"Lookup IP" suddenly stopped working

Hi Guys,

No upgrades to any perl modules or server software of any kind or changes to
any files have been made but it seems that the “Lookup IP” link within a
ticket doesn’t quite work properly. The link is displayed with what I guess
is some incomplete information as the parameters. For example when viewing
ticket #12491 I see the link “Lookup IP” link pointing to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156.
When clicking it the results are empty but the rwhois lookup occurs at the
bottom of the page. If I edit the URL and include include ticket=12491 it
works properly (eg.
http:///RTIR/Tools/Lookup.html?ticket=12491&type=ip&q=209.160.28.156).
and displays the “Current Incident: #12491” header with the current ticket
listed as well as other tickets that match the IP address being looked up.

Conversely if I click the link as it is which sends me to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156
and then click the “Go” button next to the WHOIS lookup field that’s
already filled out the lookup works and finds tickets with the IP address
being looked up but of course without the ticket lookup.

I’m really at a loss for why it would stop working all of a sudden. This
has been a problem for more than a week now, I thought maybe it was some bad
database entries or caching or something but the issue has not gone away
after clearing the mason_data etc.

If anyone has any ideas on what I should check or what I can provide to help
troubleshoot this please let me know. I’m moderately versed in Perl so I
can try some things if anyone has any ideas.

Regards,

Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net

Hello Landon,

You didn’t mention RT/RTIR versions. I believe RT upgrade can cause
this. Anyway, I’ll make a check once you give me versions.On Mon, Nov 23, 2009 at 11:46 PM, Landon Stewart lstewart@superb.net wrote:

Hi Guys,

No upgrades to any perl modules or server software of any kind or changes to
any files have been made but it seems that the “Lookup IP” link within a
ticket doesn’t quite work properly. The link is displayed with what I guess
is some incomplete information as the parameters. For example when viewing
ticket #12491 I see the link “Lookup IP” link pointing to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156. When
clicking it the results are empty but the rwhois lookup occurs at the bottom
of the page. If I edit the URL and include include ticket=12491 it works
properly (eg.
http:///RTIR/Tools/Lookup.html?ticket=12491&type=ip&q=209.160.28.156).
and displays the “Current Incident: #12491” header with the current ticket
listed as well as other tickets that match the IP address being looked up.

Conversely if I click the link as it is which sends me to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156 and
then click the “Go” button next to the WHOIS lookup field that’s already
filled out the lookup works and finds tickets with the IP address being
looked up but of course without the ticket lookup.

I’m really at a loss for why it would stop working all of a sudden. This
has been a problem for more than a week now, I thought maybe it was some bad
database entries or caching or something but the issue has not gone away
after clearing the mason_data etc.

If anyone has any ideas on what I should check or what I can provide to help
troubleshoot this please let me know. I’m moderately versed in Perl so I
can try some things if anyone has any ideas.

Regards,


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net


Rtir mailing list
Rtir@lists.bestpractical.com
The rtir Archives

Best regards, Ruslan.

Hi Ruslan,

RT version is RT 3.8.5
RTIR version is RTIR is 2.4.1

Thanks very much for checking this out.On Mon, Nov 23, 2009 at 12:58 PM, Ruslan Zakirov ruslan.zakirov@gmail.comwrote:

Hello Landon,

You didn’t mention RT/RTIR versions. I believe RT upgrade can cause
this. Anyway, I’ll make a check once you give me versions.

On Mon, Nov 23, 2009 at 11:46 PM, Landon Stewart lstewart@superb.net wrote:

Hi Guys,

No upgrades to any perl modules or server software of any kind or changes
to
any files have been made but it seems that the “Lookup IP” link within a
ticket doesn’t quite work properly. The link is displayed with what I
guess
is some incomplete information as the parameters. For example when
viewing
ticket #12491 I see the link “Lookup IP” link pointing to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156.
When
clicking it the results are empty but the rwhois lookup occurs at the
bottom
of the page. If I edit the URL and include include ticket=12491 it works
properly (eg.
http://
/RTIR/Tools/Lookup.html?ticket=12491&type=ip&q=209.160.28.156).
and displays the “Current Incident: #12491” header with the current
ticket
listed as well as other tickets that match the IP address being looked
up.

Conversely if I click the link as it is which sends me to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156 and
then click the “Go” button next to the WHOIS lookup field that’s
already
filled out the lookup works and finds tickets with the IP address being
looked up but of course without the ticket lookup.

I’m really at a loss for why it would stop working all of a sudden. This
has been a problem for more than a week now, I thought maybe it was some
bad
database entries or caching or something but the issue has not gone away
after clearing the mason_data etc.

If anyone has any ideas on what I should check or what I can provide to
help
troubleshoot this please let me know. I’m moderately versed in Perl so I
can try some things if anyone has any ideas.

Regards,


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net


Rtir mailing list
Rtir@lists.bestpractical.com
The rtir Archives


Best regards, Ruslan.

Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net

Hi,

There is a bug in RT 3.8.5 and earlier (I don’t recall when exactly it
was introduced, but somehwere between 3.8.2 and 3.8.5) that affects
search by IP. SQL query generated by RT is just wrong. This bug has
been fixed in RT 3.8.6. A few users of RTIR confirmed the fix.

You either can upgrade RT or try the following changes out of github:

86cef7ee885912896a3be995a3cd5ebfe77ccf47
e647495094f1a9c487a1953f10725127340940d4

I hope it’s all you need (80% sure :).

Please report back.On Tue, Nov 24, 2009 at 12:09 AM, Landon Stewart lstewart@superb.net wrote:

Hi Ruslan,

RT version is RT 3.8.5
RTIR version is RTIR is 2.4.1

Thanks very much for checking this out.

On Mon, Nov 23, 2009 at 12:58 PM, Ruslan Zakirov ruslan.zakirov@gmail.com wrote:

Hello Landon,

You didn’t mention RT/RTIR versions. I believe RT upgrade can cause
this. Anyway, I’ll make a check once you give me versions.

On Mon, Nov 23, 2009 at 11:46 PM, Landon Stewart lstewart@superb.net wrote:

Hi Guys,

No upgrades to any perl modules or server software of any kind or
changes to
any files have been made but it seems that the “Lookup IP” link within a
ticket doesn’t quite work properly. The link is displayed with what I
guess
is some incomplete information as the parameters. For example when
viewing
ticket #12491 I see the link “Lookup IP” link pointing to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156.
When
clicking it the results are empty but the rwhois lookup occurs at the
bottom
of the page. If I edit the URL and include include ticket=12491 it
works
properly (eg.

http:///RTIR/Tools/Lookup.html?ticket=12491&type=ip&q=209.160.28.156).
and displays the “Current Incident: #12491” header with the current
ticket
listed as well as other tickets that match the IP address being looked
up.

Conversely if I click the link as it is which sends me to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156 and
then click the “Go” button next to the WHOIS lookup field that’s
already
filled out the lookup works and finds tickets with the IP address being
looked up but of course without the ticket lookup.

I’m really at a loss for why it would stop working all of a sudden.
This
has been a problem for more than a week now, I thought maybe it was some
bad
database entries or caching or something but the issue has not gone away
after clearing the mason_data etc.

If anyone has any ideas on what I should check or what I can provide to
help
troubleshoot this please let me know. I’m moderately versed in Perl so
I
can try some things if anyone has any ideas.

Regards,


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net


Rtir mailing list
Rtir@lists.bestpractical.com
The rtir Archives


Best regards, Ruslan.


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net

Best regards, Ruslan.

Hate to sound like a noob here but I can’t figure out how to apply the
changes from github apart from carefully reading them and editing the files
manually. Is there a better way?On Mon, Nov 23, 2009 at 2:51 PM, Ruslan Zakirov ruslan.zakirov@gmail.comwrote:

Hi,

There is a bug in RT 3.8.5 and earlier (I don’t recall when exactly it
was introduced, but somehwere between 3.8.2 and 3.8.5) that affects
search by IP. SQL query generated by RT is just wrong. This bug has
been fixed in RT 3.8.6. A few users of RTIR confirmed the fix.

You either can upgrade RT or try the following changes out of github:

86cef7ee885912896a3be995a3cd5ebfe77ccf47
e647495094f1a9c487a1953f10725127340940d4

I hope it’s all you need (80% sure :).

Please report back.

On Tue, Nov 24, 2009 at 12:09 AM, Landon Stewart lstewart@superb.net wrote:

Hi Ruslan,

RT version is RT 3.8.5
RTIR version is RTIR is 2.4.1

Thanks very much for checking this out.

On Mon, Nov 23, 2009 at 12:58 PM, Ruslan Zakirov < ruslan.zakirov@gmail.com> wrote:

Hello Landon,

You didn’t mention RT/RTIR versions. I believe RT upgrade can cause
this. Anyway, I’ll make a check once you give me versions.

On Mon, Nov 23, 2009 at 11:46 PM, Landon Stewart lstewart@superb.net wrote:

Hi Guys,

No upgrades to any perl modules or server software of any kind or
changes to
any files have been made but it seems that the “Lookup IP” link within
a
ticket doesn’t quite work properly. The link is displayed with what I
guess
is some incomplete information as the parameters. For example when
viewing
ticket #12491 I see the link “Lookup IP” link pointing to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156.
When
clicking it the results are empty but the rwhois lookup occurs at the
bottom
of the page. If I edit the URL and include include ticket=12491 it
works
properly (eg.

http://
/RTIR/Tools/Lookup.html?ticket=12491&type=ip&q=209.160.28.156).
and displays the “Current Incident: #12491” header with the current
ticket
listed as well as other tickets that match the IP address being looked
up.

