June 2008 - Xymon - Xymon mailman web

I would like to share a Hobbit extension
by linuxmasterjedi＠free.fr 25 Jun '08

25 Jun '08

Hi, I would like to know what is the best way to share a new Hobbit extension? It's a tiny Bash script with a README (3KB) to check some SAP remote system. In the first place, I've put my work there : http://code.google.com/p/checkmysap/ Thanks by advance.

6 11

curves went to zero but didn't have a report?
by Andrew.Chen＠ehealth-china.com 25 Jun '08

25 Jun '08

Let's take a look at the CPU and Memory charts for this machine: At around 01:00pm, the curves went to zero. Above, the cpu and memory used 0, but I didn't recevie a RED Alert report and email. (if there is some mothed to check this problem). Hobbit-client configured file UP 1h 22w LOAD 5.0 15.0 DISK / 80 90 DISK /boot 80 90 DISK /var 80 90 DISK /data 80 90 MEMSWAP 40 60 MEMACT 80 90 MEMPHYS 101 101 This configuration only reported when the cpu and memory reach 5.0(cpu) and 80(memory), then they will send a alert report and email. But I can't find about cpu and memory used 0, then send an alert report and email. Can you teach me how to do it? Thanks.

4 6

Testing Hobbit alerts
by Martin.Ward＠colt.net 24 Jun '08

24 Jun '08

Hi all, I am looking in to setting up Hobbit alerts but I am having problems verifying and testing the configs. In my hobbit-alerts.cfg file I have the following entry: HOST=tac0.lon.ws.colt.net MAIL martin.ward at colt.net Also, in my hobbitserver.cfg I have this: MAILC="/bin/mailx" # Command used to send an e-mail with no subject MAIL="$MAILC -s" # Command used to send an e-mail with a subject So the theory goes that when an alert occurs the /bin/mailx command is executed with various different parameters. The problem is, when I try and test it I get the following: hobbit at hbt0:/opt/hobbit/server/etc>hobbitd_alert --test tac0.lon.ws.colt.net proc 00000935 2008-06-24 15:19:56 send_alert tac0.lon.ws.colt.net:proc state Paging 00000935 2008-06-24 15:19:56 Matching host:service:page 'tac0.lon.ws.colt.net:proc:Netops' against rule line 128 00000935 2008-06-24 15:19:56 *** Match with 'HOST=tac0.lon.ws.colt.net' *** 00000935 2008-06-24 15:19:56 Matching host:service:page 'tac0.lon.ws.colt.net:proc:Netops' against rule line 128 00000935 2008-06-24 15:19:56 *** Match with 'HOST=tac0.lon.ws.colt.net' *** 00000935 2008-06-24 15:19:56 Mail alert with command '/var/mail/hobbit "Hobbit [12345] tac0.lon.ws.colt.net:proc CRITICAL (RED)" martin.ward at colt.net' As you can see the mail alert command is completely wrong. Running this command under different user IDs simply changes the user ID in the "/var/mail/..." text above. I can't get Hobbit to actually run the mailx command. Any suggestions as to what I am missing? |\/|artin -- Martin Ward Network Systems Operations Specialist DDI: +44 (0) 20 7863 5218 Fax: +44 (0) 20 7863 5610 Mob: +44 (0) 7971 97 77 21 www.colt.net Data | Voice | Managed Services Help reduce your carbon footprint | Think before you print COLT Telecommunications, Beaufort House, 15 St Botolph Street, London, EC3A 7QN UK Registered in England and Wales, registered number 02452736, VAT number GB 645 4205 50 ************************************************************************************* The message is intended for the named addressee only and may not be disclosed to or used by anyone else, nor may it be copied in any way. The contents of this message and its attachments are confidential and may also be subject to legal privilege. If you are not the named addressee and/or have received this message in error, please advise us by e-mailing security at colt.net and delete the message and any attachments without retaining any copies. Internet communications are not secure and COLT does not accept responsibility for this message, its contents nor responsibility for any viruses. No contracts can be created or varied on behalf of COLT Telecommunications, its subsidiaries or affiliates ("COLT") and any other party by email Communications unless expressly agreed in writing with such other party. Please note that incoming emails will be automatically scanned to eliminate potential viruses and unsolicited promotional emails. For more information refer to www.colt.net or contact us on +44(0)20 7390 3900.

