February 2006 - Xymon - Xymon mailman web

Loss of Apache graphs
by rmunsch＠solutionsforprogress.com 24 Feb '06

24 Feb '06

Hello, There are two webservers being monitored by hobbit (among many other different servers). Both have bb-hosts entries that are nearly identical. Both have the same version of the client on them (4.1.2p1). Both seem to be working perfectly well in all other respects - both internal (CPU, disk etc) and external (conn, http) tests seem to be working, and have graphs. However on one, the apache trends show up as expected, and on the other, they have stopped graphing. Current values for the graphless one are good ol' "nan," but *just* for the 4 apache trend graphs - Utilization, Workers, CPU Ut and RPS. All other trend graphs are there. Historical data for before the sudden loss of graphing is there (i.e., about a week ago the graphing stopped - 12 day graph shows data before this cutoff). Nothing has changed, been added, or modified as far as i can tell. What am i missing..? Thanks! -- Rob Munsch Solutions For Progress IT

3 5

> Recovered alerts : no messages
by JamesHorwath＠glic.com 24 Feb '06

24 Feb '06

I think your problem is with the definition 1234567. This is a zero based week, it should be 0123456 I have found hobbit acts strange when you have syntax errors in the definition file. Regards, Jim > To: > > "'hobbit at hswn.dk'" <hobbit at hswn.dk> > > Subject: > > Recovered alerts : no messages > > > Hello, > > I have set this rule for being mailed every hour when the host is down for > more than 15 minutes, but I don't receive any mail when the service is OK > again and furthermore, I receive the message every 30 minutes... > > The message is > > bbbwanrouter01.domain.com(111.222.222.111).conn: [red] Ack: [511437] > > > Is there something wrong in the definition ? > > > HOST=%(.*wanrouter.*).domain.com TIME=1234567:0000:2359 > SCRIPT /usr/home/hobbit/server/ext/scriptname.pl > emailaddress at localhost > PAGE=ISPRouters > SERVICE=conn > COLOR=RED > REPEAT=1h > DURATION>15m > RECOVERED > > > Thank you for your help. > > Jim Horwath > SANS Certified: GCUX, GCIH, GCIA, GHTQ, GREM > Unix Admin ----------------------------------------- This message, and any attachments to it, may contain information that is privileged, confidential, and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are notified that any use, dissemination, distribution, copying, or communication of this message is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete the message and any attachments. Thank you.

1 0

[hobbit] Devmon : a bbxsnmp.pl & routermon replacement
by EES2Y＠hscmail.mcc.virginia.edu 24 Feb '06

24 Feb '06

Tens... of thousands... wow. That's alot. Alot alot. That will definitely push Devmon to limits that we haven't even dreamed of yet. Right now we are polling ~800 devices with Devmon, and we are running at about 75% load (for a 60 second poll period) using 7 polling nodes. I can only imagine how manning polling nodes it will take you to achive the same polling interval (if you figure about 100 devices per node, thats 100 nodes for 10k devices. Yikes!) Most of the load (80-90% of it) is spent running template calculations, which right now is done on a single thread. I thought, earlier on in the design, that most time-intensive portion of the polling cycle was going to be the SNMP data collection portion. It looks like I'm going to have to farm the template code out to the forked processes, if I want to get any more speed out of this puppy. I've had the idea rolling around in the back of my head for a while now, but I've been very good at ignoring it, as it will involve rewriting a large chunk of code. (Not again!) Let me know how the template building goes. I did all of the template documentation in a single night, so it might be a bit lacking :) (Suggestions for change are welcome). Once you get your templates done, send 'em my way too and I'll roll them into the distro. -Eric -----Original Message----- From: Dan Vande More [mailto:bigdan at gmail.com] Sent: Thu 2/23/2006 4:38 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Devmon : a bbxsnmp.pl & routermon replacement Amazing. I was just ruminating this morning about the sad shape of bb-xsnmp and how it wasn't integrated very well, didn't thread, and ill-maintaned. I especially like the idea of clusting it, though I'm not prepared to do that just yet. I do however, have tens of thousands of devices to monitor, so the potential exists for me to use it. Anyway, I'm diving into it as we speak, unfortunately, you don't have templates for any of my devices (Foundry serverirons, cisco 7609s, Ironport C600s, etc) so it's gonna take some work:) Thanks for this promising add-on. -Dan p.s. It didn't make the /var/run/devmon/ dir by default. On 2/23/06, Schwimmer, Eric E *HS <EES2Y at hscmail.mcc.virginia.edu> wrote: > > Hi everybody, > > I've been working on a little project for the past 6 months or so, one > that is designed to replace bbxsnmp.pl, routermon, and other similar > SNMP data collectors for the Hobbit and BigBrother monitoring systems. > > In my (extremely biased) opinion, it is one of the better SNMP data > collectors out there. > > Just a few key highlights: > > . Fast: Uses psuedo non-blocking SNMP queries (basically forked snmp) > > . Scalable: If you want to poll many remote devices very > quickly, you can configure Devmon to work in a clustered > configuration across multiple machines. > > . Easily managed: After the initial configuration, all host management > is done by editing your display server's bb-hosts file. > > . Very customizable: Via the Devmon template system, a savvy sysadmin > can use Devmon to monitor virtually any type of SNMP capable device. > > The project went up on SourceForge as of about 30 minutes ago; it's > web page is at: > http://devmon.sf.net > > You can download it form there, leave a message in the forums, join > the mailing list, etc. I'm hoping that this will be the only Devmon > message that goes out to the Hobbit list; if you have any questions > or comments for me, please please please either send them to me > personally, > or, preferably, join the Devmon mailing list and post your questions > there. > > And last, but not least, I'd like to thank Henrik once again for his > excellent work on Hobbit, as Devmon wouldn't be very useful without it! > :) > > -Eric Schwimmer > Network Engineer > UVA HSCS Network Engineering > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

