xymon-developer — Discussions about Xymon development

[Xymon-developer] Bug in showgraph.c causes non-ping graphs to also show on "conn" test page

[Jeremy L. <je...@la...>]

I wish I had the C programming chops to be able to provide a patch. Alas I
can only report the bug.

If I have a custom TCP test with the name "proxyconn", then this creates an
RRD file called tcp.proxyconn.rrd. This is defined in protocols.cfg:

[proxyconn]
        port 8080

The code in showgraph that displays the ping times graph, for the conn test
page, creates a URL containing "service=tcp:conn" which shows tcp.conn.rrd
on the graph.

However, it seems that the string following the colon, "conn", is matched
against RRD filenames using a substring match, which means any RRD files
that start with "tcp." where the text that follows this contains the word
"conn" will be added to the conn test page graph. So I end up with both
ping times and proxy times on the graph shown on the conn status page.

Being an unanchored substring match, this matches "tcp.conn<anything>.rrd"
and "tcp.<anything>conn.rrd".

This would also be the case for other test pages that come from xymonnet
probes, such as the "dns" status page showing graphs of any RRD file
containing the word "dns", not just tcp.dns.rrd. And ssh.

With a default installation I don't think this would ever happen, because
none of the xymonnet tests have names that match as substrings of any other
xymonnet tests, so this bug is not going to manifest without creating a
custom TCP test in protocols.cfg.

Cheers
Jeremy

Re: [Xymon-developer] New install question

[David H. <dhi...@lt...>]

I am not a developer, but if I can help, let me know. I can run 4.4 if you want.

Get Outlook for Android<https://aka.ms/AAb9ysg>
________________________________
From: Tom Schmidt <to...@4s...>
Sent: Tuesday, January 7, 2025 4:12:04 PM
To: David Hickenbottom <dhi...@lt...>
Cc: xym...@li... <xym...@li...>
Subject: Re: [Xymon-developer] New install question

Yes, Xymon is still being worked on, albeat slowly.  A 4.4.0 alpha was released some time ago with some enhancements, and I have contributed some patches for it, and I have been running it for several months with those patches.  I don't know when the next alpha or beta release will be out though before an official 4.4.0 release is made.

Tom

On Tue, Jan 7, 2025 at 1:39 PM David Hickenbottom <dhi...@lt...<mailto:dhi...@lt...>> wrote:

Tom,



Thank you!  I deleted the xymon directories and reran configure and make and make install many times.  The make clean attribute fixed my issue.  Thank you so much!



Is Xymon still being worked on?  I really like this product.



Best regards,

David Hickenbottom



From: Tom Schmidt <to...@4s...<mailto:to...@4s...>>
Sent: Monday, January 6, 2025 4:49 PM
To: David Hickenbottom <dhi...@lt...<mailto:dhi...@lt...>>
Cc: xym...@li...<mailto:xym...@li...>
Subject: Re: [Xymon-developer] New install question



It sounds like you made a typo when running the configure command.  It asks for the installation path like this:



     Where do you want the Xymon installation [/home/xymon] ?



You probably typed "/usr/local/xmon".  I suggest running "make clean", rerunning configure, and recompiling.



Tom



On Mon, Jan 6, 2025 at 2:37 PM David Hickenbottom <dhi...@lt...<mailto:dhi...@lt...>> wrote:

Hi,



I have used bb, hobbit and xymon over the last 20 years or so off and on.  I love the system.



I have a new installation and there is a problem, it think was referred to somewhere but I am unable to figure it out.



I have installed 4.3.30 and I am having an issue that I have been unable to work around.  All the cgi links are pointing to the wrong directory: /usr/local/xmon   I cannot for the life of me make them point where they belong: /usr/local/xymon.



Do you have any suggestions?



Be well, thank you .







David Hickenbottom

Manager of IT

Leading The Way with Dr. Michael Youssef

Direct: 404.809.4042 | Main: 404.841.0100 | LTW.org<http://www.ltw.org/>



“Passionately Proclaiming Uncompromising Truth”



_______________________________________________
Xymon-developer mailing list
Xym...@li...<mailto:Xym...@li...>
https://lists.sourceforge.net/lists/listinfo/xymon-developer

Re: [Xymon-developer] New install question

[Tom S. <to...@4s...>]

Yes, Xymon is still being worked on, albeat slowly.  A 4.4.0 alpha was
released some time ago with some enhancements, and I have contributed some
patches for it, and I have been running it for several months with those
patches.  I don't know when the next alpha or beta release will be out
though before an official 4.4.0 release is made.

Tom

On Tue, Jan 7, 2025 at 1:39 PM David Hickenbottom <dhi...@lt...>
wrote:

> Tom,
>
>
>
> Thank you!  I deleted the xymon directories and reran configure and make
> and make install many times.  The make clean attribute fixed my issue.
> Thank you so much!
>
>
>
> Is Xymon still being worked on?  I really like this product.
>
>
>
> Best regards,
>
> David Hickenbottom
>
>
>
> *From:* Tom Schmidt <to...@4s...>
> *Sent:* Monday, January 6, 2025 4:49 PM
> *To:* David Hickenbottom <dhi...@lt...>
> *Cc:* xym...@li...
> *Subject:* Re: [Xymon-developer] New install question
>
>
>
> It sounds like you made a typo when running the configure command.  It
> asks for the installation path like this:
>
>
>
>      Where do you want the Xymon installation [/home/xymon] ?
>
>
>
> You probably typed "/usr/local/xmon".  I suggest running "make clean",
> rerunning configure, and recompiling.
>
>
>
> Tom
>
>
>
> On Mon, Jan 6, 2025 at 2:37 PM David Hickenbottom <dhi...@lt...>
> wrote:
>
> Hi,
>
>
>
> I have used bb, hobbit and xymon over the last 20 years or so off and on.
> I love the system.
>
>
>
> I have a new installation and there is a problem, it think was referred to
> somewhere but I am unable to figure it out.
>
>
>
> I have installed 4.3.30 and I am having an issue that I have been unable
> to work around.  All the cgi links are pointing to the wrong directory:
> /usr/local/xmon   I cannot for the life of me make them point where they
> belong: /usr/local/xymon.
>
>
>
> Do you have any suggestions?
>
>
>
> Be well, thank you .
>
>
>
>
>
>
>
> *David Hickenbottom*
>
> Manager of IT
>
> *Leading The Way with Dr. Michael Youssef*
>
> *Direct: *404.809.4042 | *Main: *404.841.0100 | LTW.org
> <http://www.ltw.org/>
>
>
>
> *“Passionately Proclaiming Uncompromising Truth”*
>
>
>
> _______________________________________________
> Xymon-developer mailing list
> Xym...@li...
> https://lists.sourceforge.net/lists/listinfo/xymon-developer
>
>

Re: [Xymon-developer] New install question

[David H. <dhi...@lt...>]

Tom,

Thank you!  I deleted the xymon directories and reran configure and make and make install many times.  The make clean attribute fixed my issue.  Thank you so much!

Is Xymon still being worked on?  I really like this product.

Best regards,
David Hickenbottom

From: Tom Schmidt <to...@4s...>
Sent: Monday, January 6, 2025 4:49 PM
To: David Hickenbottom <dhi...@lt...>
Cc: xym...@li...
Subject: Re: [Xymon-developer] New install question

It sounds like you made a typo when running the configure command.  It asks for the installation path like this:

     Where do you want the Xymon installation [/home/xymon] ?

You probably typed "/usr/local/xmon".  I suggest running "make clean", rerunning configure, and recompiling.

Tom

On Mon, Jan 6, 2025 at 2:37 PM David Hickenbottom <dhi...@lt...<mailto:dhi...@lt...>> wrote:
Hi,

I have used bb, hobbit and xymon over the last 20 years or so off and on.  I love the system.

I have a new installation and there is a problem, it think was referred to somewhere but I am unable to figure it out.

I have installed 4.3.30 and I am having an issue that I have been unable to work around.  All the cgi links are pointing to the wrong directory: /usr/local/xmon   I cannot for the life of me make them point where they belong: /usr/local/xymon.

Do you have any suggestions?

Be well, thank you .



David Hickenbottom
Manager of IT
Leading The Way with Dr. Michael Youssef
Direct: 404.809.4042 | Main: 404.841.0100 | LTW.org<http://www.ltw.org/>

“Passionately Proclaiming Uncompromising Truth”

_______________________________________________
Xymon-developer mailing list
Xym...@li...<mailto:Xym...@li...>
https://lists.sourceforge.net/lists/listinfo/xymon-developer

Re: [Xymon-developer] New install question

[Tom S. <to...@4s...>]

It sounds like you made a typo when running the configure command.  It asks
for the installation path like this:

     Where do you want the Xymon installation [/home/xymon] ?

You probably typed "/usr/local/xmon".  I suggest running "make clean",
rerunning configure, and recompiling.

Tom

On Mon, Jan 6, 2025 at 2:37 PM David Hickenbottom <dhi...@lt...>
wrote:

> Hi,
>
>
>
> I have used bb, hobbit and xymon over the last 20 years or so off and on.
> I love the system.
>
>
>
> I have a new installation and there is a problem, it think was referred to
> somewhere but I am unable to figure it out.
>
>
>
> I have installed 4.3.30 and I am having an issue that I have been unable
> to work around.  All the cgi links are pointing to the wrong directory:
> /usr/local/xmon   I cannot for the life of me make them point where they
> belong: /usr/local/xymon.
>
>
>
> Do you have any suggestions?
>
>
>
> Be well, thank you .
>
>
>
>
>
>
>
> *David Hickenbottom*
>
> Manager of IT
>
> *Leading The Way with Dr. Michael Youssef*
>
> *Direct:* 404.809.4042 | *Main: *404.841.0100 | LTW.org
> <http://www.ltw.org/>
>
>
>
> *“Passionately Proclaiming Uncompromising Truth”*
>
>
> _______________________________________________
> Xymon-developer mailing list
> Xym...@li...
> https://lists.sourceforge.net/lists/listinfo/xymon-developer
>

[Xymon-developer] New install question

[David H. <dhi...@lt...>]

Hi,

I have used bb, hobbit and xymon over the last 20 years or so off and on.  I love the system.

I have a new installation and there is a problem, it think was referred to somewhere but I am unable to figure it out.

I have installed 4.3.30 and I am having an issue that I have been unable to work around.  All the cgi links are pointing to the wrong directory: /usr/local/xmon   I cannot for the life of me make them point where they belong: /usr/local/xymon.

Do you have any suggestions?

Be well, thank you .



David Hickenbottom
Manager of IT
Leading The Way with Dr. Michael Youssef
Direct: 404.809.4042 | Main: 404.841.0100 | LTW.org<http://www.ltw.org/>

"Passionately Proclaiming Uncompromising Truth"

[Xymon-developer] Patch: Buffer overrund in md5hash

[Roland R. <ro...@sp...>]

Hi!

Since the archive of the xymon mailing list on lists.xymon.com
currently does not add new entries, I'll forward my mail here to be
sure that the patch is not lost.

There is an issue in xymon 4.3.30 when build in Ubuntu 24.04, which is
triggered by -D_FORTIFY_SOURCE=3, which is enabled on this Ubuntu
version by default.

This results in a segfault in xymond_client, xymond_rrd and
xymond_alert always on the same function:

> #9  md5hash (
>     input=input@entry=0x5594c83023e0 "#\n# Master configuration file for Xymon\n#\n# This file defines several things:\n#\n# 1) By adding hosts to this file, you define hosts that are monitored by Xymon\n# 2) By adding \"page\", \"subpage\", \"group"...) at ./lib/digest.c:44
>         ctx = 0x5594c83023a0
>         md_value = "\301tJ\342^\312T\032bGjɨ\f\267I"
>         md_string = "c1", '\000' <repeats 30 times>
>         i = 1
>         p = 0x5594c6dd7c02 <md_string+2> ""

Seems that there's a bug in the calculation of the buffer size.

The attached patch should fix this issue in 4.3.30 as well as in
4.4alpha.

Greetings
Roland

[Xymon-developer] Support Link dead ?

[Ken C. <kco...@to...>]

https://sourceforge.net/projects/xymon/support says:

 best way to get help with its software is by visiting
https://lists.xymon.com/mailman/listinfo/xymon.

Link does not work:

404 Not Found
------------------------------
nginx

-- 


Ken Connell
Senior Network Engineer
Computer & Communication Services
Toronto Metropolitan University (Formerly Ryerson University)
350 Victoria St
RM PODB50
Toronto, Ont
M5B 2K3
416-979-5000 x556709

[Xymon-developer] [External] Re: GETTING> Historical status log not available > How to remove "old " log data to make room for new data ?

[Hershman, R. <ric...@br...>]

...    any ideas would be greatly appreciated !

RE:   Xymon Web Page Message     >    Historical status log not available.    <
              How to  FIX,  check   ?
               Historical log data no longer being written.
               (Old log data is still viewable, just not new data )
                What "old" log data can be removed  to allow space  new data to be written ?
                How do I know what and where  storage area is full ?
                Can the size allotted  be increased ?     ... there is plenty of disk and memory... details below...

Thanks!   ric...@br...<mailto:ric...@br...>  Element Management Systems Engineer   cell = 720-988-7452    landline = 321-802-3619
  _________________________________________________________________________________________________________________
  Running  Xymon version 4.3.30
    When requesting   Reports, Event  log   (and click a diamond)
           Web page displays   Historical status log not available.
     When I click either of these:

[cid:image001.png@01DADC5B.1F4BD8D0]

It displays:   [cid:image002.png@01DADC5B.C4A40870]



  *   OLDER dated messages  still work fine  when I click green Diamond  to view log detail  >
           [cid:image003.png@01DADC5C.9D7392B0]
               Works fine : [cid:image004.png@01DADC5C.9D7392B0]



Corrective measures: ran below command, restarted xymon , no difference.


  *   ./trimhistory --cutoff=`date +%s --date="1 Jan 2024"`  --outdir=/tmp/xymon-oldlogs --progress=1 --env=/home/xymon/server/etc/xymonserver.cfg
  *
HAVE plenty of disk space :
[root@ge4apemspd01 hist]# df -h
Filesystem      Size  Used Avail Use% Mounted on
devtmpfs        7.8G     0  7.8G   0% /dev
tmpfs           7.8G     0  7.8G   0% /dev/shm
tmpfs           7.8G  833M  7.0G  11% /run
tmpfs           7.8G     0  7.8G   0% /sys/fs/cgroup
/dev/sda2       100G   13G   88G  13% /
/dev/sda1       200M  8.3M  192M   5% /boot/efi
tmpfs           1.6G     0  1.6G   0% /run/user/1026


LOAD is fine, low...
[root@ge4apemspd01 hist]#
top - 21:40:26 up 399 days,  6:15,  3 users,  load average: 0.07, 0.05, 0.05
Tasks: 182 total,   1 running, 179 sleeping,   0 stopped,   2 zombie
%Cpu(s):  1.2 us,  0.4 sy,  0.0 ni, 98.0 id,  0.4 wa,  0.0 hi,  0.0 si,  0.0 st
KiB Mem : 16262756 total,  2875352 free,  1687904 used, 11699500 buff/cache
KiB Swap:        0 total,        0 free,        0 used. 13358228 avail Mem


Disclaimer: This e-mail may contain confidential or privileged information of Brightspeed. Unauthorized use of this communication is strictly prohibited. If you received this in error, please notify the sender by reply e-mail and destroy all copies and attachments immediately.

[Xymon-developer] Xymon 4.4 alpha patches

[Brian S. <bs...@bu...>]

Hi list,

I've finally had a chance to have a play with the 4.4-alpha download on 
a FreeBSD machine. So far it is working quite well despite a few rough 
edges here and there. The new tcp code is quite impressive.

A few quick observations:

  * To parse an IPv6 address on FreeBSD, the size of the output must
    match the size of the address exactly rather than have 'spare' room.
    That is, sizeof(struct sockaddr_in6) rather than that plus
    sizeof(struct sockaddr). Without that only IPv4 is functional so the
    default fails to listen on anything. Patch attached.
  * The sysctl net.inet6.ip6.v6only defaults to 1 on FreeBSD systems so
    by default the initial settings for xymon doesn't listen on IPv4.
    The workaround I'm using has been to add
    --listen=0.0.0.0:1984,[::]:1984 to the xymond command line. Longer
    term it might be worth looking at setting the IPV6_V6ONLY socket
    option (at IPV6 level) to 0 to force the mapped behaviour for the
    IPv6 wildcard address irrespective of the sysctl value. I could put
    something together if you like.
  * The default c compiler on FreeBSD is clang rather than gcc. Clang
    seems to be a lot choosier about what it accepts. There are a few
    places that it warns about some dubious code that should be fixed
    and at some point I might have a go at generating some fixes to keep
    it happy. In the meantime however, it will also complain about
    command line options that are provided but not used. An example are
    linker directives on a compile only step or vice-versa. This isn't a
    big deal until you also set -Werror in the configure stage, causing
    failures to be misinterpretted as the lack of some O/S features.
    I've included a patch for FreeBSD specifics to include the
    -Wno-unused-command-line-argument option to prevent these messages
    and failures.
  * The POSIX binary tree support used in the code includes the GNU
    extension, tdestroy. This isn't present on FreeBSD so a fall back to
    the default code is appropriate. I have included a patch to include
    -Werror on the test-bintree compile step to force an error rather
    than just generated an undeclared function warning.
  * The test-ldap.c code uses functions that are deprecated in openldap
    2.6 and so require #define LDAP_DEPRECATED 1. There is also a type
    mismatch in the call to ldap_url_parse that needs fixing. I haven't
    tested the code, only verified that the patched code compiles
    correctly. My patch is included.
  * I have also thrown in some patches to FreeBSD specific code to an
    additional filesystem type (msdosfs) to avoid for inode checking,
    and some code to avoid the use of the freebsd-meminfo program when
    installing binaries on the target system isn't feasible. These have
    been working well on 4.3.30 and earlier.

