February 2011 - Xymon - Xymon mailman web

[xymon] SNMP destination (eg. not DevMon) [SOLVED]
by jotsik＠vivodi.gr 24 Feb '11

24 Feb '11

Hello Can you help on how you did that? I have my snmp traps coming with IPs and hobbit wont display them... Thanks! Josephine On Sun, 2011-01-16 at 17:50 -0800, Brian Majeska wrote: > Yes, you can have a separate trap column for each host. The trap.sh > script that comes in the tar download on that page feeds the IP or > hostname to the trap.pl script which reports the status to Xymon. > I tweaked my trap.sh script to do dns lookups for all traps that come > in without a hostname so they can be reported to xymon with the > correct hostname. > > -- > Brian Majeska > > > > On Fri, Jan 14, 2011 at 2:19 PM, Ryan Novosielski <novosirj at umdnj.edu> wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > The only thing that isn't clear is whether it would be possible to split > > the things out and have them show up under the equipment that they > > originate from (eg. a trap comes from a monitored server that I have -- > > can I have it show up as an issue under than server rather than one > > thing that just says "traps" under the Xymon server status). But I > > haven't looked at all, so we'll see. > > > > On 01/14/2011 05:11 PM, Xymon User in Richmond wrote: > >> Way kewl. Canned version of a WAG definitely beats rolling your own. > >> > >> On Fri, January 14, 2011 16:56, Ryan Novosielski wrote: > >>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >>> > >>> Thanks a bunch! I had sniffed around some and had read an FAQ or two but > >>> only saw DevMon. The relevant link here is: > >>> > >>> http://cerebro.victoriacollege.edu/hobbit-trap.html > >>> > >>> Have a nice weekend! > >>> > >>> On 01/14/2011 04:31 PM, Williams, Doug (Consultant-RIC) wrote: > >>>> http://en.wikibooks.org/wiki/System_Monitoring_with_Xymon/Other_Docs/FA > >>>> Q #Q._How_do_I_enable_SNMP_monitoring_with_Hobbit_Server.3F > >>>> > >>>> > >>>> -----Original Message----- From: Xymon User in Richmond > >>>> [mailto:hobbit at epperson.homelinux.net] Sent: Friday, January 14, 2011 > >>>> 4:15 PM To: xymon at xymon.com Subject: Re: [xymon] SNMP destination (eg. > >>>> not DevMon) > >>>> > >>>> On Fri, January 14, 2011 15:52, Ryan Novosielski wrote: > >>>>> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > >>>>> > >>>>> Hi all, > >>>>> > >>>>> Is anyone aware of any direction I might look for supporting > >>>>> RECEIVING SNMP traps from devices (not querying them via SNMP)? I > >>>>> have a device that can set an SNMP destination, but I don't believe > >>>>> has support for being queried by SNMP (if it does, it is a slightly > >>>>> moot point as it > >>>> is > >>>>> not on a network that can be accessed easily remotely). > >>>>> > >>>>> Happy to just hear the name of a script or software if you know of > >>>> one. > >>>> > >>>> Just a WAG, but I'd try pointing it at an snmptrapd and then monitor > >>>> the log. But maybe someone knows a better way. > >>>> > >>>> > >>>> To unsubscribe from the xymon list, send an e-mail to > >>>> xymon-unsubscribe at xymon.com > >>>> > >>>> > >>>> > >>>> To unsubscribe from the xymon list, send an e-mail to > >>>> xymon-unsubscribe at xymon.com > >>>> > >>>> > >>> > >>> > >>> - -- - ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan > >>> Novosielski - Sr. Systems Programmer |$&| |__| | | |__/ | \| _| > >>> |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and > >>> Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark -----BEGIN PGP > >>> SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG > >>> with Mozilla - http://enigmail.mozdev.org/ > >>> > >>> iEYEARECAAYFAk0wxpoACgkQmb+gadEcsb4b3QCgyAf7MQStVNu1wZh7d8DU9Iyq > >>> XSoAoKuv7aM3KCiP7QlFnDlBBjvTfQSa =2CvN -----END PGP SIGNATURE----- > >>> > >>> To unsubscribe from the xymon list, send an e-mail to > >>> xymon-unsubscribe at xymon.com > >>> > >> > >> > >> > >> To unsubscribe from the xymon list, send an e-mail to > >> xymon-unsubscribe at xymon.com > >> > >> > > > > > > - -- > > - ---- _ _ _ _ ___ _ _ _ > > |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Sr. Systems Programmer > > |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) > > \__/ Univ. of Med. and Dent.|IST/CST-Academic Svcs. - ADMC 450, Newark > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.4.10 (GNU/Linux) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > > > iEYEARECAAYFAk0wy/gACgkQmb+gadEcsb647wCfZ90Oo0b3rvhnHfdJNKjek0I2 > > znwAn311dNn6ebXTpf9ZOQkVQfPhtZb9 > > =b6gV > > -----END PGP SIGNATURE----- > > > > > > To unsubscribe from the xymon list, send an e-mail to > > xymon-unsubscribe at xymon.com > > > > > > To unsubscribe from the xymon list, send an e-mail to > xymon-unsubscribe at xymon.com > >

