Re: [collectd] [Collectd] Host resolution

2011-08-10 Thread Sebastian Harl
Hi,

On Wed, Aug 10, 2011 at 12:02:52AM +0200, Mariusz Gronczewski wrote:
 2011/8/9 Jeremy MAURO jma...@antidot.net:
 new versions of wireshark have collectd protocol decoder, that + ngrep
 should find it fast :)
 
 on related topic does anyone know is it possible to filter like
 ignore values if $host in putval doesn't match reverse DNS of host
 that send it ?

That's not currently possible. That information is only available to the
'network' plugin. However, it would be possible to let the network
plugin add the remote host's IP address to all received value-lists
using the meta-data mechanism. This could then be used in a new match
plugin to check the reverse DNS with the hostname provided in the value-
list. Feel free to send patches ;-) I'll add a note to the wiki and
might take care of it *some* day ;-)

  Let me explain the reason, on my collectd server I see rrdbases for the
  hostname 'localhost' (of course it is not from my collectd server
  itself), do cd ..I have a way to know which server is the sender? How to
  I determine the trouble maker?
 
  Of course I have 500 servers and it is not possible to stop the server
  one by one :D

The stuff suggested above would make it possible to detect, log,
whatever stuff like that as well ;-)

Cheers,
Sebastian

-- 
Sebastian tokkee Harl +++ GnuPG-ID: 0x8501C7FC +++ http://tokkee.org/

Those who would give up Essential Liberty to purchase a little Temporary
Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin



signature.asc
Description: Digital signature
___
collectd mailing list
collectd@verplant.org
http://mailman.verplant.org/listinfo/collectd


[collectd] [Collectd] Host resolution

2011-08-09 Thread Jeremy MAURO
Hi everyone,

I have a quick question for you, I am using collectd version: 
4.10.1-1+squeeze2 (On debian Squeeze), could you explain to me how the 
host resolution is made for the plugins network.

Let me explain the reason, on my collectd server I see rrdbases for the 
hostname 'localhost' (of course it is not from my collectd server 
itself), do cd ..I have a way to know which server is the sender? How to 
I determine the trouble maker?

Of course I have 500 servers and it is not possible to stop the server 
one by one :D



-- 
Regards,
J M



___
collectd mailing list
collectd@verplant.org
http://mailman.verplant.org/listinfo/collectd


Re: [collectd] [Collectd] Host resolution

2011-08-09 Thread Mariusz Gronczewski
2011/8/9 Jeremy MAURO jma...@antidot.net:
 Hi everyone,

 I have a quick question for you, I am using collectd version:
 4.10.1-1+squeeze2 (On debian Squeeze), could you explain to me how the
 host resolution is made for the plugins network.

 Let me explain the reason, on my collectd server I see rrdbases for the
 hostname 'localhost' (of course it is not from my collectd server
 itself), do cd ..I have a way to know which server is the sender? How to
 I determine the trouble maker?

 Of course I have 500 servers and it is not possible to stop the server
 one by one :D
Hi,

new versions of wireshark have collectd protocol decoder, that + ngrep
should find it fast :)

on related topic does anyone know is it possible to filter like
ignore values if $host in putval doesn't match reverse DNS of host
that send it ?

Regards
XANi

___
collectd mailing list
collectd@verplant.org
http://mailman.verplant.org/listinfo/collectd