One of my biggest reasons for testing has been to test and rebase my own 
collection of patches for fixes/documentation for snmp, rss feeds and 
other oddities.

I'll keep testing those for a little while before sending them in for 
possible inclusion in 4.4. One of my patches collides with an existing 
change and although it works, may need a little more clean up work.

Thanks as always for the great work,

Brian

[Xymon-developer] Patch for filter and filelist options in graphs

[Stef C. <ste...@do...>]

Hi,

The included patch adds 2 additional options when call showgraph.
These options can be used to show only certain data in the graphs. This 
can be handy when using the graphs in reports or you have lots of lines 
in the graph and want to display only some of them.

With the option filter, you can specify a filter expression that can be 
used the filter the graphs.
This will only show the graphs for the disk matching the regular 
expression 'test[12]:

showgraph.sh?host=host&service=disk&action=menu&filter=test[12]

The option filelist can also be used to filter the graphs, but this time 
you have to specify the RRD's you want to show separated by a |.
This will only show the graphs for the disk mount as /test1 and /test2:

showgraph.sh?host=host&service=disk&action=menu&filelist=,test1|,test2

There is also an other small patch attached so xymoncgimsg uses the 
environment variabele XYMSRV. We use this to send clients for different 
customers to the same apache reverse proxy. The apache reverse proxy has 
a directory config for each customer with a different XYMSRV. The client 
connects to the xymoncgimsg, delivers it's payload and based on the 
configured XYMSRV variable the data is send to the correct backend xymon 
server.


I hope these can be included in the upcoming 4.4 release.


Stef

Re: [Xymon-developer] SF.net SVN: xymon:[8123] branches/4.x-master

[J.C. C. <cl...@te...>]

On Mon, October 30, 2023 13:53, Tom Schmidt wrote:
> J.C.,
>    I have some more patches for 4.4alpha1 (attached).  I am not sure how
> to
> put them up on sourceforge.  The first patch is for more GCC warnings seen
> on Rocky Linux 9.2 using gcc 11.3.1. The second patch is for an
> enhancement
> to the xymonbody.css file for html tables, including mouse-over (tooltip)
> comments in cells.  I have some tables made by external scripts that
> utilize this.
>
> Tom Schmidt

Tom,

Thanks. Attaching them like this on the list is actually preferable, I
think. The mailing list (either one) is, FBoFW, the source of truth for
patch attachments, and that probably won't change much unless/until a move
to GH or another PR-based system.

-jc

Re: [Xymon-developer] SF.net SVN: xymon:[8123] branches/4.x-master

[Tom S. <to...@4s...>]

I forgot to mention that the first patch also includes fixes for @XYMONHOME@
not being replaced on several of the .cfg files (Files build/Makefile.rules
and xymond/Makefile) when running "make install".

Tom

On Mon, Oct 30, 2023 at 2:53 PM Tom Schmidt <to...@4s...> wrote:

> J.C.,
>    I have some more patches for 4.4alpha1 (attached).  I am not sure how
> to put them up on sourceforge.  The first patch is for more GCC warnings
> seen on Rocky Linux 9.2 using gcc 11.3.1. The second patch is for an
> enhancement to the xymonbody.css file for html tables, including mouse-over
> (tooltip) comments in cells.  I have some tables made by external scripts
> that utilize this.
>
> Tom Schmidt
>

Re: [Xymon-developer] SF.net SVN: xymon:[8123] branches/4.x-master

[Tom S. <to...@4s...>]

J.C.,
   I have some more patches for 4.4alpha1 (attached).  I am not sure how to
put them up on sourceforge.  The first patch is for more GCC warnings seen
on Rocky Linux 9.2 using gcc 11.3.1. The second patch is for an enhancement
to the xymonbody.css file for html tables, including mouse-over (tooltip)
comments in cells.  I have some tables made by external scripts that
utilize this.

Tom Schmidt

[Xymon-developer] SF.net SVN: xymon:[8123] branches/4.x-master

[<jcc...@us...>]

Revision: 8123
          http://sourceforge.net/p/xymon/code/8123
Author:   jccleaver
Date:     2023-10-06 22:07:59 +0000 (Fri, 06 Oct 2023)
Log Message:
-----------
Fix a large number of GCC build warnings and issues (Tom Schmidt, with Ralph Mitchell)

Modified Paths:
--------------
    branches/4.x-master/Changes
    branches/4.x-master/client/logfetch.c
    branches/4.x-master/common/xymonlaunch.c
    branches/4.x-master/lib/acknowledgementslog.c
    branches/4.x-master/lib/links.c
    branches/4.x-master/lib/loadalerts.c
    branches/4.x-master/lib/loadhosts_file.c
    branches/4.x-master/lib/locator.c
    branches/4.x-master/lib/misc.c
    branches/4.x-master/lib/sig.c
    branches/4.x-master/lib/stackio.c
    branches/4.x-master/lib/stdopt.c
    branches/4.x-master/lib/tcplib.c
    branches/4.x-master/lib/xymonrrd.c
    branches/4.x-master/web/confreport.c
    branches/4.x-master/web/svcstatus.c
    branches/4.x-master/xymond/client/darwin.c
    branches/4.x-master/xymond/client/zvse.c
    branches/4.x-master/xymond/combostatus.c
    branches/4.x-master/xymond/do_rrd.c
    branches/4.x-master/xymond/rrd/do_netstat.c
    branches/4.x-master/xymond/trimhistory.c
    branches/4.x-master/xymond/xymond.c
    branches/4.x-master/xymond/xymond_client.c
    branches/4.x-master/xymond/xymond_hostdata.c
    branches/4.x-master/xymongen/pagegen.c
    branches/4.x-master/xymongen/process.c
    branches/4.x-master/xymongen/util.c
    branches/4.x-master/xymongen/wmlgen.c
    branches/4.x-master/xymonnet/beastat.c
    branches/4.x-master/xymonnet/xymonnet.c
    branches/4.x-master/xymonproxy/xymonproxy.c

Modified: branches/4.x-master/Changes
===================================================================
--- branches/4.x-master/Changes	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/Changes	2023-10-06 22:07:59 UTC (rev 8123)
@@ -1,3 +1,10 @@
+Changes from 4.4-alpha1 -> 4.4-alpha2
+===========================================
+
+* A large number of build warnings and possible buffer issues have been resolved
+  (Thanks, Tom Schmidt, with Ralph Mitchell)
+
+
 Changes from 4.3.x -> 4.4-alpha1
 ===========================================
 
@@ -247,7 +254,6 @@
   (Thanks, John Horne)
 
 
-
 Changes from 4.3.29 -> 4.3.30 (05 Sep 2019)
 ===========================================
 

Modified: branches/4.x-master/client/logfetch.c
===================================================================
--- branches/4.x-master/client/logfetch.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/client/logfetch.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -326,8 +326,16 @@
 
 			dbgprintf(" - Last position was %u, found curpos location at %u in current buffer.\n", logdef->lastpos[1], bytesin);
 			t = strdup(fillpos);	/* need shuffle about to insert before this line */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+			#pragma GCC diagnostic push
+			#pragma GCC diagnostic ignored "-Wstringop-truncation"
+			#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 			strncpy(fillpos, curpostxt, strlen(curpostxt));		/* add in the CURRENT + \n */
 			strncpy(fillpos+strlen(curpostxt), t, strlen(t));	/* add in whatever this line originally was */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+			#pragma GCC diagnostic pop
+#endif  // __GNUC__
 			*(fillpos+strlen(curpostxt)+strlen(t)) = '\0';		/* and terminate it */
 			xfree(t);						/* free temp */
 			curpos = fillpos;					/* leave curpos to the beginning of the CURRENT flag */
@@ -496,11 +504,19 @@
 		       for (i = 0, pos = replacement; i < triggerptrs_count; i++) {
 		               dbgprintf("Copying buffer content for trigger %i.\n", (i + 1));
 
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic push
+				#pragma GCC diagnostic ignored "-Wstringop-truncation"
+				#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 		               strncpy(pos, skiptxt, strlen(skiptxt));
 		               pos += strlen(skiptxt);
 
 		               size = strlen(triggerptrs[i][0]) - strlen(triggerptrs[i][1]);
 		               strncpy(pos, triggerptrs[i][0], size);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic pop
+#endif  // __GNUC__
 		               pos += size;
 		       }
 
@@ -533,7 +549,15 @@
 
 				if (finalstartptr > lasttriggerptr) {
 					/* Add the final skip for completeness */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+					#pragma GCC diagnostic push
+					#pragma GCC diagnostic ignored "-Wstringop-truncation"
+					#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 					strncpy(pos, skiptxt, strlen(skiptxt));
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+					#pragma GCC diagnostic pop
+#endif  // __GNUC__
 					pos += strlen(skiptxt);
 				}
 

Modified: branches/4.x-master/common/xymonlaunch.c
===================================================================
--- branches/4.x-master/common/xymonlaunch.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/common/xymonlaunch.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -200,7 +200,14 @@
 					char *newcmd = xcalloc(1, l1+l2+1);
 
 					strncpy(newcmd,curtask->cmd,l1);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+					#pragma GCC diagnostic push
+					#pragma GCC diagnostic ignored "-Wstringop-truncation"
+#endif  // __GNUC__
 					strncpy(newcmd+l1,p,l2);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+					#pragma GCC diagnostic pop
+#endif  // __GNUC__
 					newcmd[l1]=' '; /* this also overwrites the + */
 
 					/* free and assign new */

Modified: branches/4.x-master/lib/acknowledgementslog.c
===================================================================
--- branches/4.x-master/lib/acknowledgementslog.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/acknowledgementslog.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -222,12 +222,14 @@
 		    p = strrchr(host, '.');
 		    if (p) {
                         *p = '\0';
-			strncpy(svc,p+1,  sizeof(svc));
+			strncpy(svc, p+1, sizeof(svc));
+			svc[sizeof(svc)-1] = '\0'; /* Make sure it is null terminated */
                     }
 		    /* Xymon uses \n in the ack message, for the "acked by" data. Cut it off. */
 		    p = strstr(message, "\\nAcked by:");
 		    if (p) {
-			strncpy(recipient,p+12, sizeof(recipient));
+			strncpy(recipient, p+12, sizeof(recipient));
+			recipient[sizeof(recipient)-1] = '\0'; /* Make sure it is null terminated */
                         *(p-1) = '\0';
 		    }
 		    else {

Modified: branches/4.x-master/lib/links.c
===================================================================
--- branches/4.x-master/lib/links.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/links.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -143,6 +143,7 @@
 	if (xgetenv("XYMONHELPDIR")) strcpy(dirname, xgetenv("XYMONHELPDIR"));
 	else {
 		strncpy(dirname, xgetenv("XYMONNOTESDIR"), sizeof(dirname));
+		dirname[sizeof(dirname)-1] = '\0'; /* Make sure it is null terminated */
 		p = strrchr(dirname, '/'); *p = '\0'; strncat(dirname, "/help", (sizeof(dirname) - strlen(dirname)));
 	}
 	load_links(dirname, helpskin, 0);

Modified: branches/4.x-master/lib/loadalerts.c
===================================================================
--- branches/4.x-master/lib/loadalerts.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/loadalerts.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -199,7 +199,12 @@
 	rule_t *currule = NULL;
 	recip_t *currcp = NULL, *rcptail = NULL;
 
-	if (configfn) strncpy(fn, configfn, sizeof(fn)); else snprintf(fn, sizeof(fn), "%s/etc/alerts.cfg", xgetenv("XYMONHOME"));
+	if (configfn) {
+		strncpy(fn, configfn, sizeof(fn));
+		fn[sizeof(fn)-1] = '\0'; /* Make sure it is null terminated */
+	}
+	else
+		snprintf(fn, sizeof(fn), "%s/etc/alerts.cfg", xgetenv("XYMONHOME"));
 
 	/* First check if there were no modifications at all */
 	if (configfiles) {
@@ -853,7 +858,15 @@
 
 		if ((alert->groups && (*(alert->groups)))) {
 			SBUF_MALLOC(grouplist, strlen(alert->groups));
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+			#pragma GCC diagnostic push
+			#pragma GCC diagnostic ignored "-Wstringop-truncation"
+			#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 			strncpy(grouplist, alert->groups, grouplist_buflen);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+			#pragma GCC diagnostic pop
+#endif  // __GNUC__
 		}
 
 		if (crit->groupspec) {
@@ -1202,11 +1215,18 @@
 		if (recip->method == M_IGNORE) {
 			recip->recipient = "-- ignored --";
 		}
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic push
+		#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 		if (recip->noalerts) { if (*codes) strncat(codes, ",A", codes_bytesleft); else strncat(codes, "-A", codes_bytesleft); codes_bytesleft -= 2; }
 		if (recovered && !recip->noalerts) { if (*codes) strncat(codes, ",R", codes_bytesleft); else strncat(codes, "R", codes_bytesleft); codes_bytesleft -= 2; }
 		if (notice) { if (*codes) strncat(codes, ",N", codes_bytesleft); else strncat(codes, "N", codes_bytesleft); codes_bytesleft -= 2; }
 		if (recip->stoprule) { if (*codes) strncat(codes, ",S", codes_bytesleft); else strncat(codes, "S", codes_bytesleft); codes_bytesleft -= 2; }
 		if (recip->unmatchedonly) { if (*codes) strncat(codes, ",U", codes_bytesleft); else strncat(codes, "U", codes_bytesleft); codes_bytesleft -= 2; }
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic pop
+#endif  // __GNUC__
 
 		if (strlen(codes) == 0)
 			snprintf(l, sizeof(l), "<td><font %s>%s</font></td>", fontspec, recip->recipient);

Modified: branches/4.x-master/lib/loadhosts_file.c
===================================================================
--- branches/4.x-master/lib/loadhosts_file.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/loadhosts_file.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -114,6 +114,7 @@
 	if (contentbuffer) freestrbuffer(contentbuffer);
 	contentbuffer = convertstrbuffer(fdata, 0);
 	strncpy(contentmd5, fhash, sizeof(contentmd5));
+	contentmd5[sizeof(contentmd5)-1] = '\0'; /* Make sure it is null terminated */
 
 	return 0;
 }

Modified: branches/4.x-master/lib/locator.c
===================================================================
--- branches/4.x-master/lib/locator.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/locator.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -207,6 +207,7 @@
 	int res;
 
 	strncpy(pingbuf, cmd, sizeof(pingbuf));
+	pingbuf[sizeof(pingbuf)-1] = '\0'; /* Make sure it is null terminated */
 	res = call_locator(pingbuf, sizeof(pingbuf));
 
 	return (res == 0) ? pingbuf : NULL;

Modified: branches/4.x-master/lib/misc.c
===================================================================
--- branches/4.x-master/lib/misc.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/misc.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -162,6 +162,10 @@
 	STATIC_SBUF_DEFINE(s);
 	char *p;
 
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 	if (s == NULL) {
 		SBUF_MALLOC(s, strlen(hostname)+1);
 		strncpy(s, hostname, s_buflen);
@@ -174,6 +178,9 @@
 	else {
 		strncpy(s, hostname, s_buflen);
 	}
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 
 	for (p = strchr(s, '.'); (p); p = strchr(s, '.')) *p = ',';
 	return s;

Modified: branches/4.x-master/lib/sig.c
===================================================================
--- branches/4.x-master/lib/sig.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/sig.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -91,8 +91,11 @@
 	 * advance.
 	 */
 	strncpy(signal_xymoncmd, (getenv("XYMON") ? getenv("XYMON") : "xymon"), sizeof(signal_xymoncmd));
+	signal_xymoncmd[sizeof(signal_xymoncmd)-1] = '\0'; /* Make sure it is null terminated */
 	strncpy(signal_xymondserver, (getenv("XYMSRV") ? getenv("XYMSRV") : "0.0.0.0"), sizeof(signal_xymondserver));
+	signal_xymondserver[sizeof(signal_xymondserver)-1] = '\0'; /* Make sure it is null terminated */
 	strncpy(signal_tmpdir, (getenv("XYMONTMP") ? getenv("XYMONTMP") : "/tmp"), sizeof(signal_tmpdir));
+	signal_tmpdir[sizeof(signal_tmpdir)-1] = '\0'; /* Make sure it is null terminated */
 	snprintf(signal_msg, sizeof(signal_msg), "status+1d/group:signal %s.xymond red %s program crashed\n\nFatal signal caught!\n",
 		(getenv("MACHINE") ? getenv("MACHINE") : (getenv("HOSTNAME") ? getenv("HOSTNAME") : "localhost") ), programname);
 

Modified: branches/4.x-master/lib/stackio.c
===================================================================
--- branches/4.x-master/lib/stackio.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/stackio.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -203,10 +203,13 @@
 		stackfd_mode = strdup(mode);
 
 		strncpy(stackfd_filename, filename, sizeof(stackfd_filename));
+		stackfd_filename[sizeof(stackfd_filename)-1] = '\0'; /* Make sure it is null terminated */
 	}
 	else {
-		if (*filename == '/')
+		if (*filename == '/') {
 			strncpy(stackfd_filename, filename, sizeof(stackfd_filename));
+			stackfd_filename[sizeof(stackfd_filename)-1] = '\0'; /* Make sure it is null terminated */
+		}
 		else
 			snprintf(stackfd_filename, sizeof(stackfd_filename), "%s/%s", stackfd_base, filename);
 	}
@@ -331,7 +334,12 @@
 	int fnsz = 0;
 	int i;
 
