=i args in check_mailq.pl (by @ichdasich #1755)
163 check_ntp: Check ntp remove unused variables (by @RincewindsHat #1781)
164 check_pgsql: Using snprintf which honors the buffers size and guarantees null termination. (Closes: #1601) (by @waja #1663)
165 check_procs: Fix double percentage sign in usage (by @RincewindsHat #1743)
166 check_sensors.sh: Make shellcheck happier (by @RincewindsHat #1679)
167 check_snmp: Fixed option description authpassword -> authpasswd + whitespaces (by @RincewindsHat #1676)
168 check_swap: Check swap compiler warnings (by @RincewindsHat #1756)
170 2.3.1 10 April 2021
171 ENHANCEMENTS
172 check_curl: Add an option to verify the peer certificate & host using the system CA's
174 FIXES
175 check_icmp: fix simple typo, conspicuosly -> conspicuously
176 check_curl: fixed help, usage and errors for TLS 1.3
177 check_curl: fixed a potential buffer overflow in url buffer
178 check_dns: split multiple IP addresses passed in one -a argument
179 check_curl: added string_statuscode function for printing HTTP/1.1 and HTTP/2 correctly
180 check_curl: fix crash if http header contains leading spaces
181 check_curl: display a specific human-readable error message where possible
182 check_pgsql: Using snprintf which honors the buffers size and guarantees null termination.
183 check_snmp: put the "c" (to mark a counter) after the perfdata value
184 check_http: Increase regexp limit
185 check_http: make -C obvious
186 check_curl: Increase regexp limit (to 1024 as in check_http)
187 check_curl: make -C obvious (from check_http)
188 check_curl: backported --show-body/-B to print body (from check_http)
190 2.3 10th December 2020
191 ENHANCEMENTS
192 check_dns: allow 'expected address' (-a) to be specified in CIDR notation
193 (IPv4 only).
194 check_dns: allow for IPv6 RDNS
195 check_dns: Accept CIDR
196 check_dns: allow unsorted addresses
197 check_dns: allow forcing complete match of all addresses
198 check_dns: option to expect NXDOMAIN
199 check_apt: add --only-critical switch
200 check_apt: add -l/--list option to print packages
201 check_file_age: add range checking
202 check_file_age: enable to test for maximum file size
203 check_apt: adding packages-warning option
204 check_load: Adding top consuming processes option
205 check_http: Adding Proxy-Authorization and extra headers
206 check_snmp: make calculation of timeout value in help output more clear
207 check_uptime: new plugin for checking uptime to see how long the system is running
208 check_curl: check_http replacement based on libcurl
209 check_http: Allow user to specify HTTP method after proxy CONNECT
210 check_http: Add new flag --show-body/-B to print body
211 check_cluster: Added data argument validation
212 check_icmp: Add IPv6 support
213 check_icmp: Automatically detect IP protocol
214 check_icmp: emit error if multiple protocol version
215 check_disk: add support to display inodes usage in perfdata
216 check_hpjd: Added -D option to disable warning on 'out of paper'
217 check_http: support the --show-body/-B flag when --expect is used
218 check_mysql: allow mariadbclient to be used
219 check_tcp: add --sni
220 check_dns: detect unreachable dns service in nslookup output
222 FIXES
223 Fix regression where check_dhcp was rereading response in a tight loop
224 check_dns: fix error detection on sles nslookup
225 check_disk_smb: fix timeout issue
226 check_swap: repaired "-n" behaviour
227 check_icmp: Correctly set address_family on lookup
228 check_icmp: Do not overwrite -4,-6 on lookup
229 check_smtp: initializes n before it is used
230 check_dns: fix typo in parameter description
231 check_by_ssh: fix child process leak on timeouts
232 check_mysql: Allow sockets to be specified to -H
233 check_procs: improve command examples for 'at least' processes
234 check_swap: repaired "-n" behaviour
235 check_disk: include -P switch in help
236 check_mailq: restore accidentally removed options
238 2.2 29th November 2016
239 ENHANCEMENTS
240 The check_http -S/--ssl option now accepts the arguments "1.1" and "1.2"
241 to force TLSv1.1 and TLSv1.2 connections, respectively
242 The check_http -S/--ssl option now allows for specifying the desired
243 protocol with a "+" suffix to also accept newer versions
244 Let check_http check HTTPS web sites via proxies
245 check_http: add timeout to performance data as max value
246 check_http: report certificate expiry date in UTC
