Package: nagios-plugins-basic Version: 1.4.8-2.2 Severity: important
check_http doesn't handle IPv6 addresses correctly: $ /usr/lib/nagios/plugins/check_http -p 80 -H 2A01:5D8:52F4:3AE9:214:BFFF:FE65:A5E9 Connection refused Unable to open TCP socket strace shows that if there is a number after the first colon in the IP, it is used as port number, even when invoked with -p 80: $ strace /usr/lib/nagios/plugins/check_http -p 80 -H 2A01:5D8:52F4:3AE9:214:BFFF:FE65:A5E9 [...] connect(3, {sa_family=AF_INET6, sin6_port=htons(5), inet_pton(AF_INET6, "2a01:5d8:52f4:3ae9:214:bfff:fe65:a5e9", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ECONNREFUSED (Connection refused) [...] $ strace /usr/lib/nagios/plugins/check_http -p 80 -H 2001:41d0:1:5db3::1 [...] connect(3, {sa_family=AF_INET6, sin6_port=htons(41), inet_pton(AF_INET6, "2001:41d0:1:5db3::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ECONNREFUSED (Connection refused) [...] Everything works fine when using hostnames, however, it makes checks dependant on DNS availability, which mays lead to false positives. -- System Information: Debian Release: lenny/sid APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: arm (armv5tel) Kernel: Linux 2.6.22-2-ixp4xx Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages nagios-plugins-basic depends on: ii iputils-ping 3:20070202-3 Tools to test the reachability of ii libc6 2.7-4 GNU C Library: Shared libraries ii libssl0.9.8 0.9.8g-3 SSL shared libraries ii procps 1:3.2.7-5 /proc file system utilities ii ucf 3.004 Update Configuration File: preserv nagios-plugins-basic recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]