June 2009 - Xymon - Xymon mailman web

Can not clear Missing repeater data problem
by Sherry.Litz＠qwest.com 22 Jun '09

22 Jun '09

I have a confusing problem. I'm getting white confused faces for one of my devices and I can not clear the problem. The white faces are reporting that I'm missing an OID however I can run the snmpget command from the server and see the OID that hobbit is reporting it can not find. I removed the site from Devmon and we also re-created the hobbit.db and it still is having an issue. We are not seeing any error message in the log files to help. This was setup and working for a long time and I had put a rule in not to alert on if_load because we were testing a new pull and then I enabled the if_load after we got done testing and I have had nothing but problems with getting this devices to be monitored. What else can I try to clear the problem? We are running Devmon 0.3.0-rc1. Errors: Input errors: yellow=5%, red=10% Output errors: yellow=5%, red=10% [cid:image001.gif at 01C9F35E.C3FB1FE0] Missing repeater data for primary OID ifName Devmon version 0.3.0-rc1 running on iadhbtp1 [cid:image003.jpg at 01C9F35E.C3FB1FE0] Thanks Sherry Litz

1 0

procs colums is purple on server though i updated hobbit-clients.cfg
by pankaj.dorlikar＠gmail.com 22 Jun '09

22 Jun '09

hello, i am using xymon-4.2.2 and procs column is showing purple. it says : Mon Jun 15 18:46:14 IST 2009 - Processes NOT ok [image: clear] No process checks defined PID PPID USER STARTED S PRI %CPU TIME %MEM RSZ VSZ CMD 1 0 root May 31 S 24 0.0 00:00:02 0.0 692 10328 init [3] 2 1 root May 31 S 139 0.0 00:00:00 0.0 0 0 [migration/0] 3 1 root May 31 S 5 0.0 00:00:00 0.0 0 0 [ksoftirqd/0] 4 1 root May 31 S 139 0.0 00:00:00 0.0 0 0 [watchdog/0] 5 1 root May 31 S 139 0.0 00:00:00 0.0 0 0 [migration/1] 6 1 root May 31 S 5 0.0 00:00:00 0.0 0 0 [ksoftirqd/1] 7 1 root May 31 S 139 0.0 00:00:00 0.0 0 0 [watchdog/1] 8 1 root May 31 S 139 0.0 00:00:00 0.0 0 0 [migration/2] 9 1 root May 31 S 5 0.0 00:00:00 0.0 0 0 [ksoftirqd/2] 10 1 root May 31 S 139 0.0 00:00:00 0.0 0 0 [watchdog/2] I have edited hobbit-clients.cfg file like : # The special DEFAULT section can modify the built-in defaults - this must # be placed at the end of the file. DEFAULT # These are the built-in defaults. UP 1h LOAD 15.0 18.0 DISK * 90 95 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 PROC cron to check for cron process. wt is wrong i made..also how can i do so for clients? -- Pankaj V. Dorlikar

1 1

As400 systems
by DKDeckert＠Hormel.com 22 Jun '09

22 Jun '09

Hey everyone, I was just wondering. Has anyone been able to monitor memory,disk, and cpu on the as400 systems? I heard it doesn't work with xymon. Could anyone let me know just so i know for sure. Thanks in advanced. Notice: This communication is an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. � 2510. Its disclosure is strictly limited to the recipient(s) intended by the sender of this message. This transmission and any attachments may contain proprietary, confidential, attorney-client privileged information and/or attorney work product. If you are not the intended recipient, any disclosure, copying, distribution, reliance on, or use of any of the information contained herein is STRICTLY PROHIBITED. Please destroy the original transmission and its attachments without reading or saving in any matter and confirm by return email.

