September 2007 - Xymon - Xymon mailman web

port rule evaluation in hobbit-clients.cfg
by brislin＠bc.edu 13 Sep '07

13 Sep '07

I set up a PORT rule to alert for SENDMAIL logins in the DEFAULT section of my hobbit-clients.cfg file. I wanted to override that rule for certain hosts to allow SENDMAIL logins. My hobbit-clients.cfg looks like this: ------------ HOST=luxuria PORT "LOCAL=%([.:]25)$" state=ESTABLISHED min=0 max=9 color=green "TEXT=SENDMAIL logins" DEFAULT # These are the built-in defaults. UP 1h LOAD 5.0 10.0 DISK * 90 95 MEMPHYS 100 101 MEMSWAP 70 85 MEMACT 90 97 PROC cron PROC ntpd PORT "LOCAL=%([.:]23)$" state=ESTABLISHED min=0 max=0 color=red "TEXT=TELNET logins" PORT "LOCAL=%([.:]25)$" state=ESTABLISHED min=0 max=0 color=red "TEXT=SENDMAIL logins" PORT "LOCAL=%([.:]20)$" state=ESTABLISHED min=0 max=0 color=red "TEXT=FTP logins" But I see this on the hobbit server display: green SENDMAIL logins (found 1, req. at most 9) green TELNET logins (found 0, req. at most 0) red SENDMAIL logins (found 1, req. at most 0) green FTP logins (found 0, req. at most 0) Does anybody know why both rules for the SENDMAIL port are being evaluated? The man page for hobbit-clients.cfg says: The entire file is evaluated from the top to bottom, and the first match found is used. So you should put the specific settings first, and the generic ones last. -- Jay

3 3

Posting etiquette (was: [hobbit] CPU utilisation alerts)
by henrik＠hswn.dk 13 Sep '07

13 Sep '07

Someone wrote: > Vernon, The attached 2 files are from: http://www.deadcat.net/ Please - don't post files here, which can be downloaded from a public archive. Post a link instead - it is much more efficient, and it saves me from having to delete the bounces that come back from various fascist mail filters which reject all executables. Thanks, Henrik

2 1

(Small) enhancement client-side script
by peter.welter＠gmail.com 13 Sep '07

13 Sep '07

We have many Suse Linux (SLES9) boxes running a Hobbit-client. I changed the client-side Hobbit-script (hobbitclient-linux.sh) on two points: 30c30 < grep ^SUSE /etc/SuSE-release --- > grep ^SuSE /etc/SuSE-release 61c61 < netstat -antu 2>/dev/null --- > netstat -ant 2>/dev/null First change to correct a typo, I think. The second, I would like to see the ports being used by our DHCP-server which is UDP. Standard only TCP is shown. I don't know why only TCP was shown, so I thought i'd ask. Perhaps something to put up in 4.3? --Peter

1 0

Offtopic - Someone with java skills
by allan＠zandahar.net 13 Sep '07

13 Sep '07

I don't normally like to do this but I am at a loss at the moment. I have found a java script to convert from csv to ldif which works fine but am trying to find someone with some skills to slightly edit it and turn a manager entry form just manager: abc123 into manager: cn=abc123,ou=people,o=acme If anyone can possibly help me can you please mail me directly it would be greatly appreciated Thanks Allan

