{"id":696,"date":"2014-06-11T09:40:55","date_gmt":"2014-06-11T09:40:55","guid":{"rendered":"http:\/\/pingtool.org\/?p=696"},"modified":"2014-06-12T11:09:35","modified_gmt":"2014-06-12T11:09:35","slug":"zabbix-icmpping-working-cnt0-rcv0","status":"publish","type":"post","link":"https:\/\/pingtool.org\/ru\/zabbix-icmpping-working-cnt0-rcv0\/","title":{"rendered":"Zabbix \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 icmpping cnt=0 rcv=0"},"content":{"rendered":"

\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 zabbix-proxy \u043d\u0430 CentOS 6, \u0432\u0441\u0435 icmpping \/ icmppingsec \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u0435 \u0437\u0435\u0430\u0447\u0435\u043d\u0438\u044f.<\/p>\n

\u041f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DEBUG \u0440\u0435\u0436\u043c\u0430, \u043b\u043e\u0433 Zabbix \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435:<\/p>\n


\n 31790:20140611:073610.004 In process_ping() hosts_count:1
\n 31790:20140611:073610.004 \/tmp\/zabbix_proxy_31790.pinger
\n 31790:20140611:073610.004 10.20.2.20
\n 31790:20140611:073610.004 \/usr\/sbin\/fping -C5 -p200 -b1024 -t1000 2>&1 <\/tmp\/zabbix_proxy_31790.pinger\n 31790:20140611:073610.006 End of process_ping()\n 31790:20140611:073610.006 End of do_ping():SUCCEED\n 31790:20140611:073610.006 In process_values()\n 31790:20140611:073610.006 Host [10.20.2.20] cnt=0 rcv=0 min\/max\/avg=0.000000\/0.000000\/0.000000\n 31790:20140611:073610.006 In process_value()\n 31790:20140611:073610.006 End of process_value()\n<\/code><\/p>\n

\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 SELinux, \u043e\u0434\u043d\u0430\u043a\u043e audit.log \u043d\u0435 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u044b\u043b\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u043a\u043e\u043c\u043c\u0430\u043d\u0434\u0430:<\/p>\n


\nyum install -y policycoreutils-python
\n\/usr\/sbin\/semodule -DB
\n<\/code><\/p>\n

\u041e\u043f\u0446\u0438\u044f -D \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u0442 dontaudit; -B \u043f\u0435\u0440\u0435\u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u0430.<\/p>\n


\ntype=SYSCALL msg=audit(1402473587.551:550371): arch=c000003e syscall=5 success=no exit=-13 a0=0 a1=7fff2c862c70 a2=7fff2c862c70 a3=238 items=0 ppid=16064 pid=16065 auid=0 uid=500 gid=500 euid=500 suid=0 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=87526 comm=\"fping\" exe=\"\/usr\/sbin\/fping\" subj=unconfined_u:system_r:ping_t:s0 key=(null)
\ntype=AVC msg=audit(1402473588.556:550372): avc: denied { getattr } for pid=16067 comm=\"fping\" path=\"\/tmp\/zabbix_proxy_31776.pinger\" dev=dm-0 ino=784936 scontext=unconfined_u:system_r:ping_t:s0 tcontext=unconfined_u:object_r:initrc_tmp_t:s0 tclass=file
\n<\/code><\/p>\n

\u0414\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 SELinux \u0434\u043b\u044f zabbix-\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043a\u043e\u043c\u043c\u0430\u043d\u0434\u044b:<\/p>\n


\ngrep fping \/var\/log\/audit\/audit.log | audit2allow -M zabbix_fping
\nsemodule -i zabbix_fping.pp
\n<\/code><\/p>\n

\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 icmpping \/ icmppingsec \u0434\u043e\u043b\u0436\u043d\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u0441\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u043b\u043e\u0433\u043e\u043c:<\/p>\n


\n29940:20140611:071726.366 In process_ping() hosts_count:1
\n 29940:20140611:071726.366 \/tmp\/zabbix_proxy_29940.pinger
\n 29940:20140611:071726.366 10.20.2.20
\n 29940:20140611:071726.366 \/usr\/sbin\/fping -C5 -p200 -b24 -t900 2>&1 <\/tmp\/zabbix_proxy_29940.pinger\n 29940:20140611:071726.374 read line [10.20.2.20 : [0], 52 bytes, 4.14 ms (4.14 avg, 0% loss)]\n<\/code><\/p>","protected":false},"excerpt":{"rendered":"

\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 zabbix-proxy \u043d\u0430 CentOS 6, \u0432\u0441\u0435 icmpping \/ icmppingsec \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u044b \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043d\u0443\u043b\u0435\u0432\u044b\u0435 \u0437\u0435\u0430\u0447\u0435\u043d\u0438\u044f. \u041f\u043e\u0441\u043b\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DEBUG \u0440\u0435\u0436\u043c\u0430, \u043b\u043e\u0433 Zabbix \u043f\u043e\u043a\u0430\u0437\u0430\u043b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435: 31790:20140611:073610.004 In process_ping() hosts_count:1 31790:20140611:073610.004 \/tmp\/zabbix_proxy_31790.pinger 31790:20140611:073610.004 10.20.2.20 31790:20140611:073610.004 \/usr\/sbin\/fping -C5 -p200 -b1024 -t1000 2>&1 &1<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[12],"tags":[25],"class_list":["post-696","post","type-post","status-publish","format-standard","hentry","category-linux","tag-zabbix"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/posts\/696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/comments?post=696"}],"version-history":[{"count":2,"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/posts\/696\/revisions"}],"predecessor-version":[{"id":700,"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/posts\/696\/revisions\/700"}],"wp:attachment":[{"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/media?parent=696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/categories?post=696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pingtool.org\/ru\/wp-json\/wp\/v2\/tags?post=696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}