June 2006 - Xymon - Xymon mailman web

conn test periodically fails (fping execution code 99)
by bernie9998＠gmail.com 06 Jul '06

06 Jul '06

I am having some trouble with the hobbit monitoring server. While at first, it seemed to be functioning fine, a few minutes later, the conn test failed across the board, and I received a yellow warning under the bbtest column. The actual error message under the bbtest details stated: Error output: Execution of '/usr/sbin/fping -Ae' failed with error-code 99 fping invocation failed: No such file or directory This is really weird, as the output of 'ls -l /usr/sbin/fping' shows that it is in fact there, and all have permissions to execute it: -rwsr-xr-x 1 root root 23600 Jun 2 2005 /usr/sbin/fping Not to mention that this problem seems to be periodic, and not continual. The test will fail about every 3-5 minutes and then succeed about another 3-5 minutes later, only the repeat the process again. Has anyone else experienced this? I'm running this on Fedora Core 2, hobbit version 4.1.2p1-1. Thanks in advance for your assistance. -Brian

2 2

BBTest Error
by david＠stenhouseconsulting.com 06 Jul '06

06 Jul '06

Pardon my ignorance, but what does this mean? Error output: Timeout waiting for data from child, killing it Timeout waiting for data from child, killing it Child process terminated with signal 15 And can I apply it to my five year old when she is not doing what I ask? :) David Gilmore Consultant Stenhouse Consulting, LLC. 4 Traverse St Providence, RI 02906 401.453.6900 x12 401.454.7581 (fax)

2 2

enable/disable
by bb4＠richter-it.net 06 Jul '06

06 Jul '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, at the moment we use BB as our primary server and we use Hobbit too but only as a display server for our customer. So if we disable a service or machine on BB the customer still sees the red,yellow or purple dots. Is there a way to send the data to the Hobbit server too? Maybe we can use: http://hobbitusr:hobbitpwd at hobbitserver/hobbit-seccgi/hobbit-enadis.sh?server=XXX&service=YYY in our enable/disable script we're using for BB to send the data to Hobbit? Regards Torsten - -- Download my public key from: http://www.keyserver.net:11371/pks/lookup?op=get&search=0x899093AC -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3-nr1 (Windows XP) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFElYBl7DlmxomQk6wRAmZaAJ9a2uyrMy0T6xGcpUwA8u/eC/wOfACgob5r IfnrwDJomodxTBE8p0D5XWs= =m3s3 -----END PGP SIGNATURE-----

2 4

Hobbit vs Nagios
by allan＠zandahar.net 04 Jul '06

04 Jul '06

Hey guys, As much as I dont want to move away from Hobbit/Big Brother I have been asked to compare Hobbit to Nagios. I would imagine quite a number of people on this list have experienced many of the offerings out theere before changing to hobbit or using a combination of products. I've done a quick google and there is a bit of stuff out there but obviously the more the merrier. So yeah pros cons from all aspects would be quite welcome and perhaps the results could be stuck up on the Wiki somewhere Cheers Allan

11 15

[hobbit] Packages for Solaris OS
by James.Gearing＠analog.com 04 Jul '06

04 Jul '06

I compiled the client on one Solaris 9 system. Then zipped up the client dir and have used it on Solaris 6,7,8,9,10 with out issue. You just have to copy gcc and make to one system, download and compile. Not sure if it will work on 5. Good luck! -----Original Message----- From: Camp.external at qimonda.com [mailto:Camp.external at qimonda.com] Sent: Friday, June 23, 2006 8:46 AM To: hobbit at hswn.dk Subject: RE: [hobbit] Packages for Solaris OS Have tried getting gcc from www.sunfreeware.com ? -----Original Message----- From: Lardinois, Pierre [mailto:plardinois at be.tiauto.com] Sent: Friday, June 23, 2006 7:47 AM To: 'hobbit at hswn.dk' Subject: [hobbit] Packages for Solaris OS Hello, We plan to install Hobbit Client on several unix servers & workstations, but we do not have any compiler installed on these machines. Are there any pre-installed packages of Hobbit Client for these OS : - Solaris 2.5.1 - Solaris 2.6 - Solaris 2.7 - Solaris 2.8 Thanks for your help. Regards, ___________________________________________________ Network Monitoring hobbit at support.tiauto.com Pierre Lardinois TI Automotive - Belgium/Liege The information contained in this transmission may contain privileged and confidential information. It is intended only for the use of the person(s) named above. If you are not the intended recipient, you are hereby notified that any review, dissemination, distribution or duplication of this communication is strictly prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

