June 2009 - Xymon - Xymon mailman web

bbmrtg.pl help
by jhoskinson＠1stel.com 19 Jun '09

19 Jun '09

Hello all I need to alarm on bandwidth thresholds so I have added bbmrtg.pl using this guide, http://www.pleiades.com/mrtgbb/. Everything is working expect when bbmrtg.pl runs it reports "In: bytes/sec (0.0%) Out: bytes/sec (0.0%)". When look at the graph produced by mrtg-rrd.cgi, it reports the correct usage which in case is "Current In: 68.8 Mb/s Current Out: 25Mb/s". It is as if bbmrgt.pl is not reading the rrd file. Here is what my mrtg.cfg file looks like. ### Global Config Options # for UNIX # WorkDir: /home/http/mrtg # for Debian WorkDir: /var/www/mrtg LogFormat: rrdtool LibAdd: /usr/lib/perl5/ IconDir: /mrtg # or for NT # WorkDir: c:\mrtgdata ### Global Defaults # to get bits instead of bytes and graphs growing to the right # Options[_]: growright, bits EnableIPv6: no Target[bb-hostname_Vl1]: #Vl1:public at host: # bb* = Big Brother info bb*host[bb-hostname_Vl1]: bb-hostname bb*svc[bb-hostname_Vl1]: int49-56 bb*althost[bb-hostname_Vl1]: Internet link. bb*altsvc[bb-hostname_Vl1]: traffic bb*yellow[bb-hostname_Vl1]: 9% bb*red[bb-hostname_Vl1]:10% bb*unit[bb-hostname_Vl1]: bits/sec bb*in[bb-hostname_Vl1]:In bb*out[bb-hostname_Vl1]: Out SetEnv[bb-hostname_Vl1]: MRTG_INT_IP="1.1.1.1" MRTG_INT_DESCR="Interface to internet link." Options[bb-hostname_Vl1]: growright, bits MaxBytes[bb-hostname_Vl1]: 125000000 Title[bb-hostname_Vl1]: Traffic Analysis for Vl1 -- bb-hostname.foo.com PageTop[bb-hostname_Vl1]: <h1>Traffic Analysis for Vl1 -- bb-hostname.foo.com</h1> <div id="sysdetails"> <table> <tr> <td>System:</td> <td>bb-hostname.foo.com in FOO</td> </tr> <tr> <td>Maintainer:</td> <td>foo at foo.com</td> </tr> <tr> <td>Description:</td> <td>internet link </td> </tr> <tr> <td>ifType:</td> <td>propVirtual (53)</td> </tr> <tr> <td>ifName:</td> <td>Vl1</td> </tr> <tr> <td>Max Speed:</td> <td>125.0 MBytes/s</td> </tr> <tr> <td>Ip:</td> <td>1.1.1.1()</td> </tr> </table> </div> Here is the output when I bbmrtg.pl by hand localhost status internet.traffic green Wed Jun 17 13:59:04 2009 &green<A HREF="http://foo.com/cgi-bin/mrtg-rrd.cgi/br2-cci_vl1.html">Traffic Analysis for Vl1 -- bb-hostname.1stel.com:</A> *In: bits/sec (0.0%) Out: bits/sec (0.0%*) <CENTER> <A HREF="http://foo.com/cgi-bin/mrtg-rrd.cgi/bb-hostname_vl1.html"><IMG SRC="http://foo.com/cgi-bin/mrtg-rrd.cgi/bb-hostname_vl1-day.png" ALT="Last 24 Hours" BORDER=0></A> </CENTER> <TABLE BORDER=1 ALIGN=CENTER> <TR> <TH COLSPAN=6>Rules</TH> </TR> <TR> <TD>In</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 9.0%</TD> <TD BGCOLOR=yellow>> 9.0%</TD> <TD BGCOLOR=red>> 10.0%</TD> </TR> <TR> <TD>Out</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 9.0%</TD> <TD BGCOLOR=yellow>> 9.0%</TD> <TD BGCOLOR=red>> 10.0%</TD> </TR> </TABLE> Thanks in advance -- Jared Hoskinson 1stel, Inc. Desk 817.357.1013 FAX 817.357.1513

4 6

[hobbit] RE: Hobbit Security (Cross-Site Scripting)
by stewartl42＠gmail.com 19 Jun '09

19 Jun '09

Are you saying it is vulnerable? XSS is fixed by validating your inputs. Stewart On Fri, Jun 19, 2009 at 10:04 AM, David Cecchino < david.cecchino at datacure.com> wrote: > Anyone know how to address cross site scripting in hobbitmon? > > > > > -- Stewart -- An infinite number of mathematicians walk into a bar. The first one orders a beer. The second orders half a beer. The third, a quarter of a beer. The bartender says "You're all idiots", and pours two beers.

2 1

Hobbit Security (Cross-Site Scripting)
by david.cecchino＠datacure.com 19 Jun '09

19 Jun '09

Anyone know how to address cross site scripting in hobbitmon?

