May 2006 - Xymon - Xymon mailman web

PROC test question
by marco.pizzoli＠gmail.com 21 Aug '09

21 Aug '09

Hi all, I am a hobbit newby. I have a question about the PROC test: is there a way to define a test about the presence of a particular proc executed by a particular user? I'm in a situation where I have some daemons that could be started by a lot of (machine)users and so I would like to check the user the proc run as. Thanks in advance Marco

4 3

cupsd
by stoner-lists＠comcast.net 04 Jun '08

04 Jun '08

For those who want to monitor a cups print server, here's a definition you can put in your bb-services file: [cupsd] send "GET /printers\r\n" expect "HTTP/1.1 200 OK" port 631 Alternatively, you could just use http://host:631/printers in your bb-hosts file. The cupsd is, for monitoring purposes, a web server. -Jeff "Fun with Users #1: ln -s /dev/random /etc/motd"

2 1

[hobbit] Purples, all non-green view
by KauffmanT＠nibco.com 23 Jan '07

23 Jan '07

Oh, my! It certainly does! Tom Kauffman -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, May 12, 2006 11:05 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Purples, all non-green view On Fri, May 12, 2006 at 02:41:19PM +0000, David Gore wrote: > There was some talk of the purples not showing up on the 'All non-green > view'. We are also disappointed that the purples have been removed from > this page. Our main page is the ANV page and would really like to have > that back. Could we at least have it back with a flag? Or did we some > how remove the purples on the ANV page with some flag in the latest > snapshot? Seems I broke it somewhere. This should put the purples back on the bb2 page. Henrik CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

2 3

Email alert based on specific process
by iqbala-hobbit＠qwestip.net 15 Nov '06

15 Nov '06

Hi All I am using bb-proctab to monitor a list of processes and if any process a whole group get alert. Is there a way I can setup the alert with process specific. So if proc 1 out the list dies only user 1 get alert and so on. I know I could use the SCRIPT feature but like to keep that as the last resort. I am using hobbit 4.1.2 on Solaris 8. The process list I am concern about is running bb1.9c client on Solaris 8 as well. Sorry if it were already discussed in the mailing list. Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "..there are two kinds of people: those who work and those who take the credit...try to be in the first group;...less competition there." - Indira Gandhi

6 7

Small enhancement to Hobbit JavaScript menu
by frederic.mangeant＠steria.com 05 Oct '06

05 Oct '06

Hi Henrik I didn't find bb-datepage.sh the first time I set up Hobbit, maybe this small modification to ~/server/www/menu/menu_items.js would be helpful : --- menu_items.js.orig 2005-11-18 15:46:58.000000000 +0100 +++ menu_items.js 2005-11-18 15:53:50.000000000 +0100 @@ -6,7 +6,12 @@ ], ['Reports', null, null, ['Event log Report', '/hobbit-cgi/bb-eventlog.sh'], - ['Availability Report', '/hobbit-cgi/bb-rep.sh'], + ['Availability Reports', null, null, + ['Daily Report', '/hobbit-cgi/bb-datepage.sh?type=day'], + ['Weekly Report', '/hobbit-cgi/bb-datepage.sh?type=week'], + ['Monthly Report', '/hobbit-cgi/bb-datepage.sh?type=month'], + ['Custom Report', '/hobbit-cgi/bb-rep.sh'], + ], ['Snapshot Report', '/hobbit-cgi/bb-snapshot.sh'], ['Config Report', '/hobbit-cgi/hobbit-confreport.sh'], ], Regards, -- Frédéric Mangeant Steria EDC Sophia-Antipolis

