April 2010 - Xymon - Xymon mailman web

[hobbit] Custom script shows purple
by hobbit＠epperson.homelinux.net 28 Apr '10

28 Apr '10

[Insert top-posting rant boilerplate here] Makes utter sense. In the real world, client ability to use the LDAP is what matters from a service standpoint, and a failure of it will present as failure of other services unless the underlying dependency is known and tested, and hopefully DEPENDS-ed in Xymon. I've seen many such failures from robots or new systems administrators applying inappropriate policies like password expiration to service accounts, so I think client-side checks are appropriate. On Wed, April 28, 2010 07:53, Jerald Sheets wrote: > Yeah, that's it's usage. > > So, I guess from time to time the clients have issues hitting the server? > > Never thought to test in that direction. > > > --j > > > On Apr 28, 2010, at 7:49 AM, David Morgan wrote: > >> >> >> We wanted to test the connectivity from the LDAP clients (running a >> xymon agent) to the LDAP server and report their connectivity status. >> >> It appears (at least from what I read) that the LDAP module is a test >> from the Hobbit/XYmon Server to the LDAP server. >> >> Dave >> >> Jerald Sheets wrote: >>> Hobbit has a built in LDAP test if I remember correctly. Was it not >>> serving your needs? >>> >>> --jms >>> >>> >>> On Apr 27, 2010, at 3:55 PM, David Morgan wrote: >>> >>> >>>> We have a custom client side script that we wrote to test ldap >>>> connectivity (See below) >>>> >>>> % cat getent.sh >>>> >>>> #!/bin/sh >>>> >>>> COLUMN=ldap-con # Does the server have an LDAP conection >>>> COLOR=green # By default, everything is OK >>>> MSG="LDAP Connectivity Check" >>>> >>>> TESTVAL=`/usr/bin/getent group admins | wc -l` >>>> >>>> # Do whatever you need to test for something >>>> # As an example, go red if /tmp/badstuff exists. >>>> if [ $TESTVAL -eq 0 ] >>>> then >>>> COLOR=red >>>> MSG="${MSG} >>>> >>>> LDAP Configureation and Connectivity is BORKED UP >>>> " >>>> else >>>> MSG="${MSG} >>>> >>>> LDAP Configureation and Connectivity is OK >>>> " >>>> fi >>>> >>>> #%2

1 0

Server showing Blue (and Linux agents not reporting)
by captkras＠gmail.com 23 Apr '10

23 Apr '10

Quick question, I just stood up a new xymon server (latest release). There is a client running on the server, but most of the "checks" are showing blue. If you click on them, they show a green status (with blue background). Any thoughts on where I should check? Also, we have configured one Linux agent. The agent seems to be alive and working, I can telnet to port the xymon port from it, but there is no data (it's acting like there is no agent. Any thoughts? Dave -- David S. Morgan CISSP, CCNP aka: captkras at gmail.com "When the Winds of Change Blow Hard Enough, the Most trivial of things can turn into deadly projectiles"

2 3

Xymon Client on Gentoo
by nfranken＠theunlimitedworld.co.za 22 Apr '10

22 Apr '10

Hi Guys/Gals We would like to monitor Gentoo boxes here at the office. Just checking if anyone has run into some pitfalls regarding the installation. I assume it will be straightforward but just wanted to check if there is someone out there that might have some time saving pointers. Regards Neil

3 3

403 - Forbidden on The Shire
by storerr＠nibco.com 21 Apr '10

21 Apr '10

I keep getting the 403 - forbidden whenever I try to access http://www.trantor.org/theshire/ Ray CONFIDENTIALITY NOTICE: This email and any attachments are for the exclusive and confidential use of the intended recipient. If you are not the intended recipient, please do not read, distribute or take action in reliance upon this message. If you have received this in error, please notify us immediately by return email and promptly delete this message and its attachments from your computer system. We do not waive attorney-client or work product privilege by the transmission of this message.