247 check_snmp: add IPv6 support
248 check_snmp's performance data now also includes warning/critical
249 thresholds
250 New check_snmp -N option to specify SNMPv3 context name
251 Let check_smtp's -D option imply -S
252 Let check_smtp's -e option match against the full SMTP response
253 check_dig: expected response is now case-insensitive
254 New check_mailq -s option which tells the plugin to use sudo(8)
255 New check_nt -l parameters: seconds|minutes|hours|days
256 New -W/-C option for check_ldap to check number of entries
257 check_users: add support for range thresholds
258 check_fping now auto-detects IPv6 addresses
259 check_radius now supports the radcli library
260 Support OpenSSL 1.1
262 FIXES
263 check_http: fix host header port handling
264 Let check_real terminate lines with CRLF when talking to the server, as
265 mandated by RFC 2326
266 Fix check_procs on HP-UX
267 check_smtp's -e/--expect option can now be combined with -S/--starttls
268 Fix incorrect performance data thresholds emitted by check_ups
269 Don't let check_procs miss some processes on busy Solaris systems
271 WARNINGS
272 The format of the performance data emitted by check_mrtgtraf has been
273 changed to comply with the development guidelines
274 check_ssh now returns CRITICAL for protocol/version errors
275 If a plugin is invoked with -h/--help or -V/--version, the exit status
276 is now UNKNOWN
277 The superseded check_ntp.pl was removed, please use check_ntp_peer or
278 check_ntp_time instead
280 2.1.2 16th October 2015
281 FIXES
282 Fix incorrect performance data thresholds emitted by check_ups
283 Fix check_dhcp's option parsing to not crash with certain arguments
284 Fix check_snmp using correct timeout
286 2.1.1 2nd December 2014
287 FIXES
288 Fix check_ntp's jitter checking
289 Fix check_ntp's handling of invalid server responses
290 Fix check_apt's handling of invalid regular expressions
291 Fix check_real's server response processing
292 Fix backslash escaping in check_tcp's --help output
294 2.1 15th October 2014
295 ENHANCEMENTS
296 New check_hpjd -p option for port specification
297 New ./configure --with-qmail-qstat-command option to specify the path to
298 qmail-qstat(8)
299 New check_ifstatus -n option to ignore interfaces by name
300 check_ntp_peer has now specific state output for each metric
301 New check_mysql -n option to ignore authentication failures
302 Added IP and port or socket name to error messages
303 New check_ntp_time -o option to add expected offset
304 check_disk shows now troubled partitions in verbose mode
305 check_dig has now support for drill and dig
306 check_dig has now support for -6 option
307 Add performance data to check_file_age
309 FIXES
310 Fix check_jabber to work with Openfire servers
311 Fix check_oracle bad string matching when testing TNS server
312 Fixed check_ifstatus performance data output
313 Fixed expire time output for sslutils
314 check_dns now verifies if the answer is returning from the queried
315 server
316 Fix check_by_ssh to accept --hostname as argument
318 WARNINGS
319 This release doesn't ship with an RPM spec file, please contribute to
320 PR #1283 if you are interested in it
322 2.0 11th July 2014
323 ENHANCEMENTS
324 check_mailq now supports auto detection of qmail, postfix, exim and nullmailer with
325 fallback to sendmail
326 check_ide_smart now defaults to plugin output, original output appended with -v
327 Extra-Opts are now enabled by default, see:
328 https://www.monitoring-plugins.org/doc/extra-opts.html
329 check_swap now supports a configurable state when there is no swap
330 check_radius now supports the FreeRADIUS Client library
331 New check_mysql_query -f option to specify a client options file
332 New check_mysql_query -g option to specify a client options group
333 Add performance data to check_mysql_query
334 New check_file_age -i/--ignore-missing option to return OK on nonexistent files
335 Make check_ping, check_users, and check_disk work on Windows
336 New check_ssh -P option to specify the expected SSH protocol version
337 check_dns now emits the warning and critical thresholds with the performance data
339 FIXES
340 Don't let e.g. check_http's -C option reset SSL version if e.g. -S 1 -C 5 is specified
341 Don't have check_http's -N option expect an argument
342 check_ide_smart could disable offline auto tests but could not re-enable them.
