[Pkg-nagios-devel] Bug#457336: check_http: interprets parts of IPv6 as port number

[Vincent Riquer]

Package: nagios-plugins-basic
Version: 1.4.8-2.2
Severity: important


check_http doesn't handle IPv6 addresses correctly:

$ /usr/lib/nagios/plugins/check_http -p 80 -H 2A01:5D8:52F4:3AE9:214:BFFF:FE65:A5E9
Connection refused
Unable to open TCP socket

strace shows that if there is a number after the first colon in the IP, it is used as port number, even when invoked with -p 80:

$ strace /usr/lib/nagios/plugins/check_http -p 80 -H 2A01:5D8:52F4:3AE9:214:BFFF:FE65:A5E9
[...]
connect(3, {sa_family=AF_INET6, sin6_port=htons(5), inet_pton(AF_INET6, "2a01:5d8:52f4:3ae9:214:bfff:fe65:a5e9", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ECONNREFUSED (Connection refused)
[...]

$ strace /usr/lib/nagios/plugins/check_http -p 80 -H 2001:41d0:1:5db3::1
[...]
connect(3, {sa_family=AF_INET6, sin6_port=htons(41), inet_pton(AF_INET6, "2001:41d0:1:5db3::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 ECONNREFUSED (Connection refused)
[...]


Everything works fine when using hostnames, however, it makes checks dependant on DNS availability, which mays lead to false positives.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: arm (armv5tel)

Kernel: Linux 2.6.22-2-ixp4xx
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages nagios-plugins-basic depends on:
ii  iputils-ping                3:20070202-3 Tools to test the reachability of 
ii  libc6                       2.7-4        GNU C Library: Shared libraries
ii  libssl0.9.8                 0.9.8g-3     SSL shared libraries
ii  procps                      1:3.2.7-5    /proc file system utilities
ii  ucf                         3.004        Update Configuration File: preserv

nagios-plugins-basic recommends no packages.

-- no debconf information