7 14

prtdiag.sh and Soalris 10 x86 fix
by tjyang2001＠gmail.com 20 Apr '10

20 Apr '10

FYI, this is how I fix bb-prtdiag.sh to monitor my solar10 x86 machines(include vmware session). Problem: bb-prtdiag.sh always report red on x86 solaris Cause: output prtdiag -v contains "available" keyword which grepped by prtdiag.sh script using "$GREP ail". intended for [F|f]ail by also match "available". <snip> 1 in use PCI PCI Slot J11 2 in use PCI PCI Slot J12 3 in use PCI PCI Slot J13 4 available PCI PCI Slot J14 <snip> Fix: "$GREP ail" changed to "$EGREP -i fail" to catch [F|f]ail exactly. -- T.J. Yang

3 4

Premature end of script headers: bb-histlog.sh
by vadud3＠gmail.com 20 Apr '10

20 Apr '10

ok I am still getting the premature end of script headers on hobbit 4.2.3. any one can shed some light on this? On Fri, Mar 26, 2010 at 4:43 PM, Asif Iqbal <vadud3 at gmail.com> wrote: > On Fri, Mar 26, 2010 at 3:57 PM, Asif Iqbal <vadud3 at gmail.com> wrote: >> I am getting the following error when I was trying to access the port >> history of the client cer1cc-012.clientcare.example.net >> >> Internal Server Error >> >> The server encountered an internal error or misconfiguration and was >> unable to complete your request. >> >> Please contact the server administrator, systems at qwestip.net and >> inform them of the time the error occurred, and anything you might >> have done that may have caused the error. >> >> More information about this error may be available in the server error log. >> Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.7d DAV/2 Server at >> apa-xymon-01.ip.example.net Port 80 >> >> >> [Fri Mar 26 19:43:11 2010] [error] [client 208.47.0.94] Premature end >> of script headers: bb-histlog.sh, referer: >> http://apa-xymon-01.ip.example.net/hobbit-cgi/bb-hist.sh?HISTFILE=cer1cc-01… >> > > It only happens for some hosts. Plus I am using xymon 4.2.3 which has > the patch that > Henrik offered in 2006. > >> >> (root)@apa-xymon-01:/etc/apache2# REQUEST_METHOD=GET >> SCRIPT_NAME=bb-histlog.sh >> QUERY_STRING="HOST=cer1cc-012.clientcare.example.net&SERVICE=ports&TIMEBUF=Wed_Mar_24_13:03:57_2010" >> ~hobbit/cgi-bin/bb-histlog.sh >> Content-type: text/html >> >> Segmentation Fault (core dumped) >> (root)@apa-xymon-01:/etc/apache2# ls >> core httpd-std.conf >> httpd.conf.20100326 magic ssl.conf >> highperformance-std.conf httpd.conf httpd.conf.orig >> mime.types ssl.crt >> highperformance.conf httpd.conf-example httpd.conf.small >> ssl-std.conf ssl.key >> (root)@apa-xymon-01:/etc/apache2# file core >> core: ELF 32-bit LSB core file 80386 Version 1, from 'hobbitsvc.cgi' >> (root)@apa-xymon-01:/etc/apache2# gdb >> GNU gdb 6.6 >> Copyright (C) 2006 Free Software Foundation, Inc. >> GDB is free software, covered by the GNU General Public License, and you are >> welcome to change it and/or distribute copies of it under certain conditions. >> Type "show copying" to see the conditions. >> There is absolutely no warranty for GDB. Type "show warranty" for details. >> This GDB was configured as "i386-pc-solaris2.8". >> (gdb) quit >> (root)@apa-xymon-01:/etc/apache2# gdb ~hobbit/server/bin/hobbitsvc.cgi core >> GNU gdb 6.6 >> Copyright (C) 2006 Free Software Foundation, Inc. >> GDB is free software, covered by the GNU General Public License, and you are >> welcome to change it and/or distribute copies of it under certain conditions. >> Type "show copying" to see the conditions. >> There is absolutely no