May 2005 - Xymon - Xymon mailman web

https test failing
by Winn.Beutler＠mcdata.com 18 May '05

18 May '05

I am getting the following message in HOBBIT when I drill down on the 'Current non-green Systems' page: ------------------------------------------------------------------- Wed May 18 15:04:48 2005: red https://b2b.mcdata.com:443/ - Bad Request Your browser sent a request that this server could not understand. Reason: You're speaking plain HTTP to an SSL-enabled server port. Instead use the HTTPS scheme to access this URL, please. Hint: https://b2b.mcdata.com/ ------------------------------------------------------------------- However, my bb-hosts entry is: 208.47.133.177 b2b.mcdata.com # noconn https://b2b.mcdata.com I have also tried: 208.47.133.177 b2b.mcdata.com # noconn https://b2b.mcdata.com:443 Any ideas on how to troubleshoot this? Thanks, Winn Beutler SPECIAL NOTICE All information transmitted hereby is intended only for the use of the addressee(s) named above and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of confidential and privileged information is prohibited. If the reader of this message is not the intended recipient(s) or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that you must not read this transmission and that disclosure, copying, printing, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. Anyone who receives confidential and privileged information in error should notify us immediately by telephone and mail the original message to us at the above address and destroy all copies. To the extent any portion of this communication contains public information, no such restrictions apply to that information. (gate01)

2 1

[hobbit] Latest snapshot
by Stephen.Budgeon＠RoyalRoads.ca 18 May '05

18 May '05

Try doing the whole thing from tar -- see if that helps... $ Tar xfzv hobbit-snapshot.tar.gz Just downloaded it from Henrik's site and it all went no problem... How are you downloading it? Commandline ftp? Make sure you are in binary mode when you download the file ("bin" within ftp) Good luck! -Stephen -----Original Message----- From: lars ebeling [mailto:lars.ebeling at leopg9.no-ip.org] Sent: Wednesday, May 18, 2005 9:24 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Latest snapshot Well I thought so. Still CRC-error Regards Lars Hobbithobbyist Http://leopg9.no-ip.org ----- Original Message ----- From: "lars ebeling" <lars.ebeling at leopg9.no-ip.org> To: <hobbit at hswn.dk> Sent: Wednesday, May 18, 2005 6:20 PM Subject: Re: [hobbit] Latest snapshot > Well I made a last try ;-) and succeeded > Regards > Lars > Hobbithobbyist > > Http://leopg9.no-ip.org > ----- Original Message ----- > From: "lars ebeling" <lars.ebeling at leopg9.no-ip.org> > To: <hobbit at hswn.dk> > Sent: Wednesday, May 18, 2005 6:18 PM > Subject: Re: [hobbit] Latest snapshot > > >>I have tried everything, but still the same result. >> Regards >> Lars >> Hobbithobbyist >> >> Http://leopg9.no-ip.org >> ----- Original Message ----- >> From: "Henrik Stoerner" <henrik at hswn.dk> >> To: <hobbit at hswn.dk> >> Sent: Wednesday, May 18, 2005 7:02 AM >> Subject: Re: [hobbit] Latest snapshot >> >> >>> On Wed, May 18, 2005 at 05:56:53AM +0200, lars ebeling wrote: >>>> >>>> got this when starting to install: >>>> >>>> # gzip -d hobbit-snapshot.tar.gz >>>> >>>> gzip: hobbit-snapshot.tar.gz: invalid compressed data--crc error >>> >>> Try downloading again (and flush your browser cache). Downloading >>> the file works fine here. >>> >>> The md5 sum should be 3db6ddda208a77ffc190e39639ced585 >>> >>> >>> Regards, >>> Henrik >>> >>> >>> To unsubscribe from the hobbit list, send an e-mail to >>> hobbit-unsubscribe at hswn.dk >>> >>> >>> >>> >> >> >> To unsubscribe from the hobbit list, send an e-mail to >> hobbit-unsubscribe at hswn.dk >> >> >> >> > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

3 2

hobbitd status-board not available
by David.Gore＠mci.com 18 May '05

18 May '05

How do I fix this? I am concerned that Hobbit appears to be fluctuating between all green and numerous alarming hosts. The hosts should be alarming. This is after I have upgraded to Solaris 10, which so far has been a major disaster. Error output: Whoops ! bb failed to send message - timeout hobbitd status-board not available ~David