-	if (*dirname == '/') strncpy(dirfn, dirname, sizeof(dirfn)); else snprintf(dirfn, sizeof(dirfn), "%s/%s", stackfd_base, dirname);
+	if (*dirname == '/') {
+		strncpy(dirfn, dirname, sizeof(dirfn));
+		dirfn[sizeof(dirfn)-1] = '\0'; /* Make sure it is null terminated */
+	}
+	else
+		snprintf(dirfn, sizeof(dirfn), "%s/%s", stackfd_base, dirname);
 
 	if ((dirfd = opendir(dirfn)) == NULL) {
 		if (!is_optional) errprintf("WARNING: Cannot open directory %s\n", dirfn);

Modified: branches/4.x-master/lib/stdopt.c
===================================================================
--- branches/4.x-master/lib/stdopt.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/stdopt.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -14,6 +14,7 @@
 static char rcsid[] = "$Id: stdopt.c 7008 2012-06-02 09:22:02Z storner $";
 
 #include <string.h>
+#include <stdlib.h>
 #include <stdio.h>
 #include <libgen.h>
 #include <limits.h>

Modified: branches/4.x-master/lib/tcplib.c
===================================================================
--- branches/4.x-master/lib/tcplib.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/tcplib.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -49,6 +49,7 @@
 #include <openssl/ssl.h>
 #include <openssl/rand.h>
 #include <openssl/bio.h>
+#include <openssl/opensslv.h>
 
 /* SSL context (holds certificate, SSL protocol version etc) for server-mode operation */
 /* Note: Since this is global, we are limited to one server instance per process. */
@@ -408,7 +409,11 @@
 
 		e = X509_NAME_get_entry(subj, cnpos);
 		if (e) d = X509_NAME_ENTRY_get_data(e);
+#if OPENSSL_VERSION_NUMBER < 0x101010bfL
 		if (d) cn = strdup(ASN1_STRING_data(d));
+#else
+		if (d) cn = strdup(ASN1_STRING_get0_data(d));
+#endif
 	}
 
 	if (peercert) X509_free(peercert);

Modified: branches/4.x-master/lib/xymonrrd.c
===================================================================
--- branches/4.x-master/lib/xymonrrd.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/lib/xymonrrd.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -87,7 +87,14 @@
 	/* Get the tcp services, and count how many there are */
 	services = init_tcp_services();
 	SBUF_MALLOC(tcptests, strlen(services)+1);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 	strncpy(tcptests, services, tcptests_buflen);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 	count = 0; p = strtok(tcptests, " "); while (p) { count++; p = strtok(NULL, " "); }
 	strncpy(tcptests, services, tcptests_buflen);
 
@@ -242,6 +249,7 @@
 	}
 	else {
 		strncpy(rrdservicename, graphdef->xymonrrdname, sizeof(rrdservicename));
+		rrdservicename[sizeof(rrdservicename)-1] = '\0'; /* Make sure it is null terminated */
 	}
 
 	SBUF_MALLOC(svcurl, 

Modified: branches/4.x-master/web/confreport.c
===================================================================
--- branches/4.x-master/web/confreport.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/web/confreport.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -124,6 +124,7 @@
 	while ((de = readdir(d)) != NULL) {
 		if (strncmp(de->d_name, "disk,", 5) == 0) {
 			strncpy(fn, de->d_name + 4, sizeof(fn));
+			fn[sizeof(fn)-1] = '\0'; /* Make sure it is null terminated */
 			p = strstr(fn, ".rrd"); if (!p) continue;
 			*p = '\0';
 			p = fn; while ((p = strchr(p, ',')) != NULL) *p = '/';

Modified: branches/4.x-master/web/svcstatus.c
===================================================================
--- branches/4.x-master/web/svcstatus.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/web/svcstatus.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -156,7 +156,14 @@
 
 		req = getenv("SCRIPT_NAME");
 		SBUF_MALLOC(clienturi, strlen(req) + 10 + strlen(hostquoted));
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic push
+		#pragma GCC diagnostic ignored "-Wstringop-overflow"
+#endif  // __GNUC__
 		strncpy(clienturi, req, clienturi_buflen);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic pop
+#endif  // __GNUC__
 		p = strchr(clienturi, '?'); if (p) *p = '\0'; else p = clienturi + strlen(clienturi);
 		snprintf(p, (clienturi_buflen - (clienturi - p)), "?CLIENT=%s", hostquoted);
 	}

Modified: branches/4.x-master/xymond/client/darwin.c
===================================================================
--- branches/4.x-master/xymond/client/darwin.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/client/darwin.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -81,13 +81,17 @@
 
 		if (pgsize != -1) {
 			p = strstr(meminfostr, "\nPages free:");
-			if (p) p = strchr(p, ':'); if (p) pagesfree = atol(p+1);
+			if (p) p = strchr(p, ':');
+			if (p) pagesfree = atol(p+1);
 			p = strstr(meminfostr, "\nPages active:");
-			if (p) p = strchr(p, ':'); if (p) pagesactive = atol(p+1);
+			if (p) p = strchr(p, ':');
+			if (p) pagesactive = atol(p+1);
 			p = strstr(meminfostr, "\nPages inactive:");
-			if (p) p = strchr(p, ':'); if (p) pagesinactive = atol(p+1);
+			if (p) p = strchr(p, ':');
+			if (p) pagesinactive = atol(p+1);
 			p = strstr(meminfostr, "\nPages wired down:");
-			if (p) p = strchr(p, ':'); if (p) pageswireddown = atol(p+1);
+			if (p) p = strchr(p, ':');
+			if (p) pageswireddown = atol(p+1);
 
 			if ((pagesfree >= 0) && (pagesactive >= 0) && (pagesinactive >= 0) && (pageswireddown >= 0)) {
 				unsigned long memphystotal, memphysused;

Modified: branches/4.x-master/xymond/client/zvse.c
===================================================================
--- branches/4.x-master/xymond/client/zvse.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/client/zvse.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -532,6 +532,7 @@
                 q = strchr(jinfo, '-');              /* Check if jobname passed  */
                 if (q) {
                         strncpy(pid, jinfo, 2);          /*  Copy partition ID  */
+			pid[sizeof(pid)-1] = '\0';       /*  Make sure it is null terminated */
                         q++;                             /*  Increment pointer  */
 			strcpy(jobname,q);		 /*  Copy jobname       */
                         }

Modified: branches/4.x-master/xymond/combostatus.c
===================================================================
--- branches/4.x-master/xymond/combostatus.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/combostatus.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -351,7 +351,14 @@
 	result = compute(expr, &error);
 
 	if (error) {
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic push
+		#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 		sprintf(errtext, "compute(%s) returned error %d\n", expr, error);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic pop
+#endif  // __GNUC__
 		if (*errbuf == NULL) {
 			*errbuf = strdup(errtext);
 		}

Modified: branches/4.x-master/xymond/do_rrd.c
===================================================================
--- branches/4.x-master/xymond/do_rrd.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/do_rrd.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -292,7 +292,14 @@
 	}
 
 	/* Watch out here - "rrdfn" may be very large. */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wformat-truncation"
+#endif  // __GNUC__
 	snprintf(filedir, sizeof(filedir)-1, "%s/%s/%s", rrddir, hostname, rrdfn);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 	filedir[sizeof(filedir)-1] = '\0'; /* Make sure it is null terminated */
 
 	/* 
@@ -603,7 +610,14 @@
 	unsigned long steptime, dscount;
 	rrd_value_t *rrddata;
 
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wformat-truncation"
+#endif  // __GNUC__
 	snprintf(filedir, sizeof(filedir)-1, "%s/%s/%s", rrddir, hostname, rrdfn);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 	filedir[sizeof(filedir)-1] = '\0';
 	if (stat(filedir, &st) == -1) return 0;
 

Modified: branches/4.x-master/xymond/rrd/do_netstat.c
===================================================================
--- branches/4.x-master/xymond/rrd/do_netstat.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/rrd/do_netstat.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -415,7 +415,8 @@
 			while (ln && (ln > msg) && (*ln != '\n')) ln--;
 			if (ln) {
 				int numlen;
-				if (*ln == '\n') ln++; ln += strspn(ln, " \t");
+				if (*ln == '\n') ln++;
+				ln += strspn(ln, " \t");
 				numlen = strspn(ln, "0123456789");
 				*outp = ':'; outp++; memcpy(outp, ln, numlen); outp += numlen; *outp = '\0';
 				gotany = gotval = 1;

Modified: branches/4.x-master/xymond/trimhistory.c
===================================================================
--- branches/4.x-master/xymond/trimhistory.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/trimhistory.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -333,7 +333,14 @@
 
 					ltime = logtime(lent->d_name);
 					if ((ltime > 0) && (ltime < cutoff)) {
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+						#pragma GCC diagnostic push
+						#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 						sprintf(fn2, "%s/%s", fn1, lent->d_name);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+						#pragma GCC diagnostic pop
+#endif  // __GNUC__
 						if (unlink(fn2) == -1) {
 							errprintf("Failed to unlink %s: %s\n", fn2, strerror(errno));
 						}

Modified: branches/4.x-master/xymond/xymond.c
===================================================================
--- branches/4.x-master/xymond/xymond.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/xymond.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -2031,35 +2031,34 @@
 	}
 	else dbgprintf(" - parse of modify statement; source=%s, type=%d, validnum=%d, expires=%d, cause=%s\n", sourcename, type, validity, validtime, cause);
 
-		/* Got all tokens - find the modifier, if this is just an update */
-		n = strlen(sourcename);
-		for (mwalk = log->modifiers; (mwalk && strncmp(mwalk->source, sourcename, n)); mwalk = mwalk->next);
+	/* Got all tokens - find the modifier, if this is just an update */
+	n = strlen(sourcename);
+	for (mwalk = log->modifiers; (mwalk && strncmp(mwalk->source, sourcename, n)); mwalk = mwalk->next);
 
-			if (!mwalk) {
-				/* New modifier record */
-				dbgprintf(" - creating new modify record for '%s'\n", sourcename);
-				isnewcause = 1;
-				mwalk = (modifier_t *)calloc(1, sizeof(modifier_t));
-				mwalk->source = strdup(sourcename);
-				mwalk->next = log->modifiers;
-				log->modifiers = mwalk;
-			}
+	if (!mwalk) {
+		/* New modifier record */
+		dbgprintf(" - creating new modify record for '%s'\n", sourcename);
+		isnewcause = 1;
+		mwalk = (modifier_t *)calloc(1, sizeof(modifier_t));
+		mwalk->source = strdup(sourcename);
+		mwalk->next = log->modifiers;
+		log->modifiers = mwalk;
+	}
 
-			mwalk->color = color;
-			mwalk->validtime = validtime;	/* 0 if unset */
-			mwalk->valid = (validity ? validity : DEFAULT_MODIFY_VALIDITY); /* if duration ONLY, this will be < 0 */
-			mwalk->type = type;
-			if (mwalk->cause) xfree(mwalk->cause);
-			mwalk->cause = (char *)malloc(strlen(cause) + 10); /* 10 for maxlength of colorname + markers */
-			sprintf(mwalk->cause, "&%s %s\n", colnames[mwalk->color], cause);
+	mwalk->color = color;
+	mwalk->validtime = validtime;	/* 0 if unset */
+	mwalk->valid = (validity ? validity : DEFAULT_MODIFY_VALIDITY); /* if duration ONLY, this will be < 0 */
+	mwalk->type = type;
+	if (mwalk->cause) xfree(mwalk->cause);
+	mwalk->cause = (char *)malloc(strlen(cause) + 10); /* 10 for maxlength of colorname + markers */
+	sprintf(mwalk->cause, "&%s %s\n", colnames[mwalk->color], cause);
 
-		
-		/*
-		 * Modify messages always get sent to handle_status for evaluation.
-		 * It's possible a status change will result, or just a new status message.
-		 */
-			handle_status(log->message, log->sender,  
-				log->host->hostname, log->test->name, log->grouplist, log, log->color, NULL, (isnewcause ? 2 : 1) );
+	/*
+	 * Modify messages always get sent to handle_status for evaluation.
+	 * It's possible a status change will result, or just a new status message.
+	 */
+	handle_status(log->message, log->sender,  
+		log->host->hostname, log->test->name, log->grouplist, log, log->color, NULL, (isnewcause ? 2 : 1) );
 
 	dbgprintf("<-handle_modify\n");
 }
@@ -4926,7 +4925,8 @@
 		else if (strncmp(line1, "clientconfig", 12) == 0) process_clientmsg = 0;
 
 		p = strtok(line1, " \t"); /* Skip the client.* keyword */
-		if (p) collectorid = strchr(p, '/'); if (collectorid) collectorid++;
+		if (p) collectorid = strchr(p, '/');
+		if (collectorid) collectorid++;
 		if (p) hostname = strtok(NULL, " \t"); /* Actually, HOSTNAME.CLIENTOS */
 		if (hostname) {
 			clientos = strrchr(hostname, '.'); 

Modified: branches/4.x-master/xymond/xymond_client.c
===================================================================
--- branches/4.x-master/xymond/xymond_client.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/xymond_client.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -1927,7 +1927,8 @@
 		oldhinfo = hinfo;
 
 		printf("Test (cpu, mem, disk, proc, log, port): "); fflush(stdout); 
-		if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+		if (!fgets(s, sizeof(s), stdin)) return;
+		clean_instr(s);
 		if (strcmp(s, "cpu") == 0) {
 			float loadyellow, loadred;
 			int recentlimit, ancientlimit, uptimecolor;
@@ -1955,7 +1956,8 @@
 			char *groups;
 
 			printf("Filesystem: "); fflush(stdout);
-			if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+			if (!fgets(s, sizeof(s), stdin)) return;
+			clean_instr(s);
 			get_disk_thresholds(hinfo, clientclass, s, &warnlevel, &paniclevel, 
 						   &abswarn, &abspanic, &ignored, &groups);
 			if (ignored) 
@@ -1980,7 +1982,8 @@
 			printf("To read 'ps' data from a file, enter '@FILENAME' at the prompt\n");
 			do {
 				printf("ps command string: "); fflush(stdout);
-				if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+				if (!fgets(s, sizeof(s), stdin)) return;
+				clean_instr(s);
 				if (*s == '@') {
 					fd = fopen(s+1, "r");
 					while (fd && fgets(s, sizeof(s), fd)) {
@@ -2006,7 +2009,8 @@
 			int logcolor;
 
 			printf("log filename: "); fflush(stdout);
-			if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+			if (!fgets(s, sizeof(s), stdin)) return;
+			clean_instr(s);
 			sectname = (char *)malloc(strlen(s) + 20);
 			sprintf(sectname, "msgs:%s", s);
 
@@ -2017,7 +2021,8 @@
 			printf("To read log data from a file, enter '@FILENAME' at the prompt\n");
 			do {
 				printf("log line: "); fflush(stdout);
-				if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+				if (!fgets(s, sizeof(s), stdin)) return;
+				clean_instr(s);
 				if (*s == '@') {
 					fd = fopen(s+1, "r");
 					while (fd && fgets(s, sizeof(s), fd)) {
@@ -2054,13 +2059,15 @@
 
 			printf("Need to know netstat columns for 'Local address', 'Remote address' and 'State'\n");
 			printf("Enter columns [%d %d %d]: ", localcol, remotecol, statecol); fflush(stdout);
-			if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+			if (!fgets(s, sizeof(s), stdin)) return;
+			clean_instr(s);
 			if (*s) sscanf(s, "%d %d %d", &localcol, &remotecol, &statecol);
 
 			printf("To read 'netstat' data from a file, enter '@FILENAME' at the prompt\n");
 			do {
 				printf("netstat line: "); fflush(stdout);
-				if (!fgets(s, sizeof(s), stdin)) return; clean_instr(s);
+				if (!fgets(s, sizeof(s), stdin)) return;
+				clean_instr(s);
 				if (*s == '@') {
 					FILE *fd;
 

Modified: branches/4.x-master/xymond/xymond_hostdata.c
===================================================================
--- branches/4.x-master/xymond/xymond_hostdata.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymond/xymond_hostdata.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -207,7 +207,14 @@
 
 				sprintf(hostdir, "%s/%s", clientlogdir, metadata[3]);
 				mkdir(hostdir, S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic push
+				#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 				sprintf(fn, "%s/%s", hostdir, metadata[4]);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic pop
+#endif  // __GNUC__
 				fd = fopen(fn, "w");
 				if (fd == NULL) {
 					errprintf("Cannot create file %s: %s\n", fn, strerror(errno));

Modified: branches/4.x-master/xymongen/pagegen.c
===================================================================
--- branches/4.x-master/xymongen/pagegen.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymongen/pagegen.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -648,8 +648,15 @@
 								pagepath, h->hostname, e->column->name, htmlextension);
 							sprintf(textrepfn, "%savail-%s-%s.txt",
 								pagepath, h->hostname, e->column->name);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+							#pragma GCC diagnostic push
+							#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 							sprintf(textrepurl, "%s/%s", 
 								xgetenv("XYMONWEB"), textrepfn);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+							#pragma GCC diagnostic pop
+#endif  // __GNUC__
 
 							htmlrep = fopen(htmlrepfn, "w");
 							if (!htmlrep) {
@@ -932,6 +939,10 @@
 		output = stdout;
 	}
 	else {
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic push
+		#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 		if (page->parent == NULL) {
 			char	indexfilename[PATH_MAX];
 
@@ -960,6 +971,9 @@
 		}
 		sprintf(tmpfilename, "%s.tmp", filename);
 		sprintf(tmprssfilename, "%s.tmp", rssfilename);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic pop
+#endif  // __GNUC__
 
 
 		/* Try creating the output file. If it fails, we may need to create the directories */
@@ -1264,7 +1278,14 @@
 		break;
 	}
 
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 	sprintf(tmpfilename, "%s.tmp", filename);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 	output = fopen(tmpfilename, "w");
 	if (output == NULL) {
 		errprintf("Cannot create file %s: %s\n", tmpfilename, strerror(errno));
@@ -1272,7 +1293,14 @@
 	}
 
 	if (wantrss) {
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic push
+		#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 		sprintf(tmprssfilename, "%s.tmp", rssfilename);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic pop
+#endif  // __GNUC__
 		rssoutput = fopen(tmprssfilename, "w");
 		if (rssoutput == NULL) {
 			errprintf("Cannot create RSS file %s: %s\n", tmpfilename, strerror(errno));

