June 2008 - Xymon - Xymon mailman web

BBWin V.12 filesystem epoch time and local time conflict
by rmcgraw＠purdue.edu 24 Jun '08

24 Jun '08

A little more digging and I see > -----Original Message----- > From: McGraw, Robert P > Sent: Tuesday, June 24, 2008 10:40 AM > To: 'hobbit at hswn.dk'; 'bbwin-users at lists.sourceforge.net' > Subject: BBWin V.12 filesystem epoch time and local time conflict > > I have the [file:] set up in central mode on our BBWin V.12 client and it > returns the following client data to the Hobbit server. > > [file:c:\Alligate\AAATEST] > type:0x00020 (file) > mode:777 (not implemented) > linkcount:1 > owner:0 (not implemented) > group:0 (not implemented) > size:0 > atime:1214222069 (2008/06/23-11:54:29) > ctime:1213796626 (2008/06/18-13:43:46) > mtime:1214222069 (2008/06/23-11:54:29) > > On my hobbit server hobbit-clients.cfg I have > > FILE c:\Alligate\AAATEST red MTIME<88200 > > The YYYY/MM/DD-HH:MM:SS atime, ctime and mtime are local time. > > During testing I noticed that the red icon would come on before I had > expected. > > I decided to do a little checking and using a web epoch time calculator. > > If I enter 2008/06/23-11:54:29 it returns the epoch time of 1214236469, > which > does not match mtime epoch time above. > > If I enter the epoch mtime 1214222069 I get Mon Jun 23 2008 07:54:29 > GMT-0400 (EDT) which does not match the date. > > If I enter epoch time 1214236469 I get Mon Jun 23 2008 11:54:29 GMT-0400 > (EDT) > > It seems that the YYYY/MM/DD-HH:MM:SS time is reported in local time and > the > epoch time is reported in GMT time which throws things off by four hours. > > > The following is the code in filesystem > > 325 reportData << format("type:0x%05x ") % > handle_file_info.dwFileAttributes; > 326 if (handle_file_info.dwFileAttributes & > FILE_ATTRIBUTE_DIRECTORY) > 327 reportData << "(dir)" << endl; > 328 else > 329 reportData << "(file)" << endl; > 330 reportData << "mode:777 (not implemented)" << endl; > 331 reportData << format("linkcount:%u") % > handle_file_info.nNumberOfLinks > << endl; > 332 reportData << "owner:0 (not implemented)" << endl; > 333 reportData << "group:0 (not implemented)" << endl; > 334 reportData << format("size:%lu") % fsize << endl; > 335 string output; > 336 GetTimeString(handle_file_info.ftLastAccessTime, output); > 337 reportData << "atime:" << output << endl; > 338 GetTimeString(handle_file_info.ftCreationTime, output); > 339 reportData << "ctime:" << output << endl; > 340 GetTimeString(handle_file_info.ftLastWriteTime, output); > 341 reportData << "mtime:" << output << endl; > 342 fclose(f); > 343 return true; GetTimeString is a function in the filesystem code which follows. bool AgentFileSystem::GetTimeString(const FILETIME & filetime, string & output) { 255 __int64 ftime = (filetime.dwHighDateTime * MAXDWORD) + filetime.dwLowDateTime; 256 SYSTEMTIME fsystime; 257 FILETIME floctime; 258 time_t epoch; 259 260 if (::FileTimeToLocalFileTime(&filetime, &floctime) == 0) { 261 return false; 262 } 263 if (::FileTimeToSystemTime(&floctime, &fsystime) == 0) { 264 return false; 265 } 266 utils::SystemTimeToTime_t(&fsystime, &epoch); 267 stringstream reportData; 268 reportData << format("%llu (%02d/%02d/%d-%02d:%02d:%02d)") 269 % (unsigned __int64)epoch 270 % fsystime.wYear 271 % fsystime.wMonth 272 % fsystime.wDay 273 % fsystime.wHour 274 % fsystime.wMinute 275 % fsystime.wSecond; 276 output = reportData.str(); 277 return true; 278 } It seems to me that after line 266 there needs to be a couple lines that converts the GMT epoch to local epoch. > > > The function GetTimeString seems to be the code that is returning the time > information. I have not been able to find this code in the BBWin svn so I > am > not sure if this is a local function or a system function. > > I am not a Window type guy and no very little about such things. Can a > super > duper window type person peruse this and see what they can find. > > Tanks > > > > Thanks > > Robert > > > > > > -------------------------------------------------------------------- > Robert P. McGraw, Jr. > Manager, Computer System EMAIL: rmcgraw at purdue.edu > Purdue University ROOM: MATH-807 > Department of Mathematics PHONE: (765) 494-6055 > 150 N. University Street > West Lafayette, IN 47907-2067