1 0

[hobbit] CPU utilisation alerts
by Thomas.Kern＠hq.doe.gov 13 Sep '07

13 Sep '07

On the mainframes, we are used to lots of tasks waiting for various resources. Main memory, virtual memory, I/O, etc all are important and can be tuned fairly well. When that tuning isn't quite right, throughput can be degraded but the pain is not as bad as when the CPU gets overloaded. CPU is one resource that is hard to change, I have run systems that needed to be less than 50% busy and others that the boss wanted at 100% and wished for 110% busy. The CPU value can also be the first indication of a runaway user or bad database query (this is our most common problem). Once we know from the CPU utilization that something is wrong, we can look for the cause and maybe the other problems are there too. Thomas Kern 301-903-2211 ----- Original Message ----- From: vernon.everett at westernpower.com.au <vernon.everett at westernpower.com.au> To: hobbit at hswn.dk <hobbit at hswn.dk> Sent: Thu Sep 13 00:23:43 2007 Subject: Re: [hobbit] CPU utilisation alerts It might be different in mainframe world, but in Unix world, you need to look at both the run queue length, IO stats and the CPU utilisation to get an idea of what's happening. If your CPU is at 100% and your run queue is still small, it's probably just a hefty process chugging along, like a compile. If your run queue is huge, and growing, and your CPU isn't yet at 100% you need to look at your IO. Disk, memory, swap, any resource that could be generating contention and IO wait. If there is major contention for these resources you need to look at adding more, or utilising them differently - spread data across multiple disks or mirror the disk to increase read throughput, that sort of thing. If your run queue is huge, and growing, and CPU is at 100%, while IO is low, it's probably time to move to a new server, or find the developer and tell him to fix his bugs. :-) So absolute CPU utilisation on its own, isn't particularly meaniingful, but if that's what the PHBs want, let's give it to them. Regards Vernon "Kern, Thomas" <Thomas.Kern at hq.doe.gov> wrote on 13/09/2007 12:07:37 PM: > I would prefer that the cpu test be the data from the vmstat command > instead of the load values. I am used to a mainframe system and cpu > utilization is more useful that queue length. All of my Linux > systems are guests on a mainframe system so their individual cpu > utilizations is not as important as the values from my first level > system and I am working on a client side test for that. > > > Thomas Kern > 301-903-2211 > > > ----- Original Message ----- > From: vernon.everett at westernpower.com.au <vernon.everett at westernpower.com.au> > To: hobbit at hswn.dk <hobbit at hswn.dk> > Sent: Wed Sep 12 23:56:43 2007 > Subject: Re: [hobbit] CPU utilisation alerts > > > Hi Thomas > > Thanks for your quick response. > > A client side script would work, but I was thinking I cannot be the > first person to need this, and that somebody else has already > invented the wheel. > (I hate reinventing stuff) > Alternatively, I was hoping that Henrik has some magic switch or > config setting that will make it work. > > Regards > Vernon > > > "Kern, Thomas" <Thomas.Kern at hq.doe.gov> wrote on 13/09/2007 11:46:07 AM: > > > I don't know if you can alert off one of the values in one of the > > trends graphs. That might take some back-end modifications. > > > > But you could write a simple client-side script to do the same > > command that is parsed for the trends graphs (vmstat, I think), > > totaling the cpu utilization values and sending a simple status > > message with the appropriate g/y/r color. The hobbit can do the alert. > > > > > > Thomas Kern > > 301-903-2211 > > > > > > ----- Original Message ----- > > From: vernon.everett at westernpower.com.au <vernon. > everett at westernpower.com.au> > > To: hobbit at hswn.dk <hobbit at hswn.dk> > > Sent: Wed Sep 12 23:36:07 2007 > > Subject: [hobbit] CPU utilisation alerts > > > > > > Hi all > > > > I'm baaaack :-) > > For those who might have missed me, I spent a few months contracting > > for a company that standardised on BMC Patrol. Wouldn't even look at Hobbit. > > BMC is a horrible package, expensive, not very extensible, with a > > huge client footprint and overhead, and is very prone to crashing. > > Sad product. > > > > But no matter, I am now trying to satisfy my new company that Hobbit > > is the one monitor to rule them all, and my new colleagues have > > identified a "deficiency". > > > > This has probably been asked and answered before, but here is whatthey want. > > I have been asked to generate a yellow/red status when absolute CPU > > utilisation reaches predetermined thresholds. > > Yes, I know, without looking at the run-queue this figure is not > > very meaningful, but this is what they want. > > > > The la1 graph in the trends column does an excellent job of graphing > > the CPU utilisation, but how do I configure an alert based on that figure? > > > > Regards > > Vernon > > > > > > > > > > > > > > > > ======================================================================== > > Electricity Networks Corporation, trading as Western Power > > ABN: 18 540 492 861 > > > > TO THE ADDRESSEE - this email is for the intended addressee only and > > may contain information that is confidential. > > If you have received this email in error, please notify us > > immediately by return email or by telephone. > > Please also destroy this message and any electronic or hard copies > > of this message. > > > > Any claim to confidentiality is not waived or lost by reason of > > mistaken transmission of this email. > > > > Unencrypted email is not secure and may not be authentic. Western > > Power cannot guarantee the accuracy, reliability, > > completeness or confidentiality of this email and any attachments. > > > > VIRUSES - Western Power scans all outgoing emails and attachments > > for viruses, however it is the recipient's responsibility > > to ensure this email is free of viruses. > > ======================================================================== > > > > ======================================================================== > Electricity Networks Corporation, trading as Western Power > ABN: 18 540 492 861 > > TO THE ADDRESSEE - this email is for the intended addressee only and > may contain information that is confidential. > If you have received this email in error, please notify us > immediately by return email or by telephone. > Please also destroy this message and any electronic or hard copies > of this message. > > Any claim to confidentiality is not waived or lost by reason of > mistaken transmission of this email. > > Unencrypted email is not secure and may not be authentic. Western > Power cannot guarantee the accuracy, reliability, > completeness or confidentiality of this email and any attachments. > > VIRUSES - Western Power scans all outgoing emails and attachments > for viruses, however it is the recipient's responsibility > to ensure this email is free of viruses. > ======================================================================== ======================================================================== Electricity Networks Corporation, trading as Western Power ABN: 18 540 492 861 TO THE ADDRESSEE - this email is for the intended addressee only and may contain information that is confidential. If you have received this email in error, please notify us immediately by return email or by telephone. Please also destroy this message and any electronic or hard copies of this message. Any claim to confidentiality is not waived or lost by reason of mistaken transmission of this email. Unencrypted email is not secure and may not be authentic. Western Power cannot guarantee the accuracy, reliability, completeness or confidentiality of this email and any attachments. VIRUSES - Western Power scans all outgoing emails and attachments for viruses, however it is the recipient's responsibility to ensure this email is free of viruses. ========================================================================

