Hi I have installed gmetad/gmond on my network primarily using the defaults described in the README, including using the mcast 239.2.11.71/8649 setting. I currently use guarddog to configure my iptables; within the program I opened ports 8649,8651 and 8652. With the firewall activated I can telnet to these ports from localhost and other nodes and none appear closes (8649 prints the metric info, 8651 prints the XML page). Nmap on these ports confirm that I am not imagining anything. However, if I run 'gstat -a' or look at the XML output, the nodes, even the one running gmetad appear to be down. If I shutdown iptables (service iptables stop), then after a few seconds qstat and the webpage show everything working correctly. I ran tcpdump for both cases (sans_firewall: firewall off, avec_firewall: firewall on) and I don't see anything overly different between the packets received at :8649 except for the id number [10.1.1.2 is my server running both gmetad and gmond]:
avec_firewall:09:59:40.978538 10.1.1.2.2334 > 239.2.11.71.8649: [udp sum ok] udp 8 (DF) [ttl 1] (id 65249, len 36) avec_firewall:09:59:53.229866 10.1.1.2.2334 > 239.2.11.71.8649: [udp sum ok] udp 8 (DF) [ttl 1] (id 65250, len 36) avec_firewall:10:00:13.242172 10.1.1.2.2334 > 239.2.11.71.8649: [udp sum ok] udp 8 (DF) [ttl 1] (id 65251, len 36) sans_firewall:10:45:14.842308 10.1.1.2.2334 > 239.2.11.71.8649: [udp sum ok] udp 8 (DF) [ttl 1] (id 502, len 36) sans_firewall:10:45:34.854596 10.1.1.2.2334 > 239.2.11.71.8649: [udp sum ok] udp 8 (DF) [ttl 1] (id 503, len 36) Are there any other ports to which I should be paying attention or something else which would explain the strange behavior? I can provide add'l config info if needed. Thanks! pete
