October 2006 - Xymon - Xymon mailman web

ifstat and hobbitclient-sunos.sh
by Dominique.Frise＠unil.ch 11 Oct '06

11 Oct '06

Hi, The command "/usr/bin/kstat -p -s '[or]bytes64' | sort" for ifstat in hobbitclient-sunos.sh collects statistics for wrsmd (WCI Remote Shared Memory (WRSM) DLPI driver), which is wrong. Example on a Solaris 9 client: [bb at eliot bin]$ /usr/bin/kstat -p -s '[or]bytes64' | sort eri:0:eri0:obytes64 363076089018 eri:0:eri0:rbytes64 15860668051 ge:0:ge0:obytes64 0 ge:0:ge0:rbytes64 0 wrsmd:0:wrsmd0:obytes64 0 wrsmd:0:wrsmd0:rbytes64 0 wrsmd:10:wrsmd10:obytes64 0 wrsmd:10:wrsmd10:rbytes64 0 wrsmd:11:wrsmd11:obytes64 0 wrsmd:11:wrsmd11:rbytes64 0 wrsmd:12:wrsmd12:obytes64 0 wrsmd:12:wrsmd12:rbytes64 0 wrsmd:13:wrsmd13:obytes64 0 wrsmd:13:wrsmd13:rbytes64 0 wrsmd:14:wrsmd14:obytes64 0 wrsmd:14:wrsmd14:rbytes64 0 wrsmd:15:wrsmd15:obytes64 0 wrsmd:15:wrsmd15:rbytes64 0 wrsmd:1:wrsmd1:obytes64 0 wrsmd:1:wrsmd1:rbytes64 0 wrsmd:2:wrsmd2:obytes64 0 wrsmd:2:wrsmd2:rbytes64 0 wrsmd:3:wrsmd3:obytes64 0 wrsmd:3:wrsmd3:rbytes64 0 wrsmd:4:wrsmd4:obytes64 0 wrsmd:4:wrsmd4:rbytes64 0 wrsmd:5:wrsmd5:obytes64 0 wrsmd:5:wrsmd5:rbytes64 0 wrsmd:6:wrsmd6:obytes64 0 wrsmd:6:wrsmd6:rbytes64 0 wrsmd:7:wrsmd7:obytes64 0 wrsmd:7:wrsmd7:rbytes64 0 wrsmd:8:wrsmd8:obytes64 0 wrsmd:8:wrsmd8:rbytes64 0 wrsmd:9:wrsmd9:obytes64 0 wrsmd:9:wrsmd9:rbytes64 0 A quick fix is to replace it with "/usr/bin/kstat -p -s '[or]bytes64' | grep -v wrsmd | sort" Dominique UNIL - University of Lausanne

4 4

[hobbit] Premature end of script headers: bb-hostsvc.sh, referer: ...
by craig＠cookitservices.com 11 Oct '06

11 Oct '06

I added the latest all-in-one patch first. Then added the switch "-mv8plus" to the Makefile.SunOS file and did a rebuild. Still the same thing. The hobbit server info column displays, but the info columns for the clients do not. Same apache error: Premature end of script headers... etc I am using gcc 3.4.6 from sunfreeware. Craig Cook -- Systems Monitoring Consulting and Support Services http://www.cookitservices.com

1 0

Somewhat off-topic - the GPL v2/v3 debate, and Hobbit
by henrik＠hswn.dk 11 Oct '06