2 1

Can hobbit server comprehense COMBO keywords like BB server
by Myra.Haubrich＠ec.gc.ca 24 Jun '08

24 Jun '08

I am wondering if hobbit server can understand the keywork "combo" at the beginning of a combo report file like bb server does? Eg: combo status server1,xx,xx,xx,xx.cpu green Tue Jun 24 19:59:34 UTC 2008 up: 5 days, 2 users, 119 procs, load=17 LOAD AVG on server1,xx,xx,xx,xx is 17 status server1,xx,xx,xx,xx.disk green Tue Jun 24 19:59:34 UTC 2008 - Disk partitions on server1,xx,xx,xx,xx OK /dev/cciss/c0d1p1 100790004 9644576 86025516 11% /home /dev/cciss/c0d0p3 5036316 44476 4736008 1% /tmp /dev/cciss/c0d0p1 101086 19502 76365 21% /boot /dev/cciss/c0d0p6 40670524 2182592 36421976 6% / /dev/cciss/c0d0p2 20161204 988424 18148640 6% /var status server1,xx,xx,xx,xx .procs green Tue Jun 24 19:59:34 UTC 2008 All processes are OK &green cron >=1 - 1 instance running &green bbrun >=1 - 2 instances running ... Activity of Telvent HTTPIN Log @ 2008-06-24 19:59:36: GREEN Log file last updated on 2008-06-24 19:55:03. Contents of Telvent HTTPIN Log @ 2008-06-24 19:59:36: GREEN No errors found.

2 1

BBWin V.12 filesystem epoch time and local time conflict
by rmcgraw＠purdue.edu 24 Jun '08