3 3

Whoops error
by stewartl42＠gmail.com 13 Sep '07

13 Sep '07

I get this fairly frequently. Where should I look? this is running on a beefy box, Dell 6850 server with 4 procs and 16GB of RAM. Also, sometimes the WML generation takes 40+ seconds, pushing the run time longer then BBSLEEP. Stew yellow Tue Sep 11 07:31:38 2007 bbgen for Hobbit version 4.2.1d Statistics: Hosts : 3753 Status messages : 0 Purple messages : 0 Pages : 174 Error output: Whoops ! bb failed to send message - timeout hobbitd status-board not available TIME SPENT Event Starttime Duration Startup 1189510298.150425 - Load links done 1189510298.150867 0.000442 Load bbhosts done 1189510298.268625 0.117758 ACK removal done 1189510298.268694 0.000069 Load STATE done 1189510313.268106 14.999412 Color calculation done 1189510313.268867 0.000761 Hobbit pagegen start 1189510313.268893 0.000026 Hobbit pagegen done 1189510313.697295 0.428402 BB2 generation done 1189510313.698902 0.001607 BBNK generation done 1189510313.699424 0.000522 Summary transmission done 1189510313.699426 0.000002 WML generation done 1189510313.700001 0.000575 Run completed 1189510313.700003 0.000002 TIME TOTAL 15.549578