2 1

[hobbit] A different RECOVERED message problem!
by asparks＠doublesparks.net 22 Jun '09

22 Jun '09

SebA wrote: > > Hi all, > > > > This seems to be a bug (or at least a flaw) in the alerting system (on > hobbit trunk from Dec 2008): a recovery is sent for a MAIL alert that > never actually sent an alert in the first place. The last two lines > in the notifications.log are recoveries that were sent at the exact > same time. But only 1 alert (alarm) was actually sent out. > > > I have a feeling you're seeing an artifact of some oddities in how the alerts module matches up events and paging rules. You can see my analysis writeup here (however, I never solved the problem): http://www.hswn.dk/hobbiton/2008/07/msg00132.html -Alan

2 1

NaN errors for AIX 5.3
by hj.beckers＠kreis-steinfurt.de 22 Jun '09

22 Jun '09

Hi, I installed hobbit client on an AIX 5.3 with the client configuration from AIX 5.2. The red/gree/yellow icons are shown, the client data gets transferred, only there are no graphs in the rrd plots. All rows show an empty value field and "NaN" (not a number). top lines from the working AIX 5.2 client data: client astsm01.aix aix [date] Mon Jun 22 15:46:14 2009 [uname] AIX astsm01 2 5 00521F3A4C00 [uptime] 03:46PM up 4 days, 10:07, 0 users, load average: 1.03, 0.89, 0.82 [who] [df] Filesystem 1024-blocks Used Free %Used Mounted on /dev/hd4 262144 201272 60872 77% / /dev/hd2 3604480 3106184 498296 87% /usr /dev/hd9var 786432 365524 420908 47% /var /dev/hd3 1048576 48892 999684 5% /tmp /dev/hd1 327680 197144 130536 61% /home /proc - - - - /proc /dev/hd10opt 1376256 734228 642028 54% /opt top lines from the not working AIX 5.3 client data (not plotted, all info below the graphs "NaN"): client asrz21.aix aix [date] Mon Jun 22 15:26:46 2009 [uname] AIX asrz21 3 5 00C2839E4C00 [uptime] 03:26PM up 3 days, 1:45, 4 users, load average: 3.46, 3.65, 3.33 [who] b314111 pts/0 Jun 22 14:56 (asrz21) b314111 pts/1 Jun 22 15:12 (asrz21) b106364 pts/3 Jun 22 11:49 (asrz21) b106364 pts/4 Jun 22 15:18 (ps0114.kreis-steinfurt.lokal) [df] Filesystem 1024-blocks Used Free %Used Mounted on /dev/hd4 1048576 328940 719636 32% / /dev/hd2 6553600 5848636 704964 90% /usr /dev/hd9var 1048576 153160 895416 15% /var /dev/hd3 2097152 65248 2031904 4% /tmp /dev/fwdump 131072 348 130724 1% /var/adm/ras/platform /dev/hd1 10485760 110564 10375196 2% /home I see no big difference, no language problem. Any hints? Yours hjb

1 0

Configuring Hobbit 4.2.0 to save various test results on disk
by mbw＠u.washington.edu 21 Jun '09

21 Jun '09

Hi, Im migrating from Big Bro and have a test that I send back to the BB server called "WHOZIT" - I then parse those files on the BB server and generate additional and combined results pages. On Hobbit, it appears that this "storing" of data received is turned off. I looked at my Debian Lenny configuration files for this and it looks like I have to enable "data" in my /etc/hobbit/hobbitlaunch.cfg file. This is what I did: [bbdata] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD hobbitd_channel --channel=data --log=$BBSERVERLOGS/data.log hobbitd_filestore --data restarting the hobbit server and looking later in /var/lib/hobbit/logs and /data, I only see a couple of new files for the local machine. So I dont think I understand how to configure this properly. I am just dumping a bunch of plaintext out from my client and sending it back - I really dont even care about the status part - I just want the text, and I only need to store it for the WHOZIT test, I dont care about storing raw data files for any other test. I would appreciate a pointer to the docs or tips on how to do this. hobbit/lenny uptodate 4.2.0.dfsg-14lenny2 thanks, Matt

