June 2006 - Xymon - Xymon mailman web

[hobbit] sending snmp traps
by greg.hubbard＠eds.com 09 Jun '06

09 Jun '06

Juan, can your software monitor syslog? It would probably be much easier to use logger to send a message to your monitoring console than it will be to define your own traps. SNMP trap definition requires some knowledge of MIB's and OIDs and varbinds and PDU's and such. Syslog is just text processing. GLH -----Original Message----- From: Juan Guzman [mailto:jrguzmanr at hotmail.com] Sent: Friday, June 09, 2006 8:30 AM To: hobbit at hswn.dk Subject: Re: [hobbit] sending snmp traps I agree, but I don't know the snmp trap format. Can somebody point me in the right direction of what a trap consists of? thanks >From: henrik at hswn.dk (Henrik Stoerner) >Reply-To: hobbit at hswn.dk >To: hobbit at hswn.dk >Subject: Re: [hobbit] sending snmp traps >Date: Thu, 8 Jun 2006 22:18:12 +0200 > >On Thu, Jun 08, 2006 at 03:38:17PM -0400, Juan Guzman wrote: > > > > Has anybody configured hobbit to send traps to a monitopring > > sofware, >e.g. > > tivoli? I'm looking for hobbit to send a trap when something turns >yellow > > or red. > >Using the "SCRIPT" mechanism in hobbit-alerts.cfg lets you run a >command to notify about an alert. It should be fairly simple to write a >script that sends an SNMP trap from this. > > >Regards, >Henrik > > >To unsubscribe from the hobbit list, send an e-mail to >hobbit-unsubscribe at hswn.dk > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 1

[hobbit] hobbitping problem
by michael.nemeth＠lmco.com 09 Jun '06

09 Jun '06

Will the 09-Jun-2006 00:19 snapshot work? Ive the find host bug to pick up and a couple of others I think. >I'm interested to hear if it logs any "send" errors. What log should I look at? -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | _p_ Mike Nemeth | ___| |_____ email(w) michael.nemeth at lmco.com Work: 856 359-1425 |><___________) | Home Page:http://www.geocities.com/mjnemeth/ | Work Page:http://faraday.motown.lmco.com:3000/~nemethm/ | Work Page:http://ortfsb/~mnemeth/ |++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

[hobbit] Http "forbidden" errors
by Stewart_Larsen＠doh.state.fl.us 09 Jun '06

09 Jun '06

I would expect 400 errors to come back yellow and 500 errors to be red. ________________________________ From: Larry Barber [mailto:lebarber at gmail.com] Sent: Friday, June 09, 2006 9:26 AM To: hobbit at hswn.dk Subject: [hobbit] Http "forbidden" errors Henrik, I currently have an http test that is getting a "403 Forbidden" response. Hobbit is not marking this as an error. Would it be possible to have Hobbit treat a "Forbidden" response as an error and alert on it? Thanks, Larry Barber ________________________________ Spam <https://antispam.doh.ad.state.fl.us/canit/b.php?c=s&i=82395813&m=321921 c6947f> Not spam <https://antispam.doh.ad.state.fl.us/canit/b.php?c=n&i=82395813&m=321921 c6947f> Forget previous vote <https://antispam.doh.ad.state.fl.us/canit/b.php?c=f&i=82395813&m=321921 c6947f>

1 0

hobbitping problem.
by michael.nemeth＠lmco.com 09 Jun '06

09 Jun '06

On my Sol 9 system running unpatch beta. Ive confirmed there is a problem with hobbitping . Since the beta (and hbbitping)I got a lots of red conn , I just ran 12 hours using fping with out any problems . Soon as I turn it back on they started again.. It not for every thing and changes., things go red then green again. Im thinking that if it is not a bug in hobbitping then it maybe a resource problem that I "tune", since Im not a programmer at all Ive not looked at your code to see what its doing. IM happy with fping , while hobbitping about 5 times faster , it really doesn't impacted my monitoring, only using about 30 sec for 419 hosts and 414 test. -- +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ | _p_ Mike Nemeth | ___| |_____ email(w) michael.nemeth at lmco.com Work: 856 359-1425 |><___________) | Home Page:http://www.geocities.com/mjnemeth/ | Work Page:http://faraday.motown.lmco.com:3000/~nemethm/ | Work Page:http://ortfsb/~mnemeth/ |++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

