Bug#997849: monitoring-plugins-basic: check_icmp fails with 'Socket operation on non-socket' when source IP is specified

[Ez Simo]

Package: monitoring-plugins-basic
Version: 2.3.1-1
Severity: normal


Dear Maintainer,

After upgrade to Debian 11 (bullseye) check_icmp option to specify IP source address stopped working.

# /usr/lib/nagios/plugins/check_icmp -H 8.8.8.8
OK - 8.8.8.8: rta 0,643ms, lost 0%|rta=0,643ms;200,000;500,000;0; pl=0%;40;80;; rtmax=0,773ms;;;; rtmin=0,395ms;;;;

/usr/lib/nagios/plugins/check_icmp -H 8.8.8.8 -s [correct_source_ip_address_here]
check_icmp: Cannot bind to IP address 91.202.124.36: Socket operation on non-socket

check_icmp capabilities are correctly set:

# getcap /usr/lib/nagios/plugins/check_icmp
/usr/lib/nagios/plugins/check_icmp cap_net_raw=ep

Before upgrade to Debian 11 everything was working perfectly correct.

Best regards,
Simo


-- System Information:
Debian Release: 11.1
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-9-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages monitoring-plugins-basic depends on:
ii iputils-ping 3:20210202-1
ii libc6 2.31-13+deb11u2
ii libssl1.1 1.1.1k-1+deb11u1
ii monitoring-plugins-common 2.3.1-1
ii procps 2:3.3.17-5
ii ucf 3.0043

Versions of packages monitoring-plugins-basic recommends:
ii libcap2-bin 1:2.44-1

Versions of packages monitoring-plugins-basic suggests:
pn icinga2 <none>

-- no debconf information

[Václav Ovsík]

I can confirm this.

Unstable (version 2.3.1-1):

zito@bobek:~$ ip a s dev wlp3s0
3: wlp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:24:d7:f3:8d:e8 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.120/24 brd 192.168.1.255 scope global dynamic noprefixroute wlp3s0
valid_lft 74258sec preferred_lft 74258sec
inet6 fe80::d1b4:870a:5e9d:43c7/64 scope link noprefixroute
valid_lft forever preferred_lft forever
zito@bobek:~$ /usr/lib/nagios/plugins/check_icmp -s 192.168.1.120 192.168.1.120
check_icmp: Cannot bind to IP address 192.168.1.120: Socket operation on non-socket

Buster (2.2-6):

nms2:~# dpkg -l --no-pager monitoring-plugins-basic
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name Version Architecture Description
+++-========================-============-============-========================================================
ii monitoring-plugins-basic 2.2-6 amd64 Plugins for nagios compatible monitoring systems (basic)
nms2:~# ip a s dev eth0
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 52:54:00:bb:d9:67 brd ff:ff:ff:ff:ff:ff
inet 10.0.156.83/24 brd 10.0.156.255 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::5054:ff:febb:d967/64 scope link
valid_lft forever preferred_lft forever
nms2:~# /usr/lib/nagios/plugins/check_icmp -s 10.0.156.83 10.0.156.83
OK - 10.0.156.83: rta 0.013ms, lost 0%|rta=0.013ms;200.000;500.000;0; pl=0%;40;80;; rtmax=0.045ms;;;; rtmin=0.005ms;;;;

Cheers
--
Zito