Hello!

The command netstat under Linux truncates long ipv6 adresses. This has the effect that rules like the following does not work as expected:

PORT LOCAL=2001:6b0:b:231:130:238:31:23:22 STATE=LISTEN MAX=1 "TEXT=SSHD v6"

An ugly workaround is to truncate the string in the rule also:

PORT LOCAL=2001:6b0:b:231:130:238:3:22 STATE=LISTEN MAX=1 "TEXT=SSHD v6"

A better solution would be for xymon to use the flag "-T" on the netstat command under Linux. Other operative systems may need other flags or need no flag.

Best regards

-- Anders Liljegren Mail: IT och inköp, Uppsala universitet Phone: +46 18 4717751 Box 887 mailto:anders.liljegren at uadm.uu.se SE-751 08 UPPSALA http://www.anst.uu.se/andelilj Sweden