<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1">
<body text="#000000" bgcolor="#ffffff">
I would provide hidden text, meaning if your web page has a white
background put in something that WON'T change on that page in a white
font. I use things like server names to make sure apache is running on
that server etc. Also make sure it's not a series of words that may
get broken up by browser per say, try something like TEST-WORD. <br>
Not sure if that really solves the problem, but that text will always
J.T. Moore wrote:<br>
<pre wrap="">I have a question regarding how sysmon parses the response to
a www probe. We recently added some code to strip unnecessary
tabs and crlf's from the dynamic content generated on our web site.
Since then sysmon has been periodically reporting false positive
failures for the www probe monitoring the site.
What is odd is that the failures are intermittent rather than persistent.
The text that was being searched for is towards the end of the document,
but not at the very end. I have verifyed that the text string is present in
the document as it is in the sysmon.conf file and the web logs indicates
response status 200 for all of the hits from sysmon which occur approximately
once per minute which is the sysmon poll interval.
I changed the text the probe was searching for to "</body></html>"
which is at the very end of the document which seems to have fixed
We are currently using sysmon v0.91.12
Any ideas/insights are appreciated.
<hr width="90%" size="4">
Sysmon-help mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Sysmonfirstname.lastname@example.org">Sysmonemail@example.com</a>
<a class="moz-txt-link-freetext" href="http://puck.nether.net/mailman/listinfo/sysmon-help">http://puck.nether.net/mailman/listinfo/sysmon-help</a>
<pre class="moz-signature" cols="80">