warranty for GDB. Type "show warranty" for details. >> This GDB was configured as "i386-pc-solaris2.8"... >> Reading symbols from /lib/libpcre.so.0...done. >> Loaded symbols for /lib/libpcre.so.0 >> Reading symbols from /lib/libresolv.so.2...done. >> Loaded symbols for /lib/libresolv.so.2 >> Reading symbols from /lib/libsocket.so.1...done. >> Loaded symbols for /lib/libsocket.so.1 >> Reading symbols from /lib/libnsl.so.1...done. >> Loaded symbols for /lib/libnsl.so.1 >> Reading symbols from /lib/librt.so.1...done. >> Loaded symbols for /lib/librt.so.1 >> Reading symbols from /lib/libc.so.1...done. >> Loaded symbols for /lib/libc.so.1 >> Reading symbols from /lib/libaio.so.1...done. >> Loaded symbols for /lib/libaio.so.1 >> Reading symbols from /lib/libmd.so.1...done. >> Loaded symbols for /lib/libmd.so.1 >> Reading symbols from /lib/ld.so.1...done. >> Loaded symbols for /lib/ld.so.1 >> Core was generated by `/home/hobbit/server/bin/hobbitsvc.cgi >> --env=/home/hobbit/server/etc/hobbitserve'. >> Program terminated with signal 11, Segmentation fault. >> #0 0xfed64fa1 in realfree () from /lib/libc.so.1 >> (gdb) bt >> #0 0xfed64fa1 in realfree () from /lib/libc.so.1 >> #1 0xfed655bf in cleanfree () from /lib/libc.so.1 >> #2 0xfed64adb in _malloc_unlocked () from /lib/libc.so.1 >> #3 0xfed64a04 in malloc () from /lib/libc.so.1 >> #4 0x08065762 in xmalloc (size=12) at memory.c:119 >> #5 0x08059748 in expand_env (s=0x8071c75 "4.2.3") at environ.c:296 >> #6 0x08059ce7 in xgetenv (name=0x8072aca "HOBBITDREL") at environ.c:165 >> #7 0x0805cd62 in headfoot (output=0x8087590, template=0x8072cc9 >> "histlog", pagepath=0x8072c2a "", head_or_foot=0x8072c23 "header", >> bgcolor=0) >> at headfoot.c:1114 >> #8 0x0805e0af in generate_html_log (hostname=0x808eb10 >> "cer1cc-012.clientcare.example.net", >> displayname=0x808eb10 "cer1cc-012.clientcare.example.net", >> service=0x80881f8 "ports", ip=0x8092718 "10.240.66.212", color=0, >> sender=0x80a64b8 "10.240.66.212", flags=0x80714c9 "", logtime=0, >> timesincechange=0x8047b80 "0.00 minutes", >> firstline=0x808a650 "green Wed Mar 24 13:03:55 GMT 2010 - Ports OK", >> restofmsg=0x80a70be "&green ssh (found 1, req. 1 or >> more)\n\nActive Internet connections (servers and established)\nProto >> Recv-Q Send-Q Local Address", ' ' <repeats 11 times>, "Foreign Address >> State \ntcp 0 0 0.0.0.0:"..., acktime=0, >> ackmsg=0x0, acklist=0x0, >> disabletime=0, dismsg=0x0, is_history=1, wantserviceid=0, >> htmlfmt=0, hobbitd=0, >> multigraphs=0x806d548 >> ",disk,inode,qtree,quotas,snapshot,TblSpace,if_load,", >> linktoclient=0x80885a8 >> "bb-histlog.sh?CLIENT=cer1cc-012.clientcare.example.net&amp8TIMEBUF=1269435836", >> nkprio=0x0, nkttgroup=0x0, >> nkttextra=0x0, output=0x8087590) at htmllog.c:150 >> #9 0x0805475a in do_request () at hobbitsvc.c:421 >> #10 0x08055037 in main (argc=1296651320, argv=0x8047c84) at hobbitsvc.c:518 >> (gdb) >> >> I noticed it says --env=/home/hobbit/server/etc/hobbitserve instead of >> hobbitserver.cfg >> >> -- >> Asif Iqbal >> PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu >> A: Because it messes up the order in which people normally read text. >> Q: Why is top-posting such a bad thing? >> > > > > -- > Asif Iqbal > PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu > A: Because it messes up the order in which people normally read text. > Q: Why is top-posting such a bad thing? > -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