1 0

xymonclient.cfg
by David.Raymond＠ca.ebarrette.com 23 Feb '11

23 Feb '11

Hi, I want to know if I set the option like this : XYMSRV="0.0.0.0" # IP address of the Xymon server XYMSERVERS="10.1.1.25 10.1.2.25" # IP of multiple Xymon servers. XYMSRV must be "0.0.0.0". Does it mean that all client who send info to xymon first server will be also send to second one ? Regards, David Raymond

3 3

Question about 2 hosts named the same but have diffrent IP and DNS entries
by csauer＠columbia.com 23 Feb '11

23 Feb '11

Please bear with me, I am new at managing this instance. We have 2 hosts that have different IP and DNS entries, but locally on the systems are named the same. These systems are part of a multi-node appliance. I do not have control over their local hostname. We are monitoring both nodes, but the xymon page shows the data and the status of only one of them twice (The system for 10.45.x.x). Here is the config info from bb-hosts: 10.35.160.46 columbia_1-8 # conn ssh 10.45.192.37 columbia_1-8 # conn ssh On the monitor page, under "info" it shows the IP address for only the 10.35.x.x host for both entries. The 10.35.x.x is listed first in the bb-hosts config file? Is there a way to have it show the same name but use the IP only? Thanks, Chris Sauer ------------------------------------------------------------------------------------------------------ Chris Sauer UNIX Systems Engineer Columbia Sportswear 14375 NW Science Park Dr Portland OR, 97229 Phone: 503.985.4227 Fax: 503.985.5227 E-Mail: csauer at columbia.com<mailto:csauer at columbia.com> [cid:image001.jpg at 01CA613E.9111CD10]

2 1

[Fwd: Re: Question http graphics]
by maynard.suarez＠dch.cantv.com.ve 22 Feb '11

22 Feb '11

Thanks, i new in the mailing list, a try track your thread and sorry for my english My english is not very good looking -----Forwarded Message----- From: Buchan Milne <bgmilne at staff.telkomsa.net> To: xymon at xymon.com Cc: Maynard Suarez <maynard.suarez at dch.cantv.com.ve> Subject: Re: [Xymon] Question http graphics Date: Tue, 22 Feb 2011 23:31:45 +0200 On Tuesday, 22 February 2011 21:29:52 Maynard Suarez wrote: > Hi > if any way to graphic the connection established to port 80 for example > in tab http??? > Thanks man hobbit-clients.cfg, see the track option for the PROC "thresholds". If you don't come right, I can provide an example (but, I did, this week, in the "Making a custom graph" thread). Regards, Buchan -- Maynard J. Suarez M. Analista de Operaciones 7x24 Telf: (0212) - 906.02.00 email: operadores at dch.cantv.com.ve Centro de Datos EL Hatillo-GDCCE Cantv "No imprima este correo si no es necesario, cuide el planeta"

1 0

Question http graphics
by maynard.suarez＠dch.cantv.com.ve 22 Feb '11

22 Feb '11

Hi if any way to graphic the connection established to port 80 for example in tab http??? Thanks -- Maynard J. Suarez M. Analista de Operaciones 7x24 Telf: (0212) - 906.02.00 email: operadores at dch.cantv.com.ve Centro de Datos EL Hatillo-GDCCE Cantv "No imprima este correo si no es necesario, cuide el planeta"