343 For this reason all SMART command modes have been disabled.
344 check_dig: fix wrong IPv6 arguments order
345 check_dig: make sure not to give up too early when a timeout is specified with -t
346 check_log: don't stumble over log lines that include a "%" character
347 check_nt: add UPTIME to perfdata
348 Handle SNMPv3 noAuthNoPriv properly with check_snmp
349 Fix compilation with GnuTLS
351 WARNINGS
352 New default installation prefix: /usr/local instead of /usr/local/nagios
353 check_snmp now evaluates negative values properly, which means it might return CRITICAL
354 in cases where it used to return OK. If this is undesired, the warning/critical
355 threshold(s) must be fixed by specifying e.g. ~:100 instead of 100
356 check_procs now ignores its parent process to avoid unexpected results when invoked via
357 certain shells
358 utils.sh no longer defines ECH
359 check_ide_smart -q/--quiet and -n/--nagios (Nagios-compatible output) are now deprecated
360 but accepted for backward-compatibility
361 check_ide_smart -0/--auto-off, -1/--auto-on and -i/--immediate: options have
362 been disabled because they were broken
363 State retention: the NAGIOS_PLUGIN_STATE_DIRECTORY environment variable has been
364 renamed MP_STATE_PATH. The old variable will continue to work in v2.0.x
365 Add the UID of the invoking user to the state retention file path. This helps solving
366 permission issues when different users run the same plugin
367 check_swap used to allow returning OK on a system without swap when only percent thresholds
368 were used. This is no longer the case and one must now use -n/--no-swap=<state>
369 The Perl and Shell plugins now use the PATH specified via ./configure's --trusted-path
370 option, or "/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin" by default
372 1.5 2nd October 2013
373 ENHANCEMENTS
374 New check_dbi plugin for checking an (SQL) database using DBI
375 Let OpenSSL load its configuration file (see the OPENSSL_config(3) man page)
376 Add performance data to check_apt
377 Add performance data to check_procs
378 Added -4/-6 options to check_dig
379 New check_oracle --connect option to perform real login
380 New check_nagios -t option to override the default timeout
381 New check_disk -f/--freespace-ignore-reserved option to ignore space reserved for root
382 New check_disk -N/--include-type option to limit the filesystem types to check
383 Allow for building the plugins in parallel
384 Add --without-{dbi,ldap,radius} options to ./configure
385 Made Verbose output of check_sensors compliant
386 New switch -E/--extended-perfdata for check_http to print additional performance data
387 New check_http -d option to specify a string to expect within the response headers
388 New check_http -J/-K options for client certificate authentication support
389 Add support for executing queries to check_pgsql
390 Let check_pgsql accept a UNIX socket directory as hostname
391 New check_pgsql -o option to specify additional connection parameters
392 New check_fping -S option to specify the source IP address
393 New check_fping -I option to specify the interface to bind to
394 Let check_fping support IPv6
395 New check_procs -k option to ignore kernel threads (on Linux)
396 Let check_procs use /proc/<PID>/exe (if available) instead of getpid(2), unless -T is specified
397 Let check_mysql support SSL
398 Let check_mysql add performance metrics for all checks
399 New check_mysql -f option to specify a client options file
400 New check_mysql -g option to specify a client options group
401 New check_snmp --offset option to allow for adding/subtracting an offset value to sensor data
402 Let check_snmp support an arbitrary number of OIDs
403 Let check_ide_smart support NetBSD
405 FIXES
406 Change the MAIL FROM command generated by check_smtp to be RFC compliant
407 Fix compilation of check_http without SSL support
408 Fix check_snmp reversed threshold ranges (backward-compatibility)
409 Fix check_snmp memory violation when using more than 8 oids
410 Fix check_apt security regular expression
411 Fix check_http handling extra header (-k) containing semicolons
412 Fix check_apt handling unknown exit codes from apt-get
413 Fix deprecated imports of check_nmap.py
415 WARNINGS
416 check_http behaviour of -k/--header changed since it does not separate multiple headers by semicolons anymore. Use multiple -k switches instead.
