Re: [Nagios-devel] running checks on a specific network interface
Posted: Fri Aug 27, 2004 8:26 am
--=-hdXEziwf3v+dK18Ppw2/
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
On Fri, 2004-08-27 at 07:26 +0200, Andreas Ericsson wrote:
> ping is installed suid root on most (all?) linux systems, since it also=20
> requires root access to open raw sockets and send ICMP packages. That=20
> doesn't really matter, however, since the interface's routing table also=20
> needs to match the destination IP, and what good would it do to have two=20
> different interfaces in the same subnet that aren't bonded?
Yes, but setting the interface also affects the source IP address, which
is where I've used it--for example, testing IPSEC tunnels. I cannot say
why the original posted wanted the feature; the answer from several of
you was "that's not theorectically possible to do in the program itself;
use routing tables" and my response was that it is in fact possible.
Practical or easy, I do not know.
Wil
--=20
Wil Cooley [email protected]
Naked Ape Consulting http://nakedape.cc
--=-hdXEziwf3v+dK18Ppw2/
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQBBL2CaJpn3uYWUEaoRAhXuAJ9G3ev7znzg4gKdc5vZ99ZUR1gwyACfXTQT
3z3UV/u5R/f1qKQ15/PZDRU=
=08aZ
-----END PGP SIGNATURE-----
--=-hdXEziwf3v+dK18Ppw2/--
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
On Fri, 2004-08-27 at 07:26 +0200, Andreas Ericsson wrote:
> ping is installed suid root on most (all?) linux systems, since it also=20
> requires root access to open raw sockets and send ICMP packages. That=20
> doesn't really matter, however, since the interface's routing table also=20
> needs to match the destination IP, and what good would it do to have two=20
> different interfaces in the same subnet that aren't bonded?
Yes, but setting the interface also affects the source IP address, which
is where I've used it--for example, testing IPSEC tunnels. I cannot say
why the original posted wanted the feature; the answer from several of
you was "that's not theorectically possible to do in the program itself;
use routing tables" and my response was that it is in fact possible.
Practical or easy, I do not know.
Wil
--=20
Wil Cooley [email protected]
Naked Ape Consulting http://nakedape.cc
--=-hdXEziwf3v+dK18Ppw2/
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQBBL2CaJpn3uYWUEaoRAhXuAJ9G3ev7znzg4gKdc5vZ99ZUR1gwyACfXTQT
3z3UV/u5R/f1qKQ15/PZDRU=
=08aZ
-----END PGP SIGNATURE-----
--=-hdXEziwf3v+dK18Ppw2/--
This post was automatically imported from historical nagios-devel mailing list archives
Original poster: [email protected]