Hello!
The command netstat under Linux truncates long ipv6 adresses. This has the effect that rules like the following does not work as expected:
PORT LOCAL=2001:6b0:b:231:130:238:31:23:22 STATE=LISTEN MAX=1 "TEXT=SSHD v6"
An ugly workaround is to truncate the string in the rule also:
PORT LOCAL=2001:6b0:b:231:130:238:3:22 STATE=LISTEN MAX=1 "TEXT=SSHD v6"
A better solution would be for xymon to use the flag "-T" on the netstat command under Linux. Other operative systems may need other flags or need no flag.
Best regards
-- Anders Liljegren Mail: IT och inköp, Uppsala universitet Phone: +46 18 4717751 Box 887 mailto:anders.liljegren at uadm.uu.se SE-751 08 UPPSALA http://www.anst.uu.se/andelilj Sweden