January 2006 - Xymon - Xymon mailman web

multiple hosts
by Schrittenlocher＠rz.uni-frankfurt.de 17 Jan '06

17 Jan '06

Hi, as there was no answer to my first mail, I try again with other words: Our machines may have one or more aliases (virtual hosts) which all have DNS-entries. Normally we refer to the machines not using the hostname but by the alias, each of them combined to a bundle of functions and tasks. So a machine "frodo.xxx.de" might host "webserver.xxx.de", "dnsserver.xxx.de" and "tolkserver.xxx.de". These aliases and of course the tasks related to them are transferred to another machine in case of hardware failure, maintenance, etc. In bb-hosts we have an entry for each machine (to get data from this machine in case there is no alias set on it) and of course for all relevant aliases. What we need now is that the general client data (cpu, disk, ssh, ...) for each machine appears both with the hostname and all aliases set on it. I added a script to runclient.sh which creates ~/client/etc/clientlaunch.cfg dynamically according to the aliases set on the machine before starting the client. This assures that the correct data is polled on the client. I may modify $MACHINE or Í may use the CLIENT:hostname tag in bb-hosts to make the client send messages with a different name. But that would require several instances of the client running, somethin I dislike. I hope there is a way to send the client data once and to make the server look at some configuration file to see where he should present these data. Maybe that possibility exists but I haven't found it yet. So I hope that someone could indicate me where to search for the places which I have to "hack" hoping that it is possible to do that with shell or perl as my C-knowledge isn't so good. But even if C is necessary: Any hints are appreciated. Thanks Rolf -- Mit freundlichen Gruessen Rolf Schrittenlocher HRZ/BDV, Senckenberganlage 31, 60054 Frankfurt Tel: (49) 69 - 798 28908 Fax: (49) 69 798 2881 LBS: lbs-f at mlist.uni-frankfurt.de Persoenlich: schritte at rz.uni-frankfurt.de

2 2

problem with rrdtool
by fscholz＠csc.com 17 Jan '06

17 Jan '06

Hi, I try to build hobbit-4.1.2 under HPUX B.11.00 u 9000/856. Deport files are installed, for example the rrdtool-1.0.40. I start ./configure and get the following errors: Checking for RRDtool ... Not RRdtool 1.0., checking for 1.2.x ERROR: RRdtool include files found in /opt/rrdtool-1.0.40/include but compile fails. and other errors, for example: (Bundled) cc:"/opt/rrdtool-1.0.40/include/rrd.h" .... unexpected symbol: "time_t" .... unexpected symbol:"rrd_value_t" .... unexpected symbol "timetype" I don't know, what to do now. Has someone an idea? Kind regards, Frauke Scholz CSC (Germany) Ltd.; MDS (Managed Desktop Services) Web & Middleware Engineering Wolfenbütteler Str. 86/Obergstr. 5 38102 Braunschweig Germany Phone: +49.531.224.1086 or +49.5172.129279 Fax: +49.531.224.1995 e-Mail: fscholz at csc.com Internet: http://www.de.csc.com Experience Results. Experience CSC. __________________________________________________ Please note that this e-mail, including any attachments, contains information that is subject to United States laws and regulations. The use or further dissemination of these materials or information therein may be prohibited by United States law.

3 4

Multiple colors on alerts
by rsmrcina＠wi.rr.com 16 Jan '06

16 Jan '06

Is it possible to specify multiple colors on an alert, eg: red,yellow. If so are they comma separated? Or does it work by color hierarchy? Thanks. -- Rich Smrcina VM Assist, Inc. Main: (262)392-2026 Cell: (414)491-6001 Ans Service: (360)715-2467 rich.smrcina at vmassist.com Catch the WAVV! http://www.wavv.org WAVV 2006 - Chattanooga, TN - April 7-11, 2006

2 2

Telnet/ssh from Hobbit Display
by Todd.Costa＠state.ma.us 14 Jan '06

14 Jan '06

Hello Listers, I am wonder if its possible in Hobbit to establish a telnet/ssh session to a host that's being monitored from the Display? If it can be done, how do I go about doing it? I have read about adding html tags in the header/footer files on the BB archives which comes close to what I want but did not explain further. I did not find anything in Deadcat. Google is great but there's way too hits to sift through. My goal is to connect to an old device via telnet/ssh from a link in Hobbit. I realize telnet is taboo but the device is/can be isolated from outside connections (managed IP's). Can anyone point me in the right direction? Thanks for your input. ---------------------------------------------------------------------------- -- Todd M. Costa Commonwealth of Massachusetts ---------------------------------------------------------------------------- ---