3 2

[hobbit] Problems starting hobbit
by skasperowicz＠c-cor.com 30 Jun '06

30 Jun '06

I added --debug to hobbitlaunch.cfg, but I don't seem to be getting any more info in hobbitlaunch.log. I started hobbit and am seeing the same stuff: 2006-06-30 16:50:57 Task rrddata terminated, status 1 2006-06-30 16:50:57 Task rrdstatus terminated, status 1 2006-06-30 16:50:57 Task bbpage terminated, status 1 2006-06-30 16:50:57 Task clientdata terminated, status 1 2006-06-30 16:51:03 Task rrddata terminated, status 1 2006-06-30 16:51:03 Task rrdstatus terminated, status 1 2006-06-30 16:51:03 Task bbpage terminated, status 1 2006-06-30 16:51:03 Task clientdata terminated, status 1 2006-06-30 16:51:38 Task bbdisplay terminated by signal 9 2006-06-30 16:52:38 Task bbdisplay terminated by signal 9 The hobbitd.log just had a couple lines from a long time ago: 2006-06-15 11:31:57 Setup complete 2006-06-15 14:23:50 Setup complete Thanks, -Shaun -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Wednesday, June 28, 2006 10:31 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Problems starting hobbit On Wed, Jun 28, 2006 at 03:29:37PM -0700, Kasperowicz, Shaun wrote: > 2006-06-28 15:15:16 Could not get shm of size 262144: No such file or directory > 2006-06-28 15:15:16 Channel not available > > Looks like still more shared memory problems? Perhaps. It doesn't sound right, since this would show up in the hobbitd startup also, and your last log-snippet didn't show that. Could you try editing your server/etc/hobbitlaunch.cfg file: The first entry with the "CMD hobbitd ...." line, add "--debug" at the end of that (very long) line so it becomes something like [hobbitd] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg CMD hobbitd --pidfile=$BBSERVERLOGS/hobbitd.pid --restart=$BBTMP/hobbitd.chk --checkpoint-file=$BBTMP/hobbitd.chk --checkpoint-interval=600 --log=$BBSERVERLOGS/hobbitd.log --admin-senders=127.0.0.1,$BBSERVERIP --maint-senders=127.0.0.1 --debug That should dump a bit more detail about what is happening into hobbitlaunch.log. Is there a "hobbitd.log" file in the same directory as hobbitlaunch.log? Anything in that ? Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Hobbit monitor: Security issue with Hobbit 4.2-beta client
by henrik＠hswn.dk 30 Jun '06

30 Jun '06

I was just notified by a Hobbit user that the current beta client has a security problem in the client "logfetch" utility, when installed as suid-root (which is the default if "make install" is executed as root). Impact ------ The effect of this is that any user who is able to login and create files on a system with the Hobbit client installed, can use the "logfetch" utility to get read access to any file on the system. Which versions are affected --------------------------- This issue affects all of the pre-release (alfa-, beta- and snapshot-versions) of the Hobbit client version 4.2 released until today (2006-Jun-30), when the client was installed as root and ~hobbit/client/bin/logfetch is suid-root. The 4.1.x releases of the Hobbit client does not include the "logfetch" utility, and are therefore NOT affected by this. Remedy ------ It is recommended that you remove the suid bit from the logfetch utility on systems where you have installed the Hobbit 4.2-beta client package. To do this: chmod 755 ~hobbit/client/bin/logfetch Note that this may cause logfile monitoring to break, if the client does not have read access to the monitored logfiles. Running logfetch as suid-root will most likely be removed in the final Hobbit 4.2 release of the client. Regards, Henrik Storner, the Hobbit developer

4 4

whois to act like sslcert?
by Jason.Chambers＠geosoft.com 30 Jun '06

30 Jun '06

Hi Henrik, Is there any way to get a whois type function to act like sslcert to warn you when your dns is about to expire? I know it sounds cheesy, but I thought it would be a neat idea. Jason Chambers IT Helpdesk Support <http://www.geosoft.com/20> eosoft Inc. 85 Richmond St. West - 8th Floor Toronto, Ontario, Canada M5H 2C9 Tel: 416-369-0111 x344 Fax: 416-369-9599 www.geosoft.com

3 3

[wishlist] Better support of the @@ tag in NCV trends
by cgoyard＠cvf.fr 30 Jun '06

30 Jun '06

Hi all, In do_ncv.c, I see this : 42: while (l && *l && strncmp(l, "@@\n", 3)) { If I understand correctly, that means the program will stop processing the status file if it encounter a "@@\n" line. Well, I tried and it seems to work that way (I have a status showing something like two counters followed by a bunch of SNMP values that I don't want to graph). It do not seem to be documented. Now the real cool thing would be to have start tag, so NCV values could be added last instead of first. (because humans like nice status reports and computer don't care to take the last bits). When the program hits the start tag, it forgets whatever it got and starts over. For people interrested, the status show this way : Thu Jun 29 18:41:21 CEST 2006 - 3623995988 incoming reqs - 845313333 outgoing reqs inreqs: 3623995988 outreqs: 845313333 @@ wwwServiceDescription.1 = CacheFlow 700/4.x.xxxx wwwServiceContact.1 = xxxxxxxxx at yyy.zz wwwServiceProtocol.1 = mgmt.xx.x.xx wwwServiceName.1 = myhostname wwwServiceType.1 = wwwCachingProxy (...) wwwSummaryInRequests.1 = 3624092091 wwwSummaryOutRequests.1 = 845335728 only the two first lines get a graph line. (the blank line before the @@ seems to be mandatory too) -- Charles

4 6

client-local.cfg: "ignore" ignored?
by Dominique.Frise＠unil.ch 30 Jun '06

30 Jun '06

Hi, We have following config. in our server's client-local.cfg: ---------- [mailc] log:/var/log/messages:10240 ignore MailScanner ---------- The /var/log/messages of the "mailc" client is filled up with lines like following that we would like to exclude totally: ---------- May 13 06:26:41 mailc MailScanner[933]: HTML Img tag found in message 1Feli1-0004tG-Dt from dmawllet at hotmail.com ---------- The lines with "MailScanner" of "mailc" client (Debian 2.4.22) are never ignored. I.e. we get -yellow/red- alarms for lines with "MailScanner" tag in it. --- some infos from the client --- bb at mailc:~$ wc -l /var/log/messages 10790 /var/log/messages bb at mailc:~$ grep MailScanner /var/log/messages | wc -l 10795 bb at mailc:/soft/pub/BB/hobbit/client/tmp$ cat logfetch.* log:/var/log/messages:10240 ignore MailScanner /var/log/messages:1306142:1281851:1252634:1227431:1200018:1156195:1115234 bb at mailc:/soft/pub/BB/hobbit/client/tmp$ --- What are we doing wrong? (client is running a snapshot of 25th april) Dominique UNIL - University of Lausanne

2 2