November 2008 - Xymon - Xymon mailman web

RFE - Fine grained access control
by philwild＠gmail.com 25 Nov '08

25 Nov '08

Hi Henrik/xymon users, I am not sure what the process for RFE's is but I have a request for an enhancement. It would be nice if you could set up a finer grained access control within xymon. For example, set up a group for Oracle DBA's and then only give them access to hosts and/or tests that have been added to that group. I know it is possible to restrict views to certain pages using apache authentication and basic security and we use this, but more is needed above this that I believe can only be addressed within the code. For example. the defined groups should only be able to ack and disable/enable items associated with their group provided the group has been given permission to do that. It would also be nice to restrict the viewing of certain test columns to certain groups as well. Thoughts? Cheers Phil

1 0

Ubuntu606-hobbit-client_4.2.0-1_i386.deb FAIL TO INSTALL
by elisa.balatresi＠noze.it 25 Nov '08

25 Nov '08

I all, I try to install Ubuntu606-hobbit-client_4.2.0-1_i386.deb. After dpkg -i Ubuntu606-hobbit-client_4.2.0-1_i386.deb. I got this error: Configuring hobbit-client (4.2.0-1) ... Please configure HOBBITSERVERS in /etc/default/hobbit-client invoke-rc.d: initscript hobbit-client, action "start" failed. dpkg: error processing hobbit-client (--configure): sub process post-installation script exit with error code 1 I tried to configure /etc/default/hobbit-client, but after apt-get install -f (or any other apt-get install <package> I got the same error and the file /etc/default/hobbit-client loss the configuration I prevously made. Any help or suggestion? Thanks in adavance Elisa -- Elisa Balatresi - [ n o z e S.r.l. ] Via Giuntini, 25/29 - 56023 Navacchio - Cascina (PI) Tel +39 050 754380 - Fax +39 050 754381 mailto:elisa.balatresi at noze.it - http://www.noze.it

1 0

mail Test
by Kevin.Hanrahan＠elavon.com 25 Nov '08

25 Nov '08

Hi All, Does anybody know a way to test your ability to send mail externally? I want to be able to verify we can send mail to an external email server. Being able to check mail externally would be great also. Does anybody know of a test or script to do this? thanks k ----------------------------------------- Note: The information contained in this e-mail and in any attachments is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. The recipient should check this e-mail and any attachments for the presence of viruses. Sender accepts no liability for any damages caused by any virus transmitted by this e-mail. If you have received this e-mail in error, please notify us immediately by replying to the message and delete the e-mail from your computer. Elavon (formerly NOVA Information Systems)

4 3

Alert Script doesnt work!!!
by k.rakeshnair＠gmail.com 25 Nov '08

25 Nov '08

hi all I ammonitoring a jboss server and have to generate an alert. I have written a sample script as follows into a file named "alertscript.sh", which I have placed in ~server/ext/ directory. ####################alertscript.sh################## #!/bin/sh #DESTINATION_FILE="/home/hobbit/server/ext/alerts.log" DATE="`date | cut -f 2-3 -d ' '|replace ' ' '-'`" TIME="`date | cut -f 4 -d ' '`" DATA="An alert was raised on $DATE at $TIME" echo $DATA >> alert.log exit 0 #### I have added the following code into hobbit-alerts.cfg: ################################################ HOST=abc.xyz.com COLOR=yellow REPEAT=2m SCRIPT /home/hobbit/server/ext/alertscript.sh 0 DURATION>1 REPEAT=1 ################################################ I think these are the only two things I have to do to make the alert work. If there are any more steps, or any modifications to be made in the above mensioned code, please tell me. If you think this is the only thing I have to do, kindly deploy this code at your end and let me know if the code works fine. Please reply ASAP. Thanks in advance. Regards Rakz

1 0

Testing external web through a proxy
by Vernon.Everett＠woodside.com.au 25 Nov '08

25 Nov '08

Hi all I am trying to test our interent connectivity by checking Google through our proxy. (Once I get this right, I want to start testing some of our external web pages in the same manner) I have configured this in bb-hosts 0.0.0.0 www.google.com # noconn http://hobbituser:hobbitpassword at ourproxy.ourdomain.com:8080/http://www.google.com And I get this. yellow<http://hobbit/hobbit/gifs/yellow.gif> http://www.google.com.au/ - Proxy Authentication Required HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. ) Via: 1.1 PXYHOSTNAME Proxy-Authenticate: Negotiate Proxy-Authenticate: Kerberos Proxy-Authenticate: NTLM Connection: Keep-Alive Proxy-Connection: Keep-Alive Pragma: no-cache Cache-Control: no-cache Content-Type: text/html Content-Length: 4118 Seconds: 0.02 Any assistance appreciated. Regards Vernon NOTICE: This email and any attachments are confidential. They may contain legally privileged information or copyright material. You must not read, copy, use or disclose them without authorisation. If you are not an intended recipient, please contact us at once by return email and then delete both messages and all attachments.