11 Oct '06

As You may have heard, there is currently a rather intense debate going on about the proposed new version 3 of the GNU General Public License (the GPL). Hobbit uses the GPL license - and specifically, it uses the current version 2. A change to version 3 of the GPL therefore cannot happen automatically - it has to be a deliberate decision by me (and anyone else who has contributed code to Hobbit) to do so. The proposed GPL v3 adds some rather troubling restrictions to the license, especially when it comes to using GPL-licensed code in systems that include various DRM (Digital Rights Management) mechanisms. It also poses some legal challenges to companies that obtain patents on their work, which could very well mean that they would not be able to use GPLv3 licensed software at all. I fundamentally believe that DRM and patents - especially patents on computer software - is evil, and I would never buy anything that comes with such restrictions on what I can use it for. However, the GPL v3 proposal is too much of a "fight fire with fire" agenda for me. Whether our society should permit patents is a political discussion, not a software-development issue. So it should be handled politically, not in a software license. DRM restrictions can be dealt with simply through normal market mechanisms - if you dislike them, dont buy products that have them. Or make something that is better and release it in an Open Source way. I am not a lawyer, so I may have misunderstood quite what the proposed changes mean - but if I have, then several other software developers whose judgment I respect have also misunderstood them. Most notably, a large collection of the Linux kernel developers - including Linus Torvalds - strongly oppose the GPL v3 changes and have recently published a discussion document detailing why they believe these changes are wrong. http://permalink.gmane.org/gmane.linux.kernel/448894 When the second draft of GPLv3 was published, Linus also participated in a lengthy discussion explaining his views on the Groklaw blog. If you're interested, see the (long) "DRM misunderstood" thread starting at http://www.groklaw.net/article.php?story=20060727140038810 and especially http://www.groklaw.net/comment.php?mode=display&sid=20060727140038810&title… All that just to explain my position: As far as I am concerned there will not be a change of license for Hobbit, at least not with the current wording of the GPLv3. Just in case anyone cared. Regards, Henrik

4 5

hobbitd goes yellow
by cgayde＠isugw.indstate.edu 10 Oct '06

10 Oct '06

Can someone help me get rid of this error. Oversize status msg from xxx.xxx.xxx.xxx for machinename:ports truncated (n=406136, limit=262144)

2 1

Misnamed man page... v4.2.0 - no patches
by rgordonjr＠gmail.com 10 Oct '06

10 Oct '06

Hello... V4.2.0 (no patch set) Not sure if anyone else has noticed this.. When navigating through the menu for the Hobbit Man pages if you click on the link for "Custom hobbit Webpages" it brings up /help/manpages/man1/bb- webpage.cgi.1.html .... On the file system, the html page is missing the "cgi" (bb-webpage.1.html) Thanks - -- --==[ Bob Gordon ]==--

1 0

Remove/Drop all of one test type
by shane.presley＠gmail.com 10 Oct '06

10 Oct '06

Hello, I have ~300 servers, and recently changed the ping column from "conn" to "Ping". Now of course my old conn column is all purple. How can I remove all my conn tests? I tried this, but it didn't work: bb 127.0.0.1 "drop * testname conn" Thanks, Shane

2 2

[hobbit] hobbit mailack question
by KauffmanT＠nibco.com 10 Oct '06

10 Oct '06

Thanks, Henrik. Everything is working fine now. All I need to do now is work out the rewrite rule for procmail (or build another filter before mailack) to change '<phone number at provider>' back into a name people can recognise. Tom -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Monday, October 09, 2006 5:30 PM To: hobbit at hswn.dk Subject: Re: [hobbit] hobbit mailack question On Mon, Oct 09, 2006 at 03:30:22PM -0400, Kauffman, Tom wrote: > Now -- what is mailack actually looking for? I'm trying to get things > configured so I can email alerts to a cell phone and have them > acknowledged by replying to the message. With my cell phone, I seem to > have two options: 'reply' and 'reply with copy'. 'Reply with copy' > doesn't seem to be setting the acknowledgement flag. It looks for a subject line matching this regular expression: .*(Hobbit|BB)[ -]* \[*(-*[0-9]+)[\]!]* i.e. the word "Hobbit" or "BB" followed by some space and perhaps a dash, and then the ack-code which may be enclosed in brackets. Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

1 0

Running logfetch 'by hand'
by Andrew.Jackson＠ordnancesurvey.co.uk 10 Oct '06

10 Oct '06

Hi, First, thanks for hobbit. It is making my life much easier. I'm trying to run logfetch by hand as it were. It takes two files logfetch.<machine>.cfg and logfetch.<machine>.status as arguments. I can see that logfetch.<machine>.cfg is generated when you submit data to the hobbit server but I can't find out where the logfetch.<machine>.status file is generated. Any help gratefully received! Thank Andy J. . This email is only intended for the person to whom it is addressed and may contain confidential information. If you have received this email in error, please notify the sender and delete this email which must not be copied, distributed or disclosed to any other person. Unless stated otherwise, the contents of this email are personal to the writer and do not represent the official view of Ordnance Survey. Nor can any contract be formed on Ordnance Survey's behalf via email. We reserve the right to monitor emails and attachments without prior notice. Thank you for your cooperation. Ordnance Survey Romsey Road Southampton SO16 4GU Tel: 023 8079 2000 http://www.ordnancesurvey.co.uk