24 Jun '08

A little more digging and I see > -----Original Message----- > From: McGraw, Robert P > Sent: Tuesday, June 24, 2008 10:40 AM > To: 'hobbit at hswn.dk'; 'bbwin-users at lists.sourceforge.net' > Subject: BBWin V.12 filesystem epoch time and local time conflict > > I have the [file:] set up in central mode on our BBWin V.12 client and it > returns the following client data to the Hobbit server. > > [file:c:\Alligate\AAATEST] > type:0x00020 (file) > mode:777 (not implemented) > linkcount:1 > owner:0 (not implemented) > group:0 (not implemented) > size:0 > atime:1214222069 (2008/06/23-11:54:29) > ctime:1213796626 (2008/06/18-13:43:46) > mtime:1214222069 (2008/06/23-11:54:29) > > On my hobbit server hobbit-clients.cfg I have > > FILE c:\Alligate\AAATEST red MTIME<88200 > > The YYYY/MM/DD-HH:MM:SS atime, ctime and mtime are local time. > > During testing I noticed that the red icon would come on before I had > expected. > > I decided to do a little checking and using a web epoch time calculator. > > If I enter 2008/06/23-11:54:29 it returns the epoch time of 1214236469, > which > does not match mtime epoch time above. > > If I enter the epoch mtime 1214222069 I get Mon Jun 23 2008 07:54:29 > GMT-0400 (EDT) which does not match the date. > > If I enter epoch time 1214236469 I get Mon Jun 23 2008 11:54:29 GMT-0400 > (EDT) > > It seems that the YYYY/MM/DD-HH:MM:SS time is reported in local time and > the > epoch time is reported in GMT time which throws things off by four hours. > > > The following is the code in filesystem > > 325 reportData << format("type:0x%05x ") % > handle_file_info.dwFileAttributes; > 326 if (handle_file_info.dwFileAttributes & > FILE_ATTRIBUTE_DIRECTORY) > 327 reportData << "(dir)" << endl; > 328 else > 329 reportData << "(file)" << endl; > 330 reportData << "mode:777 (not implemented)" << endl; > 331 reportData << format("linkcount:%u") % > handle_file_info.nNumberOfLinks > << endl; > 332 reportData << "owner:0 (not implemented)" << endl; > 333 reportData << "group:0 (not implemented)" << endl; > 334 reportData << format("size:%lu") % fsize << endl; > 335 string output; > 336 GetTimeString(handle_file_info.ftLastAccessTime, output); > 337 reportData << "atime:" << output << endl; > 338 GetTimeString(handle_file_info.ftCreationTime, output); > 339 reportData << "ctime:" << output << endl; > 340 GetTimeString(handle_file_info.ftLastWriteTime, output); > 341 reportData << "mtime:" << output << endl; > 342 fclose(f); > 343 return true; GetTimeString is a function in the filesystem code which follows. bool AgentFileSystem::GetTimeString(const FILETIME & filetime, string & output) { 255 __int64 ftime = (filetime.dwHighDateTime * MAXDWORD) + filetime.dwLowDateTime; 256 SYSTEMTIME fsystime; 257 FILETIME floctime; 258 time_t epoch; 259 260 if (::FileTimeToLocalFileTime(&filetime, &floctime) == 0) { 261 return false; 262 } 263 if (::FileTimeToSystemTime(&floctime, &fsystime) == 0) { 264 return false; 265 } 266 utils::SystemTimeToTime_t(&fsystime, &epoch); 267 stringstream reportData; 268 reportData << format("%llu (%02d/%02d/%d-%02d:%02d:%02d)") 269 % (unsigned __int64)epoch 270 % fsystime.wYear 271 % fsystime.wMonth 272 % fsystime.wDay 273 % fsystime.wHour 274 % fsystime.wMinute 275 % fsystime.wSecond; 276 output = reportData.str(); 277 return true; 278 } It seems to me that after line 266 there needs to be a couple lines that converts the GMT epoch to local epoch. > > > The function GetTimeString seems to be the code that is returning the time > information. I have not been able to find this code in the BBWin svn so I > am > not sure if this is a local function or a system function. > > I am not a Window type guy and no very little about such things. Can a > super > duper window type person peruse this and see what they can find. > > Tanks > > > > Thanks > > Robert > > > > > > -------------------------------------------------------------------- > Robert P. McGraw, Jr. > Manager, Computer System EMAIL: rmcgraw at purdue.edu > Purdue University ROOM: MATH-807 > Department of Mathematics PHONE: (765) 494-6055 > 150 N. University Street > West Lafayette, IN 47907-2067

2 2

[hobbit] IronPort
by bgmilne＠staff.telkomsa.net 24 Jun '08

24 Jun '08

On Thursday 01 May 2008 21:22:48 Jason Chambers wrote: > Anyone have an ironport antispam solution they are monitoring? I've added an initial devmon template: http://devmon.svn.sourceforge.net/viewvc/devmon/trunk/templates/ironport-as… See the readme for info: http://devmon.svn.sourceforge.net/viewvc/devmon/trunk/templates/ironport-as… Regards, Buchan

1 0

BBWin V.12 filesystem epoch time and local time conflict
by rmcgraw＠purdue.edu 24 Jun '08

