June 2007 - Xymon - Xymon mailman web

hobbitfetch replacement with ssh
by haertig＠avaya.com 26 Jun '07

26 Jun '07

I'm still thinking about my hobbitfetch/msgcache replacement I asked about a few weeks ago. Using only ssh from the Hobbit server. Client machine is out in DMZ, thus unable to talk to Hobbit server. I cannot run a listener (msgcache) on the client (policy reasons, not technical ones). Here are my thoughts. Maybe someone can expand on them or suggest a different approach. (1) Run normal Hobbit client on DMZ machine. (1a) Client appears to collect data just fine into ~hobbit/tmp/msg.XXX.txt (1b) Client would try to connect to Hobbit server to transmit this file, and fail. Fine. Let it fail. It appears to do so gracefully. Question: Any simple way to make it stop trying to connect and still behave gracefully? chmod 000 ~hobbit/bin/bb? Change BBDISP="" in ~hobbit/etc/hobbitclient.cfg? (2) Create a Hobbit server script to use socks/ssh to retrieve that ~hobbit/tmp/msg.XXX.txt file from the client machine (it's trivial to write such a thing) (3) Have this server script feed the raw data retrieved in step (2) into the Hobbit listener (which would be localhost:1984), such that it appears to the Hobbit listener the data came in from the client computer in the normal manner. Step (3) is what I don't quite know how to implement yet. I'm familiar with using the bb command to send messages, but those are formatted messages, not raw data as would be present in the retrieved msg.XXX.tmp file. I want to assure that the guts of the Hobbit server processes this proxied client raw data just as if the client had sent it instead of my custom server script. Is there some trivial way to accomplish (3) that I'm just missing searching through the man pages? I could have my custom server script parse the raw data itself and then create individual Hobbit messages (to send via the bb command), but that sounds like I'd be reinventing the wheel. Hobbit server processes already know how to parse this data ... if I could just tap into that part of it. Thanks!

3 12

hobbitfetch with Windows clients
by b-kennedy1＠raytheon.com 26 Jun '07

26 Jun '07

Hi. Is there a way to have the Hobbit server pulldata with hobbitfetch from Windows Hobbit clients? We have Windows and Solaris clients behind a firewall and ports 1984, 22, 80, and 443 from the Hobbit server to the clients are the only ones opened, nothing from the clients to the server. Hobbitfetch is working perfectly for the Solaris clients, so I was hoping to do the same thing for the Windows. Any ideas would be greatly appreciated. Regards, Bryan Kennedy

3 3

Host URLs without bb-notes
by shea4th＠comcast.net 25 Jun '07

25 Jun '07

Hi all, I have a handful of machines that have a URL to hit for remote access. I thought it would be great if I could embed the URL in the host column. So like any good hobbit, I check the mailing list first, but everything I found mentioned bb-notes and --docurl. I didn't want hyperlinks for every host, just the few I mentioned earlier. While this is not the prettiest of solutions, it works for me and wanted to share with the community. I use a carefully crafted COMMENT tag in the bb-hosts file like: 10.10.10.10 HOST01-RA01 # testip https://10.10.10.10 COMMENT:"<AHREF=https://10.10.10.10/ target=_new>URL</A>" Sincerely -Grs- Gregory R Shea EMC Corporation

1 0

help with freemem on Aix43
by shea4th＠comcast.net 25 Jun '07

25 Jun '07

Hi all, Just wanted to put some closure on this, just in case someone else misinterprets the vmstat output. I was supposed to divide by 256 not 1024. A humbled hobbit -Grs- Gregory R Shea EMC Corporation -------------- Original message -------------- From: shea4th at comcast.net Hi all, I'm having some trouble with the freemem on an aix4.3 client and need some help. First I didn't install the OS, so vmstat in not installed. I found nmon which gives a 'top' like output as below: $ ./nmon -s 1 -c 1 nmon v8a Hostname=cbaix43 Refresh=0.0secs 09:44.46 Memory Use Physical Virtual Paging pages/sec In Out % Used 37.4% 6.0% to Paging Space 0.0 0.0 % Free 62.6% 94.0% to File System 0.0 0.0 MB Used 95.7MB 31.0MB Page Scans 0.0 MB Free 160.3MB 481.0MB Page Cycles 0.0 Total(MB) 256.0MB 512.0MB Page Reclaim 0.0 I grab the output from the "MB Free" section and multiply the Physical (160.3) by 1024, and then send a dummy vmstat like line to the freemem section as shown in the clientdata below: client cbaix43.aix aix [date] Fri Jun 15 09:38:44 EDT 2007 [uname] AIX cbaix43 3 4 009002194C00 [uptime] 09:38AM up 114 days, 10:33, 1 user, load average: 0.03, 0.06, 0.08 ... ... [realmem] realmem 262144 Amount of usable physical memory in Kbytes False [freemem] 0 0 0 162304 0 0 0 0 0 0 0 0 0 0 0 0 0 [swap] Total Paging Space Percent Used 512MB 7% The problem is this is what I'm seeing on the memory webpage for the client: Fri Jun 15 09:38:44 EDT 2007 - Memory CRITICAL Memory Used Total Percentage Physical 18446744073709551238M 256M18446744073709551469% Swap 35M 512M 6% Any ideas?? Thanks -Grs- Gregory R Shea

1 0

No RRD file created from status messages generated by devmon
by vadud3＠gmail.com 25 Jun '07

