November 2005 - Xymon - Xymon mailman web

[hobbit] Windows logs.
by charljon＠cisco.com 24 Nov '05

24 Nov '05

Sounds like we need someone who is good at VC++ to create a nice hobbit windows client. I would volunteer but I am lacking the knowledge, usually when I need to do something on windows I write in in perl (ActivePerl) :) -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Wednesday, November 23, 2005 2:59 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Windows logs. On Wed, Nov 23, 2005 at 01:42:58PM -0800, Charles Jones -X (charljon - Cisco Learning Institute at Cisco) wrote: > > This brings up a dumb question. Is there a windows client for hobbit? > > I am using the "bbNT" client. It is a windows client for BigBrother > that seems to work well with Hobbit as well. You should be aware that this is a non-free*) product. There is a per-seat license cost, and I am not entirely sure of whether you are allowed to use it with a non-BB server. Regards, Henrik *) Dont misunderstand me - the BB guys who developed the BBNT client did a good job, and they have every right to license it in whatever way they like. I just happen to believe that another kind of license is more appropriate for the software I write.

3 2

UDP Port Testing
by jeff＠myinternetservices.com 24 Nov '05

24 Nov '05

Does anyone know of a plugin (or a way) to test a UDP port? Yes, I know that may sound strange (IE UDP IS stateless) but I need to be able to basically test if a port responds or not. Or failing that. I seem to remember a long time ago a plugin for BB that used the qstat game server query program to test game servers. Does that ring a bell to anyone? -- Jeff Stuart Network Admin MyInternetServices.com 1-800-300-HOST -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.362 / Virus Database: 267.13.4/176 - Release Date: 11/20/2005

2 2

[hobbit] UDP Port Testing
by nfigaro＠effigie.fr 24 Nov '05

24 Nov '05

You can also try to use hping in an external script. But as Henrik wrote, you can't be sure you'll have an answer if a service/daemon is listening to that UDP port. You can find some infos about hping (with UDP examples) at this URL : http://www.antionline.com/showthread.php?s=&threadid=258387 Nicolas Figaro > -----Message d'origine----- > De : Jeff Stuart [mailto:jeff at myinternetservices.com] > Envoyé : jeudi 24 novembre 2005 06:09 > À : Hobbit Monitoring Program Mailing List > Objet : [hobbit] UDP Port Testing > > > Does anyone know of a plugin (or a way) to test a UDP port? > Yes, I know that may sound strange (IE UDP IS stateless) but > I need to be able to basically test if a port responds or not. > > Or failing that. I seem to remember a long time ago a plugin > for BB that used the qstat game server query program to test > game servers. > Does that ring a bell to anyone? > > -- > Jeff Stuart > Network Admin > MyInternetServices.com > 1-800-300-HOST > > > > -- > No virus found in this outgoing message. > Checked by AVG Free Edition. > Version: 7.1.362 / Virus Database: 267.13.4/176 - Release > Date: 11/20/2005 > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

[hobbit] Windows logs.
by charljon＠cisco.com 23 Nov '05

23 Nov '05

> This brings up a dumb question. Is there a windows client for hobbit? I am using the "bbNT" client. It is a windows client for BigBrother that seems to work well with Hobbit as well.

2 1

[hobbit] Windows logs.
by Gerard＠ets.biz 23 Nov '05

23 Nov '05

Folks, Attached is two files - one for parsing through a directory looking for Log files and returning key pieces of information; the other for searching the windows Event Log using WMI. The Event Log parser will only work on Windows 2003 server I believe. The support folder of a Windows 2000 server probably contains a command line driven applet for interrogating the event log. Hope this helps. -Gerard -----Original Message----- From: ZanDAhaR [mailto:allan at zandahar.net] Sent: Tuesday, 22 November 2005 22:21 To: hobbit at hswn.dk Subject: Re: [hobbit] Windows logs. Thomas wrote: > Yes this is what I ended up doing. I noticed that if I do a dir /X > then the 8.3 format is shown, but then I ran into the next problem and > this is wildcard filnames ie. syslog*.log as the logs are named with > the date in the filename. This require a total rewrite of the > bb-msgs.pl script as far as I could see. > > So I told the managers that this was not possible given the timeframe > on a windows box. :-( no happy about it. > > Thanks for replying. > > /Thomas > > ZanDAhaR wrote: > >> Thomas wrote: >> >>> Hi ! >>> Any of you had to monitor logs on a windows box where the file is >>> located in a directory with spaces in ? >>> >>> bb-msgs.pl version 1.1 breaks if I try. >>> >>> /Thomas >>> >>> >>> To unsubscribe from the hobbit list, send an e-mail to >>> hobbit-unsubscribe at hswn.dk >>> >>> >> Have you tried taking out the space ? Convert the folder to dos 8.3 >> format so for eg Program Files ends up being progra~1 Everything >> gets truncated to 6 chars + ~1. I know its Perl and not dos but it >> cant hurt to try :) >> >> Allan >> >> To unsubscribe from the hobbit list, send an e-mail to >> hobbit-unsubscribe at hswn.dk >> >> > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > I'm sure someone else could help you out with the perl expression but I think maybe it should be %syslog* or something. I'm not a perl junkie so dont take my word as gospel :) HTH Allan To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