2 1

running 2 --extra-script
by jonbjorn＠hi.is 17 May '05

17 May '05

Hi. This morning I was running successfully with one custom rrd graph. I then added another in hobbitlaunch.cfg like this [larrdstatus] ENVFILE /usr/local/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD hobbitd_channel --channel=status --log=$BBSERVERLOGS/larrd- status.log hobbitd_larrd --rrddir=$BBVAR/rrd --extra- script=/usr/local/hobbit/server/ext/exchange.sh --extra-tests=exchdb -- extra-script=/usr/local/hobbit/server/ext/informix.sh --extra- tests=informix and the informix script works fine but the first one stopped graphing just about the time I added the second one. Is it not possible to run 2 custom scripts or am I doing something wrong ? JB -- Jon Bjorn Njalsson <jonbjorn at hi.is>

3 2

[hobbit] bb-hostedit v1.1 beta released
by EES2Y＠hscmail.mcc.virginia.edu 17 May '05

17 May '05

Heh. Well, while fixing this problem, I found another bug that crops up when you try to add a subpage to a page which already has hosts but no other subpages, which causes all of the hosts to be migrated to the new page you added. Anyways, I fixed this bug and the bug you described in this patch: http://www.nerdvana.org/eric/files/bb-hostedit-hostadd-patch Getting close to a deadcat release. Thanks! -Eric -----Original Message----- From: David Garaway [mailto:dave at auctionhelper.com] Sent: Sat 5/14/2005 11:09 PM To: hobbit at hswn.dk Cc: Subject: RE: [hobbit] bb-hostedit v1.1 beta released I just installed the newest version of hostedit and having strange problems. Everything works great except for when I add a host to a page it always gets created under the front. So if I create a page and descend into it, and select "add a host to this page" it always creates it on the front page and not the one I just created it in. any suggestions? Btw, I installed both these patches and same result. Thanks -----Original Message----- From: Daniel J McDonald [mailto:dan.mcdonald at austinenergy.com] Sent: Friday, May 13, 2005 8:44 AM To: Hobbit List Subject: RE: [hobbit] bb-hostedit v1.1 beta released On Fri, 2005-05-13 at 11:13 -0400, Schwimmer, Eric E *HS wrote: > It could just be the version of outlook I am using too > (wish I could use mutt with an exchange server ;) I am stuck with an exchange server - Exchange 5.5! But I access it with mutt. Usually Evolution, but I'll use mutt when I'm vpn'ed in from a winDOwS box and only have putty... Just ask your exchange admins to turn on imap. > > The patches are at: > http://www.nerdvana.org/eric/files/bb-hostedit-fieldwidth.patch > and > http://www.nerdvana.org/eric/files/bb-hostedit-zeropos.patch > I'll get this installed soon. Lots of people here want it. -- Daniel J McDonald, CCIE # 2495, CNX Austin Energy dan.mcdonald at austinenergy.com To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] MRTG-based Graphs in Trends Section
by EES2Y＠hscmail.mcc.virginia.edu 17 May '05

17 May '05

Henrik, Works great! Thanks so much! For those that dont want to read the c code, you need to replace the title in your [mrtg] stanza in the hobbitgraph.cgi file with something like the following: TITLE exec:/usr/local/hobbit/server/bin/mrtg-title.sh ... or wherever you saved the shell script below to. One small change I made to the shell script was to change the MRTGTITLE capture line to: MRTGTITLE=`grep -i "Title\[$MRTGSET\]:" /usr/local/mrtg/cfg/$HOSTNAME.cfg | cut -d: -f2-` ...since our hosts our configured on a per-file basis and included from the main mrtg.conf Thanks again! -Eric -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Sun 5/15/2005 3:53 AM To: hobbit at hswn.dk Cc: Subject: Re: [hobbit] MRTG-based Graphs in Trends Section On Thu, May 12, 2005 at 12:28:31PM -0400, Oktay, Alan F. *HS wrote: > Any way to have Hobbit read the Title Tag in the MRTG Configuration File > and thus label the graphs accordingly? Not directly, but the attached patch lets you have an external script decide what the title is. I've tried it on my own MRTG setup and it appears to work fine. I used this script to generate the title from mrtg.cfg (note that you may have to change the permissions on mrtg.cfg to let the CGI user read it): #!/bin/sh HOSTNAME="$1"; shift GTYPE="$1"; shift LEGEND="$1"; shift RRD="$1"; shift #echo "RRD=$RRD, rest is $*" >>/tmp/title.log MRTGSET="`echo $RRD | sed -e's/\.rrd$//'`" #echo "MRTGSET=$MRTGSET" >>/tmp/title.log MRTGTITLE=`grep -i "Title\[$MRTGSET\]:" /etc/mrtg.cfg | cut -d: -f2-` #echo "TITLE=$MRTGTITLE" >>/tmp/title.log echo "$MRTGTITLE $LEGEND" exit 0 Regards, Henrik

