NEWS 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242
  1. This file documents the major additions and syntax changes between releases.
  2. 1.4.15 ...
  3. ENHANCEMENTS
  4. New check_ntp_peer -m and -n options to check the number of usable time sources ("truechimers")
  5. FIXES
  6. Fix check_ircd binding to wrong interface (#668778)
  7. Add proxy-authorization option to check_http (Marcel Kuiper - #1323230, Bryan Irvine - #2863925)
  8. check_icmp now increment the sequence counter in each packet
  9. Fix usage of repeated -o options in check_snmp
  10. Try to detect arguments passed via --with-ping[6]-command and set options accordingly (#2908236)
  11. Fix memory leak in check_http for large pages (Jimmy Bergman - #2957455)
  12. Fix compilation with GCC 2.96 (Konstantin Khomoutov - #2977105)
  13. Fix regression introduced in #1867716 where partially valid performance strings would not be printed anymore
  14. WARNINGS
  15. Updated developer documentation to say that performance labels should not have an equals sign or
  16. single quote in the label
  17. 1.4.14 16th September 2009
  18. check_http has options to specify the HTTP method (#2155152)
  19. check_users thresholds were not working exactly as documented (>= rather than >)
  20. Updated tinderbox_build script to point to new tinderbox server
  21. check_ifoperstatus -n flag now works as expected (sf.net #1569488)
  22. check_ifoperstatus now supports ifType based lookup for ifIndex
  23. check_ups now sends a LOGOUT string (debian bug #387001)
  24. Extra-opts (C plugins) now allows both '#' and ';' for comments (like N::P)
  25. Extra-opts (C plugins) does not allow trailing comments anymore (like N::P)
  26. Fixed dependency issue on libtap when ./configure --enable-libtap used. Warning: will install libtap
  27. Fixed segfault in extra-opts under some circumstance when reading multiple sections
  28. Fix long options parsing in check_disk, check_dns, check_mrtg, check_mrtgtraf and check_tcp
  29. Add missing long options for check_nt (for use with extra-opts)
  30. check_icmp now reports min and max round trip time perfdata (Steve Rader)
  31. Fixed check_http bug where additional headers with redirection caused a segfault (Dieter Van de Walle - 2089159)
  32. check_disk: make autofs mount paths specified with -p before we determine the mount list (Erik Welch)
  33. Fixed buffer overflow in check_ntp/check_ntp_peer (#1999319, Ubuntu #291265)
  34. Re-bundled libtap as a built-in library (--enable-libtap): detects system library as pre-1.4.13 and does not install the built-in library anymore
  35. Fixed check_mrtg returning UNKNOWN instead of OK (bug #2378068)
  36. Fixed check_http behaviour: all check are now performed as long as a valid response is returned (sf.net #1460312)
  37. check_http --onredirect=sticky follows using the same IP address (sf.net #2550208)
  38. check_http --onredirect=stickyport also follows the same port
  39. Fixed coredump from check_nt when invalid drive is specified (#2179754 - Olli Hauer)
  40. Fixed crash from check_nt when -H unspecified or given multiple times (sf.net #2731755, debian #521097)
  41. Fixed passing of quotes in OID for check_snmp (#1985230 - Jan Wagner, patch by John Barbuto)
  42. Fixed check_http sending HTTP/1.0 with v1.1 headers (#2638765)
  43. Fixed check_http not timing-out on redirects
  44. Fixed negate not printing the real timeout in ALRM handler when left to default
  45. negate timeout result is now configurable
  46. Fixed segfault in check_mysql with old slaves (#2696823 - Oskar Ahner)
  47. check_nt can return UNKNOWN on timeouts (-u)
  48. Fixed typos for check_disk (Chris Pepper)
  49. Fixed check_mysql* not using password set in my.cnf (#2531905 - Ben Timby) - Specify an empty password explicitly if you need to override it.
