October 2009 - Xymon - Xymon mailman web

Problem with 4.3.0.0-beta2
by Tom.Stewart＠landsend.com 30 Oct '09

30 Oct '09

All, Since we just switched to this version on a RHEL 5, we have been getting some erroneous errors about issues. Here is an example. yellow Fri Oct]30 13:10:23 CDT 2009 , 3 users, 605 procs, load= &yellow Load is HIGH System clock is -3 seconds off I also have seen this with some of the disk testing and other tests. It seems to be very random. We did adjust our message size to the following and that seem to help some, but we are still getting erroneous errors. hobbitserver.cfg:MAXMSG_CLIENT="1536" hobbitserver.cfg:MAXMSG_DATA="1536" hobbitserver.cfg:MAXMSG_STATUS="1536" All our config files are the same as we had on the Hobbit server, so nothing there has changed. Tom

1 0

Help with hobbitd_channel and hobbitd_filestore
by tlewick＠tradebotsystems.com 30 Oct '09

30 Oct '09

Final update, for me at least. I can get at the data I want by running: ./bb 127.0.0.1 "hobbitdlog hostname.cpu" I'd like to know if there is a "better" way to get this, or more "correct" way, but this will work for me... -----Original Message----- From: Taylor Lewick Sent: Friday, October 30, 2009 11:17 AM To: 'hobbit at hswn.dk' Subject: RE: Help with hobbitd_channel and hobbitd_filestore More digging, this stems from the fact that I was passing channel=client, and hobbit_filestore doesn't support the client channel, at least in the version I have, i.e. 4.2.0 I just tried running: bbcmd hobbitd_channel --channel=data --log=/home/hobbit/data/logs/clientcpu.log hobbitd_filestore --data and that did work. So now it's a question of, how do I get hobbitd_filestore to work with hobbit_channel --channel=client? Modify hobbitd_filestore.c? -----Original Message----- From: Taylor Lewick Sent: Friday, October 30, 2009 10:58 AM To: 'hobbit at hswn.dk' Subject: RE: Help with hobbitd_channel and hobbitd_filestore I think this is a problem with hobbitd_filestore getting/reading the correct file I changed the hobbitd_channel command to: ./hobbitd_channel --channel=client --log=/home/hobbit/data/logs/logfile.txt get_channel_data.pl The get_channel_data.pl was a very simple perl script I wrote just to see if it was getting data from Standard Input. And it worked. The perl script is just: #!/usr/bin/pl $FH="/home/hobbit/data/logs/clientchannel.log": open (OUTFILE, ">$FH"); while ( <STDIN> ) { chomp $_; print OUTFILE "$_\n"; } close (OUTFILE); So clientchannel.log has the output I'd expect to see. And the logfile is no longer being populated with "Our child has failed and will not talk to us... Cause bad file descriptor" messages The only similar post I could find on this was the following thread, http://www.hswn.dk/hobbiton/2006/08/msg00326.html But that was back a few years and was for someone who was running on AIX, and it looked inconclusive. FYI, I'm running hobbit 4.2.0 on a Suse 10.2 server.

1 0

Help with hobbitd_channel and hobbitd_filestore
by tlewick＠tradebotsystems.com 30 Oct '09

30 Oct '09

I think this is a problem with hobbitd_filestore getting/reading the correct file I changed the hobbitd_channel command to: ./hobbitd_channel --channel=client --log=/home/hobbit/data/logs/logfile.txt get_channel_data.pl The get_channel_data.pl was a very simple perl script I wrote just to see if it was getting data from Standard Input. And it worked. The perl script is just: #!/usr/bin/pl $FH="/home/hobbit/data/logs/clientchannel.log": open (OUTFILE, ">$FH"); while ( <STDIN> ) { chomp $_; print OUTFILE "$_\n"; } close (OUTFILE); So clientchannel.log has the output I'd expect to see. And the logfile is no longer being populated with "Our child has failed and will not talk to us... Cause bad file descriptor" messages The only similar post I could find on this was the following thread, http://www.hswn.dk/hobbiton/2006/08/msg00326.html But that was back a few years and was for someone who was running on AIX, and it looked inconclusive. FYI, I'm running hobbit 4.2.0 on a Suse 10.2 server.