2 2

IronPort
by Jason.Chambers＠geosoft.com 24 Jun '08

24 Jun '08

Anyone have an ironport antispam solution they are monitoring? Jason Chambers IT Help Desk Associate GEOSOFT INC. freedom to explore T +1 416.369.0111 #344 F +1 416.369.9599 Visit our site at www.geosoft.com

6 6

BBWin V.12 filesystem epoch time and local time conflict
by rmcgraw＠purdue.edu 24 Jun '08

24 Jun '08

A little more digging and I see > -----Original Message----- > From: McGraw, Robert P > Sent: Tuesday, June 24, 2008 10:40 AM > To: 'hobbit at hswn.dk'; 'bbwin-users at lists.sourceforge.net' > Subject: BBWin V.12 filesystem epoch time and local time conflict > > I have the [file:] set up in central mode on our BBWin V.12 client and it > returns the following client data to the Hobbit server. > > [file:c:\Alligate\AAATEST] > type:0x00020 (file) > mode:777 (not implemented) > linkcount:1 > owner:0 (not implemented) > group:0 (not implemented) > size:0 > atime:1214222069 (2008/06/23-11:54:29) > ctime:1213796626 (2008/06/18-13:43:46) > mtime:1214222069 (2008/06/23-11:54:29) > > On my hobbit server hobbit-clients.cfg I have > > FILE c:\Alligate\AAATEST red MTIME<88200 > > The YYYY/MM/DD-HH:MM:SS atime, ctime and mtime are local time. > > During testing I noticed that the red icon would come on before I had > expected. > > I decided to do a little checking and using a web epoch time calculator. > > If I enter 2008/06/23-11:54:29 it returns the epoch time of 1214236469, > which > does not match mtime epoch time above. > > If I enter the epoch mtime 1214222069 I get Mon Jun 23 2008 07:54:29 > GMT-0400 (EDT) which does not match the date. > > If I enter epoch time 1214236469 I get Mon Jun 23 2008 11:54:29 GMT-0400 > (EDT) > > It seems that the YYYY/MM/DD-HH:MM:SS time is reported in local time and > the > epoch time is reported in GMT time which throws things off by four hours. > > > The following is the code in filesystem > > 325 reportData << format("type:0x%05x ") % > handle_file_info.dwFileAttributes; > 326 if (handle_file_info.dwFileAttributes & > FILE_ATTRIBUTE_DIRECTORY) > 327 reportData << "(dir)" << endl; > 328 else > 329 reportData << "(file)" << endl; > 330 reportData << "mode:777 (not implemented)" << endl; > 331 reportData << format("linkcount:%u") % > handle_file_info.nNumberOfLinks > << endl; > 332 reportData << "owner:0 (not implemented)" << endl; > 333 reportData << "group:0 (not implemented)" << endl; > 334 reportData << format("size:%lu") % fsize << endl; > 335 string output; > 336 GetTimeString(handle_file_info.ftLastAccessTime, output); > 337 reportData << "atime:" << output << endl; > 338 GetTimeString(handle_file_info.ftCreationTime, output); > 339 reportData << "ctime:" << output << endl; > 340 GetTimeString(handle_file_info.ftLastWriteTime, output); > 341 reportData << "mtime:" << output << endl; > 342 fclose(f); > 343 return true; GetTimeString is a function in the filesystem code which follows. bool AgentFileSystem::GetTimeString(const FILETIME & filetime, string & output) { 255 __int64 ftime = (filetime.dwHighDateTime * MAXDWORD) + filetime.dwLowDateTime; 256 SYSTEMTIME fsystime; 257 FILETIME floctime; 258 time_t epoch; 259 260 if (::FileTimeToLocalFileTime(&filetime, &floctime) == 0) { 261 return false; 262 } 263 if (::FileTimeToSystemTime(&floctime, &fsystime) == 0) { 264 return false; 265 } 266 utils::SystemTimeToTime_t(&fsystime, &epoch); 267 stringstream reportData; 268 reportData << format("%llu (%02d/%02d/%d-%02d:%02d:%02d)") 269 % (unsigned __int64)epoch 270 % fsystime.wYear 271 % fsystime.wMonth 272 % fsystime.wDay 273 % fsystime.wHour 274 % fsystime.wMinute 275 % fsystime.wSecond; 276 output = reportData.str(); 277 return true; 278 } It seems to me that after line 266 there needs to be a couple lines that converts the GMT epoch to local epoch. > > > The function GetTimeString seems to be the code that is returning the time > information. I have not been able to find this code in the BBWin svn so I > am > not sure if this is a local function or a system function. > > I am not a Window type guy and no very little about such things. Can a > super > duper window type person peruse this and see what they can find. > > Tanks > > > > Thanks > > Robert > > > > > > -------------------------------------------------------------------- > Robert P. McGraw, Jr. > Manager, Computer System EMAIL: rmcgraw at purdue.edu > Purdue University ROOM: MATH-807 > Department of Mathematics PHONE: (765) 494-6055 > 150 N. University Street > West Lafayette, IN 47907-2067