[hobbit] Devmon : a bbxsnmp.pl & routermon replacement
by EES2Y＠hscmail.mcc.virginia.edu 24 Feb '06

24 Feb '06

For me, installing SNMP_Session was as easy as: myhost% wget http://www.switch.ch/misc/leinen/snmp/perl/dist/SNMP_Session-1.08.tar.gz myhost% tar zxf SNMP_Session-1.08.tar.gz myhost% cd SNMP_Session-1.08/ myhost% perl Makefile.PL myhost% make install Also, I hate to be a nag, but please try to refrain from sending support questions to the Hobbit mailing list. Knowing my code, I'm sure that there are going to be enough of them that people who aren't interested in Devmon will start to get annoyed at the traffic levels :) You can subscribe to the Devmon mailing list here: http://lists.sourceforge.net/lists/listinfo/devmon-support -Eric -----Original Message----- From: Aiello, Steve (GE, Corporate, consultant) [mailto:steve.aiello at ge.com] Sent: Thu 2/23/2006 4:45 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Devmon : a bbxsnmp.pl & routermon replacement Trying to play with it too, I am sure I can figure out where to pop SNMP_Session to get things to work. Just anyone know the 'proper', method ? Does this deal with devices sending SNMO traps to, or just polling ? > -----Original Message----- > From: Dan Vande More [mailto:bigdan at gmail.com] > Sent: Thursday, February 23, 2006 4:38 PM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Devmon : a bbxsnmp.pl & routermon replacement > > > Amazing. I was just ruminating this morning about the sad > shape of bb-xsnmp and how it wasn't integrated very well, > didn't thread, and ill-maintaned. I especially like the idea > of clusting it, though I'm not prepared to do that just yet. > I do however, have tens of thousands of devices to monitor, > so the potential exists for me to use it. > > Anyway, I'm diving into it as we speak, unfortunately, you > don't have templates for any of my devices (Foundry > serverirons, cisco 7609s, Ironport C600s, etc) so it's gonna > take some work:) > > Thanks for this promising add-on. > > -Dan > > p.s. It didn't make the /var/run/devmon/ dir by default. > > On 2/23/06, Schwimmer, Eric E *HS > <EES2Y at hscmail.mcc.virginia.edu> wrote: > > > > Hi everybody, > > > > I've been working on a little project for the past 6 months > or so, one > > that is designed to replace bbxsnmp.pl, routermon, and > other similar > > SNMP data collectors for the Hobbit and BigBrother > monitoring systems. > > > > In my (extremely biased) opinion, it is one of the better SNMP data > > collectors out there. > > > > Just a few key highlights: > > > > . Fast: Uses psuedo non-blocking SNMP queries (basically > forked snmp) > > > > . Scalable: If you want to poll many remote devices very > > quickly, you can configure Devmon to work in a clustered > > configuration across multiple machines. > > > > . Easily managed: After the initial configuration, all > host management > > is done by editing your display server's bb-hosts file. > > > > . Very customizable: Via the Devmon template system, a > savvy sysadmin > > can use Devmon to monitor virtually any type of SNMP capable > > device. > > > > The project went up on SourceForge as of about 30 minutes ago; it's > > web page is at: > > http://devmon.sf.net > > > > You can download it form there, leave a message in the forums, join > > the mailing list, etc. I'm hoping that this will be the > only Devmon > > message that goes out to the Hobbit list; if you have any > questions > > or comments for me, please please please either send them to me > > personally, or, preferably, join the Devmon mailing list > and post your > > questions there. > > > > And last, but not least, I'd like to thank Henrik once > again for his > > excellent work on Hobbit, as Devmon wouldn't be very useful without > > it! > > :) > > > > -Eric Schwimmer > > Network Engineer > > UVA HSCS Network Engineering > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