1 0

[hobbit] SSL Certificate checking
by Larry.Barber＠usda.gov 17 May '05

17 May '05

Aide (an open source version of tripwire) could detect the changed files, and there is an script for monitoring aide from BigBrother on deadcat. Thanks, Larry Barber On Mon, 2005-05-16 at 22:23 -0500, adam at websitemanagers.com.au wrote: > I understand that hobbit (and bbgen) will check the validity of SSL > certificates on a HTTPS site, but I was wondering if hobbit (or > bbgen) > would also check that a ssh certificate does NOT change? > > Note, all the rest of this email is off-topic, so please don't > respond > to it on the list. Feel free to send your comments offlist. > > Reason being, this morning one of my servers was hacked, I found out > because: > *) BB noticed /var/log/messages was truncated > *) BB noticed sshd wasn't running any longer > > I then noticed, because the SSH key had been changed, and basically > someone had compiled a new ssh and in the process changed the key. It > would have been nice had BB detected that as well (since a hacker > might > not always truncate log files, nor change the process name of ssh, > even > though it is still running). > > For those that are interested, and I'd be keen to hear from people > (probably off-list) regarding their thoughts/suggestions. > > This machine is running debian testing, and I have a BB ext which > alerts > me if updates are available but not installed, so I install them > daily, > so it is always up to date. > The machine runs a kernel which likely to have a local exploitable > bug > (2.4.25) > The machine has open services to the internet of: > *) apache-perl (from debian) > *) DJB's tinydns (from debian source package) > *) DJB's qmail (from debian source package) > *) ssh (from debian) > > apache-perl is serving up RT (from debian) and no other CGI/etc > > qmail calls qmail-scanner-queue.pl which calls spamassassin + clamav > which are also both from debian. > > The machine is listed as secondary MX for a load of domains, and also > primary NS for a load of domains. > > The machine had 4 users with a password set (root + 3 admin users) > all > the rest were disabled in /etc/shadow. > > As for password brute-force, I've had john running for over an hour, > and > it hasn't found anything yet, at 1221 attempts per second, I think > that > comes to 1025640 passwords it has tried..... > guesses: 0 time: 0:01:10:13 (3) c/s: 1221 trying: agig1 > > ie, the password for the 4 users are not easily guessable.... > password > are never sent in cleartext either... > > Basically, so far as I can tell, the person has set a password for > user > games, compiled/installed openssh (into /usr/local/), and that's all > I > can see so far. > > The thing that bothers me most is that this is a debian (testing) > machine, with all the patches/updates etc, and yet it was still > hacked. > > My suspicion is that they gained access via ssh, since they went to > the > trouble of replacing that.... > > My fear is that I won't find HOW they got in, and therefore can't put > the machine back online with any degree of confidence that it won't > happen again.... > > As above, please send comments/suggestions to me offline. > > Regards, > Adam > > -- > -- > Adam Goryachev > Website Managers > Ph: +61 2 8304 0000 > adam at websitemanagers.com.au > Fax: +61 2 8304 0001 www.websitemanagers.com.au > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