3 2

[hobbit] Hobbit, Net-snmp snmptrap,and HPOV
by nfigaro＠effigie.fr 28 Jul '06

28 Jul '06

There is an option to snmptrap (from net snmp) to send full OIDs, otherwise they are cut. Instead of "snmptrap -v 1", the options should be : "snmptrap -v 1 -Of" Otherwise only the end of the OID is sent. Nicolas Figaro > -----Message d'origine----- > De : David Gore [mailto:David.Gore at mci.com] > Envoyé : lundi 19 septembre 2005 17:11 > À : hobbit at hswn.dk > Objet : Re: [hobbit] Hobbit, Net-snmp snmptrap,and HPOV > > > David Gore wrote: > > Coupe, Mark (ITD) wrote: > > > >> All, > >> > >> I'm trying to push alarms from Hobbit to HPOV. We have a custom > >> script that is invoking Netsnmp's snmptrap. The snmp traps are > >> reaching the HP Node Manager Event Browser correctly. > However, the OV > >> operations trap condition is not recognizing the trap. > The trap is > >> being displayed as "unmatched" in the Message Browser even though > >> there is a condition set up for that specific trap. > >> > >> When we look at the unmatched trap, it appears that the OID is not > >> being recognized and an '0' is inserted, for example instead of > >> .1.3.6.1.4.1.7058.0.XX, we are seeing .0.0.XX. > >> > >> Any guidance would be greatly appreaciated. > >> > >> Thanks, > >> > >> -Mark Coupe > > > > > > I, and perhaps others would be interested in what precisely you are > > doing? Are you pushing all hobbit alarms from the hobbit server to > > HPOV? > > > > Sorry, I am HPOV ignorant, but we are interested in > forwarding all the > > hobbit alarms/alerts as SNMP traps to one of Concord's > products. I am > > not to familiar with Concord's product either. I just know > the powers > > that be would like to have snmp traps from all our monitored hosts. > > > > In otherwords, I am interested in any system or methodology that > > someone > > has setup to forward alarms from the hobbit server to an > SNMP server. > > Any setups out there that someone is willing to share the details? > > > > David > > > > > > To unsubscribe from the hobbit list, send an e-mail to > > hobbit-unsubscribe at hswn.dk > > > > > > Here is Mark's script posted with permission: > > SCRIPT > > #!/bin/bash > > #SVCCODES="disk:100,cpu:200,procs:300,svcs:350,msgs:400,conn:5 > 00,http:60 > 0,ftp:721,ssh:722,ssh1:722,ssh2:722,telnet:723,smtp:725,fping: > 727,mq:729 > ,dns:800,pop2:809,pop-2:809,pop:810,pop3:810,pop-3:810,nntp:81 9,imap:843 > ,imap2:843,imap3:843,imap4:843,mrtg:850,swap:860,memory:870,sy > s:880,err: > 890,test:901" > > #Variables > #$OID - OID to be used without trailing value (.1.3.6.1.4.1.7058)(BB > default) > #$OIDTAIL - ending value of OID particluar to alarm type; > determined by "case" statement #$MACHIP - IP address of > device generating alarm; determined by hobbit #$BBHOSTNAME - > hostname of device generating alarm; determined by the hobbit > bb-hosts file #$BBSVCNUM - service code corresponding to the > service being monitored; determined by hobbit configuration > #$BBCOLORLEVEL - alarm level; determined by hobbit > #$RECOVERED - '0' denotes alarm; '1' denotes recovery #$HPOV > - the IP address of the destination HPOV server #TMPDIR - > directory for location of temporary file necessary for sed of $MACHIP > > ###Start script ### > ### > CHRONO=`date` > OID=.1.3.6.1.4.1.7058 > #Put your own OV server IP address in the next line. > HPOV=xxx.xxx.xxx.xxx TMPDIR=/home/hobbit/server/ext > > > case $BBSVCNUM in > 100) #Disk > OIDTAIL=10 > ;; > 200) #CPU > OIDTAIL=20 > ;; > 300) #Procs > OIDTAIL=30 > ;; > 350) #Svcs > OIDTAIL=40 > ;; > 400) #Msgs > OIDTAIL=50 > ;; > 500) #Conn > OIDTAIL=60 > ;; > 600) #Http > OIDTAIL=70 > ;; > #OIDTAIL=80 (not assigned) > 721) #FTP > OIDTAIL=90 > ;; > 722) #SSH > OIDTAIL=100 > ;; > 723) #Telnet > OIDTAIL=110 > ;; > 725) #SMTP > OIDTAIL=120 > ;; > 727) #Fping > OIDTAIL=130 > ;; > 729) #MQ > OIDTAIL=140 > ;; > 800) #DNS > OIDTAIL=150 > ;; > 809) #POP2 > OIDTAIL=160 > ;; > 810) #POP > OIDTAIL=170 > ;; > 819) #NNTP > OIDTAIL=180 > ;; > 843) #IMAP > OIDTAIL=190 > ;; > 850) #MRTG > OIDTAIL=200 > ;; > 860) #Swap > OIDTAIL=210 > ;; > 870) #Memory > OIDTAIL=220 > ;; > 880) #Sys > OIDTAIL=230 > ;; > 890) #ERR > OIDTAIL=240 > ;; > 901) #Test > OIDTAIL=250 > ;; > esac > > if [[ "$RECOVERED" = "0" ]]; then > if [[ "$BBCOLORLEVEL" = "purple" ]]; then > OIDTAIL=$(($OIDTAIL + 1)) > elif [[ "$BBCOLORLEVEL" = "yellow" ]]; then > OIDTAIL=$(($OIDTAIL + 2)) > elif [[ "$BBCOLORLEVEL" = "red" ]]; then > OIDTAIL=$(($OIDTAIL + 3)) > fi > elif [[ "$RECOVERED" = "1" ]]; then > BBCOLORLEVEL=green > fi > > #Following line: reads Hobbit IP into temporary file > echo $MACHIP > $TMPDIR/tmpfile.txt > > #Following lines: puts Hobbit 12 digit IP format in dotted > decimal and removes any leading zeroes. MACHIP=`sed > 's/$...$$...$$...$$...$/\1.\2.\3.\4/' > $TMPDIR/tmpfile.txt` > echo $MACHIP > $TMPDIR/tmpfile.txt > MACHIP=`sed -e 's/^00//' -e 's/^0//' -e 's/\.000/./' -e > 's/\.00/./' -e 's/\.0/./' -e 's/\.000/./' -e 's/\.00/./' -e > 's/\.0/./' -e 's/\.000/./' -e 's/\.00/./' -e 's/\.0/./' -e > 's/\.\.\./.0.0./' -e 's/\.\./.0./' -e 's/\.$/.0/' $TMPDIR/tmpfile.txt` > > #Following line: removes the temporary file > rm -f $TMPDIR/tmpfile.txt > > #Following line: forwards the error message to HPOV as an > SNMP message `snmptrap -v 1 -c mitcovo $HPOV "$OID" "$MACHIP" > 6 $OIDTAIL ""` > > echo "DATE: $CHRONO" >> /home/hobbit/server/ext/hpov-push.log > echo "snmptrap -v 1 -c public $HPOV "$OID" "$MACHIP" 6 > $OIDTAIL "" " >> /home/hobbit/server/ext/hpov-push.log > > > END SCRIPT > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

