Alerting

[teirekos]

Hello,
Perhaps I am doing smthing wrong but I am not able to receive emails via the NLS GUI.
From CLI I am able to receive emails (mail -s ...).
I attach a screenshot from one alert I have created which I do not receive any email.

Thanx.

[Box293]

What version of Log Server are you running?

Do test emails from the GUI work?
Administration > General > Mail Settings
Test Settings

[teirekos]

I am running the latest 2015r1.4
I attach a screenshot from my mail settings with the error I get. Unfortunately the error is not clear as you can see. The strange thing is that the 1st time I ran the test it worked, but then it does not.

[eloyd]

Is SMTP port 670 the correct port?

[teirekos]

yes

[eloyd]

What shows up in your mail log file? (Typically, /var/log/maillog) on the sending and/or receiving machine? Can you verify from the command line that you are able to connect to port 670 on the mail host from your NLS host (an easy way is to telnet <mailhost>:670)

[teirekos]

the /var/log/maillog is empty and the telnet works fine. Is there any other place where we can see some loging for alerting?

[jolson]

I would perform the following from your NLS command line:

Code: Select all

tcpdump -n dst port 670 -X

Once you have started the tcpdump, run the 'test settings' command from your Web GUI a few times. Report the results back - typically any return errors will be specified in the tcpdump stream.

[teirekos]

screenshot from GUI Mail test attached.
Output of tump follows:
[root@NagiosLogServer2 tmp]# tcpdump -n dst port 670 -X
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
10:03:41.826734 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags , seq 1056329634, win 14600, options [mss 1460,sackOK,TS val 3020587470 ecr 0,nop,wscale 7], length 0
0x0000: 4500 003c ce6c 4000 4006 4c33 0a01 0b0b E..<.l@[email protected]....
0x0010: 0a01 0110 d272 029e 3ef6 4fa2 0000 0000 .....r..>.O.....
0x0020: a002 3908 5559 0000 0204 05b4 0402 080a ..9.UY..........
0x0030: b40a 81ce 0000 0000 0103 0307 ............
10:03:41.827711 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags [.], ack 1222246525, win 115, options [nop,nop,TS val 3020587471 ecr 0], length 0
0x0000: 4500 0034 ce6d 4000 4006 4c3a 0a01 0b0b E..4.m@[email protected]:....
0x0010: 0a01 0110 d272 029e 3ef6 4fa3 48da 007d .....r..>.O.H..}
0x0020: 8010 0073 7352 0000 0101 080a b40a 81cf ...ssR..........
0x0030: 0000 0000 ....
10:03:41.828651 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags [.], ack 125, win 115, options [nop,nop,TS val 3020587472 ecr 7046080], length 0
0x0000: 4500 0034 ce6e 4000 4006 4c39 0a01 0b0b E..4.n@[email protected]....
0x0010: 0a01 0110 d272 029e 3ef6 4fa3 48da 00f9 .....r..>.O.H...
0x0020: 8010 0073 eea9 0000 0101 080a b40a 81d0 ...s............
0x0030: 006b 83c0 .k..
10:03:41.871538 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 0:16, ack 125, win 115, options [nop,nop,TS val 3020587515 ecr 7046080], length 16
0x0000: 4500 0044 ce6f 4000 4006 4c28 0a01 0b0b E..D.o@[email protected](....
0x0010: 0a01 0110 d272 029e 3ef6 4fa3 48da 00f9 .....r..>.O.H...
0x0020: 8018 0073 2053 0000 0101 080a b40a 81fb ...s.S..........
0x0030: 006b 83c0 4548 4c4f 2031 302e 312e 3131 .k..EHLO.10.1.11
0x0040: 2e31 310a .11.
10:04:41.920886 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 16:27, ack 125, win 115, options [nop,nop,TS val 3020647564 ecr 7046082], length 11
0x0000: 4500 003f ce70 4000 4006 4c2c 0a01 0b0b E..?.p@[email protected],....
0x0010: 0a01 0110 d272 029e 3ef6 4fb3 48da 00f9 .....r..>.O.H...
0x0020: 8018 0073 204e 0000 0101 080a b40b 6c8c ...s.N........l.
0x0030: 006b 83c2 4155 5448 204c 4f47 494e 0a .k..AUTH.LOGIN.



