Hi,

Debian Squeeze / PHP 5.3.3 / jffnms 0.8.5 or higher (also tested 0.9.3)

I had a problem with adding interfaces of a stack of 3com/h3c/hp switches.
I do a manual discover w/o portscan, I see all the physical interfaces. I
could add some interfaces and I could not add some other. Those interfaces
have snmpifindex very high (218104401 for example), perhaps problem is
here. An interface with ifindex of 75497524 was OK to add.

Finally I find in the syslog the following alert :

Nov  6 10:50:04 jffnms suhosin[17185]: ALERT - configured POST variable
limit exceeded - dropped variable 'bulk_add[109][type]' (attacker
'172.16.29.4', file '/usr/share/jffnms/htdocs/admin/adm/adm_interfaces.php')
Nov  6 10:53:48 jffnms suhosin[17386]: ALERT - configured POST variable
limit exceeded - dropped variable 'bulk_add[109][host]' (attacker
'172.16.29.4', file '/usr/share/jffnms/htdocs/admin/adm/adm_interfaces.php')

I try to increase one by one the differents variables in
/etc/php5/conf.d/suhosin.ini (x10 each), restart apache2 each times, but no
way. I disable suhosin completely and no problem to add those interfaces.

How can I debug more the suhosin alert ? in order to find the right
variable to increase.


Cheers.
Pierre
------------------------------------------------------------------------------
LogMeIn Central: Instant, anywhere, Remote PC access and management.
Stay in control, update software, and manage PCs from one command center
Diagnose problems and improve visibility into emerging IT issues
Automate, monitor and manage. Do more in less time with Central
http://p.sf.net/sfu/logmein12331_d2d
_______________________________________________
jffnms-users mailing list
jffnms-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/jffnms-users

Reply via email to