Modified: branches/4.x-master/xymongen/process.c
===================================================================
--- branches/4.x-master/xymongen/process.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymongen/process.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -107,7 +107,7 @@
 						     (e->color > color) &&
 						     wantedcolumn(e->column->name, g->onlycols) )
 							color = e->color;
-							oldage &= e->oldage;
+						oldage &= e->oldage;
 					}
 
 					/* Blue and clear is not propagated upwards */
@@ -127,7 +127,7 @@
 						     (e->color > color) &&
 						     !wantedcolumn(e->column->name, g->exceptcols) )
 							color = e->color;
-							oldage &= e->oldage;
+						oldage &= e->oldage;
 					}
 
 					/* Blue and clear is not propagated upwards */

Modified: branches/4.x-master/xymongen/util.c
===================================================================
--- branches/4.x-master/xymongen/util.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymongen/util.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -43,7 +43,14 @@
 		sprintf(pagelink, "%s%s", ((xymongen_page_t *)host->parent)->name, htmlextension);
 		for (pgwalk = host->parent; (pgwalk); pgwalk = pgwalk->parent) {
 			if (strlen(pgwalk->name)) {
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic push
+				#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 				sprintf(tmppath, "%s/%s", pgwalk->name, pagelink);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic pop
+#endif  // __GNUC__
 				strcpy(pagelink, tmppath);
 			}
 		}

Modified: branches/4.x-master/xymongen/wmlgen.c
===================================================================
--- branches/4.x-master/xymongen/wmlgen.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymongen/wmlgen.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -123,7 +123,14 @@
 	nextline = msg;
 	l[MAX_LINE_LEN - 1] = '\0';
 
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 	sprintf(fn, "%s/%s.%s.wml", wmldir, host->hostname, entry->column->name);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 	fd = fopen(fn, "w");
 	if (fd == NULL) {
 		errprintf("Cannot create file %s\n", fn);
@@ -316,7 +323,14 @@
 	}
 
 	/* Start the non-green WML card */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic push
+	#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 	sprintf(nongreenfn, "%s/nongreen.wml.tmp", wmldir);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+	#pragma GCC diagnostic pop
+#endif  // __GNUC__
 	nongreenfd = fopen(nongreenfn, "w");
 	if (nongreenfd == NULL) {
 		errprintf("Cannot open non-green WML file %s\n", nongreenfn);
@@ -340,7 +354,14 @@
 		if (h->hostentry->anywaps) {
 
 			/* Create the host WAP card, with links to individual test results */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+			#pragma GCC diagnostic push
+			#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 			sprintf(hostfn, "%s/%s.wml", wmldir, h->hostentry->hostname);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+			#pragma GCC diagnostic pop
+#endif  // __GNUC__
 			hostfd = fopen(hostfn, "w");
 			if (hostfd == NULL) {
 				errprintf("Cannot create file %s\n", hostfn);
@@ -390,7 +411,14 @@
 				fclose(nongreenfd);
 
 				/* Start a new Nongreen WML card */
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic push
+				#pragma GCC diagnostic ignored "-Wformat-overflow"
+#endif  // __GNUC__
 				sprintf(nongreenfn, "%s/nongreen-%d.wml", wmldir, nongreenpart);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+				#pragma GCC diagnostic pop
+#endif  // __GNUC__
 				nongreenfd = fopen(nongreenfn, "w");
 				if (nongreenfd == NULL) {
 					errprintf("Cannot open Nongreen WML file %s\n", nongreenfd);

Modified: branches/4.x-master/xymonnet/beastat.c
===================================================================
--- branches/4.x-master/xymonnet/beastat.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymonnet/beastat.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -104,6 +104,7 @@
 		eol = strchr(p, '\n');
 		if (eol) *eol = '\0';
 		strncpy(result, p, sizeof(result));
+		result[sizeof(result)-1] = '\0'; /* Make sure it is null terminated */
 		if (eol) *eol = '\n';
 	}
 

Modified: branches/4.x-master/xymonnet/xymonnet.c
===================================================================
--- branches/4.x-master/xymonnet/xymonnet.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymonnet/xymonnet.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -1078,6 +1078,7 @@
 	use_sntp = (p != NULL);
 
 	strncpy(cmdpath, (use_sntp ? xgetenv("SNTP") : xgetenv("NTPDATE")), sizeof(cmdpath));
+	cmdpath[sizeof(cmdpath)-1] = '\0'; /* Make sure it is null terminated */
 
 	for (t=service->items; (t); t = t->next) {
 		/* Do not run NTP test if host does not resolve in DNS or is down */
@@ -1104,6 +1105,7 @@
 
 	p = xgetenv("RPCINFO");
 	strncpy(cmdpath, (p ? p : "rpcinfo"), sizeof(cmdpath));
+	cmdpath[sizeof(cmdpath)-1] = '\0'; /* Make sure it is null terminated */
 	for (t=service->items; (t); t = t->next) {
 		/* Do not run RPCINFO test if host does not resolve in DNS or is down */
 		if (!t->host->dnserror && (t->host->downcount == 0) && !t->host->pingerror) {
@@ -1314,7 +1316,6 @@
 		#pragma GCC diagnostic push
 		#pragma GCC diagnostic ignored "-Wformat-truncation"
 #endif  // __GNUC__
-
 		/* Open the new ping result file */
 		snprintf(fn, sizeof(fn), "%s.%02d", pinglog, i);
 		logfd = fopen(fn, "r");
@@ -1326,6 +1327,9 @@
 
 		/* Copy error messages to the Xymon logfile */
 		snprintf(fn, PATH_MAX, "%s.%02d", pingerrlog, i);
+#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
+		#pragma GCC diagnostic pop
+#endif  // __GNUC__
 		if (failed) {
 			FILE *errfd;
 			char buf[1024];
@@ -1337,9 +1341,6 @@
 			if (errfd) fclose(errfd);
 		}
 		if (!debug) unlink(fn);
-#if __GNUC__ > 4 || (__GNUC__ == 4 && __GNUC_MINOR__ >= 6)
-		#pragma GCC diagnostic pop
-#endif  // __GNUC__
 
 		if (failed) {
 			/* Flag all ping tests as "undecided" */
@@ -1396,6 +1397,7 @@
 			testitem_t *router;
 
 			strncpy(l, t->host->routerdeps, sizeof(l));
+			l[sizeof(l)-1] = '\0'; /* Make sure it is null terminated */
 			p = strtok(l, ",");
 			while (p && (t->host->deprouterdown == NULL)) {
 				for (router=service->items; 
@@ -2431,6 +2433,7 @@
 			for (t = s->items; (t); t = t->next) {
 				if (!t->host->dnserror) {
 					strncpy(tname, s->testname, sizeof(tname));
+					tname[sizeof(tname)-1] = '\0'; /* Make sure it is null terminated */
 					if (s->namelen) tname[s->namelen] = '\0';
 					t->privdata = (void *)add_tcp_test(ip_to_test(t->host), s->portnum, tname, NULL,
 									   t->srcip,

Modified: branches/4.x-master/xymonproxy/xymonproxy.c
===================================================================
--- branches/4.x-master/xymonproxy/xymonproxy.c	2023-09-30 02:07:12 UTC (rev 8122)
+++ branches/4.x-master/xymonproxy/xymonproxy.c	2023-10-06 22:07:59 UTC (rev 8123)
@@ -533,7 +533,7 @@
 			int ccount = 0;
 			unsigned long bufspace = 0;
 			unsigned long avgtime;	/* In millisecs */
-			char runtime_s[30];
+			char runtime_s[31];	/* Include room for null termination */
 			unsigned long runt = (unsigned long) (now-startuptime);
 			char *p;
 			unsigned long msgs_sent = msgs_total - msgs_total_last;

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Xymon-developer] SF.net SVN: xymon:[8122] tags/4.4.0-alpha1/

[<jcc...@us...>]

Revision: 8122
          http://sourceforge.net/p/xymon/code/8122
Author:   jccleaver
Date:     2023-09-30 02:07:12 +0000 (Sat, 30 Sep 2023)
Log Message:
-----------
Tag 4.4.0-alpha1 release from r8119

Added Paths:
-----------
    tags/4.4.0-alpha1/

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Xymon-developer] SF.net SVN: xymon:[8121] branches/4.3.31/

[<jcc...@us...>]

Revision: 8121
          http://sourceforge.net/p/xymon/code/8121
Author:   jccleaver
Date:     2023-09-29 20:53:10 +0000 (Fri, 29 Sep 2023)
Log Message:
-----------
Create 4.3.31 branch

Added Paths:
-----------
    branches/4.3.31/

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

Re: [Xymon-developer] FYI: YEAH ! XYMON is still being used ! YEAH!!! [External] SF.net SVN: xymon:[8120] branches/4.x-master

[J.C. C. <cl...@te...>]

Had to double-check on this, but according to
https://sourceforge.net/p/forge/documentation/User%20Email%20Alias/ the
email forwarding feature is discouraged and can't be re-enabled if there's
ever been a bounce in the past (which I'm sure could have happened for
spam reasons at some point).

Regular lists.sourceforge.net email comes through fine though...


On Mon, September 25, 2023 05:55, Hershman, Rick wrote:
> Unreachable =
> jcc...@us...<mailto:jcc...@us...>
>
>
> From: Hershman, Rick
> Sent: Monday, September 25, 2023 8:52 AM
> To: jcc...@us...
> Subject: YEAH ! XYMON is still being used ! YEAH!!! [External]
> [Xymon-developer] SF.net SVN: xymon:[8120] branches/4.x-master
>
> Hurrah !    >     I'm real pleased you still work on Xymon , I hope this
> code/software never reaches end-of-life.
>
> From Terabitha,  I downloaded the 4.3.30   xymon client   for running on a
> redhat 8.x   version of my clients.
> This :
> [cid:image001.png@01D9EF8D.7EFF2D60]
>
> My host web server is running  (perfectly)  redhat 7.x in a GCP Cloud
> environment
>    Web-Server  version  >   Linux ge4apemspd01 3.10.0-1160.90.1.el7.x86_64
> #1 SMP Fri Mar 17 08:39:44 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux
>
> In the 4.3.30 client download,  There was no  runclient.sh  or  the
> ./xymon start      isn't  working ....       Do you have the runclient.sh
>  program ?
>    or do you have some directions on how to start or configure the client
> on the Remote client  servers running redhat 8.x   ?
>
> this type Client >  Linux gc1aptlndv01 4.18.0-477.27.1.el8_8.x86_64 #1 SMP
> Thu Aug 31 10:29:22 EDT 2023 x86_64 x86_64 x86_64 GNU/Linux
>

The Terabithia RPM client package on RHEL8 (or anything using systemd) is
running via the xymonlaunch systemd unit, although aliases are provided
for xymon-client.

The following types of things should work (still):
chkconfig xymonlaunch on
service xymon-client start

Configuration of the destination server is at /etc/sysconfig/xymon-client,
while all the rest of the normal configs are at /etc/xymon-client/*.cfg.
There's no runclient.sh normally used (like when installing from source),
as the package is intended to integrate startup with the rest of the box.