[hobbit] Devmon : a bbxsnmp.pl & routermon replacement
by EES2Y＠hscmail.mcc.virginia.edu 24 Feb '06

24 Feb '06

Well, to be honest, the code is still far from what I would consider "good" :) The template code, which is run once for every device during every polling cycle, is far from optimal (by far the slowest part of Devmon thus far; if there are any Elder Perl Gods out there that might want to throw some Perl wisdom my way, please feel free). Multi-node IPC is also kind of a hack, too, since its all done through the MySQL server (if someone wants to port Devmon to Postgres or some other DB, or even take a shot at optimizing the current MySQL tables, please do so. I am not a DB guru). That being said, it runs pretty solid. Starting up a multi-node cluster takes some patience and little TLC, but once it's running it works fairly well. As to making Hobbit the default config: choosing between Hobbit and BB was a no-brainer for us here. Hobbit is "Just Better". -Eric -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Thu 2/23/2006 4:26 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Devmon : a bbxsnmp.pl & routermon replacement On Thu, Feb 23, 2006 at 01:58:33PM -0500, Schwimmer, Eric E *HS wrote: > > I've been working on a little project for the past 6 months or so, one > that is designed to replace bbxsnmp.pl, routermon, and other similar > SNMP data collectors for the Hobbit and BigBrother monitoring systems. Nice! I've given it a quick look-over, and even with my less-than-stellar Perl knowledge, I can see that this covers a lot of the features that people have requested from an SNMP data collector for Hobbit. The idea about "templates" looks very promising - it will be interesting to try it out on some of the devices I have access to. Having good, well-documented and maintained SNMP support for Hobbit has been on my wish-list for quite some time. > And last, but not least, I'd like to thank Henrik once again for his > excellent work on Hobbit, as Devmon wouldn't be very useful without it! > :) I'm flattered that you made Hobbit the default in your config :-) And truly delighted that my little project is so useful, that You would spend time improving on it. Thanks! Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

hobbit for web stats
by dave＠netfm.org 24 Feb '06

24 Feb '06

Hi, First post.... Just got recommended using hobbit for monitoring web server - apache - availability. Do you recommend using mrtg to monitor usage stats - or perhaps prefer log file anaylsis like http-analog ? One think near real-time log file analysis gives you is the ability to see 'network outages' which are outside your view of monitoring but reflect on the server usage. Thoughts recommendations gratefully received, Look forward to installing hobbit tomorrow - this project is not easy to find on google searches for web monitoring ! rgds dave -- David Herring --- NetFM Ltd T: 01344 769068 M: 07973 673027 --- http://www.journey2share.co.uk/ The number 1 trusted car share solution

1 0

[hobbit] Devmon : a bbxsnmp.pl & routermon replacement
by steve.aiello＠ge.com 23 Feb '06