24 Jun '08

A little more digging and I see > -----Original Message----- > From: McGraw, Robert P > Sent: Tuesday, June 24, 2008 10:40 AM > To: 'hobbit at hswn.dk'; 'bbwin-users at lists.sourceforge.net' > Subject: BBWin V.12 filesystem epoch time and local time conflict > > I have the [file:] set up in central mode on our BBWin V.12 client and it > returns the following client data to the Hobbit server. > > [file:c:\Alligate\AAATEST] > type:0x00020 (file) > mode:777 (not implemented) > linkcount:1 > owner:0 (not implemented) > group:0 (not implemented) > size:0 > atime:1214222069 (2008/06/23-11:54:29) > ctime:1213796626 (2008/06/18-13:43:46) > mtime:1214222069 (2008/06/23-11:54:29) > > On my hobbit server hobbit-clients.cfg I have > > FILE c:\Alligate\AAATEST red MTIME<88200 > > The YYYY/MM/DD-HH:MM:SS atime, ctime and mtime are local time. > > During testing I noticed that the red icon would come on before I had > expected. > > I decided to do a little checking and using a web epoch time calculator. > > If I enter 2008/06/23-11:54:29 it returns the epoch time of 1214236469, > which > does not match mtime epoch time above. > > If I enter the epoch mtime 1214222069 I get Mon Jun 23 2008 07:54:29 > GMT-0400 (EDT) which does not match the date. > > If I enter epoch time 1214236469 I get Mon Jun 23 2008 11:54:29 GMT-0400 > (EDT) > > It seems that the YYYY/MM/DD-HH:MM:SS time is reported in local time and > the > epoch time is reported in GMT time which throws things off by four hours. > > > The following is the code in filesystem > > 325 reportData << format("type:0x%05x ") % > handle_file_info.dwFileAttributes; > 326 if (handle_file_info.dwFileAttributes & > FILE_ATTRIBUTE_DIRECTORY) > 327 reportData << "(dir)" << endl; > 328 else > 329 reportData << "(file)" << endl; > 330 reportData << "mode:777 (not implemented)" << endl; > 331 reportData << format("linkcount:%u") % > handle_file_info.nNumberOfLinks > << endl; > 332 reportData << "owner:0 (not implemented)" << endl; > 333 reportData << "group:0 (not implemented)" << endl; > 334 reportData << format("size:%lu") % fsize << endl; > 335 string output; > 336 GetTimeString(handle_file_info.ftLastAccessTime, output); > 337 reportData << "atime:" << output << endl; > 338 GetTimeString(handle_file_info.ftCreationTime, output); > 339 reportData << "ctime:" << output << endl; > 340 GetTimeString(handle_file_info.ftLastWriteTime, output); > 341 reportData << "mtime:" << output << endl; > 342 fclose(f); > 343 return true; GetTimeString is a function in the filesystem code which follows. bool AgentFileSystem::GetTimeString(const FILETIME & filetime, string & output) { 255 __int64 ftime = (filetime.dwHighDateTime * MAXDWORD) + filetime.dwLowDateTime; 256 SYSTEMTIME fsystime; 257 FILETIME floctime; 258 time_t epoch; 259 260 if (::FileTimeToLocalFileTime(&filetime, &floctime) == 0) { 261 return false; 262 } 263 if (::FileTimeToSystemTime(&floctime, &fsystime) == 0) { 264 return false; 265 } 266 utils::SystemTimeToTime_t(&fsystime, &epoch); 267 stringstream reportData; 268 reportData << format("%llu (%02d/%02d/%d-%02d:%02d:%02d)") 269 % (unsigned __int64)epoch 270 % fsystime.wYear 271 % fsystime.wMonth 272 % fsystime.wDay 273 % fsystime.wHour 274 % fsystime.wMinute 275 % fsystime.wSecond; 276 output = reportData.str(); 277 return true; 278 } It seems to me that after line 266 there needs to be a couple lines that converts the GMT epoch to local epoch. > > > The function GetTimeString seems to be the code that is returning the time > information. I have not been able to find this code in the BBWin svn so I > am > not sure if this is a local function or a system function. > > I am not a Window type guy and no very little about such things. Can a > super > duper window type person peruse this and see what they can find. > > Tanks > > > > Thanks > > Robert > > > > > > -------------------------------------------------------------------- > Robert P. McGraw, Jr. > Manager, Computer System EMAIL: rmcgraw at purdue.edu > Purdue University ROOM: MATH-807 > Department of Mathematics PHONE: (765) 494-6055 > 150 N. University Street > West Lafayette, IN 47907-2067

1 0

Monitor for Veritas
by rich＠richwachter.com 24 Jun '08

24 Jun '08

Hello all, I am looking for a monitoring tool for Veritas on Solaris ( 9 & 10 ). It seems that the Shire ( http://www.trantor.org/theshire/ ) is down or not responding. Anyone have a working script they would like to donate to the cause? -- =================================== Richard Wachter Just a guy rich at richwachter.com <>< A good name is more desirable than great riches; to be esteemed is better than silver or gold. (Pro 22:1)