3 2

[hobbit] Re: Hobbit Alert config
by v.everett＠afgonline.com.au 13 Jan '06

13 Jan '06

Hi Henrik Yes, I got the alert, no problem. The e-mail address <number>@messagenet.com sends an SMS to <number> I obviously removed my own number before sending this mail :-) I then sorted out the problem, but never got a recovery message. In case you need to know, I am using Hobbit version 4.1.2 Regards Vernon ----- No trees were killed in the creation of this message. However, many electrons were terribly inconvenienced. -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Saturday, 14 January 2006 1:04 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Re: Hobbit Alert config On Fri, Jan 13, 2006 at 06:13:20AM -0500, James B Horwath wrote: > > Vernon Everett wrote: >> >> Can anybody tell me if there is a specific order required for the >> entries in hobbit-alert.cfg? >> For instance, this line >> MAIL 55512345 at messagenet.com.au FORMAT=SMS REPEAT=180 DURATION>5 >> COLOR=red RECOVERED alerts me to the issue, but I don't get a recovered SMS. >> >> I know Hobbit is configured correctly, because this line MAIL >> v.everett at afgonline.com.au RECOVERED REPEAT=480 mails me the >> recovered notice. > > My guess would be the "COLOR=red" token in the rule. When a recovery > comes in the color isn't red, therefore no match. That shouldn't cause it to drop the recovery message - when you have a RECOVERED setting on an alert rule, the recovery message goes out to all the people who were alerted originally. At least, that's how it *should* work. Now, the question for Vernon is: Did the "55512345 at messagenet.com.au" recipient in your original report get the alert message ? There's a DURATION>5 there, so if it was a short-lived problem he may not have gotten the alert - and then there's no recovery message either. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ NOTICE: This message and any attachments are confidential and may contain copyright material of Australian Finance Group Limited or a third party. It is intended solely for the purpose of the addressee and any other named recipient. If you are not the intended recipient, any use, distribution, disclosure or copying of this message is strictly prohibited. The confidentiality attached to this message is not waived or lost by reason of the mistaken transmission or delivery to any unintended party. If you have received this message in error, please notify the author immediately or contact Australian Finance Group on +61 8 9420 7888.

1 0

Hobbit Alert config
by JamesHorwath＠glic.com 13 Jan '06

13 Jan '06

Vernon, My guess would be the "COLOR=red" token in the rule. When a recovery comes in the color isn't red, therefore no match. Regards, Jim ----- Message from "Vernon Everett" <v.everett at afgonline.com.au> on Fri, 13 Jan 2006 18:55:30 +0800 ----- To: <hobbit at hswn.dk> Subject: Hobbit Alert config Hi all Can anybody tell me if there is a specific order required for the entries in hobbit-alert.cfg? For instance, this line MAIL 55512345 at messagenet.com.au FORMAT=SMS REPEAT=180 DURATION>5 COLOR=red RECOVERED alerts me to the issue, but I don't get a recovered SMS. I know Hobbit is configured correctly, because this line MAIL v.everett at afgonline.com.au RECOVERED REPEAT=480 mails me the recovered notice. Cheers Vernon Jim Horwath SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM Unix Admin JamesHorwath at glic.com (W) 610-807-8795 (C) 610-533-6972 (F) 610-807-6003 ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

2 1

Hobbit Alert config
by JamesHorwath＠glic.com 13 Jan '06

13 Jan '06

Vernon, You may need a separate rule for the recovery condition. Or maybe the cleaner solution is to write a small script to handle paging. I did. Hobbit has environment variables set if there is a recovery or it is a new message. I am not familar with the SMS format, I use plain 'ole send mail to a pager for alerts. But I would doubt sending to SMS would be difficult. Regards, Jim To: <hobbit at hswn.dk> Subject: RE: [hobbit] Re: Hobbit Alert config Hmmm, makes sense. OK, then does anybody know if there a workaround for this? I want an e-mail on any colour fail, and an e-mail on recovery. On a condition red, I want an SMS, and an SMS on recovery from a red. Regards Vernon Jim Horwath SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM Unix Admin JamesHorwath at glic.com (W) 610-807-8795 (C) 610-533-6972 (F) 610-807-6003 ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