2 3

[hobbit] CPU utilisation alerts
by Thomas.Kern＠hq.doe.gov 13 Sep '07

13 Sep '07

I would prefer that the cpu test be the data from the vmstat command instead of the load values. I am used to a mainframe system and cpu utilization is more useful that queue length. All of my Linux systems are guests on a mainframe system so their individual cpu utilizations is not as important as the values from my first level system and I am working on a client side test for that. Thomas Kern 301-903-2211 ----- Original Message ----- From: vernon.everett at westernpower.com.au <vernon.everett at westernpower.com.au> To: hobbit at hswn.dk <hobbit at hswn.dk> Sent: Wed Sep 12 23:56:43 2007 Subject: Re: [hobbit] CPU utilisation alerts Hi Thomas Thanks for your quick response. A client side script would work, but I was thinking I cannot be the first person to need this, and that somebody else has already invented the wheel. (I hate reinventing stuff) Alternatively, I was hoping that Henrik has some magic switch or config setting that will make it work. Regards Vernon "Kern, Thomas" <Thomas.Kern at hq.doe.gov> wrote on 13/09/2007 11:46:07 AM: > I don't know if you can alert off one of the values in one of the > trends graphs. That might take some back-end modifications. > > But you could write a simple client-side script to do the same > command that is parsed for the trends graphs (vmstat, I think), > totaling the cpu utilization values and sending a simple status > message with the appropriate g/y/r color. The hobbit can do the alert. > > > Thomas Kern > 301-903-2211 > > > ----- Original Message ----- > From: vernon.everett at westernpower.com.au <vernon.everett at westernpower.com.au> > To: hobbit at hswn.dk <hobbit at hswn.dk> > Sent: Wed Sep 12 23:36:07 2007 > Subject: [hobbit] CPU utilisation alerts > > > Hi all > > I'm baaaack :-) > For those who might have missed me, I spent a few months contracting > for a company that standardised on BMC Patrol. Wouldn't even look at Hobbit. > BMC is a horrible package, expensive, not very extensible, with a > huge client footprint and overhead, and is very prone to crashing. > Sad product. > > But no matter, I am now trying to satisfy my new company that Hobbit > is the one monitor to rule them all, and my new colleagues have > identified a "deficiency". > > This has probably been asked and answered before, but here is what they want. > I have been asked to generate a yellow/red status when absolute CPU > utilisation reaches predetermined thresholds. > Yes, I know, without looking at the run-queue this figure is not > very meaningful, but this is what they want. > > The la1 graph in the trends column does an excellent job of graphing > the CPU utilisation, but how do I configure an alert based on that figure? > > Regards > Vernon > > > > > > > > ======================================================================== > Electricity Networks Corporation, trading as Western Power > ABN: 18 540 492 861 > > TO THE ADDRESSEE - this email is for the intended addressee only and > may contain information that is confidential. > If you have received this email in error, please notify us > immediately by return email or by telephone. > Please also destroy this message and any electronic or hard copies > of this message. > > Any claim to confidentiality is not waived or lost by reason of > mistaken transmission of this email. > > Unencrypted email is not secure and may not be authentic. Western > Power cannot guarantee the accuracy, reliability, > completeness or confidentiality of this email and any attachments. > > VIRUSES - Western Power scans all outgoing emails and attachments > for viruses, however it is the recipient's responsibility > to ensure this email is free of viruses. > ======================================================================== ======================================================================== Electricity Networks Corporation, trading as Western Power ABN: 18 540 492 861 TO THE ADDRESSEE - this email is for the intended addressee only and may contain information that is confidential. If you have received this email in error, please notify us immediately by return email or by telephone. Please also destroy this message and any electronic or hard copies of this message. Any claim to confidentiality is not waived or lost by reason of mistaken transmission of this email. Unencrypted email is not secure and may not be authentic. Western Power cannot guarantee the accuracy, reliability, completeness or confidentiality of this email and any attachments. VIRUSES - Western Power scans all outgoing emails and attachments for viruses, however it is the recipient's responsibility to ensure this email is free of viruses. ========================================================================