25 Jun '07

Hi All I have the following entry in bb-hosts file 1.2.3.4 host.domain.net # DEVMON It creates nice status message but no rdd and no graph gets create. bbcmd hobbitd_channel --channel=status hobbitd_capture --tests=cpu for this host shows the following: ## @@status#409517 1182798409.418893 127.0.0.1 host.domain.net cpu 1182800209 green green 1182795144 0 0 0 status host,domain,net.cpu green Mon Jun 25 15:06:48 2007 &green Up for 17 days, 22:03:01 &green Avg number of processes in last 1 min: 233 &green Avg number of processes in last 5 mins: 254 &green Avg number of processes in last 15 mins: 254 System Description: Peakflow SP 3.6.1 (build 7DQJ) Model: SE7501WV2S Serial number: ADLP5476456 CPULoadAvg : 254 Devmon version 0.3.0-beta2 running on hobbit Should I not see a ~hobbit/data/rrd/host.domain.net/la.rrd file? -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

1 0

Monitor user specific procs
by toaster＠imber.com 25 Jun '07

25 Jun '07

Greet, Is there a way to monitor a users specific process? I have a ssh tunnel that needs to stay up. So how would I setup a test that monitors this: user1 78512 0.0 0.5 3372 2416 p2- S 7:43PM 0:01.72 ssh - N -g -L 2022:127.0.0.1:22 -L 15294:10.20.2.11:15294 -R 15294:10.0.2.11:15294 1.2.3.4 Thanks, Lee

3 2

differents betwen 'no data' and 'no report'
by nmarraud＠ixis-cib.com 25 Jun '07

25 Jun '07

Hello, Could you explain to me the differents betwen 'no data' and 'no report' ? Best regards. NMA -------------------------------------------------------- Ce message et toutes les pieces jointes peuvent etre confidentiels, et, de plus, peuvent etre couverts par un privilege ou une protection legale. Il est etabli a l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse prealable. Toutes opinions exprimees dans ce message, sont personnelles a leur auteur et ne sauraient necessairement refleter celle de IXIS Corporate & Investment Bank, de ses filiales ou de sa maison mere. Elles sont aussi susceptibles de modification sans notification prealable. Tous droits reserves. Si vous recevez ce message par erreur, merci de le detruire et d'en avertir immediatement l'expediteur. Toute communication avec IXIS Corporate & Investment Bank peut etre controlee, enregistree et conservee. IXIS Corporate & Investment Bank decline toute responsabilite au titre de ce message s'il a ete altere, deforme ou falsifie. Les communications sur Internet n'etant pas securisees, IXIS Corporate & Investment Bank informe qu'il ne peut accepter aucune responsabilite quant au contenu de ce message. This email and any attachment may be confidential and may also be legally privileged or otherwise protected from disclosure. It is intended only for the stated addressee(s) and access to it by any other person(s) is unauthorised. Any use, dissemination or disclosure not in accordance with its purpose, either in whole or in part, is prohibited without our prior formal approval. Any opinion expressed in this message may be personal to the author and may not necessarily reflect the opinion of IXIS Corporate & Investment Bank, its affiliates or parent company. It may also be subject to change without prior notice. Copyright reserved. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the information contained in this email. If you have received it in error, please inform us immediately and delete all copies. Any communication made with IXIS Corporate & Investment Bank (whether personal or business) may be monitored and a record kept. IXIS Corporate & Investment Bank shall not be liable for the message if altered, changed or falsified. As communication on the Internet is not secure, IXIS Corporate & Investment Bank does not accept responsibility for the content of this message. --------------------------------------------------------

8 9

hobbit mailinglist mails bounced
by henrik＠hswn.dk 25 Jun '07

25 Jun '07

Hi Rolf (and others on the Hobbit list) On Mon, Jun 25, 2007 at 10:24:02AM +0200, Rolf Schrittenlocher wrote: > I got an ezmlm probe that several mails from the hobbit mailing list > were bounced there were some problems last week with some mails bouncing, because reverse DNS lookups for my mail-server's IP-address was failing. Most mail systems don't care, but a handful of systems did bounce mails from me. It should be fixed now, and a quick perusal of the mail logs do not show any bounces recently. Regards, Henrik

1 0

whoops!?
by braedric42＠gmail.com 23 Jun '07

23 Jun '07

I keep getting these. Whoops ! bb failed to send message - timeout I thought this was from sending summary info to another server (or at least that's where I saw it before). Any thoughts? -- Stewart Larsen -- This sig intentionally left blank, other than this text explaining that if not for this text, this sig would be blank.

1 0

DURATION rules for specific host alerts
by gumby3203＠gmail.com 22 Jun '07

22 Jun '07

Is there a [non-messy] way to set a DURATION rule for a specific host alert? Basically, what I'm thinking of is something like this: In hobbit-clients.cfg HOST=myhost LOAD 20 30 DURATION>5m The effect being, the status of the "myhost" cpu alert will only change to yellow/red if the load is above the appropriate threshold for more than 5 minutes. There are a few hosts that occasionally will spike above the cpu load thresholds, but only for a few minutes (usually around 5 min at most), and then recover on its own. However, I don't want to raise the thresholds, because a sustained load (more than 10 minutes) at this level _is_ actually a critical event. It's just not critical if it is just a momentary spike. My specific example is with cpu load, but it could be for other things too, such as process counts, memory, or even in some situations, disk space.

2 2