1 0

[hobbit] purple clients problem
by Craig_Whilding＠mentor.com 13 Jan '06

13 Jan '06

If you start the client with --hostname=MYHOSTNAME (e.g --hostname=ariadne.imada.sdu.dk) it will report using this FQDN and you wont have to change bb-hosts. Craig -----Original Message----- From: Longina Przybyszewska [mailto:longina at imada.sdu.dk] Sent: 13 January 2006 14:11 To: hobbit at hswn.dk Subject: Re: [hobbit] purple clients problem still I have some linux clients that use single name instead of FQname - they run the same software now ;) I wouldn't like to mess the bb-hosts file since all our workstations suppose to be identical! So, how is made the first line in client's msg.txt: client aida.linux or client ariadne,imada,sdu,dk.linux Regards Longina -- Longina Przybyszewska, system programmer Dept. of Math. & Comp. Sci. - IMADA University of Southern Denmark, Odense Campusvej 55,DK-5230 Odense M, Denmark tel: +45 6550 2359 - http://www.imada.sdu.dk email: longina at imada.sdu.dk -- On Fri, 13 Jan 2006, Longina Przybyszewska wrote: > UPS. I have just noticed that there are bbrun processes running > on those 2 servers from old BB installation. > I think it explains all my the troubles -... make upgrades carefully... > > By the way , is there a special bb_channel for BBclient-Hobbitserver > communication? > > regards > Longina > > > > -- > Longina Przybyszewska, system programmer > Dept. of Math. & Comp. Sci. - IMADA > University of Southern Denmark, Odense > Campusvej 55,DK-5230 Odense M, Denmark > > tel: +45 6550 2359 - http://www.imada.sdu.dk email: > longina at imada.sdu.dk > -- > > On Fri, 13 Jan 2006, Longina Przybyszewska wrote: > >> On Thu, 12 Jan 2006, Henrik Stoerner wrote: >> >>>> in bb-hosts: >>>> ---- >>>> 130.225.128.126 sieglinde.imada.sdu.dk >>>> 130.225.128.167 zaira.imada.sdu.dk >>>> >>>> ---- >>>> in ghosts: >>>> 130.225.128.126 reported host sieglinde >>>> 130.225.128.167 reported host zaira >>>> ----- >>> >>> The hostname you see in the "ghosts" list is the hostname the the >>> clients use when they report data. This *must* match the one found >>> in the bb-hosts file, or Hobbit will simply discard the client message >>> because it doesn't know which host it belongs to. >>> >>> So you can either change your clients to use the "--hostname" option >>> (e.g. use "--hostname=sieglinde.imada.sdu.dk" when calling >>> runclient.sh), or add "CLIENT:sieglinde" to the entries in the >>> bb-hosts file. >> >> It seems to partly(!) explain my puzzle:) >> The way client presents to the server obviously was changed in the last >> upgrade (the day since my problems started). >> The workstations which were down during my hobbit uprade could after >> restart continue with old hobbit_client until they become først PURPLE then >> '-' and were not upgraded. >> >> Still I don't understand why my 2 servers (sparc/solaris9) stay GREEN on >> display even if there is an obvious name mismatch - AND there is no shade >> for incoming data from both servers in clientdata.log! (I am running >> hobbitd_client with --debug option) >> >> in bb-hosts: >> ---- >> 130.225.128.9 bach.imada.sdu.dk # ssh dns rpc=mount,nfs >> 130.225.128.10 mozart.imada.sdu.dk # http://www.imada.sdu.dk >> >> in ghosts: >> ---- >> 130.225.128.9 reported host bach >> 130.225.128.10 reported host mozart >> >> in ...client/tmp/msg.txt: >> ----bach---- >> client bach.sunos >> [date] >> Fri Jan 13 13:37:05 MET 2006 >> .... >> >> ----mozart---- >> client mozart.sunos >> [date] >> Fri Jan 13 12:43:58 CET 2006 >> .... >> >> on DISPLAY: >> ---- >> fredag 13 januar 2006, 13:39:17 CET - Disk partitions on >> mozart.imada.sdu.dk OK >> fredag 13 januar 2006, 13:39:17 CET up: 164 day(s), 4 users, 77 procs, >> load=11 >> >> regards >> Longina >> >> -- >> Longina Przybyszewska, system programmer >> Dept. of Math. & Comp. Sci. - IMADA >> University of Southern Denmark, Odense >> Campusvej 55,DK-5230 Odense M, Denmark >> >> tel: +45 6550 2359 - http://www.imada.sdu.dk email: >> longina at imada.sdu.dk >> -- >> >