2 1

Incorrect links in msgs page
by CHRIS.MORRIS＠RWEnpower.com 09 Jun '06

09 Jun '06

Hi, Running hobbit-4.2-beta, monitoring 2 log files - on the msgs page the first Full Log link is actually to the second file. Below is the html source :- No entries in <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT=trl0002&SECTION=msgs:/var/log/mes sages">/var/log/messages</a> No entries in <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT=trl0002&SECTION=msgs:/var/log/mrt g.log">/var/log/mrtg.log</a> Full log <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT=trl0002&SECTION=msgs:/var/log/mrt g.log">/var/log/messages</a> Full log <a href="/hobbit-cgi/bb-hostsvc.sh?CLIENT=trl0002&SECTION=msgs:/var/log/mrt g.log">/var/log/mrtg.log</a> Regards, Chris **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither RWE npower nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). *****************************************************************************

3 3

[hobbit] hobbitping doesn't work
by CHRIS.MORRIS＠RWEnpower.com 09 Jun '06

09 Jun '06

Hi Henrik, Patched hobbitping as requested : - ./hobbitping --debug 10.2.216.252 2006-06-09 09:49:59 Sent a ping to 10.2.216.252: index=0, id=1 2006-06-09 09:50:05 Sent a ping to 10.2.216.252: index=0, id=1 2006-06-09 09:50:11 Sent a ping to 10.2.216.252: index=0, id=1 10.2.216.252 is unreachable Regards, Chris > -----Original Message----- > From: henrik at hswn.dk [SMTP:henrik at hswn.dk] > Sent: Thursday, June 08, 2006 9:09 PM > To: hobbit at hswn.dk > Subject: Re: [hobbit] hobbitping doesn't work > > Hi Chris, > > On Thu, Jun 08, 2006 at 03:38:20PM +0100, Morris, Chris (Shared Services) > wrote: > > > > I am running the hobbit-4.2-beta server on AIX 5.2 and hobbitping does > not > > work. fping works fine. > > that's odd. I'd like to dig into this a bit more. > > Could you try and apply the patch at > http://www.hswn.dk/~henrik/hobbitping-debug.patch > to your Hobbit sources, and then run the new hobbitping > with the --debug flag ? > > It won't change the behaviour, but it will print out some info > about the packets being sent and received. > > > Thanks, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither RWE npower nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). *****************************************************************************

1 0

[hobbit] Feature request for hobbitping / small client bugs
by Mike.Rowell＠Rightmove.co.uk 09 Jun '06

09 Jun '06

Roland, Regarding the top error in the sunos client, this is due to top not being supplied in solaris as standard, there are two options, either install top on all your solaris clients or as I did, put an if [ -f /usr/local/bin/top ]; then ...... fi around the whole top section in the clients file. Henrik, I'm wondering whether it might be worth doing this as standard in the hobbitclient-sunos.sh file? Mike -----Original Message----- From: Gräub Roland [mailto:roland.graeub at rtc.ch] Sent: 09 June 2006 08:20 To: hobbit at hswn.dk Subject: [hobbit] Feature request for hobbitping / small client bugs Hello Henrik Is it possible to add a function to set the networkadress that hobbitping use for network tests ? In our enviorment we use a service ip for hobbit and all firewall rules are made for this adress, so its important that Hobbit use this adress to ping the clients. For fping i found a patch that works for me (see fping-2.4b2_to+interface.patch.txt) FPING="/usr/local/bin/fping -I 192.168.1.22" # Path and options for the 'fping' program. Two small things for the hobbitclient: On Solaris Systems i get a error about top: /opt/hobbitclient/client/bin/hobbitclient-sunos.sh: top: not found when i set the full path for top in hobbitclient-sunos.sh it works fine echo "[top]" /usr/local/bin/top -b 20 With ./runclient.sh status i get the client (Solaris & Linux) dosent run, but it runs fine: [hobbit at altara client]$ ./runclient.sh status Hobbit client (clientlaunch) does not appear to be running [hobbit at altara client]$ ps -ef | grep hobbit hobbit 20015 1 0 Jun08 ? 00:00:00 /opt/hobbit/client/bin/hobbitlaunch --config=/opt/hobbit/client/etc/clientlaunch.cfg --log=/opt/hobbit/client/logs/clientlaunch.log --pidfile=/opt/hobbit/client/logs/clientlaunch.altara.rtc.ch.pid hobbit 29367 1 0 08:39 ? 00:00:00 sh -c vmstat 300 2 1>/opt/hobbit/client/tmp/hobbit_vmstat.altara.rtc.ch.29351 2>&1; mv /opt/hobbit/client/tmp/hobbit_vmstat.altara.rtc.ch.29351 /opt/hobbit/client/tmp/hobbit_vmstat.altara.rtc.ch hobbit 29369 29367 0 08:39 ? 00:00:00 vmstat 300 2 hobbit 29488 29435 0 08:41 pts/3 00:00:00 grep hobbit Regards, Roland ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs service. ________________________________________________________________________ This email has been scanned for all viruses by the MessageLabs service. ________________________________________________________________________