1 0

Monitor for Veritas
by rich＠richwachter.com 24 Jun '08

24 Jun '08

Hello all, I am looking for a monitoring tool for Veritas on Solaris ( 9 & 10 ). It seems that the Shire ( http://www.trantor.org/theshire/ ) is down or not responding. Anyone have a working script they would like to donate to the cause? -- =================================== Richard Wachter Just a guy rich at richwachter.com <>< A good name is more desirable than great riches; to be esteemed is better than silver or gold. (Pro 22:1)

3 3

BBWin V.12 filesystem epoch time and local time conflict
by rmcgraw＠purdue.edu 24 Jun '08

24 Jun '08

I have the [file:] set up in central mode on our BBWin V.12 client and it returns the following client data to the Hobbit server. [file:c:\Alligate\AAATEST] type:0x00020 (file) mode:777 (not implemented) linkcount:1 owner:0 (not implemented) group:0 (not implemented) size:0 atime:1214222069 (2008/06/23-11:54:29) ctime:1213796626 (2008/06/18-13:43:46) mtime:1214222069 (2008/06/23-11:54:29) On my hobbit server hobbit-clients.cfg I have FILE c:\Alligate\AAATEST red MTIME<88200 The YYYY/MM/DD-HH:MM:SS atime, ctime and mtime are local time. During testing I noticed that the red icon would come on before I had expected. I decided to do a little checking and using a web epoch time calculator. If I enter 2008/06/23-11:54:29 it returns the epoch time of 1214236469, which does not match mtime epoch time above. If I enter the epoch mtime 1214222069 I get Mon Jun 23 2008 07:54:29 GMT-0400 (EDT) which does not match the date. If I enter epoch time 1214236469 I get Mon Jun 23 2008 11:54:29 GMT-0400 (EDT) It seems that the YYYY/MM/DD-HH:MM:SS time is reported in local time and the epoch time is reported in GMT time which throws things off by four hours. The following is the code in filesystem 325 reportData << format("type:0x%05x ") % handle_file_info.dwFileAttributes; 326 if (handle_file_info.dwFileAttributes & FILE_ATTRIBUTE_DIRECTORY) 327 reportData << "(dir)" << endl; 328 else 329 reportData << "(file)" << endl; 330 reportData << "mode:777 (not implemented)" << endl; 331 reportData << format("linkcount:%u") % handle_file_info.nNumberOfLinks << endl; 332 reportData << "owner:0 (not implemented)" << endl; 333 reportData << "group:0 (not implemented)" << endl; 334 reportData << format("size:%lu") % fsize << endl; 335 string output; 336 GetTimeString(handle_file_info.ftLastAccessTime, output); 337 reportData << "atime:" << output << endl; 338 GetTimeString(handle_file_info.ftCreationTime, output); 339 reportData << "ctime:" << output << endl; 340 GetTimeString(handle_file_info.ftLastWriteTime, output); 341 reportData << "mtime:" << output << endl; 342 fclose(f); 343 return true; The function GetTimeString seems to be the code that is returning the time information. I have not been able to find this code in the BBWin svn so I am not sure if this is a local function or a system function. I am not a Window type guy and no very little about such things. Can a super duper window type person peruse this and see what they can find. Tanks Thanks Robert -------------------------------------------------------------------- Robert P. McGraw, Jr. Manager, Computer System EMAIL: rmcgraw at purdue.edu Purdue University ROOM: MATH-807 Department of Mathematics PHONE: (765) 494-6055 150 N. University Street West Lafayette, IN 47907-2067