5 5

descriptions in alerts
by kflavin＠iswest.net 10 Jul '06

10 Jul '06

Hi, We've inserted information using the "Descr:" tags in our bb-hosts file that we'd like to be able to include in some of our alerts. Is there a variable that we can use in our paging scripts to include this information - or is there a way to grab this information about a host when sending an alert? Kevin Flavin

2 1

problem compiling HP-UX 11.11 using gcc
by neil.camp＠deca.mil 26 Jun '06

26 Jun '06

Sorry, done. Has anyone had luck with HP-UX. I have searched and searched and searched. It seems like several people have had luck, but I keep getting compilation errors. Here is my latest using gcc gmake[1]: Entering directory `/home/campnd/hobbit-4.1.2p1/bbnet' gcc -static -DHPUX -D_REENTRANT -DHPUX -I. -I/home/campnd/hobbit-4.1.2p1/include -I/usr/local/pcre-6.4/include -DBBGEN_SSL -I/usr/include -c -o bbtest-net.o bbtest-net.c bbtest-net.c: In function 'send_rpcinfo_results': bbtest-net.c:1795: warning: assignment makes pointer from integer without a cast bbtest-net.c:1802: error: dereferencing pointer to incomplete type bbtest-net.c:1814: error: dereferencing pointer to incomplete type bbtest-net.c:1819: error: dereferencing pointer to incomplete type bbtest-net.c: In function 'main': bbtest-net.c:2262: warning: pointer targets in assignment differ in signedness gmake[1]: *** [bbtest-net.o] Error 1 gmake[1]: Leaving directory `/home/campnd/hobbit-4.1.2p1/bbnet' gmake: *** [bbnet-build] Error 2 --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil -----Original Message----- From: Thomas Krieger [mailto:tom at tom-krieger.de] Sent: Tuesday, February 07, 2006 1:07 PM To: hobbit at hswn.dk Subject: Re: [hobbit] problem compiling HP-UX 11.11 using aCC Can you please stop requesting reading confirmations for your emails. It's anoying. Bye