417 check_http's --proxy_authorization option is now called --proxy-authorization (it was always documented this way)
418 The contrib directory has been removed from this distribution
420 1.4.16 27th June 2012
421 ENHANCEMENTS
422 check_nt UPTIME accepts warning/critical thresholds
423 check_disk_smb now allows spaces in share names (#990948, #1370031, Debian #601699)
424 check_http now uses standard threshold functions (enables floating point and ranges)
425 check_http now checks for and prints the certificate cn (hostname) in SSL certificate checks
426 check_http now supports an optional -S/--ssl value to choose the SSL protocol version (#3066166)
427 Add perfdata to check_ssh (#3244097)
428 New option to check_smtp to ignore failures when sending QUIT (#3358348)
429 New check_by_ssh -F option which allows for specifying an alternative ssh_config(5) file (#2895334)
430 check_sensors now detects faulty sensors unless --ignore-fault is specified
431 utils.sh now provides a check_range function
432 Improved the performance of check_users
433 Add perfdata to check_disk_smb (Debian #654259)
434 Updated Nagios::Plugin perl module
435 Add warning threshold to certificate expiration checks of check_tcp/http/smtp
436 Add --perf-oids option for check_snmp
438 FIXES
439 Fix check_disk free space calculation if blocksizes differ within a disk group (#2973603)
440 check_disk_smb now handles NT_STATUS_ACCESS_DENIED properly (Debian #601696)
441 Make check_snmp work more like v1.4.14 with regard to using special values (Timeticks, STRING) as numeric thresholds
442 Fix check_ldap overriding the port when --ssl was specified after -p
443 Fix check_procs where regex input of '|' would get displayed in output - now replaced with ','
444 Fix segfault in check_host when hostname returns multiple IP addresses
445 Fix check_smtp and check_tcp where duplicate messages were displayed for certificate errors
446 Fix check_ping's parsing of ping6(1) output (#1894850, Debian #514588, Debian #662638)
447 Fix a check_dhcp bug which was triggered by checking Windows 2003 DHCP servers (#3503921)
448 Disable RFC4507 support, to work around SSL negotiation issues with (at least) some Tomcat versions
449 Fix performance data label containing spaces in check_snmp
451 1.4.15 27th July 2010
452 ENHANCEMENTS
453 New check_ntp_peer -m and -n options to check the number of usable time sources ("truechimers")
454 New check_disk_smb -a option which allows for specifying the IP address of the remote server
455 New check_radius -N option which allows for specifying the value of the NAS-IP-Address attribute
456 New check_snmp --rate option to store differences between invocations. Saves state in PREFIX/var/{plugin}
457 check_snmp -l label option now also changes the perfdata label. See WARNINGS
458 check_snmp has an --invert-search option which reverses status of the string and regexp searches
459 check_http now displays the missing search string and the URL in the output when failed (#2999924)
460 Updated Nagios::Plugin perl module
461 Updated gnulib to June 2010
463 FIXES
464 Fix check_ircd binding to wrong interface (#668778)
465 Add proxy-authorization option to check_http (#1323230, #2863925)
466 check_icmp now increment the sequence counter in each packet
467 Fix usage of repeated -o options in check_snmp
468 Try to detect arguments passed via --with-ping[6]-command and set options accordingly (#2908236)
469 Fix memory leak in check_http for large pages (#2957455)
470 Fix compilation with GCC 2.96 (#2977105)
471 Fix regression introduced in #1867716 where partially valid performance strings would not be printed anymore
472 Fix regression in check_http ssl checks on some servers - make SNI an option