  50. Fixed awk subst.in/subst script path error (#2722832 - Martin Foster)
  51. check_http: Add SSL/TLS hostname extension support (SNI) - (#1939022 - Joe Presbrey)
  52. Fixed wrong perfdata label for output traffic in check_mrtgtraf (#2654308 - Gavin Williams)
  53. Fixed check_by_ssh interpretation of quotes in -C parameter (#1985246, #2268675)
  54. check_snmp now supports standard threshold ranges and doubles (floating numbers) in thresholds
  55. check_fping now supports passing target timeout and interval to fping (#2347686 - Martin Foster)
  56. Fixed SNMPv3 behaviour of check_ifoperstatus and check_ifstatus. Added -P to define privprotocol (#2343438 - Robin Schroeder)
  57. check_ifoperstatus and check_ifstatus are now more user-friendly in case of missing arguments
  58. pst3 compile fix for Sun Studio Compiler (Grant Byers)
  59. 1.4.13 25th Sept 2008
  60. Fix Debian bug #460097: check_http --max-age broken (Hilko Bengen)
  61. Optimised pst3 for systems with large number of processes (Duncan Ferguson)
  62. Updated Nagios::Plugin to 0.27
  63. Fix Debian bug #479013: check_dig's -l is mandatory now (sf.net #1986306)
  64. check_dig now returns CRITICAL instead of WARNING when no answer section is found
  65. check_procs now captures stderr in external command and adds to plugin output
  66. check_snmp now only prints perfdata for non numeric values (#1867716)
  67. check_icmp now supports packet size modification
  68. check_http -e now accepts a comma-delimited list of expected status codes (Sven Nierlein)
  69. libtap now included with this distribution for easier testing. Run ./configure with --enable-libtap
  70. check_ntp_peer/check_ntp_time used to show port in --help but ignored the argument - now implemented
  71. Fix possible segfault in check_ntp_peer with deliberately invalid packets
  72. 1.4.12 27th May 2008
  73. Added ./check_nt -v INSTANCES to count number of instances (Alessandro Ren)
  74. New check_icmp -s option to specify the source IP address
  75. check_dns now sorts addresses for testing results for more than one returned IP (Matthias Urlichs)
  76. Fix segfault in check_ntp_time and (deprecated) check_ntp (Bug #1862300)
  77. check_disk should now work with large file systems (2TB+) on all archs that supports it
  78. Fixed check_disk disk usage calculation when using --group=NAME (related to bug #1348746)
  79. Fix help text of check_ntp* (Bug #1880095)
  80. Fix bugs and flaws in best offset server selection of check_ntp_time and (deprecated) check_ntp
  81. check_ntp_peer now checks for the LI_ALARM flag
  82. Sync to latest Gnulib (includes new floorf function)
  83. check_pgsql now successfully builds with postgres lib v8.3 (Bug #1878972)
  84. check_procs now accepts --ereg-argument-array for a regular expression match to the argument array
  85. Reverted back to using pst3 for Solaris systems. Fixed issues re: -m64 needed to compile on 64bit systems
  86. If applicable, Gettext linked dynamically instead of statically
  87. check_dig can now pass arguments to dig by using -A/--dig-arguments (#1874041/#1889453)
  88. check_ntp and check_ntp_peer now show proper jitter/stratum thresholds longopts in --help
  89. check_dns now allow to repeat -a to match multiple possibly returned address (common with load balancers)
  90. check_mysql and check_radius now try clearing password in processlist just like check_mysql_query
  91. check_mysql and check_mysql_query now support sockets explicitely (-s, --socket)
  92. negate now has the ability to replace the status text as well (-s, --substitute)
  93. Added performance data to check_ping (Christian Schneemann)
  94. Added support for --extra-opts in all C plugins (disabled by default, see configure --help)
  95. Fixed passive option in check_by_ssh
  96. On non-skipped stderr, check_by_ssh now returns UNKNOWN or worse (result from command) instead of always UNKNOWN.
  97. Fix linking against OpenSSL where libdl is required
  98. 1.4.11 13th December 2007
  99. Fixed check_http regression in 1.4.10 where following redirects to
  100. relative URLs on virtual hosts failed if both "-H" and "-I" were used
  101. Merged two new checks that deprecates check_ntp: check_ntp_peer and check_ntp_time.
  102. You should read the --help output so see which one is suitable for you. check_ntp_peer
  103. implement stratum thresholds support (feature request #1703823).