SSL Certificate checking
by adam＠websitemanagers.com.au 17 May '05

17 May '05

I understand that hobbit (and bbgen) will check the validity of SSL certificates on a HTTPS site, but I was wondering if hobbit (or bbgen) would also check that a ssh certificate does NOT change? Note, all the rest of this email is off-topic, so please don't respond to it on the list. Feel free to send your comments offlist. Reason being, this morning one of my servers was hacked, I found out because: *) BB noticed /var/log/messages was truncated *) BB noticed sshd wasn't running any longer I then noticed, because the SSH key had been changed, and basically someone had compiled a new ssh and in the process changed the key. It would have been nice had BB detected that as well (since a hacker might not always truncate log files, nor change the process name of ssh, even though it is still running). For those that are interested, and I'd be keen to hear from people (probably off-list) regarding their thoughts/suggestions. This machine is running debian testing, and I have a BB ext which alerts me if updates are available but not installed, so I install them daily, so it is always up to date. The machine runs a kernel which likely to have a local exploitable bug (2.4.25) The machine has open services to the internet of: *) apache-perl (from debian) *) DJB's tinydns (from debian source package) *) DJB's qmail (from debian source package) *) ssh (from debian) apache-perl is serving up RT (from debian) and no other CGI/etc qmail calls qmail-scanner-queue.pl which calls spamassassin + clamav which are also both from debian. The machine is listed as secondary MX for a load of domains, and also primary NS for a load of domains. The machine had 4 users with a password set (root + 3 admin users) all the rest were disabled in /etc/shadow. As for password brute-force, I've had john running for over an hour, and it hasn't found anything yet, at 1221 attempts per second, I think that comes to 1025640 passwords it has tried..... guesses: 0 time: 0:01:10:13 (3) c/s: 1221 trying: agig1 ie, the password for the 4 users are not easily guessable.... password are never sent in cleartext either... Basically, so far as I can tell, the person has set a password for user games, compiled/installed openssh (into /usr/local/), and that's all I can see so far. The thing that bothers me most is that this is a debian (testing) machine, with all the patches/updates etc, and yet it was still hacked. My suspicion is that they gained access via ssh, since they went to the trouble of replacing that.... My fear is that I won't find HOW they got in, and therefore can't put the machine back online with any degree of confidence that it won't happen again.... As above, please send comments/suggestions to me offline. Regards, Adam -- -- Adam Goryachev Website Managers Ph: +61 2 8304 0000 adam at websitemanagers.com.au Fax: +61 2 8304 0001 www.websitemanagers.com.au

2 1

[hobbit] bbdisplay problems after adding some new hosts
by stefan_loos＠hotmail.com 17 May '05

17 May '05

Hello Henrik, I will send you the checkpoint file directly. But I found out that it seems to be a single test after all (first time I didn't wait long enough). Everytime I send the attached status message to my hobbit server it will crash after 5-10 minutes. Regards, Stefan >From: henrik at hswn.dk (Henrik Stoerner) >Reply-To: hobbit at hswn.dk >To: hobbit at hswn.dk >Subject: Re: [hobbit] bbdisplay problems after adding some new hosts >Date: Sun, 15 May 2005 08:46:01 +0200 > >On Thu, May 12, 2005 at 12:31:44PM +0000, Stefan Loos wrote: > > > > is the number of tests per host limited? I've cleaned my bb-hosts and as I > > add one host with many tests. I disabled all customized tests and tried to > > find out if its a single test. But all test run by itself didn't crash the > > hobbit server - running all together did! > > The host runs about 20 tests. > >No, there is no limit (other than running out of memory, but I think we >can rule out that one). > >It seems to crash while loading the checkpoint file. Could you send me >that file - it's the ~hobbit/server/tmp/hobbitd.chk file ? I believe it >has somehow become corrupted, but that still shouldn't crash the server. > > >Regards, >Henrik > > >To unsubscribe from the hobbit list, send an e-mail to >hobbit-unsubscribe at hswn.dk > >

1 0

[hobbit] Some service graphs not showing up on host pages
by Winn.Beutler＠mcdata.com 17 May '05

