<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style></style></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=WordSection1>Thomas:<o:p></o:p><o:p> </o:p>Thanks for investigating. It sounds like you already understand the problem. Do you think it’s a load balancer they have sitting in front of their site?<o:p></o:p><o:p> </o:p>I agree, there are few sites that work this way, but if you would be willing to make check_http a bit more flexible you could get it thoroughly against Sprint’s site. =) <o:p></o:p><o:p> </o:p>Frank<o:p></o:p><o:p> </o:p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>From: Thomas Guyot-Sionnest [mailto:dermoth@aei.ca] Sent: Tuesday, March 06, 2012 12:29 AM To: Nagios Plugin Development Mailing List Cc: Frank Bulk Subject: Re: [Nagiosplug-devel] check_http fails to redirect to secure sites<o:p></o:p></div></div><o:p> </o:p> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 12-02-23 11:28 PM, Frank Bulk wrote: > <o:p></o:p> > Starting this morning two of the sites I monitor failed, <o:p></o:p> > <a href="http://www.sprint.net">www.sprint.net</a> <a href="http://www.sprint.net"><http://www.sprint.net></a> and<o:p></o:p> <a href="http://www.sprintv6.net">www.sprintv6.net</a> <o:p></o:p> > <a href="http://www.sprintv6.net"><http://www.sprintv6.net></a>. After some testing it?s<o:p></o:p> become clear to <o:p></o:p> > me that check_http doesn?t currently redirect to secure<o:p></o:p> sites, even <o:p></o:p> > with the use of the '-f follow' command. I guess Sprint<o:p></o:p> turned on <o:p></o:p> > redirection to the secure version this morning. <o:p></o:p> > <o:p></o:p> > Not sure whether to call this a bug or working-as-designed,<o:p></o:p> but I?m <o:p></o:p> > request the follow feature be enhanced to allow redirection<o:p></o:p> to the <o:p></o:p> > secure version of host. <o:p></o:p> > <o:p></o:p> > I'm running check_http version 1.4.15. <o:p></o:p> > <o:p></o:p> > Here's a copy of my tests: <o:p></o:p> > <o:p></o:p> ><o:p></o:p>============================================================================== <o:p></o:p> > <o:p></o:p> > <o:p></o:p> > nagios:/etc/nagios3# > <o:p></o:p> > nagios:/etc/nagios3# /usr/lib/nagios/plugins/check_http -H<o:p></o:p> <o:p></o:p> > <a href="http://www.sprint.net">www.sprint.net</a> <a href="http://www.sprint.net"><http://www.sprint.net></a> -4 <o:p></o:p> > <o:p></o:p> > CRITICAL - Socket timeout after 10 seconds <o:p></o:p> > <o:p></o:p> > nagios:/etc/nagios3# <o:p></o:p> > This actually has to do with <a href="http://www.sprint.net">www.sprint.net</a> not honoring the "Connection: close" header and leaving the socket open. check_http currently doesn't rely on the "Content-Length:" header to determine when the request is complete, it rather insert a "Connection: close" header in the request and wait for the remote server to close the socket - if the remote leaves the connection open check_http times out. So that could be a feature request - however there is so few devices/webservers working this way that I'm wondering if it's even valid according to the RFC's - I'd have to check. Thanks - -- Thomas -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - <a href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</a> iEYEARECAAYFAk9VrooACgkQ6dZ+Kt5Bcha7CgCdEGXPcgZySOaujHWb0dIxM4MC LecAoOJgT1s7v1yywnv6smDLmZjbnQda =dmWt -----END PGP SIGNATURE-----<o:p></o:p></div></body></html>