  104. check_ntp now returns UNKNOWN instead of WARNING if jitter is unavailable (jitter=-1.000000)
  105. as long as the thresholds range include -1. If no offset threshold is specified
  106. and the offset is unavailable, will return UNKNOWN as well.
  107. NOTE: If jitter thresholds are specified as integers it will return CRITICAL if jitter
  108. is "-1" as the default range starts at 0. See Examples in --help output.
  109. Fixed broken usage2 in check_snmp and check_cluster
  110. check_cluster now accepts all valid characters in its thresholds ("-", "@", "~")
  111. Fixed check_disk reporting OK if disk usage grows over 100% (bug #1348746).
  112. The problem happens to be in Gnulib but a workaround have been implemented in check_disk.c
  113. Fixed check_load argument handling when not passing triplets (bug #1831890)
  114. Fixed buffer overflow in check_snmp (CVE-2007-5623)
  115. Tinderbox builds now runs tests in a verbose mode
  116. Updated Nagios::Plugin to 0.22
  117. VPATH problem fixed for compiling plugins-root
  118. 1.4.10 28th September 2007
  119. Fix check_http buffer overflow vulnerability when following HTTP redirects (CVE-2007-5198)
  120. check_http now explicitly asks HTTP/1.1 servers to close the connection
  121. after completion of the response
  122. Check_ldaps' guessing which secure method to use (starttls vs. ssl on connect)
  123. is now deprecated. See --help for further information.
  124. Check_disk now calls stat() on all filesystems to check. (Old: only the ones selected using -p)
  125. A meaningful error message (eg "Stale NFS Handle") is printed if stat fails.
  126. New check_disk option -L: Only check local filesystems, but call stat() on remote ones, too.
  127. Thus accessibility of remote filesystems can be checked without any threshold comparison.
  128. Check_disk's --help now prints some examples for the new features introduced in 1.4.8
  129. New check_disk -i/-I option to ignore pathes/partitions based on regular expressions
  130. New check_disk -A option to select all filesystems explicitly
  131. WARNING: check_disk's -E option must now be passed before -p or -r/-R arguments
  132. Passing -E after -p or -r results in UNKNOWN state, now
  133. This is needed due to the new ignore feature
  134. Fix check_disk bug when mixing case sensitive and case insensitive regex arguments
  135. New check_dhcp -u/--unicast option for emulating a DHCP relay in order
  136. to check DHCP servers on remote networks
  137. New check_dhcp -m/--mac option which allows for specifying the MAC
  138. address to use in the DHCP request
  139. The check_dhcp -r and -s options now accept host names, too
  140. Fix possible check_icmp bus errors on some (non-x86/AMD64) platforms
  141. Fix check_smtp's handling of multiple-packet server responses
  142. WARNING: Fix for negate which may break existing commands:
  143. - stop evaluating command line options through shell twice
  144. - enforce a full path for the command to run
  145. The "negate" utility can now remap custom states
  146. Check_radius now supports radiusclient-ng
  147. The (undocumented) positional parameter parsing which check_radius used
  148. instead of getopt(3) if 8 arguments were given is no longer available
  149. Check_by_ssh now supports multiline output
  150. IPv6 support can now be disabled using ./configure --without-ipv6
  151. Fix check_ntp now honor ntp flags
  152. 1.4.9 4th June 2007
  153. Inclusion of contrib/check_cluster2 as check_cluster with some improvements
  154. New/improved -E/--skip-stderr and -S/--skip-stdout options for check_by_ssh
  155. check_snmp now supports Counter64
  156. Fix compilation of check_ldap, check_radius and check_pgsql
  157. check_load can optionally divide by number of cpus
  158. Fix check_time returning wrong OK when time is before the epoch on some arch
  159. Make check_http output more consistent
  160. Fix possible check_http segfaults when following HTTP redirects
