ICMP ping does not work after update to 0.8.7d

[Helmut Schneider]

Hi,

after the upgrade rrdtool seems not called anymore (on all 3 servers):

[root@BSDHelmut /var/www/cacti]# ls -lat /var/www/cacti/rra
total 5634
drwxr-xr-x 2 www cacti 3072 Mar 5 23:18 .
dr-xr-xr-x 14 root wheel 1536 Mar 5 23:18 ..
-rw-rw-r-- 1 www cacti 0 Mar 5 23:18 .placeholder
-rw-rw-r-- 1 www cacti 47840 Mar 5 23:15 ipv4-gw_mem_buffers_78.rrd
-rw-rw-r-- 1 www cacti 47840 Mar 5 23:15 ipv4-gw_mem_swap_79.rrd
-rw-rw-r-- 1 www cacti 441112 Mar 5 23:15 ipv4-gw_usedswap_77.rrd
[...]

Running rrdtool manually is fine:

[root@BSDHelmut /var/www/cacti]# chroot -u www /var/www/ /usr/local/bin/rrdtool create /var/www/cacti/rra/ipv4-gw_mem_swap_79.rrd --step 300 DS:cpu:GAUGE:600:0:100 RRA:AVERAGE:0.5:1:600 RRA:AVERAGE:0.5:6:700 RRA:AVERAGE:0.5:24:775 RRA:AVERAGE:0.5:288:797 RRA:MAX:0.5:1:600 RRA:MAX:0.5:6:700 RRA:MAX:0.5:24:775 RRA:MAX:0.5:288:797
[root@BSDHelmut /var/www/cacti]# ls -lat /var/www/cacti/rra total 5634
-rw-rw-r-- 1 www cacti 47840 Mar 6 12:45 ipv4-gw_mem_swap_79.rrd
drwxr-xr-x 2 www cacti 3072 Mar 5 23:18 .
dr-xr-xr-x 14 root wheel 1536 Mar 5 23:18 ..
-rw-rw-r-- 1 www cacti 0 Mar 5 23:18 .placeholder
-rw-rw-r-- 1 www cacti 47840 Mar 5 23:15 ipv4-gw_mem_buffers_78.rrd
[...]

Edit: Correct me if I'm wrong but something with ping changed (times out) so the hosts are considered as down and therefore no rrds are updated, correct?!

03/06/2009 01:15:01 PM - SYSTEM STATS: Time:1.2408 Method:cmd.php Processes:1 Threads:N/A Hosts:5 HostsPerProcess:5 DataSources:17 RRDsProcessed:0

After switching from ICMP ping to snmp ping the rrds are updated again. Is my presumption correct and if, is there a fix available?

Thanks, Helmut

[TheWitness]

There is a patch for ICMP. Check the patches site.

TheWitness

[Helmut Schneider]

I installed http://www.cacti.net/downloads/patches/ ... eout.patch but unfortunately the problem persists:

ICMP ping Timed out

According to tcpdump cacti simply does not ICMP-ping at all (TCP yes, also UDP). Is there a way to verbosely/manually ping? The installation is chroot'ed but always has been. ICMP always worked fine in the past.

[TheWitness]

On you poller, I need you to post your ping shell command options. Also, run this script and send me the output.

<?php echo PHP_OS; ?>

In the mean time, revert lib/ping.php. Is will make a patch.

TheWitness

[Helmut Schneider]

I'm running FreeBSD 7.1, http://www.freebsd.org/cgi/man.cgi?quer ... .3-RELEASE

ping itself works fine within the jail as user www:

[root@BSDHelmut ~]# chroot -u www /var/www/ /sbin/ping -c 1 192.168.124.10
PING 192.168.124.10 (192.168.124.10): 56 data bytes
64 bytes from 192.168.124.10: icmp_seq=0 ttl=64 time=0.483 ms

--- 192.168.124.10 ping statistics ---
1 packets transmitted, 1 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 0.483/0.483/0.483/0.000 ms
[root@BSDHelmut ~]#

I replaced ping.php from 0.8.7b2 and get the following error shown:

Warning: socket_create() [function.socket-create]: Unable to create socket [1]: Operation not permitted in /var/www/cacti/lib/ping.php on line 158

Warning: socket_set_block() expects parameter 1 to be resource, boolean given in /var/www/cacti/lib/ping.php on line 160

Interestingly all hosts are 'up' now and all data is processed, even when set to "icmp ping only"...

[TheWitness]

Again, please provide the calling parameters for ping. Also, please provide the output from the scriptlet I sent you. You did not do either.

TheWitness

[Helmut Schneider]

One must copy 'ping' into jail. That's it. Did that change wirh 0.8.7.d?!

Thanks anyway, Helmut

[TheWitness]

On you poller, I need you to post your ping shell command options. Also, run this script and send me the output.

<?php echo PHP_OS; ?>

In the mean time, revert lib/ping.php. Is will make a patch.

TheWitness

Please respond to these questions. Yes, it changed.

Thanks,

TheWitness

[Helmut Schneider]

[quote]<?php echo PHP_OS; ?>[/quote]

FreeBSD

[quote]On you poller, I need you to post your ping shell command options.[/quote]

Not sure what you mean.

BTW:

<?php
shell_exec("ping -t 1000 -c 1 192.168.124.10");
?>

works fine according to tcpdump, but cacti itself only sents icmp pakets when selecting a device from the 'device' tab in the webinterface of catci.

[TheWitness]

Yes, if you are having your web in jail, you must provide it access to ping. If that's a bad thing, then we have to make some changes, or you should avoid using ICMP.

Now, more importantly is what poller are you using? Spine will only use icmp if it is setuid and owned by root.

TheWitness

[Helmut Schneider]

I'm using cmd.php as poller.

[TheWitness]

Does the poller user have ping in it's path. If not correct that.

TheWitness

[Helmut Schneider]

The poller is running non-chroot'ed as root and yes, ping is in root's path.

[TheWitness]

That makes no sense then.

[Helmut Schneider]

http://img21.imageshack.us/img21/9141/cacti1.jpg

ipv4-gw and zeus are configured to use 'SNMP' and shown as 'up'.
apollo and bsdhelmut are configured to use 'ping' or 'snmp and/or ping'. The hosts are considered as 'down' (but are not of course).

Now I click on 'bsdhelmut' and as you can see ICMP Ping results are fine. Upon clicking ICMP is seen using tcpdump, but only upon clicking (I'd expect some packets at least once every 5 minutes).

http://img13.imageshack.us/img13/1984/cacti2.jpg

I have 3 Cacti machines, all FreeBSD7.1, they all behave the same since 0.8.7d.