1 0

OoO spam loop (was: Re: [hobbit] Away From Office (was: [hobbit] Away From Office...)
by rob.macgregor＠gmail.com 24 Jun '08

24 Jun '08

On Sun, Jun 22, 2008 at 19:40, Callahan, Tom <CallahanT at tessco.com> wrote: > Can you please STOP this email.... Sadly, only the list administrator can stop the email. In the meantime, just create a rule in your mail client/software to black hole all email from Steve (sorry Steve, but you brought this on yourself). On the "bright" side, eventually Steve's mailbox should fill up and he'll stop receiving email, and so stop sending them every 10 minutes. Somebody could always try contacting Gail Barnett and ask them to step on Steve's email if the list administrator doesn't get to it. -- Rob MacGregor Whoever fights monsters should see to it that in the process he doesn't become a monster. Friedrich Nietzsche

7 7

[hobbit] curves went to zero but didn't have a report?
by pkrash＠exegy.com 24 Jun '08

24 Jun '08

How many OS are you monitoring? OS = operating system Paul Krash, system administrator, Exegy, Inc.; 314-218-3602 x 666 This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

1 0

[hobbit] curves went to zero but didn't have a report?
by pkrash＠exegy.com 24 Jun '08

24 Jun '08

do you monitor services/procs on the unit in question? Ping or snmp reads? When I have a machine go flatline, There are usually other warnings that get sent out (service down, process in uninterruptible sleep, or host unreachable).... I don't have an answer for you about the load = 0 , though it might be interesting to only monitor cpu and mem usage. It would make my world so much simpler. :-) Thanks to all on this list, and all that contribute/write code for hobbit. Hobbit Rocks! Paul Krash, system administrator, Exegy, Inc.; 314-218-3602 x 666 This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

2 1

[hobbit] RE: ver 4.3 and socket server
by pkrash＠exegy.com 24 Jun '08

24 Jun '08

What protocol is the device using to send its data to hobbit? I have (crude) code that pulls data from a hobbit fed mysql dbase then client flash makes graph. Not embedded into hobbit server pages but seperate web server. Paul Krash, system administrator, Exegy, Inc.; 314-218-3602 x 666 This e-mail and any documents accompanying it may contain legally privileged and/or confidential information belonging to Exegy, Inc. Such information may be protected from disclosure by law. The information is intended for use by only the addressee. If you are not the intended recipient, you are hereby notified that any disclosure or use of the information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by e-mail or phone regarding instructions for return or destruction and do not use or disclose the content to others.

1 0

Joern Klinckmann/PLZ/CSC is out of the office.
by jklinckmann＠csc.com 24 Jun '08

24 Jun '08

I will be out of the office starting 24.06.2008 and will not return until 25.06.2008. For Motorola account specific issues, please contact Simon Ball (sball7 at csc.com) For Motorola account UNIX escallations, call my mobil. For Berlin related problems, please get in touch with Ronald Pawlik. In very urgent cases, please call my mobil. Many thanks.

1 0