5 10

How to validate SSL server certificate?
by Samuel.Cai＠ehealth-china.com 25 Nov '08

25 Nov '08

Hi, In Hobbit, for https:// testing, it'll also get server certificate and check the expiration if we defined. The question I have is: how to let Hobbit validate the server certificate? I want it to send alerts if no certificate or have incorrect one. Thanks, Samuel Cai

1 1

Alert DoS
by rodolfo＠pilas.net 25 Nov '08

25 Nov '08

Is there are any way that I can alert when a IP establish more than X connections with my host? I use this line to obtain port 80 connections: netstat -tan | egrep 170.53.[0-9]*.[0-9]*:80 | grep -v TIME_WAIT | \ cut -c 45-66 | cut -d : -f 1 | sort -n | uniq -c | sort -n and obtain output like this: 1 191.78.192.30 1 209.125.58.188 2 170.51.33.42 2 193.108.7.164 2 193.134.36.229 2 193.134.39.89 5 193.132.83.232 8 193.134.162.85 My strart point was: PORT "LOCAL=%([.:]80)$" "REMOTE=*"(uniq -c) state=(ESTABLISHED|SYN_RECV) min=0 max=20 Thank you for any help. Regards, Rodolfo Pilas

1 0

bbwin missing network interfaces in clientdata/ifstat
by brian＠majeska.com 24 Nov '08

24 Nov '08

Reposting this to the hobbit list after not hearing anything from Etienne on the bbwin list, maybe I'll catch his attention here :-) BBWin 0.12 on Windows 2003 Hobbit 4.2 with allinone and bbwin patches running in centralized mode. Hello, It appears the BBWin client is not sending ifstat data for 'all' configured interfaces on a server, so in Hobbit the ifstat graph under Trends have 'nan' values for the missing interfaces though an RRD DS does exist for them. Wondering if this is a known bug or am I missing a config option? I have a few servers with 3 teamed network interfaces, and 3 IP's, running Oracle, we want to graph the Interconnect network interface bandwidth. You can see in the following snip [ipconfig] shows 3 IP's configured (10.199.0.10 <http://10.99.0.10>, 172.188.199.51 <http://172.18.99.51>, 172.188.199.10 <http://172.18.99.10>), while [ifstat] only reports for 2 of them: [ipconfig] Windows IP Configuration Host Name . . . . . . . . . . . . : server01 Primary Dns Suffix . . . . . . . : domain.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : domain.com Ethernet adapter Private: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TEAM : Interconnect Physical Address. . . . . . . . . : 00-14-4F-78-56-0D DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.199.0.10 <http://10.99.0.10> Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : DNS Servers . . . . . . . . . . . : 172.188.50.70 <http://172.18.50.70> 172.188.50.71 <http://172.18.50.71> Primary WINS Server . . . . . . . : 172.188.50.70 <http://172.18.50.70> Secondary WINS Server . . . . . . : 172.188.50.71 <http://172.18.50.71> Ethernet adapter Public: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : TEAM : Production Physical Address. . . . . . . . . : 00-14-4F-78-56-0C DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 172.188.199.51 <http://172.18.99.51> Subnet Mask . . . . . . . . . . . : 255.255.255.0 IP Address. . . . . . . . . . . . : 172.188.199.10 <http://172.18.99.10> Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 172.188.199.1 <http://172.18.99.1> DNS Servers . . . . . . . . . . . : 172.188.50.70 <http://172.18.50.70> 172.188.50.71 <http://172.18.50.71> Primary WINS Server . . . . . . . : 172.188.50.37 <http://172.18.50.37> Secondary WINS Server . . . . . . : 172.188.50.35 <http://172.18.50.35> [ifstat] 172.188.199.10 <http://172.18.99.10> 4087160720 1802398098 172.188.199.51 <http://172.18.99.51> 3180068447 1308238526 [svcs] Name StartupType Status DisplayName -- Brian Majeska

1 0

rrd for qmail
by vadud3＠gmail.com 24 Nov '08

24 Nov '08

Hi All I am looking for a way to generate rrds of qmail + spam + virus + qmail-scanner logs like show in Kyle's page http://www.we-be-smart.org/rrd/ I am using qmailmrtg7 currently to generate most of these logs. Also per the archive of this mailing list I could convert those mrtg's to rrd. Is that the best way? Has anyone successfully usined mailgraph to generate rrds of qmail logs? The ultimate goal is to plug this into xymon (aka hobbit) -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

1 0

Need disk I/O check vbs script (windows)
by pnkumaresh＠gmail.com 24 Nov '08

24 Nov '08

Hi Guys, Can someone help me with disk I/O check vbs script (windows) and the graph extension Thanks and appreciate your help ..! -- Best Regards Kumaresh

2 2