HTH,
-jc


> P.S> this is a BIG deployment, (hundreds of servers) for a New Phone
> company, Brightspeed based out of Charlotte, N.C. , that operates 20
> Eastern  STATES it purchased from LUMEN last year.
>
>     Thanks !
>
>
> ric...@br...<mailto:ric...@br...>
> Element Management Systems Engineer
> cell = 720-988-7452
> landline = 321-802-3619
>
>
>
>
>
>
> From: jccleaver--- via Xymon-developer
> <xym...@li...<mailto:xym...@li...>>
> Sent: Friday, September 22, 2023 8:49 PM
> To:
> xym...@li...<mailto:xym...@li...>
> Subject: [External] [Xymon-developer] SF.net SVN: xymon:[8120]
> branches/4.x-master
>
>
>
> Revision: 8120
>
>           http://sourceforge.net/p/xymon/code/8120
>
> Author:   jccleaver
>
> Date:     2023-09-23 00:49:21 +0000 (Sat, 23 Sep 2023)
>
> Log Message:
>
> -----------
>
> Fix missing changelog from recent 4.3.x entries; declare alpha1 release;
> consolidate various known issues to release notes
>
>
>
> Modified Paths:
>
> --------------
>
>     branches/4.x-master/Changes
>
>     branches/4.x-master/RELEASENOTES
>
>     branches/4.x-master/debian/changelog
>
>
>
> Modified: branches/4.x-master/Changes
>
> ===================================================================
>
> --- branches/4.x-master/Changes 2019-09-23 23:24:19 UTC (rev 8119)
>
> +++ branches/4.x-master/Changes 2023-09-23 00:49:21 UTC (rev 8120)
>
> @@ -1,4 +1,4 @@
>
> -Changes from 4.3.x -> 4.4-alpha
>
> +Changes from 4.3.x -> 4.4-alpha1
>
> ===========================================
>
> * Support for IPv6 and TLS connections in xymond and xymon
>
> @@ -247,18 +247,99 @@
>
>    (Thanks, John Horne)
>
> +
>
> +Changes from 4.3.29 -> 4.3.30 (05 Sep 2019)
>
> +===========================================
>
> +
>
> +* rev 8010
>
> +
>
> +* Fix reports with dashes or underscores not visible in history logs
> (Thanks, Tom Schmidt)
>
> +* Really fix do_temperature.c report parsing for parentheses (Thanks, Tom
> Schmidt)
>
> +* Fix truncation on exec strings causing missing custom RRD titles
> (Thanks, Tom Schmidt)
>
> +* RPC buffer calculation on snprintf taking improper sizeof (Thanks, Tom
> Schmidt)
>
> +* Don't crash on a missing allevents file
>
> +* Fix assorted crashes with xymongen report generation after string
> changes
>
> +* Add guards around GCC diagnostics pragma to allow for building on older
> vers
>
> +* xymonclient-linux: Provide wide/untrimmed IP support in netstat port
> list
>
> +* Fix problems with meta-combostatuses (Thanks, Dominique Delporte)
>
> +
>
> +
>
> +Changes from 4.3.28 -> 4.3.29 (23 Jul 2019)
>
> +===========================================
>
> +
>
> +* rev 8070
>
> +
>
> +* Security Fixes: A number of potential buffer overflows have been
> resolved
>
> +  CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473,
>
> +  CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486
>
> +* Deal with Set-Cookie deprecation on normal pages (Thanks, Erik
> Schminke)
>
> +* Support glibc->tirpc migration on newer distributions
>
> +* Fix certain flags not being set on GCC 8/9
>
> +* Fix wrong doc for --merge-clientlocal option (Thanks, Thomas Eckert)
>
> +* Fix CSP errors on trends pages (Thanks, John Thurston)
>
> +* Accept minimum libcares version >= 1.5.1; update bundled to 1.15.0
>
> +* Fix RRD parsing for recent netstat (net-tools) on Linux
>
> +* Ensure Content-Type always set in HTML headers (Thanks, Christoph Berg)
>
> +* Ignore additional common tmpfs partitions on recent Linux
>
> +* Fix NONETPAGE parsing (Thanks, John Horne)
>
> +* Increase hard max xymon message size from 10MB to 64MB to match
> 4.4-alpha
>
> +* Fix line-off-by-one error in logfetch retrieval when triggers are used
>
> +  (Thanks, Toshimitsu FUJIWARA)
>
> +* Fixes to do_temperature parsing (Thanks, Michael Pins)
>
> +* Add support for GNU Hurd and GNU/kFreeBSD
>
> +* Don't require apache authz_groupfile module by default when not needed
>
> +* Add --no-cpu-listing option to xymond_client to block 'top' output in
>
> +  cpu test (Thanks, John Horne)
>
> +* Double-quote the display name of host titles handed to RRD
>
> +* Ensure NTP checks not hung for unreachable hosts (Thanks, Tom Schmidt)
>
> +* Standardize xymonnet SMTP/s protocol conversation (Thanks, Tom Schmidt)
>
> +* AIX: Report Actual Memory and Phys/Entitled CPU capacity (Thanks, Stef
> Coene)
>
> +* snmp: Fix parsing error with SNMPv3 config parsing (Thanks, Jeremy
> Laidman)
>
> +* RRD: Fix parsing error with DS files containing commas - http* only
> (Thanks, John Horne)
>
> +
>
> +
>
> +Changes from 4.3.27 -> 4.3.28 (17 Jan 2017)
>
> +===========================================
>
> +
>
> +* rev 8005
>
> +
>
> +* Catch addition possible errors during SSL handshake
>
> +  for standard TCP checks
>
> +* Fix misparsing of --timelimit and --huge options in
>
> +  xymonnet (Reported by Foster Patch)
>
> +* Fix memory leak when processing netapp test reports
>
> +  (Reported by Peter Welter)
>
> +* The included version of c-ares has been bumped to version 1.12.0
>
> +* Fix for building on OpenSSL 1.1.0 (Thanks, Axel Beckert)
>
> +* Add TLS variant specification to http checks, using newer funcs
>
> +  in OpenSSL 1.1.0 (From Henrik)
>
> +* Fix overflow when skipping >2G pending data in logfetch
>
> +  (Reported by Sergey, a_s_y at sama.ru)
>
> +* xymond_alert will no longer exit and be relaunched if started
>
> +  while there's no actual alertable condition. (Thanks, Franco G.)
>
> +* Fix mis-parsing of PCRE regex's in client-local.cfg when char
>
> +  ranges are present (Reported by Erik D. Schminke)
>
> +* The size limit of message data passed to SCRIPT alerts is
>
> +  configurable with the MAXMSG_ALERTSCRIPT variable.
>
> +* Summary messages should work again (Thanks, Axel)
>
> +* Many typos in comments and man pages have been corrected
>
> +  (Thanks, Axel et al. at Debian)
>
> +* Change netstat RRD numbers to be slightly more human-readable
>
> +  (Thanks Roland Rosenfeld)
>
> +
>
> +
>
> Changes from 4.3.26 -> 4.3.27 (24 Mar 2016)
>
> ===========================================
>
> * rev 7957
>
> -* Don't treat empty (0 byte) directory size as invalid
>
> +* Don't treat empty (0 byte) directory size as invalid
>
>    (Reported by Bert Willekens)
>
> * Fix looping redirect on criticaleditor.sh
>
> * Allow NK-critical acknowledgements from status pages
>
> * Fix redirect to criticalview.sh, which is just a
>
>    regular CGI
>
> -* Properly recognize https URLs as summary links (Thanks,
>
> +* Properly recognize https URLs as summary links (Thanks,
>
>    David Steinn Geirsson)
>
> * Add compile-time check for SSLv3 support
>
> @@ -277,19 +358,18 @@
>
> * Restrict characters allowed for hostnames and testnames
>
> * HTML encode error log output on xymond/net/gen pages
>
> * HTML encode ghost hostnames output on xymond/ghostlist pages
>
> -* logfetch: only evaluate the first config of a given type seen for
>
> +* logfetch: only evaluate the first config of a given type seen for
>
>    the same file name
>
> * xymongen/reports: fix vague error message around missing history files
>
>    and properly exclude clientlog statuses (Reported by Magdi Mahmoud)
>
> -* Ensure configured CLASS overrides in hosts.cfg are always passed on
>
> +* Ensure configured CLASS overrides in hosts.cfg are always passed on
>
>    to client workers, regardless of 'class' for that specific message
>
>    (Reported by Steve Hill)
>
> -
>
> Changes from 4.3.24 -> 4.3.25 (05 Feb 2016)
>
> ===========================================
>
> -* rev 7894
>
> +* rev 7890
>
> * Resolve buffer overflow when handling "config" file requests
> (CVE-2016-2054)
>
> * Restrict "config" files to regular files inside the $XYMONHOME/etc/
> directory
>
> @@ -341,7 +421,7 @@
>
> Changes from 4.3.23 -> 4.3.24 (23 Nov 2015)
>
> ===========================================
>
> -* rev 7805
>
> +* rev 7774
>
> * Fix occasional crash in xymond when handling group names (Thanks, Franco
> Gasperino)
>
> * Fix non-special HTTP <400 status codes red instead of yellow >.<
>
> @@ -349,7 +429,7 @@
>
> Changes from 4.3.22 -> 4.3.23 (12 Nov 2015)
>
> ===========================================
>
> -
>
> +
>
> * rev 7740
>
> * Fix broken 'TRACK' and 'OPTIONAL' identifiers in analysis.cfg
>
> @@ -661,9 +741,8 @@
>
> * Document existing OPTIONAL setting in analysis.cfg for file-checks
>
>    on files which may not exist.
>
> * Document existing CLASS setting in alerts.cfg
>
> -* Add new INFOCOLUMNGIF, CLIENTCOLUMNGIF, TRENDSCOLUMNGIF variables so
>
> -  so the icons used for these "statuses" are configurable, and sample
> icons.
>
> -  NOTE for Distributors: CC-BY-ND should be added to the package licenses
>
> +* Add new INFOCOLUMNGIF and TRENDSCOLUMNGIF settings so the icons
>
> +  used for these pages are configurable.
>
> * Enhance Solaris client to correctly handle Solaris zones.
>
> * Add new search facilities to xymond to select hosts with the
>
>    'xymondboard' and 'hostinfo' commands.
>
>
>
> Modified: branches/4.x-master/RELEASENOTES
>
> ===================================================================
>
> --- branches/4.x-master/RELEASENOTES    2019-09-23 23:24:19 UTC (rev 8119)
>
> +++ branches/4.x-master/RELEASENOTES    2023-09-23 00:49:21 UTC (rev 8120)
>
> @@ -61,8 +61,52 @@
>
> /etc/sysconfig/xymon-client or any other location where the sending
>
> process will have it set. This may change for the final release.
>
> -
>
> (Note: Previous trunk versions had an inverted version of this logic,
> requiring
>
> XYMONV4SERVER=1 to send to an older server.)
>
> +The configure script is likely setting XYMONHOME/XYMONCLIENTHOME and
>
> +XYMSRV/XYMSERVERS/XYMONSERVERS incorrectly, which will prevent
> xymonlaunch
>
> +from correctly launching anything. Double check the xymon environment
>
> +files (xymonserver/xymonclient.cfg) before starting either the server or
>
> +client.
>
> +
>
> +The tools/xymon-client.default and tools/xymonlaunch files may be placed
>
> +into /etc/{sysconfig,default}/{xymon-client,xymonlaunch} to more easily
>
> +set $XYMONSERVERS
>
> +
>
> +Revealed by the above issue is a bug causing a crash in the client (or
>
> +anywhere) when given an empty string as the destination argument (instead
>
> +of 0, 127.0.0.1 or no variable set). Don't do this --> [ xymon '' "ping"
> ]
>
> +
>
> +The client and logfetch binary may be being re-compiled during 'make
> install'
>
> +
>
> +Compilation may fail if c-ares and at least one compression library is
> not
>
> +present (lzo/lz4/zlib are all options). xxHash libraries are also highly
>
> +recommended as the plan is for xxhash to replace md5 for checksumming
>
> +functionality. libtirpc may be necessary on some platforms, and it's
>
> +possible the build code is still expecting traditional (Sun) RPC
>
> +
>
> +
>
> +
>
> +Using Xymon with IPv6 - Alpha Notes
>
> +===================================
>
> +
>
> +IPv6 transmission of messages (client->xymond, or xymonnet->xymond)
>
> +should be working properly.
>
> +
>
> +IPv6 ICMP checks (conn tests), whether specified with literals in
>
> +hosts.cfg or via DNS lookup, should work as expected.
>
> +
>
> +Other IPv6-only TCP checks (including HTTP) are not working correctly.
>
> +
>
> +IPv6 [literals] in URL checks are not parsed properly.
>
> +
>
> +
>
> +Currently, xymond can only listen on a single address. If your system
>
> +supports IPv6 this will be the IPv6 interface, which means your system
>
> +must have the IPV6_ONLY option disabled (usually in sysctl) so as to
>
> +allow IPv4 connections to be completed over the IPv6 stack. Certain
>
> +"localhost" connections may be seen by xymond as coming from
>
> +"::ffff:127.0.0.1" and the IPV4-over-IPV6 addresses may be added to
>
> +--admin-senders in tasks.cfg to do what you want.
>
>
>
> Modified: branches/4.x-master/debian/changelog
>
> ===================================================================
>
> --- branches/4.x-master/debian/changelog        2019-09-23 23:24:19 UTC
> (rev 8119)
>
> +++ branches/4.x-master/debian/changelog        2023-09-23 00:49:21 UTC
> (rev 8120)
>
> @@ -1,7 +1,14 @@
>
> -xymon (4.4.0-alpha1) unstable; urgency=low
>
> +xymon (4.4.0-alpha2) unstable; urgency=low
>
>     * rev ####
>
> + -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  XXX,
> ## MMM 2023 00:00:00 +0100
>
> +
>
> +
>
> +xymon (4.4.0-alpha1) unstable; urgency=low
>
> +
>
> +   * rev 8119
>
> +
>
>     * Support for IPv6 and TLS connections in xymond and xymon
>
>     * Support for message compression has been added
>
>     * Standardize command line options across most binaries
>
> @@ -232,21 +239,118 @@
>
>       (potentially different) compiled-in default).
>
>     * Don't treat empty (0 byte) directory size as invalid
>
>       (Reported by Bert Willekens)
>
> +   * The XYMMSG environment variable will be checked for a message if
> none
>
> +     is passed in to the xymon client utility.
>
> +   * The Hobbit and BB-style CGI URL rewrites have been moved to a
> separate
>
> +     apache config snippet file.
>
> +   * xymonproxy will now recombine combo messages received in sending to
> xymond
>
> +     over the backfeed queue.
>
> +   * You can now pass a value (1-10) to the --bfq parameter to set up
> multiple
>
> +     backfeed queues to submit to xymond on. It will rotate through them.
>
> +   * xymond: cache hosts.cfg on reload and return this copy instead of
> re-reading
>
> +     for xymonnet and other builtins on loadhostsfromxymond requests.
>
> +   * Don't print error messages when &STRING doesn't match known XYMONENV
> vars
>
> +     in web templates.
>
> +   * Add RRDADDUPDATED variable to control timestamping of RRD graphs
>
> +     (Thanks, John Horne)
>
> - -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  XXX,
> ## MMM 2016 00:00:00 +0100
>
> + -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  Wed,
> 20 Sep 2023 00:00:00 +0100
>
> +xymon (4.3.30) stable; urgency=high
>
> +
>
> +   * rev 8010
>
> +
>
> +   * Fix reports with dashes or underscores not visible in history logs
> (Thanks, Tom Schmidt)
>
> +   * Really fix do_temperature.c report parsing for parentheses (Thanks,
> Tom Schmidt)
>
> +   * Fix truncation on exec strings causing missing custom RRD titles
> (Thanks, Tom Schmidt)
>
> +   * RPC buffer calculation on snprintf taking improper sizeof (Thanks,
> Tom Schmidt)
>
> +   * Don't crash on a missing allevents file
>
> +   * Fix assorted crashes with xymongen report generation after string
> changes
>
> +   * Add guards around GCC diagnostics pragma to allow for building on
> older vers
>
> +   * xymonclient-linux: Provide wide/untrimmed IP support in netstat port
> list
>
> +   * Fix problems with meta-combostatuses (Thanks, Dominique Delporte)
>
> +
>
> + -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  Thu,
> 05 Sep 2019 13:00:00 -0800
>
> +
>
> +
>
> +xymon (4.3.29) stable; urgency=medium
>
> +
>
> +   * rev 8070
>
> +
>
> +   * Security Fixes: A number of potential buffer overflows have been
> resolved
>
> +     CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473,
>
> +     CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486
>
> +   * Deal with Set-Cookie deprecation on normal pages (Thanks, Erik
> Schminke)
>
> +   * Support glibc->tirpc migration on newer distributions
>
> +   * Fix certain flags not being set on GCC 8/9
>
> +   * Fix wrong doc for --merge-clientlocal option (Thanks, Thomas Eckert)
>
> +   * Fix CSP errors on trends pages (Thanks, John Thurston)
>
> +   * Accept minimum libcares version >= 1.5.1; update bundled to 1.15.0
>
> +   * Fix RRD parsing for recent netstat (net-tools) on Linux
>
> +   * Ensure Content-Type always set in HTML headers (Thanks, Christoph
> Berg)
>
> +   * Ignore additional common tmpfs partitions on recent Linux
>
> +   * Fix NONETPAGE parsing (Thanks, John Horne)
>
> +   * Increase hard max xymon message size from 10MB to 64MB to match
> 4.4-alpha
>
> +   * Fix line-off-by-one error in logfetch retrieval when triggers are
> used
>
> +     (Thanks, Toshimitsu FUJIWARA)
>
> +   * Fixes to do_temperature parsing (Thanks, Michael Pins)
>
> +   * Add support for GNU Hurd and GNU/kFreeBSD
>
> +   * Don't require apache authz_groupfile module by default when not
> needed
>
> +   * Add --no-cpu-listing option to xymond_client to block 'top' output
> in
>
> +     cpu test (Thanks, John Horne)
>
> +   * Double-quote the display name of host titles handed to RRD
>
> +   * Ensure NTP checks not hung for unreachable hosts (Thanks, Tom
> Schmidt)
>
> +   * Standardize xymonnet SMTP/s protocol conversation (Thanks, Tom
> Schmidt)
>
> +   * AIX: Report Actual Memory and Phys/Entitled CPU capacity (Thanks,
> Stef Coene)
>
> +   * snmp: Fix parsing error with SNMPv3 config parsing (Thanks, Jeremy
> Laidman)
>
> +   * RRD: Fix parsing error with DS files containing commas - http* only
> (Thanks, John Horne)
>
> +
>
> + -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  Tue,
> 23 Jul 2019 08:30:00 -0800
>
> +
>
> +
>
> +xymon (4.3.28) stable; urgency=medium
>
> +
>
> +   * rev 8005
>
> +
>
> +   * Catch addition possible errors during SSL handshake
>
> +     for standard TCP checks
>
> +   * Fix misparsing of --timelimit and --huge options in
>
> +     xymonnet (Reported by Foster Patch)
>
> +   * Fix memory leak when processing netapp test reports
>
> +     (Reported by Peter Welter)
>
> +   * The included version of c-ares has been bumped to version 1.12.0
>
> +   * Fix for building on OpenSSL 1.1.0 (Thanks, Axel Beckert)
>
> +   * Add TLS variant specification to http checks, using newer funcs
>
> +     in OpenSSL 1.1.0 (From Henrik)
>
> +   * Fix overflow when skipping >2G pending data in logfetch
>
> +     (Reported by Sergey, a_s_y at sama.ru)
>
> +   * xymond_alert will no longer exit and be relaunched if started
>
> +     while there's no actual alertable condition. (Thanks, Franco G.)
>
> +   * Fix mis-parsing of PCRE regex's in client-local.cfg when char
>
> +     ranges are present (Reported by Erik D. Schminke)
>
> +   * The size limit of message data passed to SCRIPT alerts is
>
> +     configurable with the MAXMSG_ALERTSCRIPT variable.
>
> +   * Summary messages should work again (Thanks, Axel)
>
> +   * Many typos in comments and man pages have been corrected
>
> +     (Thanks, Axel et al. at Debian)
>
> +   * Change netstat RRD numbers to be slightly more human-readable
>
> +     (Thanks Roland Rosenfeld)
>
> +
>
> + -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  Tue,
> 17 Jan 2017 16:30:00 -0800
>
> +
>
> +
>
> xymon (4.3.27) stable; urgency=medium
>
>     * rev 7957
>
> -   * Don't treat empty (0 byte) directory size as invalid
>
> +   * Don't treat empty (0 byte) directory size as invalid
>
>       (Reported by Bert Willekens)
>
>     * Fix looping redirect on criticaleditor.sh
>
>     * Allow NK-critical acknowledgements from status pages
>
>     * Fix redirect to criticalview.sh, which is just a
>
>       regular CGI
>
> -   * Properly recognize https URLs as summary links (Thanks,
>
> +   * Properly recognize https URLs as summary links (Thanks,
>
>       David Steinn Geirsson)
>
>     * Add compile-time check for SSLv3 support
>
> @@ -266,11 +370,11 @@
>
>     * Restrict characters allowed for hostnames and testnames
>
>     * HTML encode error log output on xymond/net/gen pages
>
>     * HTML encode ghost hostnames output on xymond/ghostlist pages
>
> -   * logfetch: only evaluate the first config of a given type seen for
>
> +   * logfetch: only evaluate the first config of a given type seen for
>
>       the same file name
>
>     * xymongen/reports: fix vague error message around missing history
> files
>
>       and properly exclude clientlog statuses (Reported by Magdi Mahmoud)
>
> -   * Ensure configured CLASS overrides in hosts.cfg are always passed on
>
> +   * Ensure configured CLASS overrides in hosts.cfg are always passed on
>
>       to client workers, regardless of 'class' for that specific message
>
>       (Reported by Steve Hill)
>
> @@ -279,7 +383,7 @@
>
> xymon (4.3.25) stable; urgency=high
>
> -   * rev 7894
>
> +   * rev 7890
>
>     * Resolve buffer overflow when handling "config" file requests
> (CVE-2016-2054)
>
>     * Restrict "config" files to regular files inside the $XYMONHOME/etc/
> directory
>
> @@ -331,16 +435,16 @@
>
> xymon (4.3.24) stable; urgency=high
>
> -   * rev 7805
>
> +   * rev 7774
>
>     * Fix occasional crash in xymond when handling group names (Thanks,
> Franco Gasperino)
>
> -   * Fix non-special HTTP <400 status codes red instead of yellow >.<
>
> +   * Fix non-special HTTP <400 status codes red instead of yellow >.<
>
>   -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>
> Mon, 23 Nov 2015 17:40:00 -0800
>
> xymon (4.3.23) unstable; urgency=high
>
> -
>
> +
>
>     * rev 7740
>
>     * Fix broken 'TRACK' and 'OPTIONAL' identifiers in analysis.cfg
>
> @@ -408,7 +512,7 @@
>
>     * Add ACK_COOKIE_EXPIRATION for environment control of cookie validity
> duration (Noted by Thomas Giordmaina)
>
>     * combostatus: fix core dumps on Solaris when dealing with erroneous
> config
>
> - -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  Fri,
> 6 Nov 2015 08:00:00 -0700
>
> + -- Japheth Cleaver
> <cle...@te...<mailto:cle...@te...>>  Fri,
> 6 Nov 2015 06:00:00 -0800
>
> xymon (4.3.21) unstable; urgency=medium
>
>
>
> This was sent by the SourceForge.net collaborative development platform,
> the world's largest Open Source development site.
>
>
>
>
>
>
>
> _______________________________________________
>
> Xymon-developer mailing list
>
> Xym...@li...<mailto:Xym...@li...>
>
> https://lists.sourceforge.net/lists/listinfo/xymon-developer
>
> Disclaimer: This e-mail may contain confidential or privileged information
> of Brightspeed. Unauthorized use of this communication is strictly
> prohibited. If you received this in error, please notify the sender by
> reply e-mail and destroy all copies and attachments immediately.
>
> _______________________________________________
> Xymon-developer mailing list
> Xym...@li...
> https://lists.sourceforge.net/lists/listinfo/xymon-developer
>

[Xymon-developer] FYI: YEAH ! XYMON is still being used ! YEAH!!! [External] SF.net SVN: xymon:[8120] branches/4.x-master

[Hershman, R. <ric...@br...>]

Unreachable = jcc...@us...<mailto:jcc...@us...>


From: Hershman, Rick
Sent: Monday, September 25, 2023 8:52 AM
To: jcc...@us...
Subject: YEAH ! XYMON is still being used ! YEAH!!! [External] [Xymon-developer] SF.net SVN: xymon:[8120] branches/4.x-master

Hurrah !    >     I'm real pleased you still work on Xymon , I hope this code/software never reaches end-of-life.

