Netprobe whitelist

Overview Copied

Netprobe has whitelist settings available for both plugins and commands.

Plugin whitelist Copied

The plugIn whitelist is a list of plugin names that determines if a plugin can be used for sampling. If a plugin is not in the whitelist, then the sampler associated with it cannot perform sampling during runtime.

The whitelist is defined in the setup file.

Note

If no setup file is specified, or if the whitelist does not contain any valid plugin names, then all plugins are allowed by default.

When defined, plugin names should be the same as those listed under Plugin in the for them to be recognised.

Below is a screenshot of a disabled sampler:

Example of disabled sampler

Command whitelist Copied

The command whitelist is a list of shell commands that can be used for sampling. If a shell command is not in the whitelist, then an error will be shown in the dataview.

The whitelist is defined in the setup file.

Note

If no setup file is specified, or if the whitelist does not contain any valid shell commands, then all shell commands are allowed by default.

Valid commands are as follows:

The command whitelist makes use of regular expressions, which follows the Perl-Compatible Regular Expressions (PCRE) syntax, to specify the allowed commands. When matching for exact strings, always terminate your regular expressions.

Below are screenshots of error messages:

../_images/image2_netprobe_user_guide.png ../_images/image3_netprobe_user_guide.png

Applicable plugins and features Copied

Below is the list of plugins and features with user-configurable shell commands that can be used in the command whitelist:

Caution

In Toolkit plugin, you can use the Advanced settings to write the script to the server. Unless the Toolkit Advanced tab is secured by a hook validation, it is possible to work around the restriction set in the command whitelist.

Configuration settings Copied

Plugin whitelist settings Copied

pluginWhiteList Copied

Contains the list of plugin names to be enabled.

Mandatory: No

pluginWhiteList > data Copied

Specifies a plugin name to be enabled.

Mandatory: No

Command Whitelist Settings Copied

commandWhiteList Copied

Contains the list of shell commands to be enabled.

Mandatory: No

commandWhiteList > data Copied

Specifies a shell command to be enabled.

Mandatory: No

Example configuration Copied

Plugin Whitelist Copied

This example shows that the CPU and TOP plugins are enabled.

<netprobe>
        <pluginWhiteList>
                <data>cpu</data>
                <data>top</data>
        </pluginWhiteList>
</netprobe>

Command Whitelist Copied

This example shows that the commands echo test and cat <anything> are enabled.

<netprobe>
        <commandWhiteList>
                <data>echo test\b</data>
                <data>^cat.*</data>
        </commandWhiteList>
</netprobe>
["Geneos"] ["Geneos > Netprobe"] ["Technical Reference"]

Was this topic helpful?