473 Fix guest mode support in check_disk_smb
474 Fix check_disk_smb and check_ircd failures when run via ePN
475 check_ldap now allows for specifying an empty LDAP base
476 Fix compilation error of pst3 in Solaris 8
477 Fix check_radius returning OK on unexpected results (#2911752)
478 Fix translations when extra-opts aren't enabled (#2832884)
479 Fix parsing of multi-line strings in check_snmp (broken in 1.4.14) and enhance output in such case (#2832451)
480 Fix detection of pst3 64-bit compile flags with Sun CC
481 Fix cmd_run overwriting the environment, which would break some commands that needed it
482 Allow check_ifstatus to accept version=2c - used to only allow version=2
483 Fix examples in check_disk, where it implied was possible to suffix unit values to warn/crit parameters
485 WARNINGS
486 Updated developer documentation to say that performance labels should not have an equals sign or
487 single quote in the label
488 check_http 1.4.14 introduced SSL SNI support - you now have to enable it explicitly with "--sni"
489 check_snmp -l label option is also used for the performance label. This could change history from previous uses
491 1.4.14 16th September 2009
492 check_http has options to specify the HTTP method (#2155152)
493 check_users thresholds were not working exactly as documented (>= rather than >)
494 Updated tinderbox_build script to point to new tinderbox server
495 check_ifoperstatus -n flag now works as expected (#1569488)
496 check_ifoperstatus now supports ifType based lookup for ifIndex
497 check_ups now sends a LOGOUT string (Debian #387001)
498 Extra-opts (C plugins) now allows both '#' and ';' for comments (like N::P)
499 Extra-opts (C plugins) does not allow trailing comments anymore (like N::P)
500 Fixed dependency issue on libtap when ./configure --enable-libtap used. Warning: will install libtap
501 Fixed segfault in extra-opts under some circumstance when reading multiple sections
502 Fix long options parsing in check_disk, check_dns, check_mrtg, check_mrtgtraf and check_tcp
503 Add missing long options for check_nt (for use with extra-opts)
504 check_icmp now reports min and max round trip time perfdata
505 Fixed check_http bug where additional headers with redirection caused a segfault (2089159)
506 check_disk: make autofs mount paths specified with -p before we determine the mount list
507 Fixed buffer overflow in check_ntp/check_ntp_peer (#1999319, Ubuntu #291265)
508 Re-bundled libtap as a built-in library (--enable-libtap): detects system library as pre-1.4.13 and does not install the built-in library anymore
509 Fixed check_mrtg returning UNKNOWN instead of OK (#2378068)
510 Fixed check_http behaviour: all check are now performed as long as a valid response is returned (#1460312)
511 check_http --onredirect=sticky follows using the same IP address (#2550208)
512 check_http --onredirect=stickyport also follows the same port
513 Fixed coredump from check_nt when invalid drive is specified (#2179754)
514 Fixed crash from check_nt when -H unspecified or given multiple times (#2731755, Debian #521097)
515 Fixed passing of quotes in OID for check_snmp (#1985230)
516 Fixed check_http sending HTTP/1.0 with v1.1 headers (#2638765)
517 Fixed check_http not timing-out on redirects
518 Fixed negate not printing the real timeout in ALRM handler when left to default
519 negate timeout result is now configurable
520 Fixed segfault in check_mysql with old slaves (#2696823)
521 check_nt can return UNKNOWN on timeouts (-u)
522 Fixed typos for check_disk
523 Fixed check_mysql* not using password set in my.cnf (#2531905) - Specify an empty password explicitly if you need to override it.