  161. check_snmp don't warn anymore if something is printed on stderr
  162. Fix check_tcp segfault when multiple expect strings are given
  163. New option for check_tcp: -A/--all to test if all given expect strings match
  164. 1.4.8 11th April 2007
  165. Respects --without-world-permissions for setuid plugins
  166. check_disk extra options for regex matching of filesystems and grouping of filesystems
  167. for collective thresholds
  168. Better configure test for mysqlclient availability
  169. Various check_ntp fixes
  170. 1.4.7 29th March 2007
  171. check_procs uses /usr/ucb/ps if available - fixes pst3 problems on Solaris
  172. Fixed MKINSTALLDIRS problem in po/
  173. ./configure now detects if possible to compile check_mysql
  174. Fixed broken HELO in check_smtp
  175. check_icmp now allows to set a minimum number of hosts required for successs (-m)
  176. check_icmp fix for *BSD when running for long time
  177. check_ping times out 1 second quicker if host is unreachable
  178. Root plugins installed with world executable
  179. check_sybase from contrib now maintained in NagiosExchange
  180. --with-nagios-user/group reinstated ./configure option
  181. New --without-world-permissions ./configure option
  182. 1.4.6 5th February 2007
  183. Reduced number of DNS lookups in check_ping and netutils.c for IPv6 configurations
  184. Fixed compile problems with *BSD re: alloca.h
  185. Fixed Solaris problems with check_swap (tested on Solaris 9)
  186. Fixed check_swap for HP/UX where swapinfo command was incorrect
  187. Fixed check_disk inode threshold checks, regressed at r1.4.4.
  188. Fixed crit/warn for check_disk perf data
  189. Fixed buffer overflow in check_procs
  190. Fixed error handling for UNIX sockets in netutils.c
  191. New -q and -o options for check_by_ssh which are handed over to ssh(1) as is
  192. Synced with latest GNUlib
  193. Fixed check_jabber always returns warning
  194. 1.4.5
  195. Fixed bug in perl's is_hostname routine
  196. 1.4.4
  197. New C based check_ntp. The perl version is now deprecated.
  198. New check_apt plugin
  199. Notice: plugins in contrib/ will start to be removed from this distribution.
  200. Please check at http://www.nagiosexchange.org for contributed plugins
  201. Major bug fixes to check_disk where values were incorrectly calculated and alerted on.
  202. check_udp2 removed. check_udp is now linked to check_tcp.c
  203. check_mailq now errors if the sub-program run returns non-zero return code. This would appear
  204. as if mailqs were okay when the nagios user could not query the mail-queues
  205. Compile problems with check_snmp fixed
  206. 1.4.3
  207. Setuid plugins (check_dhcp, check_icmp) separated into plugins-root/. Run make install as root to install
  208. SSL plugins work with gnutls as well as OpenSSL
  209. check_mysql_query added to run arbitrary SQL commands, with threshold checking
  210. libtool now required for development systems
  211. Notice: check_udp (compiled from check_udp.c) will be deprecated in the next release.
  212. check_udp2 should be used instead and will be renamed to check_udp
  213. 1.4.2
  214. Fix for Redhat ES4 for check_dns and check_dig
  215. 1.4
  216. IPv6 support in check_ping, check_by_ssh, check_http, check_ldap, check_smtp, check_tcp
  217. Internationalisation support
  218. Performance data added to most plugins
  219. check_disk now using GNU coreutils code
  220. New plugins - check_dhcp, check_icmp
  221. contrib/check_citrix has been replaced by contrib/check_ica* (requires packet_utils.pm in libexec)
  222. check_http --min changed to --pagesize, added max so min:max in check
  223. check_vsz and check_rss deprecated - functionality moved into check_procs
  224. check_swap % thresholds changed to measure amount free, instead of amount used
  225. check_disk syntax changes for -p, -m/-M, defaults to MB instead of kB
  226. check_procs -C expects no path for the command name