run the truss comand with -f flag to trace the forked child
also try to mix the strace with debugging like:
>truss -f mon -c /etc/mon/mon.cf -d
On Fri, 28 Jan 2005, Kenneth Modrego wrote:
> Hi,
>
> I've done the truss leaving only the ssh alarm to that specific serveron
> the mon.cf,
> This is the output I get from a truss -p to the mon process
>
> stat64("/usr/local/mon/mon.d/ssh.monitor", 0x000EEE90) = 0
> pipe() = 8 [9]
> fork() = 23082
> close(9) = 0
> fcntl(8, F_SETFD, 0x00000001) = 0
> time() = 1106898684
> fcntl(8, F_GETFL, 0x0048F820) = 2
> fstat64(8, 0xFFBEF860) = 0
> fstat64(8, 0xFFBEF860) = 0
> fcntl(8, F_SETFL, 0x00000080) = 0
> fcntl(8, F_GETFD, 0x00000000) = 1
> fcntl(8, F_SETFD, 0x00000001) = 0
> time() = 1106898684
> poll(0xFFBEF910, 1, 0) = 0
> time() = 1106898684
> waitid(P_ALL, 0, 0xFFBEF8D8, WEXITED|WTRAPPED|WNOHANG) = 0
> poll(0xFFBEF950, 2, 1000) (sleeping...)
> poll(0xFFBEF950, 2, 1000) = 0
> time() = 1106898685
> time() = 1106898685
> poll(0xFFBEF910, 1, 0) = 1
> read(8, " u k b h u 0 3 2 t\n u k".., 8192) = 175
> read(8, 0x004B3008, 8192) = 0
> time() = 1106898685
> waitid(P_ALL, 0, 0xFFBEF8D8, WEXITED|WTRAPPED|WNOHANG) = 0
> read(8, 0x004B7008, 8192) = 0
> send(7, " < 2 6 > m o n [ 1 0 7 6".., 60, 0) = 60
> time() = 1106898685
> time() = 1106898685
> llseek(8, 0, SEEK_CUR) Err#29 ESPIPE
> close(8) = 0
> sigaction(SIGHUP, 0xFFBEF778, 0xFFBEF8D0) = 0
> sigaction(SIGINT, 0xFFBEF778, 0xFFBEF8B0) = 0
> sigaction(SIGQUIT, 0xFFBEF778, 0xFFBEF890) = 0
> waitid(P_PID, 23082, 0xFFBEF728, WEXITED|WTRAPPED) Err#10 ECHILD
> sigaction(SIGHUP, 0xFFBEF798, 0x00000000) = 0
> sigaction(SIGINT, 0xFFBEF798, 0x00000000) = 0
> sigaction(SIGQUIT, 0xFFBEF798, 0x00000000) = 0
> getcontext(0xFFBEF5A0)
> getcontext(0xFFBEF440)
> waitid(P_ALL, 0, 0xFFBEF8D8, WEXITED|WTRAPPED|WNOHANG) Err#10 ECHILD
>
>
> I cannot see anything wrong here.
> The thing that puzzles me is that the same exact perl module.
> "/usr/local/mon/mon.d/ssh.monitor", if I run it from the command line as
> root, it works fine.
> I cannot see what difference can it make running it from inside the
> process "mon".
>
> Best regards,
>
> Kenneth Modrego
> UNIX Systems Administrator
> Europe & Africa Region
> Toyota Financial Services (UK) PLC
> Tel: +44 (0)1737 365509
> Fax: +44 (0)1737 365520
> mailto:[EMAIL PROTECTED]
>
> Ed Ravin <[EMAIL PROTECTED]>
> Sent by: [EMAIL PROTECTED]
> 28/01/2005 03:44
>
> To
> Kenneth Modrego <[EMAIL PROTECTED]>
> cc
> mon@linux.kernel.org
> Subject
> Re: SSH agent problem.
>
>
>
>
>
>
> On Wed, Jan 26, 2005 at 04:00:53PM +0000, Kenneth Modrego wrote:
> > I've got a Mon configuration (mon-0-99-2.6 ) with ssh and some other
> > agents that work perfectly with Solaris 8 clients/server.
> > The problem has appeared when I've installed a new Solaris 9 box, I'm
> > trying to get my mon server to check the ssh,
> > but it always comes back with an error 65280.
> > The strange thing is that when I try to execute the same command within
> > the shell, it returns a "0"
>
> Try using truss on Mon to see what syscalls are made when your monitor
> is run. I suspect the ssh command is balking because it can't
> find your home directory or some other config file it wants.
>
> _______________________________________________
> mon mailing list
> mon@linux.kernel.org
> http://linux.kernel.org/mailman/listinfo/mon
>
>
> This correspondence is for the intended recipient only. It may contain
> confidential or legally privileged information or both. No
> confidentiality or privilege is waived or lost by any mistransmission
> or unauthorised alteration during transmission.
>
> If you are not the intended recipient, any disclosure, copying,
> distribution or any action taken or omitted to be taken in reliance on
> it, is prohibited and may be unlawful. If you receive this
> correspondence in error, please immediately delete it from your system
> and notify the sender.
>
> Any views expressed in this message are those of the individual sender,
> except where the sender expressly, and with authority, states them to
> be the views of Toyota.
>
> This message has been checked for viruses but the recipient is strongly
> advised to rescan the message before opening any attachments or
> attached executable files.
_______________________________________________
mon mailing list
mon@linux.kernel.org
http://linux.kernel.org/mailman/listinfo/mon