2 1

Remote TCP checks consolidation
by charljon＠cisco.com 09 Jun '06

09 Jun '06

I need to monitor approximately a dozen TCP ports on a bunch of remote hosts. What is the easiest way to group these under one column heading? I thought about using the PORTS checking ability of the remote clients, but sadly past history in the case has shown that just because netstat shows that the port is listening on the remote server, doesn't mean that you can connect to it (broken firewall rules, or the app not responding, etc). In some of the cases, the application is a Tomcat server, which listens on half a dozen ports. Im thinking the easiest way to handle that is to add "tomcat" in bb-services, and then in bb-hosts I could specify the ports via "tomcat:8001 tomcat:8002 tomcat:8020 tomcat:8009" and so on. The problem is there are not only tomcats, but other apps and services as well (squid proxies, oracle OCM's, and random java servlets) that wouldn't fit under just a "tomcat" column, and I don't really want to add so many columns for these custom apps. Is there any way to force these remote tcp checks to appear under the "ports" column? Thanks, -Charles

2 1

[hobbit] OS client builds PCRE libraries, AIX client from snapshot or beta?
by David.Gore＠verizonbusiness.com 09 Jun '06

09 Jun '06

Hello, This is on client launch. I can fix this by editing my library path, but I was sort of hoping PCRE would not have to be installed on each client host, since I will not be able to do that. ld.so.1: hobbitd_client: fatal: libpcre.so.0: open failed: No such file or directory Actually, I am just confused why am I getting this error with the latest snapshot? Also, I was also wondering if anyone had or could build an AIX client for me. I can compile the code on AIX, but it isn't my machine to install PCRE. Here is the oslevel: 5100-05. Anyone have a pre-built AIX client out there, preferably the latest snapshot, although I don't mind waiting for the next production release. ~David

1 1

disable alert by test in bb-hosts
by sblee＠tazmania.org 08 Jun '06

08 Jun '06

The background for this request is as follows: 1. each host has a standard list of services we check 2. alert rules group systems by functionality (regex) rather specifying a separate alert rule for each host or page. HOST="%(tucwbd.*|vsiwbd.*)" MAIL $UNIXOPS SERVICE=conn,disk,http,procs DURATION>5m REPEAT=10m TIME=W:0800:1800 RECOVERED Request: 1. For hostA in bb-hosts: 10.20.33.208 tucwbd153 # telnet ssh I want to add a series of http checks as a dependency chain such that if http://tucwbd153 fails, 1. don't alert on http://tucwbd153/web/hobbit 2. if http://tucwbd153/web/hobbi fails, don't alert on http://hobbit:monitor at tucwbd153/web/hobbit Is this setup as a depends statement? Additionally, for certain periods of time I may want to set up a test for a host that I don't want to receive alerts for. I'd hate to have to break out those individual hostnames from regex above in my alerts file. Is there a tag I can use with the test in bb-hosts to disable that alert? 10.20.33.208 tucwbd153 # telnet ssh noalert=http://tucwbd153/web/hobbit (is line continuation recognized for the bb-hosts config?) I always want alerts for specified time frames for telent, conn, ssh but the DEV systems for the web team can have lots of stops and starts of web service. clear would be ok to display for downtime. Is there a better way to manage alerts for regex group and then isolate specific tests? ------------------------- Sue Bauer-Lee | ------------------------

2 1