Conversely if I click the link as it is which sends me to
http:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.156
and
then click the “Go” button next to the WHOIS lookup field that’s
already
filled out the lookup works and finds tickets with the IP address
being
looked up but of course without the ticket lookup.

I’m really at a loss for why it would stop working all of a sudden.
This
has been a problem for more than a week now, I thought maybe it was
some
bad
database entries or caching or something but the issue has not gone
away
after clearing the mason_data etc.

If anyone has any ideas on what I should check or what I can provide
to
help
troubleshoot this please let me know. I’m moderately versed in Perl
so
I
can try some things if anyone has any ideas.

Regards,


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”:
http://www.superbhosting.net


Rtir mailing list
Rtir@lists.bestpractical.com
The rtir Archives


Best regards, Ruslan.


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net


Best regards, Ruslan.

Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net

Please report back.

Hi Ruslan,

Thanks again for letting me know about the upgrade to 3.8.6. I’ve performed
the upgrade and the IP search works correctly however there is one remaining
issue. The link produced for “[Lookup IP]” does not include the current
ticket # so the Merge functionality is missing from the resulting page.

The link is:
hxxp:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.59

If I manually edit the resulting page’s URL to include the ticket # (eg.
…/Lookup.html?ticket=12561&type=ip&q=209.160.28.59) it works beautifully
so it seems to be the production of the link itself that is the issue here.

Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net

Hm, this sounds like a bug. I’ll look into it today (I hope).On Thu, Nov 26, 2009 at 1:32 AM, Landon Stewart lstewart@superb.net wrote:

Please report back.

Hi Ruslan,

Thanks again for letting me know about the upgrade to 3.8.6. I’ve performed
the upgrade and the IP search works correctly however there is one remaining
issue. The link produced for “[Lookup IP]” does not include the current
ticket # so the Merge functionality is missing from the resulting page.

The link is:
hxxp:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.59

If I manually edit the resulting page’s URL to include the ticket # (eg.
…/Lookup.html?ticket=12561&type=ip&q=209.160.28.59) it works beautifully
so it seems to be the production of the link itself that is the issue here.


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net

Best regards, Ruslan.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Try to switch off WYSIWYG in user preferences before creating tickets…

Cheers

Landon Stewart wrote:

Please report back.

Hi Ruslan,

Thanks again for letting me know about the upgrade to 3.8.6. I’ve
performed the upgrade and the IP search works correctly however there is
one remaining issue. The link produced for “[Lookup IP]” does not
include the current ticket # so the Merge functionality is missing from
the resulting page.

The link is:
hxxp:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.59

If I manually edit the resulting page’s URL to include the ticket # (eg.
…/Lookup.html?ticket=12561&type=ip&q=209.160.28.59) it works
beautifully so it seems to be the production of the link itself that is
the issue here.


Landon Stewart <LStewart@SUPERB.NET mailto:LStewart@SUPERB.NET>
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net



Rtir mailing list
Rtir@lists.bestpractical.com
The rtir Archives


Marius

Marius Urkis
LITNET CERT
http://cert.litnet.lt
Tel: +370 37 300645
GSM: +370 687 79059
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksOKkMACgkQHS98nbdNAJx4bACfekUZjqB1ppRNxJPO3rpCPAS0
tisAniEfEQ3taYEzdfbUBQ2L4Jj0Pcd+
=Ux2L
-----END PGP SIGNATURE-----

Hi Ruslan,

Just to let you know that this issue magically (?) fixed itself it seems
over the weekend. Nothing was changed or restarted but the ticket= now
appears in the URL generated by MakeClicky. It’s working for every link I
see now too, not just some.On Wed, Nov 25, 2009 at 2:47 PM, Ruslan Zakirov ruslan.zakirov@gmail.comwrote:

Hm, this sounds like a bug. I’ll look into it today (I hope).

On Thu, Nov 26, 2009 at 1:32 AM, Landon Stewart lstewart@superb.net wrote:

Please report back.

Hi Ruslan,

Thanks again for letting me know about the upgrade to 3.8.6. I’ve
performed
the upgrade and the IP search works correctly however there is one
remaining
issue. The link produced for “[Lookup IP]” does not include the current
ticket # so the Merge functionality is missing from the resulting page.

The link is:
hxxp:///RTIR/Tools/Lookup.html?type=ip&q=209.160.28.59

If I manually edit the resulting page’s URL to include the ticket # (eg.
…/Lookup.html?ticket=12561&type=ip&q=209.160.28.59) it works
beautifully
so it seems to be the production of the link itself that is the issue
here.


Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net


Best regards, Ruslan.

Landon Stewart LStewart@SUPERB.NET
SuperbHosting.Net by Superb Internet Corp.
Toll Free: 888-354-6128 x 4199 (US/Canada)
Web hosting and more “Ahead of the Rest”: http://www.superbhosting.net