Re: Unknown host showed up

[address@hidden]

Hi,

the "ipaddrin" column contains the client IP address as viewed by M/Monit - you 
can see it in the "Admin -> Host" page in the "Address" column. There are few 
exceptions:

1.) If the host is behind NAT/masquerading, it may not correspond to local IP 
address on the host

2.) If the monit configuration in "set httpd" column contains the "address" 
option, it's used instead of the client's address as Monit listens on that 
interface only ... that is most probably your case.

You can find the IP address of that host in the M/Monit access log. To enable 
the access log, modify the conf/server.xml configuration in M/Monit directory: 
uncomment the "AccessLogger" element and reload M/Monit.

Best regards,
Martin


> On 18 Sep 2018, at 09:25, Sorin Srbu <address@hidden> wrote:
> 
> Hi all,
> 
> An unknown host showed up in the hostlist in M/Monit called
> localhost.localdomain. It's most probably a misconfigured newly installed
> machine, but I can't seem to find its IP in M/Monit web-gui.
> 
> Is there anything special to it?
> 
> We use sqlite as a database in our small environment, so I figured it'd be
> easy to just open the db with eg DB browser for SQLite and look it up.
> I loaded the mmonit.db from /usr/local/mmonit/mmonit-3.7.1/db in the
> sqlite-browser, went to Browse data and choose the host table and found the
> host. It was the only one running monit v5.5.
> 
> Hostid points to  nameid which in turn points to a name  which points to
> "localhost.localdomain".
> 
> Is the ipaddrin column in the host table supposed to show just "localhost"?
> 
> But how do I find the ip-address??
> 
> I'd be grateful for some pointers.
> 
> -- 
> BW,
>       Sorin
> -----------------------------------------------------------
> # Sorin Srbu, Sysadmin
> # Uppsala University
> # Dept of Medicinal Chemistry
> # Div of Org Pharm Chem
> # Box 574
> # SE-75123 Uppsala
> # Sweden      
> #
> # Phone: +46 (0)18-4714482
> # Visit: BMC, Husargatan 3, B5:404b
> # Web: https://www.ilk.uu.se/
> -----------------------------------------------------------
> # O<  ASCII ribbon campaign - Against html E-mail 
> # http://tinyurl.com/ascii-ribbon-campaign
> #
> # This message was not sent from an iProduct!
> #
> # Please consider the environment before printing this email.
> # Join the campaign at http://thinkBeforePrinting.org
> #
> # MotD follows:
> CentOS: Built from packages provided by a company that rhymes with Dead Rat.
> 
> -- 
> To unsubscribe:
> https://lists.nongnu.org/mailman/listinfo/monit-general