23 Feb '06

Trying to play with it too, I am sure I can figure out where to pop SNMP_Session to get things to work. Just anyone know the 'proper', method ? Does this deal with devices sending SNMO traps to, or just polling ? > -----Original Message----- > From: Dan Vande More [mailto:bigdan at gmail.com] > Sent: Thursday, February 23, 2006 4:38 PM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Devmon : a bbxsnmp.pl & routermon replacement > > > Amazing. I was just ruminating this morning about the sad > shape of bb-xsnmp and how it wasn't integrated very well, > didn't thread, and ill-maintaned. I especially like the idea > of clusting it, though I'm not prepared to do that just yet. > I do however, have tens of thousands of devices to monitor, > so the potential exists for me to use it. > > Anyway, I'm diving into it as we speak, unfortunately, you > don't have templates for any of my devices (Foundry > serverirons, cisco 7609s, Ironport C600s, etc) so it's gonna > take some work:) > > Thanks for this promising add-on. > > -Dan > > p.s. It didn't make the /var/run/devmon/ dir by default. > > On 2/23/06, Schwimmer, Eric E *HS > <EES2Y at hscmail.mcc.virginia.edu> wrote: > > > > Hi everybody, > > > > I've been working on a little project for the past 6 months > or so, one > > that is designed to replace bbxsnmp.pl, routermon, and > other similar > > SNMP data collectors for the Hobbit and BigBrother > monitoring systems. > > > > In my (extremely biased) opinion, it is one of the better SNMP data > > collectors out there. > > > > Just a few key highlights: > > > > . Fast: Uses psuedo non-blocking SNMP queries (basically > forked snmp) > > > > . Scalable: If you want to poll many remote devices very > > quickly, you can configure Devmon to work in a clustered > > configuration across multiple machines. > > > > . Easily managed: After the initial configuration, all > host management > > is done by editing your display server's bb-hosts file. > > > > . Very customizable: Via the Devmon template system, a > savvy sysadmin > > can use Devmon to monitor virtually any type of SNMP capable > > device. > > > > The project went up on SourceForge as of about 30 minutes ago; it's > > web page is at: > > http://devmon.sf.net > > > > You can download it form there, leave a message in the forums, join > > the mailing list, etc. I'm hoping that this will be the > only Devmon > > message that goes out to the Hobbit list; if you have any > questions > > or comments for me, please please please either send them to me > > personally, or, preferably, join the Devmon mailing list > and post your > > questions there. > > > > And last, but not least, I'd like to thank Henrik once > again for his > > excellent work on Hobbit, as Devmon wouldn't be very useful without > > it! > > :) > > > > -Eric Schwimmer > > Network Engineer > > UVA HSCS Network Engineering > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

1 0

Devmon : a bbxsnmp.pl & routermon replacement
by EES2Y＠hscmail.mcc.virginia.edu 23 Feb '06

23 Feb '06

Hi everybody, I've been working on a little project for the past 6 months or so, one that is designed to replace bbxsnmp.pl, routermon, and other similar SNMP data collectors for the Hobbit and BigBrother monitoring systems. In my (extremely biased) opinion, it is one of the better SNMP data collectors out there. Just a few key highlights: . Fast: Uses psuedo non-blocking SNMP queries (basically forked snmp) . Scalable: If you want to poll many remote devices very quickly, you can configure Devmon to work in a clustered configuration across multiple machines. . Easily managed: After the initial configuration, all host management is done by editing your display server's bb-hosts file. . Very customizable: Via the Devmon template system, a savvy sysadmin can use Devmon to monitor virtually any type of SNMP capable device. The project went up on SourceForge as of about 30 minutes ago; it's web page is at: http://devmon.sf.net You can download it form there, leave a message in the forums, join the mailing list, etc. I'm hoping that this will be the only Devmon message that goes out to the Hobbit list; if you have any questions or comments for me, please please please either send them to me personally, or, preferably, join the Devmon mailing list and post your questions there. And last, but not least, I'd like to thank Henrik once again for his excellent work on Hobbit, as Devmon wouldn't be very useful without it! :) -Eric Schwimmer Network Engineer UVA HSCS Network Engineering

3 2

New hosts don't apear until they have at least one column
by frederic.mangeant＠steria.com 23 Feb '06

23 Feb '06

Hi Henrik when you add a host in a new page, the host doesn't show up until at least one test result has been sent. Maybe it would be useful to display the host, as the "info" column is always present ? Thanks in advance for your answer. -- Frédéric Mangeant Steria EDC Sophia-Antipolis

2 1

Disable until OK
by lars.ebeling＠leopg9.no-ip.org 23 Feb '06

23 Feb '06

Dear all, I tested to disable ALL until OK on a server. When I started the server all nettests changed color. clamd is not started automatically so it turned red. The client-tests remained blue. Is this a bug or a feature? The only way to re-enable the tests is to disable them again with a finite time and then enable them. Regards Lars Ebeling http://leopg9.no-ip.org Hobbithobbyist "It is better to keep your mouth shut and appear stupid than to open it and remove all doubt." -- Mark Twain

1 0