2 3

hobbit mailack question
by KauffmanT＠nibco.com 09 Oct '06

09 Oct '06

I've given up on getting MS-Exchange to forward email within the domain and am now running fetchmail to get the messages from exchange. Now -- what is mailack actually looking for? I'm trying to get things configured so I can email alerts to a cell phone and have them acknowledged by replying to the message. With my cell phone, I seem to have two options: 'reply' and 'reply with copy'. 'Reply with copy' doesn't seem to be setting the acknowledgement flag. Here's the relevant chunk of the email: Subject: --------------- (644431 roanoke.hacmp) roanoke:hac Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-pstn-levels: (S:64.56310/99.90000 ) X-pstn-settings: 1 (0.1500:0.1500) gt3 gt2 gt1 X-pstn-addresses: from <5743701164 at vtext.com> [db-null] Return-Path: 5743701164 at vtext.com X-OriginalArrivalTime: 09 Oct 2006 19:14:57.0608 (UTC) FILETIME=[3594D480:01C6EB D7] --------------- (644431 roanoke.hacmp) roanoke:hacmp red [644431] red Mon Oct 9 14:51:36 EDT 2006 clinfo is not run Suggestions? Tom Kauffman NIBCO, Inc CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

2 1

depends tag questions, possible feature request
by jonescr＠cisco.com 09 Oct '06

09 Oct '06

First a quick summary of the pertinent part of my bb-hosts: subpage PRODDB Prod DB 1.2.3.4 prod-db1 # ssh pulldata TRENDS:*,disk:disk|disk1,vmstat:vmstat1 # subpage PRODURLS Prod URLS 1.2.3.5 URL-SomePortal # cont;http://username:password at vhost.com;SUCCESSFUL 1.2.3.5 URL-SomeApp # cont;http://someapp.com/monitor.php;SUCCESS 1.2.3.6 URL-SomeOtherApp # cont;http://someotherapp.com/monitor.php;SUCCESS (In case you are wondering, I have URLS monitored that way because the URLS monitored are load balanced across many servers. I have other tests for the httpd processes for those specific servers, but the PRODURLS entries are for alerting when those external URLS are not responding). That being said, today we had a problem with prod-db1. Basically Oracle went nuts and the system load went to 110+, and as a result all of the PRODURLS alerts went off. Now, no problem so far, since this is by design. The problem is that As the DB was able to handle a request here and there, the PRODURLS were "flapping" (changing status from red to green to red to green). So, Acks had no effect, "Disable until OK" had no effect. I was tasked with how to reduce the amount of pager spam the next time this happens. The obvious way is to just go in an disable the affected hosts/services for a specific time period, but this is easier said than done when the world is on fire and you are on a conference bridge and have people standing around you waiting for things to be fixed...In short, the guys that were oncall didn't have time to go log into Hobbit and do the disables...meanwhile their pagers are going nuts which adds to their frustration. *It would be nice if Hobbit had "flap detection"*, where if a service changes states more than X times in X minutes or seconds, it turns clear or blue (or maybe even a new color). I am reminded that Nagios has this feature, and Hobbit is totally better than Nagios, so we shouldn't have that feature missing right? ;-) *It would be nice if the depend tag worked for any column/test type*. I looked at using the "depends" tag, but it appears that *depends only works for network checks*. In other words, I cannot do: 1.2.3.5 URL-SomeApp # cont;http://someapp.com/monitor.php;SUCCESS depends=(http:prod-db1/procs,prod-db1/cpu) If I have misunderstood about the depends tag, let me know, but it appears from the man page that it only works for network tests: "The 'depends' tag is evaluated on the BBNET server while running the network tests. It can therefore only refer to other network tests that are handled by the same BBNET server - there is currently no way to use the e.g. the status of locally run tests (disk, cpu, msgs) or network tests from other BBNET servers in a dependency definition. Such dependencies are silently ignored."

2 1