1 0

[hobbit] logic dependencies and combined to alerts
by Craig_Whilding＠mentor.com 13 Jan '06

13 Jan '06

I was meaning an option such as "if fails due to dependant in route tag change colour to: "clear" option but their doesn't appear to be one looking at the bbtest-net section of hobbitserver.cfg. Maybe Henrik can confirm this? depends=(testA:host1/test1,host2/test2) I haven't used it but depends=(conn:SPF/conn) etc should work. Conn is a network test run from your server. Try it and see would be the best way although I personally prefer router as I use it for hosts on a particular switch too. Craig -----Original Message----- From: brandste at hebis.de [mailto:brandste at hebis.de] Sent: 13 January 2006 14:02 To: hobbit at hswn.dk Subject: Re: [hobbit] logic dependencies and combined to alerts So the --ping is just a option in plain-ascii. >> Puh...so grey-hairdevelopment is postponed to a new hobbit version ;-) << clear is more or less a "Schroedinger-Cat" with a lock at the box. so the more reasonable color to show. by changing the color def. into "clear" in hobbitserver.cfg i may alter other test-results i would not like to (i wil dig in that) As far as i understood, you are using hobbit for the same purpose. Have you ever tried the "depends"-tag for chain building? Any other folks using hobbit not mainly for service monitoring? Have you found a way? Best Mathias PS: Henrik, could you confirm whether the "conn-test" works with the "depends-tag"? In message <40A2891842052B40BF0AD6E6A83A9FA002324ABC at svr-gbn-exc-02.mgc.mentorg .com>, "Whilding, Craig" writes: > I have fping installed and my hobbit install had the --ping option for > bbtest-net enabled by default in hobbitlaunch.cfg. > > Yes the way you have shown it will work. Status messages from downed > hosts with route should then show what it relies on is down and report > yellow. > > Why do you want clear? Surely it should still show a warning at these > switches being down but the one in red being the main concern. There may > be an option to change this colour to "clear" in hobbitserver.cfg, > haven't checked though. > > Craig > > -----Original Message----- > From: brandste at hebis.de [mailto:brandste at hebis.de]=20 > Sent: 13 January 2006 13:24 > To: hobbit at hswn.dk > Subject: Re: [hobbit] logic dependencies and combined to alerts=20 > > > Hi Craig, > > thanks for the fast answer. > > "route" is a tag which follows "ip name # service" > out of that and the "man explanation" i could form=20 > chains starting with SPF? > > > 1.1.1.1 SPF #=20 > 1.1.2.1 Switch1 # route:SPF > 1.1.3.1 Switch2 # route:SPF > 1.1.3.2 Switch2.1 # route:SPF,Switch2 > 1.1.3.3 Switch2.2 # route:SPF,Switch2 > 1.1.3.4 Switch2.2.1 # route:SPF,Switch2,Switch2.2 > 1.1.4.1 Switch3 # route:SPF > > Will this work? > In the man page is qouted that the > --ping=20 > option has to be used somewhere... > is --ping the default or do i need do recompile? > > This would be a possible workaround...but not a real > satisfying state, cause status is changed to yellow > and not "clear" on failingchains. > > Best > Mathias > > > In message > <40A2891842052B40BF0AD6E6A83A9FA002324AA0 at svr-gbn-exc-02.mgc.mentorg > .com>, "Whilding, Craig" writes: > > route:router1,router2,.... > >=20 > > This is an option you can add to switches in bb-hosts to do what you > > want. If a switch fails, all those below it will go yellow instead of > > red so you could just alert on red tests and so only get the SPF alert > > you want.=3D20 > > (I use this here). > >=20 > > Craig > >=20 > > -----Original Message----- > > From: brandste at hebis.de [mailto:brandste at hebis.de]=3D20 > > Sent: 13 January 2006 12:52 > > To: hobbit at hswn.dk > > Cc: brandste at hebis.de > > Subject: [hobbit] logic dependencies and combined to alerts > >=20 > >=20 > > Hi all, > >=20 > > maybe a stupid question answerd in the mailinglist many times... > > (but i was not able to find it in the archive or interpret > > the man) > >=20 > > As a new convert from bb to hobbit, first Congrats! It's > > far less resource consuming then the former. > >=20 > > We mainly use the tool for network observation, so the conn is > > our friend. > > We have a couple of network-devices located on different > > campi around our location. Each of the campi has a single > > point of failure (SPF) at the entry.=3D20 > > There is only one hobbit (former bb) working. > >=20 > > What i would like to do is, setting up alerts and colorchanges > > depending of the state of the SPF. > >=20 > > Example: > >=20 > > location-1 > > SPF - Switch1 > > - Switch2 - Switch 2.1 > > - Switch 2.2 - Switch 2.2.1 > > - Switch3 > >=20 > > If SPF fails i do not need to get messages from all the > > Switches behind. > > This i could handle with the tag PAGE in the alerts-cfg. > >=20 > > PAGE=3D3Dlocation_1 > > MAIL "NOC" SERVICE=3D3Dconn REPEAT=3D3D1h > > =3D09 > > Using it that way, (if i understood it) the "NOC" receives=3D20 > > one mail per hour if the state changes from location-1. > > Here i have no idea (and not tested) whether this includes Mails > > from all hosts or not. > >=20 > > At this stage i only need a message concerning the incident involving > > SPF. > > If switch1 or switch3 fail, obviously a mail concerning this incident. > > But no mails from connected "sub"-switches... > >=20 > > For receiving a message on a single incident > > Including: > > HOST=3D3Dswitch1 > > MAIL "NOC" SERVICE=3D3Dconn REPEAT=3D3D1h > > in the alerts-cfg, generates a mail independent from the former > > PAGE=3D3D.... > > or other settings? > >=20 > > Has anybody found a solution for message dependencies like qouted? > >=20 > >=20 > > *** > >=20 > > Next would be the color change. > >=20 > > Concerning this i found the keyword "depends", but no > > sign that it will work in combination with the conn test.... > >=20 > > 1.2.3.4 foo # > > depends=3D3D(testA:host1/test1,host2/test2),(testB:host3/test3),[...] > >=20 > > 1.1.1.1 SPF #=3D20 > > 1.1.2.1 Switch1 # depends(conn:SPF/conn) > > 1.1.3.1 Switch2 # depends(conn:SPF/conn) > > 1.1.3.2 Switch2.1 # depends(conn:SPF/conn,conn:Switch2/conn) > > 1.1.3.3 Switch2.2 # depends(conn:SPF/conn,conn:Switch2/conn) > > 1.1.3.4 Switch2.2.1 # > > depends(conn:SPF/conn,conn:Switch2/conn,Switch2.2/conn) > > 1.1.4.1 Switch3 # depends(conn:SPF/conn) > >=20 > > would this be the correct usage? > > So if SPF fails, all page behind should be "clear?". > >=20 > >=20 > > Is this possible with hobbit, or a future release? > >=20 > >=20 > > Thanks in advance. > >=20 > > Best > > Mathias > >=20 > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > >=20 > >=20 > >=20 > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > >=20 > >=20 > >=20 > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] Bbtest Program crashed
by subhash.gada＠logicacmg.com 13 Jan '06