17 May '05

Henrik, Thanks for the quick reply, 1. Yes all three servers are independent of each other and are running the HOBBIT server SW. 2. The files for the various hosts appear to getting updated regularly. (Dont know how valid the contents are since they are not appearing.) Here is a sample of the contents of the 'rrd' directories for three of my hosts: cd /opt/hobbit/data/rrd/ ls -l kakapo.mcdata.com orafinjr.mcdata.com yale.mcdata.com kakapo.mcdata.com: total 2080 -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:22 disk,opt.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:22 disk,root.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:22 disk,tmp.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:22 disk,usr.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:22 disk,var.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:22 disk,var,run.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,opt.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,root.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,usr.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,var.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 la.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 memory.actual.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 memory.real.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 memory.swap.rrd -rw-r--r-- 1 hobbit hobbit 304308 May 13 07:22 netstat.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 procs.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 tcp.conn.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 tcp.ssh.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 users.rrd -rw-r--r-- 1 hobbit hobbit 304308 May 13 07:18 vmstat.rrd orafinjr.mcdata.com: total 5164 -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,devdg.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 12 04:46 disk,mnt,standby,opt.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 12 04:46 disk,mnt,standby.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 12 04:46 disk,mnt,standby,usr.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 12 04:46 disk,mnt,standby,var.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,newdisk2.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,newdisk.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,opt.rrd -rw-r--r-- 1 hobbit hobbit 38532 Apr 21 14:36 disk,red.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,root.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,testdg_app.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,testdg_db.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,tmp.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,usr.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,var.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:21 disk,var,run.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,devdg.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 12 04:48 iostat.,mnt,standby,opt.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 12 04:48 iostat.,mnt,standby.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 12 04:48 iostat.,mnt,standby,usr.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 12 04:48 iostat.,mnt,standby,var.rrd d-wxr----t 2 hobbit hobbit 4096 May 10 14:52 iostat.,ne -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,newdisk2.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,newdisk.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,opt.rrd -rw-r--r-- 1 hobbit hobbit 266340 Apr 22 10:01 iostat..rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,testdg_app.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,testdg_db.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,usr.rrd -rw-r--r-- 1 hobbit hobbit 266340 May 13 07:18 iostat.,var.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:21 la.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:21 memory.actual.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:21 memory.real.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:21 memory.swap.rrd -rw-r--r-- 1 hobbit hobbit 304308 May 13 07:21 netstat.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:21 procs.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 tcp.conn.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 tcp.ssh.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:21 users.rrd -rw-r--r-- 1 hobbit hobbit 304308 May 13 07:18 vmstat.rrdbit yale.mcdata.com: total 944 -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:19 disk,boot.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:19 disk,root.rrd -rw-r--r-- 1 hobbit hobbit 38532 Mar 16 18:22 disk,tmp,a.rrd -rw-r--r-- 1 hobbit hobbit 38532 May 13 07:19 disk,u01.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:19 la.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:19 memory.actual.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:19 memory.real.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:19 memory.swap.rrd -rw-r--r-- 1 hobbit hobbit 304308 May 13 07:19 netstat.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:19 procs.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 tcp.conn.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:22 tcp.ssh.rrd -rw-r--r-- 1 hobbit hobbit 19548 May 13 07:19 users.rrd -rw-r--r-- 1 hobbit hobbit 323292 May 13 07:21 vmstat.rrd -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thursday, May 12, 2005 11:05 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Some service graphs not showing up on host pages On Thu, May 12, 2005 at 02:53:27PM -0600, Winn Beutler wrote: > > server1 (RH ES3.0) - Brought up HOBBIT 4.0.2 & 4.0.3b. Everything works fine. > > server2 (RH ES3.0) - Was running BB and converted to HOBBIT 4.0.2 & 4.0.3b. Everything works fine > > server3 (RH ES3.0) - Was running BB and was working fine. Converted to HOBBIT 4.0.2 & 4.0.3b and the following tests don't end up with a graph on the host pages: conn, disk, memory, ssh, iostat > other test such as cpu, netstat vmstat work fine. Just so that I understand - all of these servers run the Hobbit *server* programs - they are not just clients reporting to a single Hobbit server? > I am running rrdtool-1.2.6 on all machines. Any idea what is wrong with server3 or how I troubleshoot it? No errors show up in either /var/log/httpd/error_log or /var/log/hobbit/*.log First thing to check is if the server3 RRD-files are generated at all, since this is the basis of having graphs. Check what is in the ~hobbit/data/rrd/server3/ directory. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk SPECIAL NOTICE All information transmitted hereby is intended only for the use of the addressee(s) named above and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of confidential and privileged information is prohibited. If the reader of this message is not the intended recipient(s) or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that you must not read this transmission and that disclosure, copying, printing, distribution or use of any of the information contained in or attached to this transmission is STRICTLY PROHIBITED. Anyone who receives confidential and privileged information in error should notify us immediately by telephone and mail the original message to us at the above address and destroy all copies. To the extent any portion of this communication contains public information, no such restrictions apply to that information. (gate01)

3 3