>From Terabitha,  I downloaded the 4.3.30   xymon client   for running on a redhat 8.x   version of my clients.
This :
[cid:image001.png@01D9EF8D.7EFF2D60]

My host web server is running  (perfectly)  redhat 7.x in a GCP Cloud environment
   Web-Server  version  >   Linux ge4apemspd01 3.10.0-1160.90.1.el7.x86_64 #1 SMP Fri Mar 17 08:39:44 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

In the 4.3.30 client download,  There was no  runclient.sh  or  the    ./xymon start      isn't  working ....       Do you have the runclient.sh   program ?
   or do you have some directions on how to start or configure the client on the Remote client  servers running redhat 8.x   ?

this type Client >  Linux gc1aptlndv01 4.18.0-477.27.1.el8_8.x86_64 #1 SMP Thu Aug 31 10:29:22 EDT 2023 x86_64 x86_64 x86_64 GNU/Linux

P.S> this is a BIG deployment, (hundreds of servers) for a New Phone company, Brightspeed based out of Charlotte, N.C. , that operates 20 Eastern  STATES it purchased from LUMEN last year.

    Thanks !


ric...@br...<mailto:ric...@br...>
Element Management Systems Engineer
cell = 720-988-7452
landline = 321-802-3619






From: jccleaver--- via Xymon-developer <xym...@li...<mailto:xym...@li...>>
Sent: Friday, September 22, 2023 8:49 PM
To: xym...@li...<mailto:xym...@li...>
Subject: [External] [Xymon-developer] SF.net SVN: xymon:[8120] branches/4.x-master



Revision: 8120

          http://sourceforge.net/p/xymon/code/8120

Author:   jccleaver

Date:     2023-09-23 00:49:21 +0000 (Sat, 23 Sep 2023)

Log Message:

-----------

Fix missing changelog from recent 4.3.x entries; declare alpha1 release; consolidate various known issues to release notes



Modified Paths:

--------------

    branches/4.x-master/Changes

    branches/4.x-master/RELEASENOTES

    branches/4.x-master/debian/changelog



Modified: branches/4.x-master/Changes

===================================================================

--- branches/4.x-master/Changes 2019-09-23 23:24:19 UTC (rev 8119)

+++ branches/4.x-master/Changes 2023-09-23 00:49:21 UTC (rev 8120)

@@ -1,4 +1,4 @@

-Changes from 4.3.x -> 4.4-alpha

+Changes from 4.3.x -> 4.4-alpha1

===========================================

* Support for IPv6 and TLS connections in xymond and xymon

@@ -247,18 +247,99 @@

   (Thanks, John Horne)

+

+Changes from 4.3.29 -> 4.3.30 (05 Sep 2019)

+===========================================

+

+* rev 8010

+

+* Fix reports with dashes or underscores not visible in history logs (Thanks, Tom Schmidt)

+* Really fix do_temperature.c report parsing for parentheses (Thanks, Tom Schmidt)

+* Fix truncation on exec strings causing missing custom RRD titles (Thanks, Tom Schmidt)

+* RPC buffer calculation on snprintf taking improper sizeof (Thanks, Tom Schmidt)

+* Don't crash on a missing allevents file

+* Fix assorted crashes with xymongen report generation after string changes

+* Add guards around GCC diagnostics pragma to allow for building on older vers

+* xymonclient-linux: Provide wide/untrimmed IP support in netstat port list

+* Fix problems with meta-combostatuses (Thanks, Dominique Delporte)

+

+

+Changes from 4.3.28 -> 4.3.29 (23 Jul 2019)

+===========================================

+

+* rev 8070

+

+* Security Fixes: A number of potential buffer overflows have been resolved

+  CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473,

+  CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486

+* Deal with Set-Cookie deprecation on normal pages (Thanks, Erik Schminke)

+* Support glibc->tirpc migration on newer distributions

+* Fix certain flags not being set on GCC 8/9

+* Fix wrong doc for --merge-clientlocal option (Thanks, Thomas Eckert)

+* Fix CSP errors on trends pages (Thanks, John Thurston)

+* Accept minimum libcares version >= 1.5.1; update bundled to 1.15.0

+* Fix RRD parsing for recent netstat (net-tools) on Linux

+* Ensure Content-Type always set in HTML headers (Thanks, Christoph Berg)

+* Ignore additional common tmpfs partitions on recent Linux

+* Fix NONETPAGE parsing (Thanks, John Horne)

+* Increase hard max xymon message size from 10MB to 64MB to match 4.4-alpha

+* Fix line-off-by-one error in logfetch retrieval when triggers are used

+  (Thanks, Toshimitsu FUJIWARA)

+* Fixes to do_temperature parsing (Thanks, Michael Pins)

+* Add support for GNU Hurd and GNU/kFreeBSD

+* Don't require apache authz_groupfile module by default when not needed

+* Add --no-cpu-listing option to xymond_client to block 'top' output in

+  cpu test (Thanks, John Horne)

+* Double-quote the display name of host titles handed to RRD

+* Ensure NTP checks not hung for unreachable hosts (Thanks, Tom Schmidt)

+* Standardize xymonnet SMTP/s protocol conversation (Thanks, Tom Schmidt)

+* AIX: Report Actual Memory and Phys/Entitled CPU capacity (Thanks, Stef Coene)

+* snmp: Fix parsing error with SNMPv3 config parsing (Thanks, Jeremy Laidman)

+* RRD: Fix parsing error with DS files containing commas - http* only (Thanks, John Horne)

+

+

+Changes from 4.3.27 -> 4.3.28 (17 Jan 2017)

+===========================================

+

+* rev 8005

+

+* Catch addition possible errors during SSL handshake

+  for standard TCP checks

+* Fix misparsing of --timelimit and --huge options in

+  xymonnet (Reported by Foster Patch)

+* Fix memory leak when processing netapp test reports

+  (Reported by Peter Welter)

+* The included version of c-ares has been bumped to version 1.12.0

+* Fix for building on OpenSSL 1.1.0 (Thanks, Axel Beckert)

+* Add TLS variant specification to http checks, using newer funcs

+  in OpenSSL 1.1.0 (From Henrik)

+* Fix overflow when skipping >2G pending data in logfetch

+  (Reported by Sergey, a_s_y at sama.ru)

+* xymond_alert will no longer exit and be relaunched if started

+  while there's no actual alertable condition. (Thanks, Franco G.)

+* Fix mis-parsing of PCRE regex's in client-local.cfg when char

+  ranges are present (Reported by Erik D. Schminke)

+* The size limit of message data passed to SCRIPT alerts is

+  configurable with the MAXMSG_ALERTSCRIPT variable.

+* Summary messages should work again (Thanks, Axel)

+* Many typos in comments and man pages have been corrected

+  (Thanks, Axel et al. at Debian)

+* Change netstat RRD numbers to be slightly more human-readable

+  (Thanks Roland Rosenfeld)

+

+

Changes from 4.3.26 -> 4.3.27 (24 Mar 2016)

===========================================

* rev 7957

-* Don't treat empty (0 byte) directory size as invalid

+* Don't treat empty (0 byte) directory size as invalid

   (Reported by Bert Willekens)

* Fix looping redirect on criticaleditor.sh

* Allow NK-critical acknowledgements from status pages

* Fix redirect to criticalview.sh, which is just a

   regular CGI

-* Properly recognize https URLs as summary links (Thanks,

+* Properly recognize https URLs as summary links (Thanks,

   David Steinn Geirsson)

* Add compile-time check for SSLv3 support

@@ -277,19 +358,18 @@

* Restrict characters allowed for hostnames and testnames

* HTML encode error log output on xymond/net/gen pages

* HTML encode ghost hostnames output on xymond/ghostlist pages

-* logfetch: only evaluate the first config of a given type seen for

+* logfetch: only evaluate the first config of a given type seen for

   the same file name

* xymongen/reports: fix vague error message around missing history files

   and properly exclude clientlog statuses (Reported by Magdi Mahmoud)

-* Ensure configured CLASS overrides in hosts.cfg are always passed on

+* Ensure configured CLASS overrides in hosts.cfg are always passed on

   to client workers, regardless of 'class' for that specific message

   (Reported by Steve Hill)

-

Changes from 4.3.24 -> 4.3.25 (05 Feb 2016)

===========================================

-* rev 7894

+* rev 7890

* Resolve buffer overflow when handling "config" file requests (CVE-2016-2054)

* Restrict "config" files to regular files inside the $XYMONHOME/etc/ directory

@@ -341,7 +421,7 @@

Changes from 4.3.23 -> 4.3.24 (23 Nov 2015)

===========================================

-* rev 7805

+* rev 7774

* Fix occasional crash in xymond when handling group names (Thanks, Franco Gasperino)

* Fix non-special HTTP <400 status codes red instead of yellow >.<

@@ -349,7 +429,7 @@

Changes from 4.3.22 -> 4.3.23 (12 Nov 2015)

===========================================

-

+

* rev 7740

* Fix broken 'TRACK' and 'OPTIONAL' identifiers in analysis.cfg

@@ -661,9 +741,8 @@

* Document existing OPTIONAL setting in analysis.cfg for file-checks

   on files which may not exist.

* Document existing CLASS setting in alerts.cfg

-* Add new INFOCOLUMNGIF, CLIENTCOLUMNGIF, TRENDSCOLUMNGIF variables so

-  so the icons used for these "statuses" are configurable, and sample icons.

-  NOTE for Distributors: CC-BY-ND should be added to the package licenses

+* Add new INFOCOLUMNGIF and TRENDSCOLUMNGIF settings so the icons

+  used for these pages are configurable.

* Enhance Solaris client to correctly handle Solaris zones.

* Add new search facilities to xymond to select hosts with the

   'xymondboard' and 'hostinfo' commands.



Modified: branches/4.x-master/RELEASENOTES

===================================================================

--- branches/4.x-master/RELEASENOTES    2019-09-23 23:24:19 UTC (rev 8119)

+++ branches/4.x-master/RELEASENOTES    2023-09-23 00:49:21 UTC (rev 8120)

@@ -61,8 +61,52 @@

/etc/sysconfig/xymon-client or any other location where the sending

process will have it set. This may change for the final release.

-

(Note: Previous trunk versions had an inverted version of this logic, requiring

XYMONV4SERVER=1 to send to an older server.)

+The configure script is likely setting XYMONHOME/XYMONCLIENTHOME and

+XYMSRV/XYMSERVERS/XYMONSERVERS incorrectly, which will prevent xymonlaunch

+from correctly launching anything. Double check the xymon environment

+files (xymonserver/xymonclient.cfg) before starting either the server or

+client.

+

+The tools/xymon-client.default and tools/xymonlaunch files may be placed

+into /etc/{sysconfig,default}/{xymon-client,xymonlaunch} to more easily

+set $XYMONSERVERS

+

+Revealed by the above issue is a bug causing a crash in the client (or

+anywhere) when given an empty string as the destination argument (instead

+of 0, 127.0.0.1 or no variable set). Don't do this --> [ xymon '' "ping" ]

+

+The client and logfetch binary may be being re-compiled during 'make install'

+

+Compilation may fail if c-ares and at least one compression library is not

+present (lzo/lz4/zlib are all options). xxHash libraries are also highly

+recommended as the plan is for xxhash to replace md5 for checksumming

+functionality. libtirpc may be necessary on some platforms, and it's

+possible the build code is still expecting traditional (Sun) RPC

+

+

+

+Using Xymon with IPv6 - Alpha Notes

+===================================

+

+IPv6 transmission of messages (client->xymond, or xymonnet->xymond)

+should be working properly.

+

+IPv6 ICMP checks (conn tests), whether specified with literals in

+hosts.cfg or via DNS lookup, should work as expected.

+

+Other IPv6-only TCP checks (including HTTP) are not working correctly.

+

+IPv6 [literals] in URL checks are not parsed properly.

+

+

+Currently, xymond can only listen on a single address. If your system

+supports IPv6 this will be the IPv6 interface, which means your system

+must have the IPV6_ONLY option disabled (usually in sysctl) so as to

+allow IPv4 connections to be completed over the IPv6 stack. Certain

+"localhost" connections may be seen by xymond as coming from

+"::ffff:127.0.0.1" and the IPV4-over-IPV6 addresses may be added to

+--admin-senders in tasks.cfg to do what you want.



Modified: branches/4.x-master/debian/changelog

===================================================================

--- branches/4.x-master/debian/changelog        2019-09-23 23:24:19 UTC (rev 8119)

+++ branches/4.x-master/debian/changelog        2023-09-23 00:49:21 UTC (rev 8120)

@@ -1,7 +1,14 @@

-xymon (4.4.0-alpha1) unstable; urgency=low

+xymon (4.4.0-alpha2) unstable; urgency=low

    * rev ####

+ -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  XXX, ## MMM 2023 00:00:00 +0100

+

+

+xymon (4.4.0-alpha1) unstable; urgency=low

+

+   * rev 8119

+

    * Support for IPv6 and TLS connections in xymond and xymon

    * Support for message compression has been added

    * Standardize command line options across most binaries

@@ -232,21 +239,118 @@

      (potentially different) compiled-in default).

    * Don't treat empty (0 byte) directory size as invalid

      (Reported by Bert Willekens)

+   * The XYMMSG environment variable will be checked for a message if none

+     is passed in to the xymon client utility.

+   * The Hobbit and BB-style CGI URL rewrites have been moved to a separate

+     apache config snippet file.

+   * xymonproxy will now recombine combo messages received in sending to xymond

+     over the backfeed queue.

+   * You can now pass a value (1-10) to the --bfq parameter to set up multiple

+     backfeed queues to submit to xymond on. It will rotate through them.

+   * xymond: cache hosts.cfg on reload and return this copy instead of re-reading

+     for xymonnet and other builtins on loadhostsfromxymond requests.

+   * Don't print error messages when &STRING doesn't match known XYMONENV vars

+     in web templates.

+   * Add RRDADDUPDATED variable to control timestamping of RRD graphs

+     (Thanks, John Horne)

- -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  XXX, ## MMM 2016 00:00:00 +0100

+ -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Wed, 20 Sep 2023 00:00:00 +0100

+xymon (4.3.30) stable; urgency=high

+

+   * rev 8010

+

+   * Fix reports with dashes or underscores not visible in history logs (Thanks, Tom Schmidt)

+   * Really fix do_temperature.c report parsing for parentheses (Thanks, Tom Schmidt)

+   * Fix truncation on exec strings causing missing custom RRD titles (Thanks, Tom Schmidt)

+   * RPC buffer calculation on snprintf taking improper sizeof (Thanks, Tom Schmidt)

+   * Don't crash on a missing allevents file

+   * Fix assorted crashes with xymongen report generation after string changes

+   * Add guards around GCC diagnostics pragma to allow for building on older vers

+   * xymonclient-linux: Provide wide/untrimmed IP support in netstat port list

+   * Fix problems with meta-combostatuses (Thanks, Dominique Delporte)

+

+ -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Thu, 05 Sep 2019 13:00:00 -0800

+

+

+xymon (4.3.29) stable; urgency=medium

+

+   * rev 8070

+

+   * Security Fixes: A number of potential buffer overflows have been resolved

+     CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473,

+     CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486

+   * Deal with Set-Cookie deprecation on normal pages (Thanks, Erik Schminke)

+   * Support glibc->tirpc migration on newer distributions

+   * Fix certain flags not being set on GCC 8/9

+   * Fix wrong doc for --merge-clientlocal option (Thanks, Thomas Eckert)

+   * Fix CSP errors on trends pages (Thanks, John Thurston)

+   * Accept minimum libcares version >= 1.5.1; update bundled to 1.15.0

+   * Fix RRD parsing for recent netstat (net-tools) on Linux

+   * Ensure Content-Type always set in HTML headers (Thanks, Christoph Berg)

+   * Ignore additional common tmpfs partitions on recent Linux

+   * Fix NONETPAGE parsing (Thanks, John Horne)

+   * Increase hard max xymon message size from 10MB to 64MB to match 4.4-alpha

+   * Fix line-off-by-one error in logfetch retrieval when triggers are used

+     (Thanks, Toshimitsu FUJIWARA)

+   * Fixes to do_temperature parsing (Thanks, Michael Pins)

+   * Add support for GNU Hurd and GNU/kFreeBSD

+   * Don't require apache authz_groupfile module by default when not needed

+   * Add --no-cpu-listing option to xymond_client to block 'top' output in

+     cpu test (Thanks, John Horne)

+   * Double-quote the display name of host titles handed to RRD

+   * Ensure NTP checks not hung for unreachable hosts (Thanks, Tom Schmidt)

+   * Standardize xymonnet SMTP/s protocol conversation (Thanks, Tom Schmidt)

+   * AIX: Report Actual Memory and Phys/Entitled CPU capacity (Thanks, Stef Coene)

+   * snmp: Fix parsing error with SNMPv3 config parsing (Thanks, Jeremy Laidman)

+   * RRD: Fix parsing error with DS files containing commas - http* only (Thanks, John Horne)

+

+ -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Tue, 23 Jul 2019 08:30:00 -0800

+

+

+xymon (4.3.28) stable; urgency=medium

+

+   * rev 8005

+

+   * Catch addition possible errors during SSL handshake

+     for standard TCP checks

+   * Fix misparsing of --timelimit and --huge options in

+     xymonnet (Reported by Foster Patch)

+   * Fix memory leak when processing netapp test reports

+     (Reported by Peter Welter)

+   * The included version of c-ares has been bumped to version 1.12.0

+   * Fix for building on OpenSSL 1.1.0 (Thanks, Axel Beckert)

+   * Add TLS variant specification to http checks, using newer funcs

+     in OpenSSL 1.1.0 (From Henrik)

+   * Fix overflow when skipping >2G pending data in logfetch

+     (Reported by Sergey, a_s_y at sama.ru)

+   * xymond_alert will no longer exit and be relaunched if started

+     while there's no actual alertable condition. (Thanks, Franco G.)