2 1

Problem with hobbit 4.2.0 on Solaris 10 with ZFS enabled
by tj_yang＠hotmail.com 20 Jun '09

20 Jun '09

When running hobbit server 4.2.0 on sparc Solaris 10 with ZFS enabled, the ZFS data is a pair of mirror disks to hold hobbit server data. This is the error messages I was seeing. hobbit at server$ tail bb-display.log 2009-06-09 08:57:35 Whoops ! bb failed to send message - timeout 2009-06-09 08:57:35 hobbitd status-board not available 2009-06-09 11:28:19 Whoops ! bb failed to send message - timeout 2009-06-09 11:28:21 hobbitd status-board not available 2009-06-09 11:43:48 Whoops ! bb failed to send message - timeout 2009-06-09 11:43:48 hobbitd status-board not available 2009-06-09 12:29:05 Whoops ! bb failed to send message - timeout 2009-06-09 12:29:07 hobbitd status-board not available 2009-06-09 13:18:33 Whoops ! bb failed to send message - timeout 2009-06-09 13:18:35 hobbitd status-board not available hobbit at server$ And it was causing false PROC alerts got sent out due to process output got cut off early. limiting ZFS physical memory maximum usage by setting ARC variable to 3G in /etc/system didn't help either. The problem was fixed by disabling the ZFS by migrating from ZFS to SVM. The kenerl phyical memory usage was down from 85% to 20% (of 8G). hobbit server is much stable under this setting. The observation is that hobbit server doesn't work well under high phyical memory usage condition. I am wondering if any other hobbit sites using Soalris 10+ZFS has similar problem. T.J. Yang _________________________________________________________________ Hotmail® has ever-growing storage! Don’t worry about storage limits. http://windowslive.com/Tutorial/Hotmail/Storage?ocid=TXT_TAGLM_WL_HM_Tutori…

2 1

Disk Ignore - easy
by DKDeckert＠Hormel.com 19 Jun '09

19 Jun '09

Hey everyone. I have a slight problem and i dont know why it is not working. I am trying to ignore a disk that is mounted on /diskname the actual path is /dev/diskname i want to ignore it or even not have it show up red, because it is always full (its static) i have tried the following in bb-hosts....each one i have waited for about 10 min HOST=hostname DISK %^/diskname IGNORE DISK /diskname IGNORE DISK * 90 95 /diskname IGNORE DISK * 90 95 /dev/diskname IGNORE DISK /dev/diskname IGNORE DISK %^/dev/diskname IGNORE I dont know why its not working...hmmm Thanks in advanced everyone. Notice: This communication is an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. � 2510. Its disclosure is strictly limited to the recipient(s) intended by the sender of this message. This transmission and any attachments may contain proprietary, confidential, attorney-client privileged information and/or attorney work product. If you are not the intended recipient, any disclosure, copying, distribution, reliance on, or use of any of the information contained herein is STRICTLY PROHIBITED. Please destroy the original transmission and its attachments without reading or saving in any matter and confirm by return email.

5 6

[hobbit] RE: Hobbit Security (Cross-Site Scripting)
by stewartl42＠gmail.com 19 Jun '09

19 Jun '09

It's usually a bit more complicated that just quoting the user input. I'm actually scanning a fresh install with IBM Appscan Enterprise when you mentioned it... :) On Fri, Jun 19, 2009 at 11:09 AM, David Cecchino < david.cecchino at datacure.com> wrote: > HP Webinspect scans of xymon show it is vulnerable to XSS , is there a > way of putting quotes around the url variables/strings? > > > > > -- Stewart -- An infinite number of mathematicians walk into a bar. The first one orders a beer. The second orders half a beer. The third, a quarter of a beer. The bartender says "You're all idiots", and pours two beers.