1 0

Xymon Proxy for 'conn'
by Paul.Root＠qwest.com 19 Jun '09

19 Jun '09

Hi, I've brought up a xymon proxy to get monitoring on some machines that are a couple firewalls away from my main servers. That works fine. What I would like to do now is to have my 'conn' monitor (with fping) monitor some machines that are behind a firewall from my server. This firewall will allow the 1984 traffic, but not a ping. So can I get my bbproxy to do the fping and forward that info to the main server? Currently, my bbproxy is not running hobbitd. I'm kind of thinking that if I enabled hobbitd to just listen on localhost, and the bbproxy on the real ethernet, I could get the fping, and have bbproxy forward to localhost, and the real servers. Does that make sense? Any special config for that, or basically just the --listen=127.0.0.1, and regular proxy stuff? Thanks, Paul. Paul Root 612-664-3385 651-707-7043 IM/MNS Infrastructure

2 5

[hobbit] Hobbit HTTP Monitor Anomalies
by jkwade＠futurefrontiers.com 19 Jun '09

19 Jun '09

We connected up a sniffer. It appears that the HTTPS request never receives a response. Hobbit is sending it out, but a reply never occurs. James _____ From: James Wade [mailto:jkwade at futurefrontiers.com] Sent: Thursday, June 18, 2009 9:42 AM To: hobbit at hswn.dk Subject: [hobbit] Hobbit HTTP Monitor Anomalies So, last weekend, we had a huge conference call because two Production HTTPS URL's that we monitor with Hobbit were getting timeouts exceeding 30 seconds. No other URL's on the Hobbit Server that we monitor were getting any types of timeouts. I have two Hobbit Servers, located at two physical sites, Production & Development. The Production Hobbit Server said that no timeouts occurred on the two HTTPS URL's. However, the Development Hobbit Server (which is the primary monitoring server), indicated that the URL's were timing out. So, the only difference appeared to be in the network. However, our network team looked at the network and showed no latency, and the placed a sniffer on the Development Hobbit Server and saw all HTTPS packets coming back without timeouts. Early this week, we placed a box that sniffs that network and can monitor for specific events. In this case, it's connected to the same network as the Development Hobbit Server, and its monitoring the HTTPS request to the two URL's. Last night, I received timeouts from Hobbit on the URLs, but the sniffer showed not such timeouts. I've checked the Hobbit server, CPU, Load, Network, all the graphs don't show any correlation to the timeouts. Does anyone have any ideas on this puzzle? Thanks..James

3 2

Faulty downtime
by URMM＠VM.MARIST.EDU 19 Jun '09

19 Jun '09

We're running the 4.3.0.0-beta2 level of Xymon, but saw this problem with the previous beta level too. The downtime option in bb-hosts does not seem to work for servers that are running a Xymon client. No matter how you set it (i.e. what days or times), the tests never go blue. It does show up as planned downtime when you display the "Info" about the server, but it never actually happens. (Consequently, alerts are generated during the outage time.) The downtime option works fine for servers that are not running a client, though. Has anyone else seen this? I suspect this is a bug. Any ideas how to work around it? Martha McConaghy Marist College IT

4 5

Hobbit HTTP Monitor Anomalies
by jkwade＠futurefrontiers.com 18 Jun '09

18 Jun '09

So, last weekend, we had a huge conference call because two Production HTTPS URL's that we monitor with Hobbit were getting timeouts exceeding 30 seconds. No other URL's on the Hobbit Server that we monitor were getting any types of timeouts. I have two Hobbit Servers, located at two physical sites, Production & Development. The Production Hobbit Server said that no timeouts occurred on the two HTTPS URL's. However, the Development Hobbit Server (which is the primary monitoring server), indicated that the URL's were timing out. So, the only difference appeared to be in the network. However, our network team looked at the network and showed no latency, and the placed a sniffer on the Development Hobbit Server and saw all HTTPS packets coming back without timeouts. Early this week, we placed a box that sniffs that network and can monitor for specific events. In this case, it's connected to the same network as the Development Hobbit Server, and its monitoring the HTTPS request to the two URL's. Last night, I received timeouts from Hobbit on the URLs, but the sniffer showed not such timeouts. I've checked the Hobbit server, CPU, Load, Network, all the graphs don't show any correlation to the timeouts. Does anyone have any ideas on this puzzle? Thanks..James

1 0

external module/plugin/script for ticket raising or inventory for xymon
by Craig.Cook＠carquest.com 18 Jun '09

18 Jun '09

>i want to know whether there is any availability for >external module/plugin/script for ticket raising or inventory for >xymon-4.2.2.i found one o deadcat.net i.e. "trouble_ticket_0.2.tgz";but is >not that much useful..we want to keep record for all tickets raised for that >client also some inventory like module for the same I have used the trouble ticket module you found on deadcat with great success with Big Brother logging and updating tickets in a Remedy help desk. Xymon is not an inventory system. I suggest you modify trouble_ticket to work with Xymon. Make it log tickets in your current help desk system. You would get a list of tickets raised from your help desk system. Either integrate your help desk system with an inventory system or you can make each Xymon hostname clickable, it can call a script to get info from your inventory system. If you don't have a help desk system Request Tracker is a popular one. Craig

1 0

"procs" checks are not working
by camorae＠googlemail.com 18 Jun '09

18 Jun '09

Well, after reading the Man Pages of the "hobbit-clients.cfg" I tried to monitor some process in a Linux-Client. I defined it in the hobbitclients.cfg some processes to check but i always get a clear status wich the following message: "Processes NOT ok" I've been searching in the mailing list for a while, but i couldnt find a solid solution to this problem. I saw something about the msg file in the /hobbit/client/tmp/ path, but i couldnt follow that... Do i have to do something else after puting the "PROC cron", etc.... into the hobbitclients.cfg? Thanks, Cayo ps: with my old BB-Clients it works perfectly.

2 3

xmon 4.3beta2 - Bug with --tooltips=never
by asparks＠doublesparks.net 18 Jun '09

18 Jun '09

I have added the documented option "--tooltips=never" to my BBGENOPTS setting. Documented behavior is to show the COMMENT next to the host name (same as with Hobbit 4.2). However, in 4.3 this also is showing the value of any DESCR tag on the host, which is not compatible behavior, and is ugly (the DESCR value used to be only included on the INFO page). -Alan

2 4