3 2

NCV grpah not displaying
by gsteer＠firstwave.com.au 23 Nov '05

23 Nov '05

I've set up a custom RRD using the Hobbit NCV facility. [It's for monitoring the time an email takes to traverse our mail platform and logs times in seconds. ] It's working in that the rrd is created/updated as expected, a column called mailtransit is created under the appropriate host and the status of the test is displayed. However I can't get a graph to be displayed here. The correct graph shows up under the Trends column. hobbitserver.cfg contains the following entries for this test: NCV_mailtransit="mailtransit:GAUGE" TEST2RRD="cpu=la,disk,inode,qtree,memory, $PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcp,time=ntpstat,vmstat,vmstat5,iostat,netstat ,temperature,apache,bind,sendmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen, bbtest,bbproxy,hobbitd,mailtransit=ncv" GRAPHS="la,disk,inode,qtree,memory,users,vmstat,vmstat5,iostat,tcp.http,tcp,netstat, mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iishealth,citrix,bbgen ,bbtest,bbproxy,hobbitd,mailtransit" ANy suggestions? -- Geoff Steer <gsteer at firstwave.com.au> -------------------------------Safe Stamp----------------------------------- The sender's Anti-virus Service scanned this email. It is safe from known viruses.

5 7

cleaner hobbit-confreport.sh output
by smith.js.8＠pg.com 23 Nov '05

23 Nov '05

Henrik, I was looking at the configuration report, thinking that the output of the process listing could be much cleaner. Being a shell guy and not a C guy, here's a modified command line that will clean up the process output. Of course, an even better solution would be to enclose the process listing in <pre>...</pre> tags in the output from the hobbit-confreport.cgi program. But, this works. exec /home/hobbit/server/bin/hobbit-confreport.cgi $CGI_HOBBITCONFREPORT_OPTS \ | /bin/sed 's#$>procs<.*=top>$$.*$$<br>$$#\1^M<hobbit>\2</hobbit>^M\3# ; s#\\\\#~~#g ; s#\\n#<br>#g ; s#~~#\\\\#g' \ | /usr/bin/tr "^M" "\n" \ | /bin/sed 's#hobbit>#pre>#g' --Scott

1 0

no dpkg in... errors in hobbitclient logs
by smith.js.8＠pg.com 23 Nov '05

23 Nov '05

Henrik, In the default configuration for linux, using the latest 21-Nov-2005 snapshot, the /var/log/hobbit/hobbitclient.log file fills up with this message: hobbitclient.log:which: no dpkg in (/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/usr/local/sbin:/home/hobbit/server/bin) This can be eliminated by editing the hobbit/client/bin/hobbitclient-linux.sh script and changing these two lines: RPM=`which rpm` DPKG=`which dpkg` to this: RPM=`which rpm 2>/dev/null` DPKG=`which dpkg 2>/dev/null` Not a big thing, but I consider the messages pointless since the code deals with success/failure appropriately. The same or similar approach should work in the other client scripts as well. --Scott

1 0

GRAPHs mysql status
by tom＠dmw.fr 23 Nov '05

23 Nov '05

Hi, ** I have two questions : 1. We have a server which is running two apache daemon on the same host. How can I have apache graphs for each. At the moment I graph only one of them. 2. I don't know what I've done wrong for the config of bbmysqlstatus ! I currently receiving the infos from bb-mysqlstat.sh to hobbit-server I have a growing RRD file in my $hobbit/rrd/host.domain.tld/ But I only have a link in the mysql or trends column. I'm using Hobbit-server 4.1.2p1 (deb pkg) and I have restarted it a lot of time ;) In the mysql column I have a link call "hobbit graph ncv:mysql" and in trends "hobbit graph mysql". But no beautiful graphs :( ** Some infos about my config: Receiving that in the mysql column : ----------------------------------- Wed Nov 23 16:01:39 CET 2005 - Mysql OK Uptime: 621607 Threads: 1 Questions: 111386 Slow queries: 0 Opens: 513 Flush tables: 1 Open tables: 64 Queries per second avg: 0.179 In bb-hosts ----------- w.x.y.z host.domain.tld # ssh ftp smtp TRENDS:*,mysql:mysqlslow,mysqlthread In hobbitserver.cfg: ------------------- NCV_mysql="Uptime:NONE,Queriespersecondavg:GAUGE" TEST2RRD="cpu=la,disk,inode,qtree,memory,$PINGCOLUMN=tcp,http=tcp,dns=tcp,dig=tcp,time=ntpstat,vmstat,iostat,netstat,temperature,apache,bind,sendmail,mailq,nmailq=mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,mysql=ncv" GRAPHS="ncv,la,disk,inode,qtree,memory,users,vmstat,iostat,tcp.http,tcp,netstat,mrtg::1,temperature,ntpstat,apache,bind,sendmail,mailq,socks,bea,iishealth,citrix,bbgen,bbtest,bbproxy,hobbitd,mysql" In hobbitgraph.cfg ------------------ The two original graph def. from hobbit 4.1.2p1 [mysqlslow] DEF:slow=mysql.rrd:Slowqueries:AVERAGE ... [mysqlthread] DEF:threads=mysql.rrd:Threads:AVERAGE TITLE MySQL Active Threads ... rrdtool dump |grep name ----------------------- <name> Threads </name> <name> Questions </name> <name> Slowqueries </name> <name> Opens </name> <name> Flushtables </name> <name> Opentables </name> PS: very strange why I haven't the average query/s nor uptime ?? Hope someone can help me or just tell me how I can debug the thing. Thx Tom

1 0

traceroute
by peterjakobs＠myrealbox.com 23 Nov '05

23 Nov '05

Hi, I see in the man pages that it is possible to do a traceroute if the conn test fails. Is it also possible to always do a traceroute? And maybe even get yellow if it exeeds a certain number of hops? Peter Jakobs

3 2