4 10

[hobbit] moving hobbit from Ubuntu to Debian
by dan.simoes＠gmail.com 02 Jun '06

02 Jun '06

Telnet to localhost as well as 127.0.0.1 work, yes. The hobbitdboard returns a lot of data. I've literally been looking at this for hours, I don't know what else is wrong. I even did a completely fresh install, dropped in my bb-hosts, same results. I know bb-hosts is OK since it's working elsewhere (I did change the bbd line of course). On 5/31/06, Henrik Stoerner <henrik at hswn.dk> wrote: > > Can you telnet to 127.0.0.1 port 1984 ? If that times out, then you have > a seriously heavy firewall setup. Something like > iptables -I INPUT 1 -i lo -j ACCEPT > iptables -I OUTPUT 1 -i lo -j ACCEPT > should cancel out any paranoid firewall setups locally on the box, for > the loopback-interface. > > Can you do a "~hobbit/server/bin/bb 127.0.0.1 hobbitdboard" and get any > data back ? > > If you're running all of the network tests locally, I think you can > get away with setting > BBSERVERIP="127.0.0.1" > in your hobbitserver.cfg, and let all of the communications happen on > the loopback-interface. Of course, for clients to work you'll need to > get port 1984 opened up for access from the clients. But loopback should > be ok for just getting the Hobbit server up and running. > > > Henrik > > > On Wed, May 31, 2006 at 02:48:33PM -0700, Dan Simoes wrote: > > I thought of that, eventually, and corrected the error. Same problem. > > localhost is responding on 1984, but the site's firewall is blocking > 1984. > > I don't have any clients connecting at the moment, so I don't imagine > this > > is a problem, but thought I would mention it. > > > > On 5/31/06, Henrik Stoerner <henrik at hswn.dk> wrote: > > > > > >Check the IP-adresses for the Hobbit server in the hobbitserver.cfg > > >file. From your logs, it seems that the query to fetch the current > total > > >status from the Hobbit daemon goes to the wrong server (the old IP, > > >probably), so there is no response and therefore the webpages dont get > > >any hosts listed. > > > > > > > > >Henrik > > > > > >On Wed, May 31, 2006 at 02:41:25PM -0700, Dan Simoes wrote: > > >> I got an account on a new virtual host (debian 3.1 on virtuozzo), and > > >> dropped in a tar of my hobbit dir. > > >> I figured I could just edit bb-hosts and be up and running in > minutes. > > >> Hours later, I'm still not up. > > >> > > >> OK, so I was missing fping, and rrdtool. Hobbit did not like the > older > > >> rrdtool 1.X under debian stable, so I switch to testing, upgraded, > and > > >> recompiled and reinstalled hobbit. > > >> It's still not working, even with a simplified bb-hosts. > > >> > > >> hobbit runs, but the webpage output is devoid of any host data. > > >> I can't figure out what else could be wrong, this should have been a > > >very > > >> simple port. > > >> > > >> Logs show: > > >> > > >> bb--display: > > >> 2006-05-31 17:30:22 Whoops ! bb failed to send message - timeout > > >> 2006-05-31 17:30:22 hobbitd status-board not available > > >> 2006-05-31 17:30:22 WARNING: Runtime 92 longer than BBSLEEP (60) > > >> 2006-05-31 17:31:09 Whoops ! bb failed to send message - timeout > > >> > > >> bb-network: > > >> 2006-05-31 17:30:27 Whoops ! bb failed to send message - timeout > > >> 2006-05-31 17:30:27 WARNING: Runtime 140 longer than time limit (120) > > >> 2006-05-31 17:31:14 Whoops ! bb failed to send message - timeout > > >> > > >> > > >> hobbitclient.log: > > >> 2006-05-31 17:32:47 Whoops ! bb failed to send message - timeout > > >> error parsing /proc/net/snmp: Success > > >> 2006-05-31 17:34:47 Whoops ! bb failed to send message - timeout > > >> error parsing /proc/net/snmp: Success > > > > > >-- > > >Henrik Storner > > > > > >To unsubscribe from the hobbit list, send an e-mail to > > >hobbit-unsubscribe at hswn.dk > > > > > > > > > > > -- > Henrik Storner > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

3 6

stop receiving notice alerts
by iqbala-hobbit＠qwestip.net 01 Jun '06

01 Jun '06

Hi All I just realized that we are not receiving NOTICE alerts anymore when disable or enable host.service through the web. tail -10 /var/log/hobbit/enadis.log. I have always seen them but not showing the host whose service I disabled and then enabled. 2005-11-30 07:52:15 Could not remove disable-file '/export/home/hobbit/data/disabled/maskit,inet,here,net.scanmsg':No such file or directory 2005-11-30 07:52:15 Could not remove disable-file '/export/home/hobbit/data/disabled/maskit,inet,here,net.top':No such file or directory 2005-11-30 07:52:15 Could not remove disable-file '/export/home/hobbit/data/disabled/maskit,inet,here,net.netinfo':No such file or directory Also not receiving any email related to NOTICE. ./bin/bbcmd hobbitd_alert --dump-config [..] HOST=%(.*) MAIL groupemail at here.net FORMAT=TEXT REPEAT=30 NOTICE NOALERT Version: ./bin/bbgen --version bbgen version 4.1.2 I do not think I made any recent changes. Thanks -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu "..there are two kinds of people: those who work and those who take the credit...try to be in the first group;...less competition there." - Indira Gandhi

2 4