4 3

[Fwd: Re: Question http graphics]
by maynard.suarez＠dch.cantv.com.ve 22 Feb '11

22 Feb '11

Yes, thanks very much -----Forwarded Message----- From: Henrik Størner <henrik at hswn.dk> To: xymon at xymon.com Subject: Re: [Xymon] Question http graphics Date: Tue, 22 Feb 2011 22:04:47 +0100 Den 22-02-2011 20:29, Maynard Suarez skrev: > Hi > if any way to graphic the connection established to port 80 for example > in tab http??? > Thanks If you mean "can I get a graph of the number of connections to my webserver's port 80", then yes - that is possible. Assuming you have a Xymon client installed on the webserver, add this to your analysis.cfg (in older versions: hobbit-clients.cfg) file: HOST=webserver PORT LOCAL=%[\.:]80 STATE=ESTABLISHED min=0 TRACK=http TEXT=web This counts the number of lines in your servers' "netstat" output that has a connection to port 80 in the ESTABLISHED state, and tracks it in a graph. The graph will be available on the "trends" page. This configuration was actually cut-and-pasted from the www.xymon.com website. You can see the resulting graph at http://www.xymon.com/xymon-cgi/svcstatus.sh?HOST=jorn.hswn.dk&SERVICE=trends (scroll down to the graph labeled "jorn.hswn.dk Network port counts"). Regards, Henrik _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon -- Maynard J. Suarez M. Analista de Operaciones 7x24 Telf: (0212) - 906.02.00 email: operadores at dch.cantv.com.ve Centro de Datos EL Hatillo-GDCCE Cantv "No imprima este correo si no es necesario, cuide el planeta"

1 0

bb-hosts:group, hobbit-alerts:GROUP, bb-hosts:CLASS questions
by spa＠syntec.co.uk 22 Feb '11

22 Feb '11

Hi, I was looking for a way of sending alerts based on bb-hosts:group and could not find a way. Is there no way of doing this? The nearest thing I could find was this e-mail below (which implies it is possible, but my debug tests suggest it does not work), but I could not find a follow-up to this e-mail. Alerts based on bb-hosts group and CLASS seem like a good idea... Or a way of designating network tests as belonging to a certain GROUP. (Lower-case "group" refers to the existing directive in bb-hosts (hosts.cfg), while upper-case GROUP refers to the hobbit-alerts (alerts.cfg) and hobbit-clients (analysis.cfg) setting.) e.g. myIP myHost # ftp[:port[:s]][@ipaddress][=GROUP] To be honest, I think either alerting by CLASS or bb-hosts:group would suffice, or in this particular case, I could move these hosts to their own page because there are a fair number. But I have other smaller groups/classes where their own page would be overkill... Anyway, I'm looking for a good way to set-up alerts for network-tests on particular classes of servers... Is my best bet just to create a macro in alerts.cfg with all the hostnames I need? (And to remember to update it.) Kind regards, SebA -----Original Message----- http://www.xymon.com/archive/2007/06/msg00074.html bb-hosts:group, hobbit-alerts:GROUP, bb-hosts:CLASS questions _____ * Subject: bb-hosts:group, hobbit-alerts:GROUP, bb-hosts:CLASS questions * From: Charles Jones <jonescr (at) cisco.com> * Date: Mon, 04 Jun 2007 14:10:14 -0700 * Organization: Cisco Systems _____ I've been using HTML in the group titles in my bb-hosts, to spruce up the look of the hobbit page. Example: group-except files Internal Servers Now I've come to a situation where I may want to create a paging alias that is tied to a particular group. My first question is, will I have to use the same HTML-ized name in hobbit-alerts.cfg as I did in bb-hosts? In other words: GROUP=Internal Servers MAIL someone (at) somwhwhere.com My second question is, why is there no option to define alerts by CLASS (bb-hosts has a CLASS:Classname option)? This would allow more granular alert definitions as you could have a class of clients that are in multiple groups that you would want to have a specific alert for. Thanks, -Charles

1 1

Xymon & Devmon: Missing repeater data for primary OID
by roel.baardman＠dnw.aero 22 Feb '11