2 1

[hobbit] CPU utilisation alerts
by Thomas.Kern＠hq.doe.gov 13 Sep '07

13 Sep '07

I don't know if you can alert off one of the values in one of the trends graphs. That might take some back-end modifications. But you could write a simple client-side script to do the same command that is parsed for the trends graphs (vmstat, I think), totaling the cpu utilization values and sending a simple status message with the appropriate g/y/r color. The hobbit can do the alert. Thomas Kern 301-903-2211 ----- Original Message ----- From: vernon.everett at westernpower.com.au <vernon.everett at westernpower.com.au> To: hobbit at hswn.dk <hobbit at hswn.dk> Sent: Wed Sep 12 23:36:07 2007 Subject: [hobbit] CPU utilisation alerts Hi all I'm baaaack :-) For those who might have missed me, I spent a few months contracting for a company that standardised on BMC Patrol. Wouldn't even look at Hobbit. BMC is a horrible package, expensive, not very extensible, with a huge client footprint and overhead, and is very prone to crashing. Sad product. But no matter, I am now trying to satisfy my new company that Hobbit is the one monitor to rule them all, and my new colleagues have identified a "deficiency". This has probably been asked and answered before, but here is what they want. I have been asked to generate a yellow/red status when absolute CPU utilisation reaches predetermined thresholds. Yes, I know, without looking at the run-queue this figure is not very meaningful, but this is what they want. The la1 graph in the trends column does an excellent job of graphing the CPU utilisation, but how do I configure an alert based on that figure? Regards Vernon ======================================================================== Electricity Networks Corporation, trading as Western Power ABN: 18 540 492 861 TO THE ADDRESSEE - this email is for the intended addressee only and may contain information that is confidential. If you have received this email in error, please notify us immediately by return email or by telephone. Please also destroy this message and any electronic or hard copies of this message. Any claim to confidentiality is not waived or lost by reason of mistaken transmission of this email. Unencrypted email is not secure and may not be authentic. Western Power cannot guarantee the accuracy, reliability, completeness or confidentiality of this email and any attachments. VIRUSES - Western Power scans all outgoing emails and attachments for viruses, however it is the recipient's responsibility to ensure this email is free of viruses. ========================================================================

2 1

Sending summary to a remote Hobbit server
by ralphmitchell＠gmail.com 12 Sep '07

12 Sep '07

I know I can send a summary from one Hobbit server to another using by putting something like: summary Vegas.All 10.0.1.1 http://vegas.foo.com/hobbit/ in the sender's bb-hosts file, and it shows up on the Main View on the receiver. What I need, however, is a matching red/green dot in the "all non-green" view on the receiving Hobbit server. Any clues, anyone?? Did I just miss something simple in the bb-hosts file, or is this another feature request for 4.3.0?? :) Ralph Mitchell

3 7

problems building the latest snapshot (Solaris 10)
by hobbit＠richwachter.com 12 Sep '07

12 Sep '07

Hello all, I downloaded the latest snapshot this morning and tried to build it. Solaris 10 (current patches) and I received this error . . . gcc -g -O2 -Wall -Wno-unused -D_REENTRANT -DSunOS -I. -I/users/hobbit/snapshot/include -I/usr/local/include -DINET6 -DNETSNMP_USE_INLINE -Wall -Dlinux -I. -c -o hobbit_snmpcollect.o hobbit_snmpcollect.c hobbit_snmpcollect.c: In function `starthosts': hobbit_snmpcollect.c:295: warning: 'req' might be used uninitialized in this function hobbit_snmpcollect.c: In function `readconfig': hobbit_snmpcollect.c:530: warning: 'devname' might be used uninitialized in this function hobbit_snmpcollect.c: In function `resolveifnames': hobbit_snmpcollect.c:641: warning: 'ifwalk' might be used uninitialized in this function hobbit_snmpcollect.c: At top level: hobbit_snmpcollect.c:15: warning: 'rcsid' defined but not used gcc -o hobbit_snmpcollect hobbit_snmpcollect.o `net-snmp-config --libs` ../lib/libbbgen.a gcc: language arch=v9 not recognized Undefined first referenced symbol in file inet_aton ../lib/libbbgen.a(sendmsg.o) ld: fatal: Symbol referencing errors. No output written to hobbit_snmpcollect collect2: ld returned 1 exit status make[1]: *** [hobbit_snmpcollect] Error 1 make[1]: Leaving directory `/users/hobbit/snapshot/bbnet' make: *** [bbnet-build] Error 2 I have built Hobbit on this server before and really am not sure where to start to resolve this issue. I am not looking for someone to " fix it " but for some ideas on what I might be missing. -- =================================== Richard Wachter hobbit at richwachter.com <>< Precariously perched on the precipice of another day . . .

3 4