July 2007 - Xymon - Xymon mailman web

Hobbit not recognizing certain tests?
by eric.jacobs＠thomastechsolutions.com 17 Jul '07

17 Jul '07

Using Andy Farrior's method, I set up hobbit (version 4.2, allinone patch installed) to receive SNMP traps from some of our F5 devices. Works fine except for one of the devices. Checked all the logs and made sure that the various corollary programs are getting the traps correctly. Finally figured out that Hobbit (or, more specifically, hobbitboard. The trap.pl uses hobbitboard to find all the hosts that have the "trap" test defined. I ran the hobbitboard command myself and saw that it did not include the particular device in question) was not recognizing the trap test for that device. I've tried re-writing the bb-hosts file entry and moving things around (I'm also running Devmon against that device which sort of works, though the templates probably need some work) and moved the "trap" designation behind the devmon designation. No luck. For what it is worth, on the info page for the device in question, "trap" does not show up in the status summary, though it does show up in the "Other tags" section. For the devices for which the trap works, "trap" shows up in both the status summary and the "Other tags" section. Eric Jacobs

5 5

alerts not working hobbit server 4.2.0
by Robert-Manocchia＠IDEXX.com 17 Jul '07

17 Jul '07

The alerts on my new hobbit server (version 4.2.0) are not working. I ran the following command ./bbcmd hobbit_alert --test myserver.com conn and I get the following message: 2007-07-17 14:25:33 Using default environment file /usr/local/server/etc/hobbitserver.cfg 2007-07-17 14:25:33 execvp() failed: No such file or directory Anyone know where I begin to look? Thanks. Robert Manocchia UNIX System Administrator IDEXX Laboratories 207 556-6860 EMail Robert-Manocchia at idexx.com

3 3

BigBrother migration: trending on the mem test
by s_aiello＠comcast.net 17 Jul '07

17 Jul '07

Hi All, I am almost complete with my Proof-of-concept with out BigBrother to Hobbit migration. Yes, has been taking along time. There were a lot of BB customizations that needed porting. Anyways. All my *NIX devices report into BB with their memory report as mem, not memory. So I have BigBrother & hobbit running in parallel, with a bbproxy sending bbclient data to both. One of my last issues is that I am missing memory trends for all my *nix servers. So is there anyway to tell the hobbit server to do memory trending on memory & mem reports ? I have tried a few things, but with no success. If there is no way to configure hobbit to perform trend collection on memory & mem reports, I can just do a --extra-test option and script something. I have a few of those already. I was just curious if there was any inbuilt method. Thanks, ~Steve

5 11

DNS test
by toaster＠imber.com 17 Jul '07

17 Jul '07

Hi, I am trying to figure out how to test a particular DNS test. I am using the following that I found in the list. 10.0.0.1 dns1.foo.com # dns=a:www.kernel.org 10.0.0.2 dns2.foo.com # dns=a:www.kernel.org This is a great start. What I want to do next is to tell hobbit that www.kernel.org should be 1.2.3.4 and that if 5.6.7.8 is returned to go red. Can this be done or do I need to script it? Thanks, Lee

1 0

[hobbit] Hobbit not recognizing certain tests?
by Eric.Jacobs＠thomastechsolutions.com 17 Jul '07

17 Jul '07

> -----Original Message----- > From: FARRIOR, Andy [mailto:Andy.Farrior at victoriacollege.edu] > Sent: Monday, July 16, 2007 5:30 PM > To: hobbit at hswn.dk > Subject: RE: [hobbit] Hobbit not recognizing certain tests? Andy, wonderful to hear from you. And thanks for your method of getting snmp traps into Hobbit. It is a bit of a feather in my cap that I can do so. My boss is anxious to get rid of our highly priced NetCool monitoring package, but we needed to be able to monitor traps, at least from our F5 devices. > > > I haven't modified trap.pl in a very *long* time. Hmm... (I'm still > using it.) > > > Going back over the code, I'm running hobbitdboard so I can get the > validtime field for the test: > "$BB $BBDISP \"hobbitdboard test=trap > fields=hostname,validtime,color\" " > > In case there's a host that doesn't send a trap that often, I > wanted to > change the color to green instead of having it go purple and > generate an > alert. So to get the time left for a test, I needed the hobbitdboard > results. A side-effect is that the column won't appear until > the device > sends it's first trap. > Yes, I looked again at the code and realized that I was mistaken, and have already apologized to Henrik for having the temerity to suggest that there might be a bug in his code. > > For the problem device, is the log from SEC showing a hostname or IP > address for the device sending the trap? > Yes, but that was sometime ago. Maybe before I made some other corrections to get things working. I'm tempted to just down a server to cause a trap. > There may be a problem if it's sending a status message to Hobbit with > an IP address instead of a hostname. I don't think trap.pl > does a good > job (or at all) of trying to resolve an IP address to a > hostname that's > in bb-hosts. > Yes, I've seen that. In order to get things to work, I've had to make /etc/host file entries and make sure that the sending devices are configured to send their traps via certain interfaces so that the IP address will correspond to the host file address. > > > Hope that helps, > Andy > > > > > > -----Original Message----- > From: Henrik Stoerner [mailto:henrik at hswn.dk] > Sent: Monday, July 16, 2007 3:41 PM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Hobbit not recognizing certain tests? > > On Mon, Jul 16, 2007 at 12:43:55PM -0400, Eric Jacobs wrote: > > The trap.pl uses hobbitboard to find all the hosts that have the > > "trap" test defined. > > Bad idea - there's a chicken-and-egg problem here. > > Columns do not appear in the hobbitdboard output until they exist, > i.e. a status has been reported to Hobbit. So if *something* must > report a "trap" status to Hobbit before the trap.pl script sees > that it should do the "trap" thing ... well, I guess you can tell > where I'm going. > > Scripts that implement custom tests should use the "bbhostgrep" > utility to scan the bb-hosts file for the hosts that have a > specific tag defined. > > There is actually another way it can be done, but it's not yet > documented: You can send a "hostinfo" command to hobbitd, and it > will return a pre-parsed version of the bb-hosts file - one line > per hosts, with the fields delimited by '|' characters, eg: > mail.hswn.dk|172.16.10.2|NET:intern|COMMENT:Internal mail > server|smtp|pop3|imap > > > Regards, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > >

5 5

BBWin uptime: How to warn on up too long
by Larry.Sherman＠rbsgc.com 17 Jul '07

17 Jul '07

Hi, I've been playing with Bbwin and reading the help file, but can not figure out how to make it set uptime to red if the machine has been up too long. Any ideas? Thanks, Larry ----------------------------------------- ******************************************************************* * This e-mail is intended only for the addressee named above. As this e-mail may contain confidential or privileged information, if you are not the named addressee, you are not authorized to retain, read, copy or disseminate this message or any part of it. ******************************************************************* *

5 6

Anyone with IP 71.232.164.52 probing the Hobbit demosite?
by henrik＠hswn.dk 17 Jul '07

17 Jul '07

This isn't really Hobbit related - or perhaps it is. Someone with the IP 71.232.164.52 is trying to query some services on the Hobbit demo site which are firewalled. Every 5 minutes, so it's probably done through a Hobbit setup. This means my firewall logs become quite large. I don't mind this as a kind of test setup, but it's been going on for quite some time now. So if you are the lucky owner of that Comcast address, please remove the Hobbit demosite from your bb-hosts file. Regards, Henrik

1 0

New Monitors Added
by gjohnson＠trantor.org 17 Jul '07

17 Jul '07

New monitors recently added to The Shire: * Windows Uptime - http://www.trantor.org/theshire/doku.php/monitors:winuptime * termusers - http://www.trantor.org/theshire/doku.php/monitors:termuser --- The Shire

1 1

[hobbit] Hobbit not recognizing certain tests?
by Eric.Jacobs＠thomastechsolutions.com 16 Jul '07

16 Jul '07

Sorry, my mistake. The part of trap.pl that uses hobbitboard is checking on the status of existing traps. The subroutine that sends the traps doesn't. Back to the drawing board. Eric > -----Original Message----- > From: henrik at hswn.dk [mailto:henrik at hswn.dk] > Sent: Monday, July 16, 2007 4:41 PM > To: hobbit at hswn.dk > Subject: Re: [hobbit] Hobbit not recognizing certain tests? > > > On Mon, Jul 16, 2007 at 12:43:55PM -0400, Eric Jacobs wrote: > > The trap.pl uses hobbitboard to find all the hosts that have the > > "trap" test defined. > > Bad idea - there's a chicken-and-egg problem here. > > Columns do not appear in the hobbitdboard output until they exist, > i.e. a status has been reported to Hobbit. So if *something* must > report a "trap" status to Hobbit before the trap.pl script sees > that it should do the "trap" thing ... well, I guess you can tell > where I'm going. > > Scripts that implement custom tests should use the "bbhostgrep" > utility to scan the bb-hosts file for the hosts that have a > specific tag defined. > > There is actually another way it can be done, but it's not yet > documented: You can send a "hostinfo" command to hobbitd, and it > will return a pre-parsed version of the bb-hosts file - one line > per hosts, with the fields delimited by '|' characters, eg: > mail.hswn.dk|172.16.10.2|NET:intern|COMMENT:Internal mail > server|smtp|pop3|imap > > > Regards, > Henrik > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > >

1 0

Alerts on server reboot?
by stl19847＠yahoo.com 16 Jul '07

16 Jul '07

Is there a way to suppress the flood of alerts we get on a server reboot? If the machine is down for 10 minutes and comes back up, we get flooded with purple messages. -- Stewart

5 7