1 0

bbtest-net timeout values
by novosirj＠umdnj.edu 20 Apr '10

20 Apr '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Good morning, I'm running Xymon 4.2.3. I've been looking in all of the manuals, wikis, etc. to find out what the default timeout values for network tests are. I believe I've found red, in that it's 10 seconds and set by the --timeout= parameter added to one of the config files that will affect bbtest-net (I'm not actually sure the value needs to change so I haven't studied it yet), one that is unfortunately systemwide. However, I see no mention of yellow anyplace, other than something I saw that suggests the value is probably 5 seconds - -- nothing in the man page. Can anyone point me in the right directions, or confirm that it is 5 seconds, or point me somewhere that describes this behavior? Thanks. - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST - NJMS Medical Science Bldg - C630 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkvNpogACgkQmb+gadEcsb6SqQCg1Cp0wJbZLgyDWsA8wkhor6AJ QzgAn1d69sywUCiEO6hkTgw3/scrICI5 =a4i3 -----END PGP SIGNATURE-----

1 0

blank displays
by lebarber＠gmail.com 19 Apr '10

19 Apr '10

I'm seeing some odd behavior on hobbit, (4.2.0). About once a week all the displays go blank, they don't show any of the hosts. At the same time hobbitdboard becomes empty, or nearly so. The hobbitd log shows: 2010-04-18 18:00:00 Ran scheduled task 8 from x.x.x.x: disable lnx1.* 240 Disabled by: auser @ y.y.y.y Reason: yada yada yada 2010-04-18 18:00:00 Fatal error in select: Bad file descriptor 2010-04-18 18:00:03 Setup complete 2010-04-18 18:00:13 Setup complete 2010-04-18 18:01:14 Setup complete 2010-04-18 18:11:17 Setup complete 2010-04-18 18:12:16 Setup complete 2010-04-18 18:13:17 Setup complete 2010-04-18 18:23:20 Setup complete 2010-04-18 18:24:22 Setup complete 2010-04-18 18:25:24 Setup complete 2010-04-18 18:32:39 Setup complete Where the multiple "Setup completes" are the result of hobbitd crashing and automatically restarting. Stopping hobbit completely and then restarting appears to cure the problem. It does appear to be related to using the scheduled disable function of Hobbit. Any ideas about what could be going on? Thanks, Larry Barber

2 1

aggregated availablity
by vadud3＠gmail.com 19 Apr '10

19 Apr '10

Has anyone done any customization wtih bbgen or someother way to generate html and graph report of aggregated application availability? So if I have host1,host2,host3 reporting availability of application app1 on their node I like a total availability of app1. so host1 says app1 available 99% of time in last month. host2 reports 98% for same app1 and host3 reports 99%. I like to have a availability report of 98.67% for app1 . I guess I could get the csv reports of bbgen for all hosts and then create a report of avg for the app1. I rather not invent the procedure if something like that can be done by hobbit already -- Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing?

4 9

Monitor NetApp SnapVault
by linuxmasterjedi＠free.fr 13 Apr '10

13 Apr '10

Hi, Is anyone monitor or know a way to monitor "NetApp SnapVault" status ? I would like to trigger an alert when a SnapVault relation is transferring for more then X hours, lag larger then X hours... Thanks by advance,

3 6