1 0

Help with hobbitd_channel and hobbitd_filestore
by tlewick＠tradebotsystems.com 30 Oct '09

30 Oct '09

Hey all. I want to process the CPU pages for our Windows hosts to see if a given process exceeds a certain memory size. I wrote a perl script to do this against the files in /home/hobbit/data/hostdata But that directory only contains files that are a day old, or state change files, and I'd like my program to work against data that is closer to real time, i.e. a few minutes old is fine. So I tried running from the command line as user hobbit: ./hobbitd_channel --channel=data --log=/home/hobbit/data/logs/clientcpu.log hobbitd_filestore --data --only=cpu And in the clientcpu.log I just see entry after entry of: 009-10-30 08:26:47 Our child has failed and will not talk to us: Channel data, PID 28876, cause Bad file descriptor Anyone have any idea what I'm doing wrong, or how I go about using hobbit_channel and hobbit_filestore correctly? FYI, running ./bbcmd hobbitd_channel --channel=client cat > /home/hobbit/data/logs/clientlogs.log Works, but it just runs in a continuous loop and is giving me all status messages for all clients, so its really not that helpful... Thanks, Taylor

1 0

IPv6
by david.bandel＠gmail.com 30 Oct '09

30 Oct '09

Folks, Searched the archives and found a few IPv6 inquiries, but only that there are no plans to support it. While I'm not a programmer, I suspect it would actually be fairly simple to implement (please correct me if I'm wrong). This is starting to become a priority for me. I need to monitor my ssh servers, but they all only respond now to ipv6, so I can't :-(. For those of you who care, after monitoring my ipv6 only ssh logs, the automated attacks against my servers has dropped from over 10,000 attacks per day to 0. Have not had a single attack in months. Haven't seen that in over 10 years now. I'm sure this is only a temporary thing, but it sure is nice. I have only one other piece of software I can't replace (besides hobbit) that needs to support ipv6 and I will be ready. Those of you watching the bogon list might know how close we are to complete ipv4 exhaustion, and in some areas of the world ipv4 addresses are no longer available. If there is anything I can do to expedite a move to support ipv6, let me know. Thanx, David A. Bandel -- Focus on the dream, not the competition. - Nemesis Air Racing Team motto

6 9

Any info on hobbitd_locator?
by shea_greg＠emc.com 29 Oct '09

29 Oct '09

I admit I've only breezed through the code and now I'm looking for a cheat sheet on how to use the hobbitd_locator. Thanks Gregory R Shea EMC Corporation

