Hello Martin,

I added the Ping explicitly so that program such as Nagios could "ping" the FD.  I have never tried or used it myself, but it should work, and I think there is a nagios program in the src/examples directory that does so.  The main consideration is that the Ping must be sent using Bacula communications protocol.

Note: if you really do not want security messages, you should be able to exclude them in the Messages resource.

Best regards,
Kern

On 4/4/19 6:21 PM, Martin Simmons wrote:
Since the probing is now visible in job logs, it would be useful to have a
safe way of doing this.

Can probes use the Ping message?

https://www.bacula.org/git/cgit.cgi/bacula/tree/bacula/src/filed/job.c?h=Branch-9.4#n489

__Martin


On Thu, 4 Apr 2019 18:06:26 +0200, Kern Sibbald said:
Hello,

The Security Alert messages indicate the some one or some process is
probing your FD port but is not using Bacula protocol.  It typically
happens with port scanners or programs attempting to see if the Bacula
FD is alive, neither of which are using Bacula communications protocols.

Best regards,
Kern

On 4/4/19 9:08 AM, Phil Stracchino wrote:
I am seeing the following message or messages like it in every backup
job that runs.


04-Apr 04:30 jumpgate-fd JobId 0: Security Alert: job.c:508 FD expecting
Hello got bad command from 10.24.32.15. Len=0.

04-Apr 04:30 asgard-fd JobId 0: Security Alert: Message repeated 1
times: job.c:508 FD expecting Hello got bad command from 10.24.32.15. Len=0.

04-Apr 04:30 narn-fd JobId 0: Security Alert: job.c:508 FD expecting
Hello got bad command from 10.24.32.15. Len=0.


In backups that ran on 9.4.1 this message is not present.  Is there a
functional change in 9.4.2 relevant to this that requires some
configuration change?  Or is it a bug?


Here's a complete example job log:

04-Apr 04:30 minbar-dir JobId 21695: shell command: run BeforeJob
"/etc/bacula/checkhost narn"
04-Apr 04:30 minbar-dir JobId 21695: BeforeJob: Client narn has address
10.24.32.16
04-Apr 04:30 minbar-dir JobId 21695: Start Backup JobId 21695,
Job=Narn_Backup.2019-04-04_04.30.00_30
04-Apr 04:30 minbar-dir JobId 21695: Using Device "FileStorage" to write.
04-Apr 04:30 narn-fd JobId 21695:      /netstore is a different
filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /proc is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /run is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /sys is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /tmp is a different filesystem.
Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /var/httpd is a different
filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /var/lib/nfs/rpc_pipefs is a
different filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /shares is a different
filesystem. Will not descend from / into it.
04-Apr 04:30 narn-fd JobId 21695:      /dev/shm is a different
filesystem. Will not descend from /dev into it.
04-Apr 04:30 narn-fd JobId 21695:      /dev/pts is a different
filesystem. Will not descend from /dev into it.
04-Apr 04:30 narn-fd JobId 21695:      /dev/mqueue is a different
filesystem. Will not descend from /dev into it.
04-Apr 04:30 narn-fd JobId 0: Security Alert: job.c:508 FD expecting
Hello got bad command from 10.24.32.15. Len=0.
04-Apr 04:30 asgard-sd JobId 21695: Elapsed time=00:00:40, Transfer
rate=3.593 MBytes/second
04-Apr 04:30 minbar-dir JobId 21695: Bacula minbar-dir 9.4.2 (04Feb19):
    Build OS:               x86_64-pc-linux-gnu gentoo
    JobId:                  21695
    Job:                    Narn_Backup.2019-04-04_04.30.00_30
    Backup Level:           Incremental, since=2019-04-03 04:30:03
    Client:                 "narn" 9.4.2 (04Feb19) x86_64-pc-linux-gnu,gentoo,
    FileSet:                "Gentoo Full Set" 2011-11-04 15:18:14
    Pool:                   "Incr-Disk" (From Job IncPool override)
    Catalog:                "Catalog" (From Client resource)
    Storage:                "asgard-file" (From Pool resource)
    Scheduled time:         04-Apr-2019 04:30:00
    Start time:             04-Apr-2019 04:30:03
    End time:               04-Apr-2019 04:30:43
    Elapsed time:           40 secs
    Priority:               10
    FD Files Written:       1,621
    SD Files Written:       1,621
    FD Bytes Written:       143,541,862 (143.5 MB)
    SD Bytes Written:       143,750,160 (143.7 MB)
    Rate:                   3588.5 KB/s
    Software Compression:   None
    Comm Line Compression:  66.4% 3.0:1
    Snapshot/VSS:           no
    Encryption:             no
    Accurate:               no
    Volume name(s):         INCR-20190404-04:30
    Volume Session Id:      6
    Volume Session Time:    1554343291
    Last Volume Bytes:      2,440,308,820 (2.440 GB)
    Non-fatal FD errors:    0
    SD Errors:              0
    FD termination status:  OK
    SD termination status:  OK
    Termination:            Backup OK

04-Apr 04:30 minbar-dir JobId 21695: Begin pruning Jobs older than 12
months .
04-Apr 04:30 minbar-dir JobId 21695: No Jobs found to prune.
04-Apr 04:30 minbar-dir JobId 21695: Begin pruning Files.
04-Apr 04:30 minbar-dir JobId 21695: No Files found to prune.
04-Apr 04:30 minbar-dir JobId 21695: End auto prune.




_______________________________________________
Bacula-devel mailing list
Bacula-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-devel




_______________________________________________
Bacula-devel mailing list
Bacula-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-devel

Reply via email to