<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>kevin&#039;s blog &#187; Monitoring</title>
	<atom:link href="http://blog.kevin-k.com/category/monitoring/feed" rel="self" type="application/rss+xml" />
	<link>http://blog.kevin-k.com</link>
	<description>just another blog from just another blogger.</description>
	<lastBuildDate>Mon, 19 Jul 2010 18:03:39 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Linux Interface-Mirroring</title>
		<link>http://blog.kevin-k.com/2009-12-24/linux-interface-mirroring.html</link>
		<comments>http://blog.kevin-k.com/2009-12-24/linux-interface-mirroring.html#comments</comments>
		<pubDate>Thu, 24 Dec 2009 10:40:00 +0000</pubDate>
		<dc:creator>kevin</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[Netzwerk]]></category>

		<guid isPermaLink="false">http://blog.kevin-k.com/?p=883</guid>
		<description><![CDATA[apt-get install daemonlogger daemonlogger -i eth0 -o eth3]]></description>
			<content:encoded><![CDATA[
<div class="wp_syntax"><div class="code"><pre class="text" style="font-family:monospace;">apt-get install daemonlogger
daemonlogger -i eth0 -o eth3</pre></div></div>

]]></content:encoded>
			<wfw:commentRss>http://blog.kevin-k.com/2009-12-24/linux-interface-mirroring.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>snmpd: cannot open /proc/net/dev or /proc/net/snmp</title>
		<link>http://blog.kevin-k.com/2009-06-22/snmpd-cannot-open-procnetdev-or-procnetsnmp.html</link>
		<comments>http://blog.kevin-k.com/2009-06-22/snmpd-cannot-open-procnetdev-or-procnetsnmp.html#comments</comments>
		<pubDate>Mon, 22 Jun 2009 21:14:01 +0000</pubDate>
		<dc:creator>kevin</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[Sicherheit]]></category>

		<guid isPermaLink="false">http://blog.kevin-k.com/?p=621</guid>
		<description><![CDATA[I get the following message in syslog from snmpd: Jun 22 17:10:43 test snmpd[9508]: cannot open /proc/net/snmp ... Jun 22 17:10:45 test snmpd[9508]: cannot open /proc/net/dev ... The problem is, that snmpd has no rights to access the proc-filesystem to gather information about interfaces and so. check the rights of the user and group of [...]]]></description>
			<content:encoded><![CDATA[<p>I get the following message in syslog from snmpd:</p>

<div class="wp_syntax"><div class="code"><pre class="text" style="font-family:monospace;">Jun 22 17:10:43 test snmpd[9508]: cannot open /proc/net/snmp ...
Jun 22 17:10:45 test snmpd[9508]: cannot open /proc/net/dev ...</pre></div></div>

<p>The problem is, that snmpd has no rights to access the proc-filesystem to gather information about interfaces and so.</p>
<p>check the rights of the user and group of snmpd:</p>

<div class="wp_syntax"><div class="code"><pre class="text" style="font-family:monospace;">root@test:~$ cat /proc/$(pidof snmpd)/status | grep -i -e &quot;^[u|g]id&quot;
Uid:    106     106     106     106
Gid:    0       0       0       0</pre></div></div>

<p>In my case, the problem was that i was running a grsec kernel (stupid default kernel of my root) and access to proc by users was permitted by the kernel.<br />
to change this, you must change your kernel config (see grsecurity for instructions).</p>
<p>another solution is to change the user or group to a special grsec user/group. but event this is not working correct under some distributions, but <a href="http://blog.oxynux.org/post/2008/12/07/Grsec-snmpd">patching the source code of snmpd</a> may help.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.kevin-k.com/2009-06-22/snmpd-cannot-open-procnetdev-or-procnetsnmp.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