+   * Fix mis-parsing of PCRE regex's in client-local.cfg when char

+     ranges are present (Reported by Erik D. Schminke)

+   * The size limit of message data passed to SCRIPT alerts is

+     configurable with the MAXMSG_ALERTSCRIPT variable.

+   * Summary messages should work again (Thanks, Axel)

+   * Many typos in comments and man pages have been corrected

+     (Thanks, Axel et al. at Debian)

+   * Change netstat RRD numbers to be slightly more human-readable

+     (Thanks Roland Rosenfeld)

+

+ -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Tue, 17 Jan 2017 16:30:00 -0800

+

+

xymon (4.3.27) stable; urgency=medium

    * rev 7957

-   * Don't treat empty (0 byte) directory size as invalid

+   * Don't treat empty (0 byte) directory size as invalid

      (Reported by Bert Willekens)

    * Fix looping redirect on criticaleditor.sh

    * Allow NK-critical acknowledgements from status pages

    * Fix redirect to criticalview.sh, which is just a

      regular CGI

-   * Properly recognize https URLs as summary links (Thanks,

+   * Properly recognize https URLs as summary links (Thanks,

      David Steinn Geirsson)

    * Add compile-time check for SSLv3 support

@@ -266,11 +370,11 @@

    * Restrict characters allowed for hostnames and testnames

    * HTML encode error log output on xymond/net/gen pages

    * HTML encode ghost hostnames output on xymond/ghostlist pages

-   * logfetch: only evaluate the first config of a given type seen for

+   * logfetch: only evaluate the first config of a given type seen for

      the same file name

    * xymongen/reports: fix vague error message around missing history files

      and properly exclude clientlog statuses (Reported by Magdi Mahmoud)

-   * Ensure configured CLASS overrides in hosts.cfg are always passed on

+   * Ensure configured CLASS overrides in hosts.cfg are always passed on

      to client workers, regardless of 'class' for that specific message

      (Reported by Steve Hill)

@@ -279,7 +383,7 @@

xymon (4.3.25) stable; urgency=high

-   * rev 7894

+   * rev 7890

    * Resolve buffer overflow when handling "config" file requests (CVE-2016-2054)

    * Restrict "config" files to regular files inside the $XYMONHOME/etc/ directory

@@ -331,16 +435,16 @@

xymon (4.3.24) stable; urgency=high

-   * rev 7805

+   * rev 7774

    * Fix occasional crash in xymond when handling group names (Thanks, Franco Gasperino)

-   * Fix non-special HTTP <400 status codes red instead of yellow >.<

+   * Fix non-special HTTP <400 status codes red instead of yellow >.<

  -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Mon, 23 Nov 2015 17:40:00 -0800

xymon (4.3.23) unstable; urgency=high

-

+

    * rev 7740

    * Fix broken 'TRACK' and 'OPTIONAL' identifiers in analysis.cfg

@@ -408,7 +512,7 @@

    * Add ACK_COOKIE_EXPIRATION for environment control of cookie validity duration (Noted by Thomas Giordmaina)

    * combostatus: fix core dumps on Solaris when dealing with erroneous config

- -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Fri, 6 Nov 2015 08:00:00 -0700

+ -- Japheth Cleaver <cle...@te...<mailto:cle...@te...>>  Fri, 6 Nov 2015 06:00:00 -0800

xymon (4.3.21) unstable; urgency=medium



This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.







_______________________________________________

Xymon-developer mailing list

Xym...@li...<mailto:Xym...@li...>

https://lists.sourceforge.net/lists/listinfo/xymon-developer

Disclaimer: This e-mail may contain confidential or privileged information of Brightspeed. Unauthorized use of this communication is strictly prohibited. If you received this in error, please notify the sender by reply e-mail and destroy all copies and attachments immediately.

[Xymon-developer] SF.net SVN: xymon:[8120] branches/4.x-master

[<jcc...@us...>]

Revision: 8120
          http://sourceforge.net/p/xymon/code/8120
Author:   jccleaver
Date:     2023-09-23 00:49:21 +0000 (Sat, 23 Sep 2023)
Log Message:
-----------
Fix missing changelog from recent 4.3.x entries; declare alpha1 release; consolidate various known issues to release notes

Modified Paths:
--------------
    branches/4.x-master/Changes
    branches/4.x-master/RELEASENOTES
    branches/4.x-master/debian/changelog

Modified: branches/4.x-master/Changes
===================================================================
--- branches/4.x-master/Changes	2019-09-23 23:24:19 UTC (rev 8119)
+++ branches/4.x-master/Changes	2023-09-23 00:49:21 UTC (rev 8120)
@@ -1,4 +1,4 @@
-Changes from 4.3.x -> 4.4-alpha
+Changes from 4.3.x -> 4.4-alpha1
 ===========================================
 
 * Support for IPv6 and TLS connections in xymond and xymon
@@ -247,18 +247,99 @@
   (Thanks, John Horne)
 
 
+
+Changes from 4.3.29 -> 4.3.30 (05 Sep 2019)
+===========================================
+
+* rev 8010
+
+* Fix reports with dashes or underscores not visible in history logs (Thanks, Tom Schmidt)
+* Really fix do_temperature.c report parsing for parentheses (Thanks, Tom Schmidt)
+* Fix truncation on exec strings causing missing custom RRD titles (Thanks, Tom Schmidt)
+* RPC buffer calculation on snprintf taking improper sizeof (Thanks, Tom Schmidt)
+* Don't crash on a missing allevents file
+* Fix assorted crashes with xymongen report generation after string changes
+* Add guards around GCC diagnostics pragma to allow for building on older vers
+* xymonclient-linux: Provide wide/untrimmed IP support in netstat port list
+* Fix problems with meta-combostatuses (Thanks, Dominique Delporte)
+
+
+Changes from 4.3.28 -> 4.3.29 (23 Jul 2019)
+===========================================
+
+* rev 8070
+
+* Security Fixes: A number of potential buffer overflows have been resolved
+  CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473, 
+  CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486
+* Deal with Set-Cookie deprecation on normal pages (Thanks, Erik Schminke)
+* Support glibc->tirpc migration on newer distributions
+* Fix certain flags not being set on GCC 8/9
+* Fix wrong doc for --merge-clientlocal option (Thanks, Thomas Eckert)
+* Fix CSP errors on trends pages (Thanks, John Thurston)
+* Accept minimum libcares version >= 1.5.1; update bundled to 1.15.0
+* Fix RRD parsing for recent netstat (net-tools) on Linux
+* Ensure Content-Type always set in HTML headers (Thanks, Christoph Berg)
+* Ignore additional common tmpfs partitions on recent Linux
+* Fix NONETPAGE parsing (Thanks, John Horne)
+* Increase hard max xymon message size from 10MB to 64MB to match 4.4-alpha
+* Fix line-off-by-one error in logfetch retrieval when triggers are used
+  (Thanks, Toshimitsu FUJIWARA)
+* Fixes to do_temperature parsing (Thanks, Michael Pins)
+* Add support for GNU Hurd and GNU/kFreeBSD
+* Don't require apache authz_groupfile module by default when not needed
+* Add --no-cpu-listing option to xymond_client to block 'top' output in
+  cpu test (Thanks, John Horne)
+* Double-quote the display name of host titles handed to RRD
+* Ensure NTP checks not hung for unreachable hosts (Thanks, Tom Schmidt)
+* Standardize xymonnet SMTP/s protocol conversation (Thanks, Tom Schmidt)
+* AIX: Report Actual Memory and Phys/Entitled CPU capacity (Thanks, Stef Coene)
+* snmp: Fix parsing error with SNMPv3 config parsing (Thanks, Jeremy Laidman)
+* RRD: Fix parsing error with DS files containing commas - http* only (Thanks, John Horne)
+
+
+Changes from 4.3.27 -> 4.3.28 (17 Jan 2017)
+===========================================
+
+* rev 8005
+
+* Catch addition possible errors during SSL handshake
+  for standard TCP checks
+* Fix misparsing of --timelimit and --huge options in
+  xymonnet (Reported by Foster Patch)
+* Fix memory leak when processing netapp test reports
+  (Reported by Peter Welter)
+* The included version of c-ares has been bumped to version 1.12.0
+* Fix for building on OpenSSL 1.1.0 (Thanks, Axel Beckert)
+* Add TLS variant specification to http checks, using newer funcs
+  in OpenSSL 1.1.0 (From Henrik)
+* Fix overflow when skipping >2G pending data in logfetch
+  (Reported by Sergey, a_s_y at sama.ru)
+* xymond_alert will no longer exit and be relaunched if started
+  while there's no actual alertable condition. (Thanks, Franco G.)
+* Fix mis-parsing of PCRE regex's in client-local.cfg when char
+  ranges are present (Reported by Erik D. Schminke)
+* The size limit of message data passed to SCRIPT alerts is 
+  configurable with the MAXMSG_ALERTSCRIPT variable.
+* Summary messages should work again (Thanks, Axel)
+* Many typos in comments and man pages have been corrected
+  (Thanks, Axel et al. at Debian)
+* Change netstat RRD numbers to be slightly more human-readable
+  (Thanks Roland Rosenfeld)
+
+
 Changes from 4.3.26 -> 4.3.27 (24 Mar 2016)
 ===========================================
 
 * rev 7957
 
-* Don't treat empty (0 byte) directory size as invalid
+* Don't treat empty (0 byte) directory size as invalid 
   (Reported by Bert Willekens)
 * Fix looping redirect on criticaleditor.sh
 * Allow NK-critical acknowledgements from status pages
 * Fix redirect to criticalview.sh, which is just a
   regular CGI
-* Properly recognize https URLs as summary links (Thanks,
+* Properly recognize https URLs as summary links (Thanks, 
   David Steinn Geirsson)
 * Add compile-time check for SSLv3 support
 
@@ -277,19 +358,18 @@
 * Restrict characters allowed for hostnames and testnames
 * HTML encode error log output on xymond/net/gen pages
 * HTML encode ghost hostnames output on xymond/ghostlist pages
-* logfetch: only evaluate the first config of a given type seen for
+* logfetch: only evaluate the first config of a given type seen for 
   the same file name
 * xymongen/reports: fix vague error message around missing history files
   and properly exclude clientlog statuses (Reported by Magdi Mahmoud)
-* Ensure configured CLASS overrides in hosts.cfg are always passed on
+* Ensure configured CLASS overrides in hosts.cfg are always passed on 
   to client workers, regardless of 'class' for that specific message
   (Reported by Steve Hill)
 
-
 Changes from 4.3.24 -> 4.3.25 (05 Feb 2016)
 ===========================================
 
-* rev 7894
+* rev 7890
 
 * Resolve buffer overflow when handling "config" file requests (CVE-2016-2054)
 * Restrict "config" files to regular files inside the $XYMONHOME/etc/ directory
@@ -341,7 +421,7 @@
 Changes from 4.3.23 -> 4.3.24 (23 Nov 2015)
 ===========================================
 
-* rev 7805
+* rev 7774
 
 * Fix occasional crash in xymond when handling group names (Thanks, Franco Gasperino)
 * Fix non-special HTTP <400 status codes red instead of yellow >.<
@@ -349,7 +429,7 @@
 
 Changes from 4.3.22 -> 4.3.23 (12 Nov 2015)
 ===========================================
- 
+
 * rev 7740
 
 * Fix broken 'TRACK' and 'OPTIONAL' identifiers in analysis.cfg
@@ -661,9 +741,8 @@
 * Document existing OPTIONAL setting in analysis.cfg for file-checks 
   on files which may not exist.
 * Document existing CLASS setting in alerts.cfg
-* Add new INFOCOLUMNGIF, CLIENTCOLUMNGIF, TRENDSCOLUMNGIF variables so
-  so the icons used for these "statuses" are configurable, and sample icons.
-  NOTE for Distributors: CC-BY-ND should be added to the package licenses
+* Add new INFOCOLUMNGIF and TRENDSCOLUMNGIF settings so the icons 
+  used for these pages are configurable.
 * Enhance Solaris client to correctly handle Solaris zones.
 * Add new search facilities to xymond to select hosts with the
   'xymondboard' and 'hostinfo' commands.

Modified: branches/4.x-master/RELEASENOTES
===================================================================
--- branches/4.x-master/RELEASENOTES	2019-09-23 23:24:19 UTC (rev 8119)
+++ branches/4.x-master/RELEASENOTES	2023-09-23 00:49:21 UTC (rev 8120)
@@ -61,8 +61,52 @@
 /etc/sysconfig/xymon-client or any other location where the sending 
 process will have it set. This may change for the final release.
 
-
 (Note: Previous trunk versions had an inverted version of this logic, requiring
 XYMONV4SERVER=1 to send to an older server.)
 
 
+The configure script is likely setting XYMONHOME/XYMONCLIENTHOME and
+XYMSRV/XYMSERVERS/XYMONSERVERS incorrectly, which will prevent xymonlaunch
+from correctly launching anything. Double check the xymon environment
+files (xymonserver/xymonclient.cfg) before starting either the server or
+client.
+
+The tools/xymon-client.default and tools/xymonlaunch files may be placed
+into /etc/{sysconfig,default}/{xymon-client,xymonlaunch} to more easily
+set $XYMONSERVERS
+
+Revealed by the above issue is a bug causing a crash in the client (or
+anywhere) when given an empty string as the destination argument (instead
+of 0, 127.0.0.1 or no variable set). Don't do this --> [ xymon '' "ping" ]
+
+The client and logfetch binary may be being re-compiled during 'make install'
+
+Compilation may fail if c-ares and at least one compression library is not
+present (lzo/lz4/zlib are all options). xxHash libraries are also highly
+recommended as the plan is for xxhash to replace md5 for checksumming
+functionality. libtirpc may be necessary on some platforms, and it's
+possible the build code is still expecting traditional (Sun) RPC
+
+
+
+Using Xymon with IPv6 - Alpha Notes
+===================================
+
+IPv6 transmission of messages (client->xymond, or xymonnet->xymond) 
+should be working properly.
+
+IPv6 ICMP checks (conn tests), whether specified with literals in 
+hosts.cfg or via DNS lookup, should work as expected.
+
+Other IPv6-only TCP checks (including HTTP) are not working correctly.
+
+IPv6 [literals] in URL checks are not parsed properly.
+
+
+Currently, xymond can only listen on a single address. If your system 
+supports IPv6 this will be the IPv6 interface, which means your system 
+must have the IPV6_ONLY option disabled (usually in sysctl) so as to 
+allow IPv4 connections to be completed over the IPv6 stack. Certain 
+"localhost" connections may be seen by xymond as coming from 
+"::ffff:127.0.0.1" and the IPV4-over-IPV6 addresses may be added to 
+--admin-senders in tasks.cfg to do what you want.