524 Fixed awk subst.in/subst script path error (#2722832)
525 check_http: Add SSL/TLS hostname extension support (SNI) - (#1939022)
526 Fixed wrong perfdata label for output traffic in check_mrtgtraf (#2654308)
527 Fixed check_by_ssh interpretation of quotes in -C parameter (#1985246, #2268675)
528 check_snmp now supports standard threshold ranges and doubles (floating numbers) in thresholds
529 check_fping now supports passing target timeout and interval to fping (#2347686)
530 Fixed SNMPv3 behaviour of check_ifoperstatus and check_ifstatus. Added -P to define privprotocol (#2343438)
531 check_ifoperstatus and check_ifstatus are now more user-friendly in case of missing arguments
532 pst3 compile fix for Sun Studio Compiler
534 1.4.13 25th Sept 2008
535 Fix Debian bug #460097: check_http --max-age broken
536 Optimised pst3 for systems with large number of processes
537 Updated Nagios::Plugin to 0.27
538 Fix Debian bug #479013: check_dig's -l is mandatory now (#1986306)
539 check_dig now returns CRITICAL instead of WARNING when no answer section is found
540 check_procs now captures stderr in external command and adds to plugin output
541 check_snmp now only prints perfdata for non numeric values (#1867716)
542 check_icmp now supports packet size modification
543 check_http -e now accepts a comma-delimited list of expected status codes
544 libtap now included with this distribution for easier testing. Run ./configure with --enable-libtap
545 check_ntp_peer/check_ntp_time used to show port in --help but ignored the argument - now implemented
546 Fix possible segfault in check_ntp_peer with deliberately invalid packets
548 1.4.12 27th May 2008
549 Added ./check_nt -v INSTANCES to count number of instances
550 New check_icmp -s option to specify the source IP address
551 check_dns now sorts addresses for testing results for more than one returned IP
552 Fix segfault in check_ntp_time and (deprecated) check_ntp (#1862300)
553 check_disk should now work with large file systems (2TB+) on all archs that supports it
554 Fixed check_disk disk usage calculation when using --group=NAME (related to #1348746)
555 Fix help text of check_ntp* (#1880095)
556 Fix bugs and flaws in best offset server selection of check_ntp_time and (deprecated) check_ntp
557 check_ntp_peer now checks for the LI_ALARM flag
558 Sync to latest Gnulib (includes new floorf function)
559 check_pgsql now successfully builds with postgres lib v8.3 (#1878972)
560 check_procs now accepts --ereg-argument-array for a regular expression match to the argument array
561 Reverted back to using pst3 for Solaris systems. Fixed issues re: -m64 needed to compile on 64bit systems
562 If applicable, Gettext linked dynamically instead of statically
563 check_dig can now pass arguments to dig by using -A/--dig-arguments (#1874041/#1889453)
564 check_ntp and check_ntp_peer now show proper jitter/stratum thresholds longopts in --help
565 check_dns now allow to repeat -a to match multiple possibly returned address (common with load balancers)
566 check_mysql and check_radius now try clearing password in processlist just like check_mysql_query
567 check_mysql and check_mysql_query now support sockets explicitly (-s, --socket)
568 negate now has the ability to replace the status text as well (-s, --substitute)
569 Added performance data to check_ping
570 Added support for --extra-opts in all C plugins (disabled by default, see configure --help)
571 Fixed passive option in check_by_ssh
572 On non-skipped stderr, check_by_ssh now returns UNKNOWN or worse (result from command) instead of always UNKNOWN.
573 Fix linking against OpenSSL where libdl is required
575 1.4.11 13th December 2007
576 Fixed check_http regression in 1.4.10 where following redirects to
577 relative URLs on virtual hosts failed if both "-H" and "-I" were used
578 Merged two new checks that deprecates check_ntp: check_ntp_peer and check_ntp_time.
579 You should read the --help output so see which one is suitable for you. check_ntp_peer
580 implement stratum thresholds support (feature request #1703823).