22 Feb '11

Dear all, While creating some templates for devmon, for HP JetDirect machines for example, I am getting some errors and the white icon for if_ graphs. What I did: - Copy cisco-3750 if_* to a new hp-jetdirect dir - Create a specs file and verify it is recognized. - Inspect a target device's SNMP tree with a graphical tool to find OIDs - Verify those OIDs work from the commandline with snmpget. This results in the following oids file: ifName : .1.3.6.1.2.1.2.2.1.2.1 : branch ifBps : .1.3.6.1.2.1.2.2.1.5.1 : branch ifInOctets : .1.3.6.1.2.1.2.2.1.10.1 : branch ifOutOctets : .1.3.6.1.2.1.2.2.1.16.1 : branch The error I'm now seeing is "Missing repeater data for primary OID". My question is: what obvious thing am I missing, or what is broken? :-) Best regards, Roel __________ Information from ESET NOD32 Antivirus, version of virus signature database 5895 (20110222) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

1 0

conn Flapping every 2.5 minutes
by Shea.Graeme.A＠edumail.vic.gov.au 22 Feb '11

22 Feb '11

Thankyou Henrik, that got it. Somehow I had configured a remote bbProxy wrong :-#. I copied in the entries for another set of simple hostnames simular to the ones having the issue and forgot to update them. It's strange because those simple host names must be resolving somewhere up the DNS tree so the display on my main server was as expected (except for the failing conn test). So simple when you know what you're doing. Many thanks Graeme -----Original Message----- From: Henrik Størner [mailto:henrik at hswn.dk] Sent: Tuesday, 22 February 2011 7:41 PM To: Shea, Graeme A Subject: Re: [Xymon] conn Flapping every 2.5 minutes Hi Graeme, > I have both an IP address and "testip" in the bb-host file. The line is > > "10.X.Y.21 1091EDUDC01 #testip" but I still get the error. very strange. The "info" status column also says "Network tests use: IP-address" ? Is it possible you have another server doing network tests? If you check the "Message received from..." line at the bottom of the status (it's in the historical status logs also), do they all mention the same source of the status? Try running xymoncmd xymonnet --debug 1091EDUDC01 (or "bbcmd bbtest-net" if you're on 4.2.x) and send me the output. That will show what the network test is doing. You can also try running it with the "--no-update" status a few times to simulate the test that Xymon performs, without actually updating the status. Of course it would be most interesting if you could get the debug output from one of the runs that actually fails. Regards, Henrik Important - This email and any attachments may be confidential. If received in error, please contact us and delete all copies. Before opening or using attachments check them for viruses and defects. Regardless of any loss, damage or consequence, whether caused by the negligence of the sender or not, resulting directly or indirectly from the use of any attached files our liability is limited to resupplying any affected attachments. Any representations or opinions expressed are those of the individual sender, and not necessarily those of the Department of Education and Early Childhood Development.

1 0

conn Flapping every 2.5 minutes
by graeme＠shea.com.au 22 Feb '11

22 Feb '11

Hi All, I have a problem with my Xymon setup I haven't been able to get around. The conn test for servers at the same site as the Xymon server that have simple host name entries in bb-hosts fails about every 2.5 minutes with a "Can't resolve IP address for 1091edudc01" error (1091edudc01 being the host name). The other hosts at this site with FQDN work fine, as do simple host names at other sites. These windows servers are part of a different windows domain so I cannot add them to my local domain. A relevant entry in bbhosts is: 10.X.Y.21 1091EDUDC01 #testip 0.0.0.0 BuServ.Alfps.Internal # http://edupass:81 Things that I have tried (in order) Added IP address to bb-hosts Added "testip" to bb-hosts Added hosts to local dns and the local domain as the search domain to Xymon server. Added the hostnames to the "hosts" file on the Xymon server Built new server using latest Ubuntu, Xymon and hobbitping. Changed to use fping. Removed IP address and "testip" from bbhosts to use the local DNS to resolve the host names. If I use a terminal to ping the problem hosts there are no failures. I ran a ping every 30 seconds for several hours and it worked every time but conn still kept failing. When I switched to using DNS to resolve the host name the flapping changed to be green for 3-4.5 minutes and red for 10-15 seconds. Nearly all Xymon settings are set to the defaults. The strange thing is when I built the new server using a temporary IP address it worked for several days but when I changed it to use the same address as the old server (so the clients can reach it) the problem occurred on the new server. I admit this sounds like a network issue but since it should be using the IP address supplied it should not be returning a "Can't resolve IP address" error and ping works fine. Using DNS to resolve the names of the other monitored servers at this site works ok. Any thoughts would be much appreciated. Regards Graeme

2 1