13 Jan '06

Hi bbtest is working good when I test it with few hosts i.e. 1 or 2. when I put on my complete load i.e. 700 hosts then it is getting crashed. The system configuration is p4 with 512 RAM. Hobbit is built on Debian 3.1 Got the following out put from gdb. But Ldap libraries are installed in the system and it is built with ldap support. 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support 2006-01-13 19:35:09 ldap test requested, but bbgen was built with no ldap support Program received signal SIGINT, Interrupt. 0xffffe410 in __kernel_vsyscall () Regards, Subhash gada -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, January 13, 2006 7:26 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Bbtest Program crashed On Fri, Jan 13, 2006 at 07:14:24PM +0530, Gada, Subhash wrote: > > Bbtest is crashed and getting the following error - Program crashed, > Fatal signal caught!. > All the connectivity test turned to purple after some time. > > This is what am getting when I run bbtest-net with gdb tool. Any help > is appreciated. Important: When you do that, you MUST have all of the Hobbit environment setup. It's best to run it with $ su - hobbit $ bbcmd gdb ~/server/bin/bbtest-net > (gdb) run > Starting program: /home/hobbit/server/bin/bbtest-net > > Program received signal SIGSEGV, Segmentation fault. > 0x400943ca in strcmp () from /lib/tls/i686/cmov/libc.so.6 "strcmp()" is a standard library routine, so it would help to know what called it. Use the "bt" command in gdb. Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

1 0