581 check_ntp now returns UNKNOWN instead of WARNING if jitter is unavailable (jitter=-1.000000)
582 as long as the thresholds range include -1. If no offset threshold is specified
583 and the offset is unavailable, will return UNKNOWN as well.
584 NOTE: If jitter thresholds are specified as integers it will return CRITICAL if jitter
585 is "-1" as the default range starts at 0. See Examples in --help output.
586 Fixed broken usage2 in check_snmp and check_cluster
587 check_cluster now accepts all valid characters in its thresholds ("-", "@", "~")
588 Fixed check_disk reporting OK if disk usage grows over 100% (#1348746).
589 The problem happens to be in Gnulib but a workaround have been implemented in check_disk.c
590 Fixed check_load argument handling when not passing triplets (#1831890)
591 Fixed buffer overflow in check_snmp (CVE-2007-5623)
592 Tinderbox builds now runs tests in a verbose mode
593 Updated Nagios::Plugin to 0.22
594 VPATH problem fixed for compiling plugins-root
596 1.4.10 28th September 2007
597 Fix check_http buffer overflow vulnerability when following HTTP redirects (CVE-2007-5198)
598 check_http now explicitly asks HTTP/1.1 servers to close the connection
599 after completion of the response
600 Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)
601 is now deprecated. See --help for further information.
602 Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p)
603 A meaningful error message (eg "Stale NFS Handle") is printed if stat fails.
604 New check_disk option -L: Only check local filesystems, but call stat() on remote ones, too.
605 Thus accessibility of remote filesystems can be checked without any threshold comparison.
606 Check_disk's --help now prints some examples for the new features introduced in 1.4.8
607 New check_disk -i/-I option to ignore paths/partitions based on regular expressions
608 New check_disk -A option to select all filesystems explicitly
609 WARNING: check_disk's -E option must now be passed before -p or -r/-R arguments
610 Passing -E after -p or -r results in UNKNOWN state, now
611 This is needed due to the new ignore feature
612 Fix check_disk bug when mixing case sensitive and case insensitive regex arguments
613 New check_dhcp -u/--unicast option for emulating a DHCP relay in order
614 to check DHCP servers on remote networks
615 New check_dhcp -m/--mac option which allows for specifying the MAC
616 address to use in the DHCP request
617 The check_dhcp -r and -s options now accept host names, too
618 Fix possible check_icmp bus errors on some (non-x86/AMD64) platforms
619 Fix check_smtp's handling of multiple-packet server responses
620 WARNING: Fix for negate which may break existing commands:
621 - stop evaluating command line options through shell twice
622 - enforce a full path for the command to run
623 The "negate" utility can now remap custom states
624 Check_radius now supports radiusclient-ng
625 The (undocumented) positional parameter parsing which check_radius used
626 instead of getopt(3) if 8 arguments were given is no longer available
627 Check_by_ssh now supports multiline output
628 IPv6 support can now be disabled using ./configure --without-ipv6
629 Fix check_ntp now honor ntp flags
631 1.4.9 4th June 2007
632 Inclusion of contrib/check_cluster2 as check_cluster with some improvements
633 New/improved -E/--skip-stderr and -S/--skip-stdout options for check_by_ssh
634 check_snmp now supports Counter64
635 Fix compilation of check_ldap, check_radius and check_pgsql
636 check_load can optionally divide by number of cpus
637 Fix check_time returning wrong OK when time is before the epoch on some arch
638 Make check_http output more consistent
639 Fix possible check_http segfaults when following HTTP redirects