3 3

BBWin V.12 filesystem epoch time and local time conflict
by rmcgraw＠purdue.edu 24 Jun '08

24 Jun '08

I have the [file:] set up in central mode on our BBWin V.12 client and it returns the following client data to the Hobbit server. [file:c:\Alligate\AAATEST] type:0x00020 (file) mode:777 (not implemented) linkcount:1 owner:0 (not implemented) group:0 (not implemented) size:0 atime:1214222069 (2008/06/23-11:54:29) ctime:1213796626 (2008/06/18-13:43:46) mtime:1214222069 (2008/06/23-11:54:29) On my hobbit server hobbit-clients.cfg I have FILE c:\Alligate\AAATEST red MTIME<88200 The YYYY/MM/DD-HH:MM:SS atime, ctime and mtime are local time. During testing I noticed that the red icon would come on before I had expected. I decided to do a little checking and using a web epoch time calculator. If I enter 2008/06/23-11:54:29 it returns the epoch time of 1214236469, which does not match mtime epoch time above. If I enter the epoch mtime 1214222069 I get Mon Jun 23 2008 07:54:29 GMT-0400 (EDT) which does not match the date. If I enter epoch time 1214236469 I get Mon Jun 23 2008 11:54:29 GMT-0400 (EDT) It seems that the YYYY/MM/DD-HH:MM:SS time is reported in local time and the epoch time is reported in GMT time which throws things off by four hours. The following is the code in filesystem 325 reportData << format("type:0x%05x ") % handle_file_info.dwFileAttributes; 326 if (handle_file_info.dwFileAttributes & FILE_ATTRIBUTE_DIRECTORY) 327 reportData << "(dir)" << endl; 328 else 329 reportData << "(file)" << endl; 330 reportData << "mode:777 (not implemented)" << endl; 331 reportData << format("linkcount:%u") % handle_file_info.nNumberOfLinks << endl; 332 reportData << "owner:0 (not implemented)" << endl; 333 reportData << "group:0 (not implemented)" << endl; 334 reportData << format("size:%lu") % fsize << endl; 335 string output; 336 GetTimeString(handle_file_info.ftLastAccessTime, output); 337 reportData << "atime:" << output << endl; 338 GetTimeString(handle_file_info.ftCreationTime, output); 339 reportData << "ctime:" << output << endl; 340 GetTimeString(handle_file_info.ftLastWriteTime, output); 341 reportData << "mtime:" << output << endl; 342 fclose(f); 343 return true; The function GetTimeString seems to be the code that is returning the time information. I have not been able to find this code in the BBWin svn so I am not sure if this is a local function or a system function. I am not a Window type guy and no very little about such things. Can a super duper window type person peruse this and see what they can find. Tanks Thanks Robert -------------------------------------------------------------------- Robert P. McGraw, Jr. Manager, Computer System EMAIL: rmcgraw at purdue.edu Purdue University ROOM: MATH-807 Department of Mathematics PHONE: (765) 494-6055 150 N. University Street West Lafayette, IN 47907-2067

1 0

OoO spam loop (was: Re: [hobbit] Away From Office (was: [hobbit] Away From Office...)
by rob.macgregor＠gmail.com 24 Jun '08

24 Jun '08

On Sun, Jun 22, 2008 at 19:40, Callahan, Tom <CallahanT at tessco.com> wrote: > Can you please STOP this email.... Sadly, only the list administrator can stop the email. In the meantime, just create a rule in your mail client/software to black hole all email from Steve (sorry Steve, but you brought this on yourself). On the "bright" side, eventually Steve's mailbox should fill up and he'll stop receiving email, and so stop sending them every 10 minutes. Somebody could always try contacting Gail Barnett and ask them to step on Steve's email if the list administrator doesn't get to it. -- Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche

7 7