BB Unix Network Monitor - Message

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: {bb} Ssh test passing when it should fail?



In <Pine.LNX.4.62.0504132320261.1357@morpheus> Burton Windle <bwindle@fint.org> writes:

>On Wed, 13 Apr 2005, Burton Windle wrote:

>> On Wed, 13 Apr 2005, Reed L. O'Brien wrote:
>>
>>> While I am not positive I would assume BB checks if it can make a
>>> connection.  It does make a tcp connection then the remote machine have a
>>> socket error and resets the connection.  I am guessing that BB never tries
>>> to log in, only SYN > ACK < and FIN/RST... So it makes a tcp connection and
>>> disconnects before an error.
>>
>> I think the SSH check does send some sort of data, or else you wouldn't find 
>> the bb client string that it sends to the ssh daemon in the bb-network.sh 
>> file.

>Turn on SSH checking, and then check your logs..

>Apr 13 23:14:34 balrog sshd[12026]: Bad protocol version identification
>'Big-Brother-Monitor-1.8d4' from 10.5.100.96

>At least with BB 1.8d4 (I know its old, but it works and I'm lazy), it
>connects and sends the above string.

It does *send* this string, but it doesn't *wait* for any response.

That's what Hobbit and bbgen does differently - they look for the
"SSH-2.0-OpenSSH_3.6.1p2" string that a working SSH daemon outputs
when you connect to it, and report failure if it doesn't arrive.


Regards,
Henrik
--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=
To unsubscribe from this list, or to subscribe to the bb-digest list
send e-mail to mailto:majordomo@bb4.com with unsubscribe bb -and/or-
subscribe bb-digest in the BODY of the message.


Home | Main Index | Thread Index