640 check_snmp don't warn anymore if something is printed on stderr
641 Fix check_tcp segfault when multiple expect strings are given
642 New option for check_tcp: -A/--all to test if all given expect strings match
644 1.4.8 11th April 2007
645 Respects --without-world-permissions for setuid plugins
646 check_disk extra options for regex matching of filesystems and grouping of filesystems
647 for collective thresholds
648 Better configure test for mysqlclient availability
649 Various check_ntp fixes
651 1.4.7 29th March 2007
652 check_procs uses /usr/ucb/ps if available - fixes pst3 problems on Solaris
653 Fixed MKINSTALLDIRS problem in po/
654 ./configure now detects if possible to compile check_mysql
655 Fixed broken HELO in check_smtp
656 check_icmp now allows to set a minimum number of hosts required for success (-m)
657 check_icmp fix for *BSD when running for long time
658 check_ping times out 1 second quicker if host is unreachable
659 Root plugins installed with world executable
660 check_sybase from contrib now maintained in MonitoringExchange
661 --with-nagios-user/group reinstated ./configure option
662 New --without-world-permissions ./configure option
664 1.4.6 5th February 2007
665 Reduced number of DNS lookups in check_ping and netutils.c for IPv6 configurations
666 Fixed compile problems with *BSD re: alloca.h
667 Fixed Solaris problems with check_swap (tested on Solaris 9)
668 Fixed check_swap for HP/UX where swapinfo command was incorrect
669 Fixed check_disk inode threshold checks, regressed at r1.4.4.
670 Fixed crit/warn for check_disk perf data
671 Fixed buffer overflow in check_procs
672 Fixed error handling for UNIX sockets in netutils.c
673 New -q and -o options for check_by_ssh which are handed over to ssh(1) as is
674 Synced with latest GNUlib
675 Fixed check_jabber always returns warning
677 1.4.5
678 Fixed bug in perl's is_hostname routine
680 1.4.4
681 New C based check_ntp. The perl version is now deprecated.
682 New check_apt plugin
683 Notice: plugins in contrib/ will start to be removed from this distribution.
684 Please check at http://www.monitoringexchange.org for contributed plugins
685 Major bug fixes to check_disk where values were incorrectly calculated and alerted on.
686 check_udp2 removed. check_udp is now linked to check_tcp.c
687 check_mailq now errors if the sub-program run returns non-zero return code. This would appear
688 as if mailqs were okay when the nagios user could not query the mail-queues
689 Compile problems with check_snmp fixed
691 1.4.3
692 Setuid plugins (check_dhcp, check_icmp) separated into plugins-root/. Run make install as root to install
693 SSL plugins work with gnutls as well as OpenSSL
694 check_mysql_query added to run arbitrary SQL commands, with threshold checking
695 libtool now required for development systems
696 Notice: check_udp (compiled from check_udp.c) will be deprecated in the next release.
697 check_udp2 should be used instead and will be renamed to check_udp
699 1.4.2
700 Fix for Redhat ES4 for check_dns and check_dig
702 1.4
703 IPv6 support in check_ping, check_by_ssh, check_http, check_ldap, check_smtp, check_tcp
704 Internationalisation support
705 Performance data added to most plugins
706 check_disk now using GNU coreutils code
707 New plugins - check_dhcp, check_icmp
708 contrib/check_citrix has been replaced by contrib/check_ica* (requires packet_utils.pm in libexec)
709 check_http --min changed to --pagesize, added max so min:max in check
710 check_vsz and check_rss deprecated - functionality moved into check_procs
711 check_swap % thresholds changed to measure amount free, instead of amount used
712 check_disk syntax changes for -p, -m/-M, defaults to MB instead of kB
713 check_procs -C expects no path for the command name