10:05:28.591980 IP 10.1.11.11.54056 > 10.1.1.16.vacdsm-sws: Flags , seq 2634662773, win 14600, options [mss 1460,sackOK,TS val 3020694235 ecr 0,nop,wscale 7], length 0
0x0000: 4500 003c e1ae 4000 4006 38f1 0a01 0b0b E..<..@[email protected].....
0x0010: 0a01 0110 d328 029e 9d09 c375 0000 0000 .....(.....u....
0x0020: a002 3908 e1ad 0000 0204 05b4 0402 080a ..9.............
0x0030: b40c 22db 0000 0000 0103 0307 ..".........
10:05:28.592794 IP 10.1.11.11.54056 > 10.1.1.16.vacdsm-sws: Flags [.], ack 1580662827, win 115, options [nop,nop,TS val 3020694236 ecr 0], length 0
0x0000: 4500 0034 e1af 4000 4006 38f8 0a01 0b0b E..4..@[email protected].....
0x0010: 0a01 0110 d328 029e 9d09 c376 5e37 002b .....(.....v^7.+
0x0020: 8010 0073 ea9b 0000 0101 080a b40c 22dc ...s..........".
0x0030: 0000 0000 ....
10:05:28.593558 IP 10.1.11.11.54056 > 10.1.1.16.vacdsm-sws: Flags [.], ack 125, win 115, options [nop,nop,TS val 3020694237 ecr 7047147], length 0
0x0000: 4500 0034 e1b0 4000 4006 38f7 0a01 0b0b E..4..@[email protected].....
0x0010: 0a01 0110 d328 029e 9d09 c376 5e37 00a7 .....(.....v^7..
0x0020: 8010 0073 61c8 0000 0101 080a b40c 22dd ...sa.........".
0x0030: 006b 87eb .k..
10:05:28.594588 IP 10.1.11.11.54056 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 0:16, ack 125, win 115, options [nop,nop,TS val 3020694238 ecr 7047147], length 16
0x0000: 4500 0044 e1b1 4000 4006 38e6 0a01 0b0b E..D..@[email protected].....
0x0010: 0a01 0110 d328 029e 9d09 c376 5e37 00a7 .....(.....v^7..
0x0020: 8018 0073 2053 0000 0101 080a b40c 22de ...s.S........".
0x0030: 006b 87eb 4548 4c4f 2031 302e 312e 3131 .k..EHLO.10.1.11
0x0040: 2e31 310a .11.
10:05:41.967065 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 27:55, ack 125, win 115, options [nop,nop,TS val 3020707610 ecr 7046683], length 28
0x0000: 4500 0050 ce71 4000 4006 4c1a 0a01 0b0b E..P.q@[email protected].....
0x0010: 0a01 0110 d272 029e 3ef6 4fbe 48da 00f9 .....r..>.O.H...
0x0020: 8018 0073 205f 0000 0101 080a b40c 571a ...s._........W.
0x0030: 006b 861b 4d41 494c 2046 524f 4d3a 3c6e .k..MAIL.FROM:<n
0x0040: 6c73 4074 6972 6573 6961 732e 6772 3e0a [email protected]>.
10:06:28.654794 IP 10.1.11.11.54056 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 16:27, ack 125, win 115, options [nop,nop,TS val 3020754298 ecr 7047150], length 11
0x0000: 4500 003f e1b2 4000 4006 38ea 0a01 0b0b E..?..@[email protected].....
0x0010: 0a01 0110 d328 029e 9d09 c386 5e37 00a7 .....(......^7..
0x0020: 8018 0073 204e 0000 0101 080a b40d 0d7a ...s.N.........z
0x0030: 006b 87ee 4155 5448 204c 4f47 494e 0a .k..AUTH.LOGIN.
10:06:42.008980 IP 10.1.11.11.53874 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 55:87, ack 125, win 115, options [nop,nop,TS val 3020767652 ecr 7047283], length 32
0x0000: 4500 0054 ce72 4000 4006 4c15 0a01 0b0b E..T.r@[email protected].....
0x0010: 0a01 0110 d272 029e 3ef6 4fda 48da 00f9 .....r..>.O.H...
0x0020: 8018 0073 2063 0000 0101 080a b40d 41a4 ...s.c........A.
0x0030: 006b 8873 5243 5054 2054 4f3a 3c6b 6b6f .k.sRCPT.TO:<kko
0x0040: 7473 6f6b 616c 4074 6972 6573 6961 732e tsokal@tiresias.
0x0050: 6772 3e0a gr>.
10:07:28.694595 IP 10.1.11.11.54056 > 10.1.1.16.vacdsm-sws: Flags [P.], seq 27:55, ack 125, win 115, options [nop,nop,TS val 3020814338 ecr 7047750], length 28
0x0000: 4500 0050 e1b3 4000 4006 38d8 0a01 0b0b E..P..@[email protected].....
0x0010: 0a01 0110 d328 029e 9d09 c391 5e37 00a7 .....(......^7..
0x0020: 8018 0073 205f 0000 0101 080a b40d f802 ...s._..........
0x0030: 006b 8a46 4d41 494c 2046 524f 4d3a 3c6e .k.FMAIL.FROM:<n
0x0040: 6c73 4074 6972 6573 6961 732e 6772 3e0a [email protected]>.
^C
13 packets captured
13 packets received by filter
0 packets dropped by kernel

[jolson]

It looks like the transmission doesn't get as far as it should. Let's get the full flow - run the following on NLS.

Code: Select all

tcpdump -n host 10.1.1.16 -X

And perform 'test settings' once more. We should be able to catch some sort of an error response by running this test.