1 1

bbmrtg.pl help
by jhoskinson＠1stel.com 19 Jun '09

19 Jun '09

Hello all I need to alarm on bandwidth thresholds so I have added bbmrtg.pl using this guide, http://www.pleiades.com/mrtgbb/. Everything is working expect when bbmrtg.pl runs it reports "In: bytes/sec (0.0%) Out: bytes/sec (0.0%)". When look at the graph produced by mrtg-rrd.cgi, it reports the correct usage which in case is "Current In: 68.8 Mb/s Current Out: 25Mb/s". It is as if bbmrgt.pl is not reading the rrd file. Here is what my mrtg.cfg file looks like. ### Global Config Options # for UNIX # WorkDir: /home/http/mrtg # for Debian WorkDir: /var/www/mrtg LogFormat: rrdtool LibAdd: /usr/lib/perl5/ IconDir: /mrtg # or for NT # WorkDir: c:\mrtgdata ### Global Defaults # to get bits instead of bytes and graphs growing to the right # Options[_]: growright, bits EnableIPv6: no Target[bb-hostname_Vl1]: #Vl1:public at host: # bb* = Big Brother info bb*host[bb-hostname_Vl1]: bb-hostname bb*svc[bb-hostname_Vl1]: int49-56 bb*althost[bb-hostname_Vl1]: Internet link. bb*altsvc[bb-hostname_Vl1]: traffic bb*yellow[bb-hostname_Vl1]: 9% bb*red[bb-hostname_Vl1]:10% bb*unit[bb-hostname_Vl1]: bits/sec bb*in[bb-hostname_Vl1]:In bb*out[bb-hostname_Vl1]: Out SetEnv[bb-hostname_Vl1]: MRTG_INT_IP="1.1.1.1" MRTG_INT_DESCR="Interface to internet link." Options[bb-hostname_Vl1]: growright, bits MaxBytes[bb-hostname_Vl1]: 125000000 Title[bb-hostname_Vl1]: Traffic Analysis for Vl1 -- bb-hostname.foo.com PageTop[bb-hostname_Vl1]: <h1>Traffic Analysis for Vl1 -- bb-hostname.foo.com</h1> <div id="sysdetails"> <table> <tr> <td>System:</td> <td>bb-hostname.foo.com in FOO</td> </tr> <tr> <td>Maintainer:</td> <td>foo at foo.com</td> </tr> <tr> <td>Description:</td> <td>internet link </td> </tr> <tr> <td>ifType:</td> <td>propVirtual (53)</td> </tr> <tr> <td>ifName:</td> <td>Vl1</td> </tr> <tr> <td>Max Speed:</td> <td>125.0 MBytes/s</td> </tr> <tr> <td>Ip:</td> <td>1.1.1.1()</td> </tr> </table> </div> Here is the output when I bbmrtg.pl by hand localhost status internet.traffic green Wed Jun 17 13:59:04 2009 &green<A HREF="http://foo.com/cgi-bin/mrtg-rrd.cgi/br2-cci_vl1.html">Traffic Analysis for Vl1 -- bb-hostname.1stel.com:</A> *In: bits/sec (0.0%) Out: bits/sec (0.0%*) <CENTER> <A HREF="http://foo.com/cgi-bin/mrtg-rrd.cgi/bb-hostname_vl1.html"><IMG SRC="http://foo.com/cgi-bin/mrtg-rrd.cgi/bb-hostname_vl1-day.png" ALT="Last 24 Hours" BORDER=0></A> </CENTER> <TABLE BORDER=1 ALIGN=CENTER> <TR> <TH COLSPAN=6>Rules</TH> </TR> <TR> <TD>In</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 9.0%</TD> <TD BGCOLOR=yellow>> 9.0%</TD> <TD BGCOLOR=red>> 10.0%</TD> </TR> <TR> <TD>Out</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 9.0%</TD> <TD BGCOLOR=yellow>> 9.0%</TD> <TD BGCOLOR=red>> 10.0%</TD> </TR> </TABLE> Thanks in advance -- Jared Hoskinson 1stel, Inc. Desk 817.357.1013 FAX 817.357.1513

4 6