1 0

[hobbit] bbproxy over stunnel
by rower.master＠gmail.com 28 Oct '09

28 Oct '09

Hi, > > I'm trying to do the same thing that you did. > > Do I have to copy the cert generated on the server to the bbproxy? I need > to change the port 1984 to 11984 on the hobbitserver.cfg of the bbporxy? > I followed the doc on wiki but I think I,ve missed something. > > Thanks in advance, > > Mario. > > > > > On Mon, Nov 24, 2008 at 8:58 AM, Darrin Khan <medavian at gmail.com> wrote: > >> Hello All, >> >> I have a problem getting stunnel and bbproxy to hobbitd to play nicely. I >> am not sure if this has been covered before, however I have found a few bits >> and peices of information about hobbit and stunnel, but nothing like what I >> have configured. >> >> Here is the idea.. >> >> client -> bbproxy -> stunnel -> stunnel ->hobbitd >> >> Client is a SQL server that can't see the world. bbproxy is running on a >> server behind a firewall that the SQL server can reach. bbproxy is >> configured to send data to 127.0.0.1:11984. stunnel is listening on >> 127.0.0.1:11984 this then forwards out through the firewall to another >> server running stunnel listening on 11984 this in turn dumps traffic on the >> remote server to port 1984 (hobbitd). >> >> This config works great, all my messages are encrypted and I am getting >> all the updates to hobbitd on the remote server no worries. Has been working >> like this for a few weeks now. >> >> The issue I have been trying to nut out is that the clients are not >> receiving any config in the other direction, particularly the >> log:/var/log/messages:10240 entries from client-local.cfg. >> >> If I remove the stunnel(s) and tell the bbproxy to connect to the hobbitd >> directly, the clients get the config data in the reverse direction and they >> in turn send back the log data they are supposed to. >> >> Has anyone been able to get this to work ? >> >> I suspect it may be my stunnel configs. they are below. Any help would be >> greatly appreciated. >> >> Darrin >> >> ----- bbproxy server ----- >> chroot = /var/run/stunnel/ >> setuid = nobody >> setgid = nobody >> socket = l:TCP_NODELAY=1 >> socket = r:TCP_NODELAY=1 >> debug = 5 >> output = /var/log/stunnel.log >> foreground=no >> >> [hobbit] >> accept = 11984 >> connect = xx.xx.xxx.xxx:11984 >> TIMEOUTbusy = 5 >> TIMEOUTclose = 2 >> TIMEOUTconnect = 2 >> TIMEOUTidle = 5 >> >> ----- hobbitd server ----- >> cert = /etc/pki/tls/certs/nms.ext.example.net.pem >> chroot = /var/run/stunnel/ >> setuid = nobody >> setgid = nobody >> socket = l:TCP_NODELAY=1 >> socket = r:TCP_NODELAY=1 >> debug = 5 >> output = /var/log/stunnel.log >> foreground=no >> >> [hobbit] >> accept = 11984 >> connect = 1984 >> TIMEOUTbusy = 5 >> TIMEOUTclose = 2 >> TIMEOUTconnect = 2 >> TIMEOUTidle = 5 >> >> -- >> Darrin Khan >> medavian at gmail.com >> "If you save the world too often, it begins to expect it..." >> - Unknown >> > >

1 0

Solaris Zones
by jkwade＠futurefrontiers.com 28 Oct '09

28 Oct '09

Hello, I sent an earlier email asking if anyone had written anything for Solaris Zones so that it sends xymon information about the zone, instead of the global zone. I have zonestat loaded on, and it give information on the trends section. I received no answers, so I've started writing one myself. I have some questions that I was hopping someone might be able to help with, so I can make the test easier. What I'd like to do is have my test send status in the same format as xymon does for a client. For example, memory, physical and swap, along with CPU load. Is there a way to accomplish this? Thanks.James

2 1

Monitoring Exchange
by ejacobs＠thomaspublishing.com 28 Oct '09

28 Oct '09

Apparently, last night our Exchange server stopped receiving email until it was rebooted this morning. Everyone is up in arms. Hobbit showed nothing unusual. Does anyone have any way to monitor Exchange? Eric Jacobs Infrastructure and Operations Information Technology Group Phone:215-682-5354 Email:ejacobs at thomaspublishing.com

7 6

Dual BBDISPLAY lines
by d.tom.schmitt＠L-3com.com 27 Oct '09

27 Oct '09

I am working on the BBWin XML configuration file. Server is running Xymon 4.3.0-0.beta2 I added these two lines to the beginning of the configs after the comments: <setting name="bbdisplay" value="128.170.1.151" /> or monitor1.csw.l-3com.com <setting name="bbdisplay" value="128.170.1.161" /> or monitor2.csw.l-3com.com Only the first Xymon gets the updates, the second just looks like it is doing the standard connectivity icons. The name in both of the bb-hosts entries are identical. MONITOR1: bb-hosts entry: 128.170.1.150 dschmitt.csw.l-3com.com # conn BBDISPLAY: MONITOR2: bb-hosts entry: 128.170.1.150 dschmitt.csw.l-3com.com # conn BBDISPLAY: I have restarted the service and monitor2 xymon. Thanks, Tom Schmitt Senior IT Staff - R&D

2 1