Modified: branches/4.x-master/debian/changelog
===================================================================
--- branches/4.x-master/debian/changelog	2019-09-23 23:24:19 UTC (rev 8119)
+++ branches/4.x-master/debian/changelog	2023-09-23 00:49:21 UTC (rev 8120)
@@ -1,7 +1,14 @@
-xymon (4.4.0-alpha1) unstable; urgency=low
+xymon (4.4.0-alpha2) unstable; urgency=low
 
    * rev ####
 
+ -- Japheth Cleaver <cle...@te...>  XXX, ## MMM 2023 00:00:00 +0100
+
+
+xymon (4.4.0-alpha1) unstable; urgency=low
+
+   * rev 8119
+
    * Support for IPv6 and TLS connections in xymond and xymon
    * Support for message compression has been added
    * Standardize command line options across most binaries
@@ -232,21 +239,118 @@
      (potentially different) compiled-in default).
    * Don't treat empty (0 byte) directory size as invalid 
      (Reported by Bert Willekens) 
+   * The XYMMSG environment variable will be checked for a message if none
+     is passed in to the xymon client utility.
+   * The Hobbit and BB-style CGI URL rewrites have been moved to a separate
+     apache config snippet file.
+   * xymonproxy will now recombine combo messages received in sending to xymond
+     over the backfeed queue.
+   * You can now pass a value (1-10) to the --bfq parameter to set up multiple
+     backfeed queues to submit to xymond on. It will rotate through them.
+   * xymond: cache hosts.cfg on reload and return this copy instead of re-reading
+     for xymonnet and other builtins on loadhostsfromxymond requests.
+   * Don't print error messages when &STRING doesn't match known XYMONENV vars
+     in web templates.
+   * Add RRDADDUPDATED variable to control timestamping of RRD graphs
+     (Thanks, John Horne)
 
- -- Japheth Cleaver <cle...@te...>  XXX, ## MMM 2016 00:00:00 +0100
+ -- Japheth Cleaver <cle...@te...>  Wed, 20 Sep 2023 00:00:00 +0100
 
 
+xymon (4.3.30) stable; urgency=high
+
+   * rev 8010
+
+   * Fix reports with dashes or underscores not visible in history logs (Thanks, Tom Schmidt)
+   * Really fix do_temperature.c report parsing for parentheses (Thanks, Tom Schmidt)
+   * Fix truncation on exec strings causing missing custom RRD titles (Thanks, Tom Schmidt) 
+   * RPC buffer calculation on snprintf taking improper sizeof (Thanks, Tom Schmidt)
+   * Don't crash on a missing allevents file
+   * Fix assorted crashes with xymongen report generation after string changes  
+   * Add guards around GCC diagnostics pragma to allow for building on older vers
+   * xymonclient-linux: Provide wide/untrimmed IP support in netstat port list
+   * Fix problems with meta-combostatuses (Thanks, Dominique Delporte)
+
+ -- Japheth Cleaver <cle...@te...>  Thu, 05 Sep 2019 13:00:00 -0800
+
+
+xymon (4.3.29) stable; urgency=medium
+
+   * rev 8070
+
+   * Security Fixes: A number of potential buffer overflows have been resolved
+     CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473, 
+     CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486
+   * Deal with Set-Cookie deprecation on normal pages (Thanks, Erik Schminke)
+   * Support glibc->tirpc migration on newer distributions
+   * Fix certain flags not being set on GCC 8/9
+   * Fix wrong doc for --merge-clientlocal option (Thanks, Thomas Eckert)
+   * Fix CSP errors on trends pages (Thanks, John Thurston)
+   * Accept minimum libcares version >= 1.5.1; update bundled to 1.15.0
+   * Fix RRD parsing for recent netstat (net-tools) on Linux
+   * Ensure Content-Type always set in HTML headers (Thanks, Christoph Berg)
+   * Ignore additional common tmpfs partitions on recent Linux
+   * Fix NONETPAGE parsing (Thanks, John Horne)
+   * Increase hard max xymon message size from 10MB to 64MB to match 4.4-alpha
+   * Fix line-off-by-one error in logfetch retrieval when triggers are used
+     (Thanks, Toshimitsu FUJIWARA)
+   * Fixes to do_temperature parsing (Thanks, Michael Pins)
+   * Add support for GNU Hurd and GNU/kFreeBSD
+   * Don't require apache authz_groupfile module by default when not needed
+   * Add --no-cpu-listing option to xymond_client to block 'top' output in         
+     cpu test (Thanks, John Horne)
+   * Double-quote the display name of host titles handed to RRD
+   * Ensure NTP checks not hung for unreachable hosts (Thanks, Tom Schmidt)
+   * Standardize xymonnet SMTP/s protocol conversation (Thanks, Tom Schmidt)
+   * AIX: Report Actual Memory and Phys/Entitled CPU capacity (Thanks, Stef Coene)
+   * snmp: Fix parsing error with SNMPv3 config parsing (Thanks, Jeremy Laidman)
+   * RRD: Fix parsing error with DS files containing commas - http* only (Thanks, John Horne)
+
+ -- Japheth Cleaver <cle...@te...>  Tue, 23 Jul 2019 08:30:00 -0800
+
+
+xymon (4.3.28) stable; urgency=medium
+
+   * rev 8005
+
+   * Catch addition possible errors during SSL handshake
+     for standard TCP checks
+   * Fix misparsing of --timelimit and --huge options in
+     xymonnet (Reported by Foster Patch)
+   * Fix memory leak when processing netapp test reports 
+     (Reported by Peter Welter)
+   * The included version of c-ares has been bumped to version 1.12.0
+   * Fix for building on OpenSSL 1.1.0 (Thanks, Axel Beckert)
+   * Add TLS variant specification to http checks, using newer funcs
+     in OpenSSL 1.1.0 (From Henrik)
+   * Fix overflow when skipping >2G pending data in logfetch
+     (Reported by Sergey, a_s_y at sama.ru)
+   * xymond_alert will no longer exit and be relaunched if started
+     while there's no actual alertable condition. (Thanks, Franco G.)
+   * Fix mis-parsing of PCRE regex's in client-local.cfg when char
+     ranges are present (Reported by Erik D. Schminke)
+   * The size limit of message data passed to SCRIPT alerts is
+     configurable with the MAXMSG_ALERTSCRIPT variable.
+   * Summary messages should work again (Thanks, Axel)
+   * Many typos in comments and man pages have been corrected
+     (Thanks, Axel et al. at Debian)
+   * Change netstat RRD numbers to be slightly more human-readable
+     (Thanks Roland Rosenfeld)
+
+ -- Japheth Cleaver <cle...@te...>  Tue, 17 Jan 2017 16:30:00 -0800
+
+
 xymon (4.3.27) stable; urgency=medium
 
    * rev 7957
 
-   * Don't treat empty (0 byte) directory size as invalid
+   * Don't treat empty (0 byte) directory size as invalid    
      (Reported by Bert Willekens)
    * Fix looping redirect on criticaleditor.sh
    * Allow NK-critical acknowledgements from status pages
    * Fix redirect to criticalview.sh, which is just a
      regular CGI
-   * Properly recognize https URLs as summary links (Thanks,
+   * Properly recognize https URLs as summary links (Thanks, 
      David Steinn Geirsson)
    * Add compile-time check for SSLv3 support
 
@@ -266,11 +370,11 @@
    * Restrict characters allowed for hostnames and testnames
    * HTML encode error log output on xymond/net/gen pages
    * HTML encode ghost hostnames output on xymond/ghostlist pages
-   * logfetch: only evaluate the first config of a given type seen for
+   * logfetch: only evaluate the first config of a given type seen for 
      the same file name
    * xymongen/reports: fix vague error message around missing history files
      and properly exclude clientlog statuses (Reported by Magdi Mahmoud)
-   * Ensure configured CLASS overrides in hosts.cfg are always passed on
+   * Ensure configured CLASS overrides in hosts.cfg are always passed on 
      to client workers, regardless of 'class' for that specific message
      (Reported by Steve Hill)
 
@@ -279,7 +383,7 @@
 
 xymon (4.3.25) stable; urgency=high
 
-   * rev 7894
+   * rev 7890
 
    * Resolve buffer overflow when handling "config" file requests (CVE-2016-2054)
    * Restrict "config" files to regular files inside the $XYMONHOME/etc/ directory 
@@ -331,16 +435,16 @@
 
 xymon (4.3.24) stable; urgency=high
 
-   * rev 7805
+   * rev 7774
 
    * Fix occasional crash in xymond when handling group names (Thanks, Franco Gasperino)
-   * Fix non-special HTTP <400 status codes red instead of yellow >.<
+   * Fix non-special HTTP <400 status codes red instead of yellow >.<   
 
  -- Japheth Cleaver <cle...@te...>  Mon, 23 Nov 2015 17:40:00 -0800
 
 
 xymon (4.3.23) unstable; urgency=high
- 
+
    * rev 7740
 
    * Fix broken 'TRACK' and 'OPTIONAL' identifiers in analysis.cfg
@@ -408,7 +512,7 @@
    * Add ACK_COOKIE_EXPIRATION for environment control of cookie validity duration (Noted by Thomas Giordmaina)
    * combostatus: fix core dumps on Solaris when dealing with erroneous config
 
- -- Japheth Cleaver <cle...@te...>  Fri, 6 Nov 2015 08:00:00 -0700
+ -- Japheth Cleaver <cle...@te...>  Fri, 6 Nov 2015 06:00:00 -0800
 
 
 xymon (4.3.21) unstable; urgency=medium

This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.

[Xymon-developer] SNMPv3 patch

[Jeremy L. <je...@la...>]

Hi all

The attached patch fixes some bugs in the parser of snmphosts.cfg that make
the SNMPv3 implementation mostly useless. These are all off-by-one errors
that cause strings like "passphrase=" to never be found in the
configuration file.

I've also changed two instances of debug logging to error logging because
they're errors that need operator/sysadmin intervention: one is an error in
the configuration (eg "Host X ... no such name") and the other is a
connection timeout.

Cheers
Jeremy

[Xymon-developer] xymongrep & dialup hosts

[Dr. F. L. <rl...@ca...>]

Hi all,

The '--no-down' option to xymongrep omits hosts which are down according 
to https://xymon.sourceforge.io/xymon/help/manpages/man1/xymongrep.1.html 
. In common/xymongrep.c this is implemented with the test "if ((color == 
COL_RED) || (color == COL_BLUE))". When hosts are offline but marked as 
dialup, color == COL_CLEAR, so offline dialup hosts are probed despite 
'--no-down'.

The manpage doesn't address whether offline dialup hosts should or 
shouldn't be omitted, so it's hard to claim this behaviour is a bug. I 
expected dialup hosts to be omitted by default, but others may differ and 
it feels unwise to change well-established behaviour.

The attached patch adds a '--no-down-dialup' flag to explicitly omit these 
hosts. I'd appreciate feedback, comments, criticism etc.

Yours,

Frank

[Xymon-developer] Some small patches

[Stef C. <ste...@do...>]

Hi,

I have some small patches that I apply on my local version of the client.
Some of these are maybe helpful for others:

1: Set $loopcount to a random number.
We had a problem where was a problem with the auto update function. As a 
result, it was stuck in an auto update loop and so constantly restarting 
the service. The problem was that there was also a slow scan command 
defined that ran in the background. This slow scan command was triggered 
on all are servers at every restart since the first run is per 
definition a slow scan. This was some sort of self-inflicted DDOS attack 
on our infrastructure.
This change will randomize the slow scan:
4167c4167
< $loopcount = ($script:XymonSettings.slowscanrate - 1)
---
 > $loopcount = Get-Random -Maximum ($script:XymonSettings.slowscanrate - 1)


2: Set the clientname variable for external scripts.
3850d3849
<     $env:clientname = $script:clientname


3: Disable SSL certificate check if you use https to upload the data to 
the xymon server.
This is preferable configured via a configuration file option:
3018a3019
 > 
[Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}


Stef

Re: [Xymon-developer] [Xymon] Xymon 4.3.30 Released

[Axel B. <ab...@de...>]

Hi,

On Sat, Aug 15, 2020 at 12:21:24AM -0400, Ralph M wrote:
> I think direct SSL wrapping is what I need, thanks.
> 
> Would it be unreasonable to suggest that the SSL setup, decryption, etc be
> offloaded to a standalone program that then delivers the message to the
> core daemon in the same manner as cgimsg?  I'd like to get Apache out of
> the loop, and just have an SSL-enabled message receiver funneling status
> messages to the core daemon.

That's easy: I use stunnel (Debian package "stunnel4") for that. Also
gives you instant IPv6 reachability for the Xymond.

Server setup (relevant snippet from my /etc/stunnel/stunnel.conf):

[bbs6]
accept = :::1983
connect = 1984

Since it's encrypted and has better privacy, I use port 1983 for that
with the mnemonic "before 1984". :-)

Client (relevant snippets from my /etc/stunnel/stunnel.conf and
/etc/default/xymon-client):

[bbs]
accept  = 127.0.0.1:1984
connect = <your-xymon-server>:1983
client = yes

and

XYMONSERVERS="127.0.0.1"

The client snippets are from a host which has no IPv4 connectivity
(besides localhost).

		Kind regards, Axel
-- 
PGP: 2FF9CD59612616B5      /~\  Plain Text Ribbon Campaign, http://arc.pasp.de/
Mail: ab...@de...  \ /  Say No to HTML in E-Mail and Usenet
Mail+Jabber: ab...@no...  X
https://axel.beckert.ch/   / \  I love long mails: https://email.is-not-s.ms/

Re: [Xymon-developer] Client reports getting muddled up

[Ralph M <ral...@gm...>]

I think I saw something in one of the patches to fix the client report
munging.  I'm currently in the Dark Ages, with 4.3.12, on hardware that
should have been life-cycled about 10 years ago...  I'm supposed to be
getting new hardware sometime soon.  When I get that, I'll pick up the
latest release.

One problem I have with upgrading is making sure I carry over a few patches
I've made, some of which have already been rolled into mainstream Xymon.  I
may just let the other changes go and run with vanilla 4.3.31.

Ralph Mitchell

On Tue, Aug 18, 2020 at 10:40 AM SebA <sp...@sy...> wrote:

> That's interesting Ralph.  We sometimes get the same issue with client's
> status reports getting assigned to the wrong host in the Xymon server too
> (and this is just using the normal xymond receiver).  I thought it might be
> related to one or two very big message senders though.  It's difficult to
> track down and can happen briefly, trigger an alert and vanish into the
> mist within a minute when the next report comes in (though some evidence is
> left behind in the history).  But perhaps you are getting big message
> senders are a reboot as it's sending quite a lot of data in the msg column?
>
> Kind regards,
>
> SebA
>
>
>
> On Sat, 15 Aug 2020 at 05:21, Ralph M <ral...@gm...> wrote:
>
>> I think direct SSL wrapping is what I need, thanks.
>>
>> Would it be unreasonable to suggest that the SSL setup, decryption, etc
>> be offloaded to a standalone program that then delivers the message to the
>> core daemon in the same manner as cgimsg?  I'd like to get Apache out of
>> the loop, and just have an SSL-enabled message receiver funneling status
>> messages to the core daemon.
>>
>> The problem I've been living with is, I have a bunch of near-identical
>> clients that all reboot at 1:30am to deal with a memory-leaking Java
>> program.  This means that their Xymon clients all start up at pretty much
>> the same time and deliver messages fairly close together.  From time to
>> time a message storm prevents some clients getting through, and sometimes
>> it seems like status messages are being merged.  At least, I get clients
>> reporting filesystems they don't have, and graphs that shows max values
>> equal to the lifetime of the Universe measured in femtoseconds...
>>
>> Ralph Mitchell
>>
>>
>> On Fri, Aug 14, 2020 at 10:56 PM Japheth Cleaver <cl...@te...>
>> wrote:
>>
>>> Hi Ralph,
>>>
>>> For direct SSL wrapping of client submission to xymond, yes. For
>>> authentication of source messages via proxy or intermediary, no.
>>>
>>> For high-volume situations, or where a reply is not needed, cgimsg will
>>> still be a useful mechanism. SSL setup, teardown, and decryption in the
>>> core daemon still has an impact, so offloading that to a receiver for
>>> termination would be recommended depending on your scale.
>>>
>>> Regards,
>>> -jc
>>>
>>> On 8/14/2020 7:30 PM, Ralph M wrote:
>>>
>>> Is the 4.4 release going to have encrypted communications?  I'm not
>>> supposed to send plain text over the network, so I've been faking it with
>>> curl posting to xymoncgimsg on port 443.  It would be really nice to get
>>> port 1984 opened and do it properly.
>>>
>>> Thanks,
>>>
>>> Ralph Mitchell
>>>
>>>
>>> On Fri, Jul 31, 2020 at 11:33 AM James Louis <jgl...@gm...>
>>> wrote:
>>>
>>>> Thanks for the update Japheth!
>>>>
>>>> On Fri, Jul 31, 2020 at 9:27 AM Japheth Cleaver <cl...@te...>
>>>> wrote:
>>>>
>>>>> Hi Jim,
>>>>>
>>>>> I'm looking at the XSS report and sorting through a variety of the
>>>>> patches since this release now.
>>>>> There will be a 4.3.31 release with this as well as other updates, as
>>>>> well as a 4.4 pre-release. Due to there being a longish gap, a maintenance
>>>>> release is appropriate.
>>>>>
>>>>> -jc
>>>>>
>>>>>
>>>>> On 7/31/2020 7:15 AM, James Louis wrote:
>>>>>
>>>>> Japheth,
>>>>>
>>>>> Will 4.3.31 be out soon or will it jump to 4.4?
>>>>>
>>>>> Thanks,
>>>>> Jim
>>>>>
>>>>> On Thu, Sep 5, 2019 at 5:29 PM Japheth Cleaver <cl...@te...>
>>>>> wrote:
>>>>>
>>>>>> Xymon 4.3.30 has been released and is now available for download.
>>>>>>
>>>>>> 4.3.30 is mostly a bug-fix release, quashing issues stemming from the
>>>>>> security fixes in 4.3.29, including improperly-tight restrictions on
>>>>>> allowed characters in hostname for browsing along with several other
>>>>>> parsing errors. Thanks in particular to Tom Schmidt for his assistance
>>>>>> in tracking these down.
>>>>>>
>>>>>> Xymon should also now be more easily buildable on older GCC versions
>>>>>> without the diagnostics pragma available.
>>>>>>
>>>>>> Xymon 4.3.30 is available from the Xymon SourceForge page at
>>>>>> https://sourceforge.net/projects/xymon/
>>>>>>
>>>>>> As always, thank you to all who have contributed code, ideas, and
>>>>>> features
>>>>>> to the project!
>>>>>>
>>>>>>
>>>>>> Regards,
>>>>>> Japheth "J.C." Cleaver
>>>>>>
>>>>>> _______________________________________________
>>>>>> Xymon mailing list
>>>>>> Xy...@xy...
>>>>>> http://lists.xymon.com/mailman/listinfo/xymon
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> *Jim Louis           \\\\||////           \ ~ ~  /           | @ @ | *
>>>>>
>>>>>
>>>>> *--oOo---(_)---oOo-- *
>>>>>
>>>>> “It does me no injury for my neighbor to say there are twenty gods, or
>>>>> no God. It neither picks my pocket nor breaks my leg.”
>>>>>
>>>>> ~ Thomas Jefferson
>>>>>
>>>>>
>>>>>
>>>>
>>>> --
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> *Jim Louis           \\\\||////           \ ~ ~  /           | @ @ | *
>>>>
>>>>
>>>> *--oOo---(_)---oOo-- *
>>>>
>>>> “It does me no injury for my neighbor to say there are twenty gods, or
>>>> no God. It neither picks my pocket nor breaks my leg.”
>>>>
>>>> ~ Thomas Jefferson
>>>> _______________________________________________
>>>> Xymon mailing list
>>>> Xy...@xy...
>>>> http://lists.xymon.com/mailman/listinfo/xymon
>>>>
>>>
>>> _______________________________________________
>> Xymon mailing list
>> Xy...@xy...
>> http://lists.xymon.com/mailman/listinfo/xymon
>>
>