July 2011 - Xymon - Xymon mailman web

Network Traffic Graph - Fedora 15
by hobbit＠epperson.homelinux.net 14 Jul '11

14 Jul '11

Well, probably not "soon". RHEL lags Fedora by at least a couple of years, generally. F15 "broke" a lot of other things with the moves to systemctl, Gnome3, etc, btw. Also, btw, there's been a huge amount of controversy and bikeshedding over the pro/con of ethx names, which have been somewhat arbitrarily assigned for some time. On Wed, July 13, 2011 13:35, Sam L wrote: > > Also, if this changed in Fedora now, then it means it is probably coming for Red Hat Enterprise Linux soon. And I assume this issue would hit more people then. > > From: s0a4m at hotmail.com > To: xymon at xymon.com > Subject: RE: [Xymon] Network Traffic Graph - Fedora 15 > Date: Wed, 13 Jul 2011 13:29:21 -0400 > > > > > > > > > Yes, I am aware Fedora changed the naming convention. My question is: How can I get the xymon network traffic graph (in trends) to work again? The only network traffic graph I have still only has eth0 in it (from old data before the Fedora upgrade.) I could probably force the name back to eth0 in the OS, but that seems like a cheesy workaround, since this is how the naming is going to be going forward. How can I get xymon to become aware that my NIC is called p33p1? > > Thanks for any guidance. > > >> Date: Wed, 13 Jul 2011 20:19:11 +0800 >> Subject: Re: [Xymon] Network Traffic Graph - Fedora 15 >> From: colin.coe at gmail.com >> To: everett.vernon at gmail.com >> CC: s0a4m at hotmail.com; xymon at xymon.com >> >> Vernon is correct. Fedora 15 moves away from eth[0-9], at least in some circumstances. See >> http://fedoraproject.org/wiki/Features/ConsistentNetworkDeviceNaming >> >> CC >>

1 0

httpstatus inconsistency
by troy＠athabascau.ca 13 Jul '11

13 Jul '11

I think I was wrong. I the two servers are behaving differently because they were configured differently. The server misbehaving was actually configured (analysis.cfg) to see a performance alert. The server that was not reporting red properly was reporting yellow and the yellow masked the red status. It seems a yellow status (that I configured in analysis.cfg) will override a red status (ie. service failure). Can anyone confirm or explain this? cheers, Troy ----- Original Message ----- From: "Troy Adams" <troy at athabascau.ca> To: "Phil Crooker" <Phil.Crooker at orix.com.au> Cc: xymon at xymon.com Sent: Thursday, June 30, 2011 10:18:53 AM GMT -07:00 US/Canada Mountain Subject: Re: [Xymon] httpstatus inconsistency > looks like they will be overwriting each other They don't overwrite; xymon supports this. > If the above changes don't fix the problem, try turning up the > debugging (in tasks.cfg) and see if you can spot what is happening. Thanks, I'm off to try it. If you want to try the multi-URL yourself then here is a simple test framework (/var/www/cgi-bin/dbB.pl) that I employ to mess with HTTP status: #!/usr/bin/perl -w use CGI qw/:standard/; print header('text/html',"200 Everything is great"); cheers, Troy ----- Original Message ----- From: "Phil Crooker" <Phil.Crooker at orix.com.au> To: "Troy Adams" <troy at athabascau.ca> Cc: xymon at xymon.com Sent: Tuesday, June 28, 2011 5:35:52 PM GMT -07:00 US/Canada Mountain Subject: Re: [Xymon] httpstatus inconsistency Hi Troy, Yes I understand you are getting different responses from the different URLs. The problem is first that you have two http tests for the same host. You haven't put your exact config in your question, but in your example: >> 192.168.0.29 camilla # postgresql \ >> http://MyUrlA \ >> httpstatus=dbB;https://MyUrlB;200 \ >> httpstatus=dbC;https://MyUrlC;200 \ >> http://MyUrlD UrlA and UrlD will both show up under the same test name "http" on the web page. To me it looks like they will be overwriting each other at the minimum. I'm fairly new at xymon, but I'd say to overcome this you need to have the second http test attached to another host so they are reported separately. Or you could use a third httpstatus test rather than just http. The second problem I saw in your example was you don't have a trailing semicolon on your httpstatus lines, there is another field there that needs to be represented: httpstatus[=COLUMN];URL;okstatusexpr;notokstatusexpr I tried your example setup on our server and don't have the inconsistent error reporting you complain of, so I think there is some syntactical error in your hosts.cfg. If the above changes don't fix the problem, try turning up the debugging (in tasks.cfg) and see if you can spot what is happening. cheers, Phil >>> On 29/06/2011 at 2:43 AM, in message <2010869917.4926371309279414670.JavaMail.root at amundsen.cs.athabascau.ca>, Troy Adams <troy at athabascau.ca> wrote: > Thanks Phil, > > I do indeed have multiple http tests for the same host that go to > different URLs on the same host. I know it looks funny at first but > the reason for this is by design. You see, the application running > behind the apache webserver on this host is programmed to hand out a > different status on each URL that indicates the status of the database > yet further behind the application. > > For example, database dbB, is shown to be up and running if (and > only if) the fetch of URL https://MyUrlB returns an HTTP Status of > 200. That is to say, if the application get's a database exception > then it is to throw a non-200 status. > > This hosts.cfg entry does work well but it works one way on one > monitoring server and the other way on the other monitoring server: > >> The strange thing, is that when dbC fails with a non 200.... >> on monitor3 dbC and http tests show red >> on monitor5 dbC shows red and http shows green > > > cheers, > > Troy > > > > ----- Original Message ----- > From: "Phil Crooker" <Phil.Crooker at orix.com.au> > To: "Troy Adams" <troy at athabascau.ca>, xymon at xymon.com > Sent: Tuesday, June 28, 2011 1:16:44 AM GMT -07:00 US/Canada Mountain > Subject: Re: [Xymon] httpstatus inconsistency > > A rather odd thing I see in your example - you have two http tests for > the same host. If you want to have both I would think you'd need to > rename one of them by doing a separate portocols.cfg entry or putting it > under a differnet hostname. > > It seems to me that you probably have some syntax error in your > hosts.cfg file to cause the different results. > > cheers, Phil > > >>>> On 28/06/2011 at 4:03 AM, in message > <1205542418.4630071309197825488.JavaMail.root at amundsen.cs.athabascau.ca>, > Troy > Adams <troy at athabascau.ca> wrote: >> I have two servers (monitor5 and monitor3) running Xymon 4.3.2 that > both have >> the same hosts.cfg entries for a particular host. The entry uses the > >> httpstatus test and goes like this: >> >> >> 192.168.0.29 camilla # postgresql \ >> http://MyUrlA \ >> httpstatus=dbB;https://MyUrlB;200 \ >> httpstatus=dbC;https://MyUrlC;200 \ >> http://MyUrlD >> >> The strange thing, is that when dbC fails with a non 200.... >> on monitor3 dbC and http tests show red >> on monitor5 dbC shows red and http shows green >> >> Why do the two monitoring servers behave differently? >> Any idea where to look? >> >> >> thanks, >> >> Troy > > -- > > This message from ORIX Australia might contain confidential and/or > privileged information. If you are not the intended recipient, any use, > disclosure or copying of this message (or of any attachments to it) is > not authorised. > > If you have received this message in error, please notify the sender > immediately and delete the message and any attachments from your > system. Please inform the sender if you do not wish to receive future > communications by email. > > ORIX handles personal information according to a Privacy Policy that is > consistent with the National Privacy Principles. Please let us know if > you would like a copy. It is also available at http://www.orix.com.au . > > > > -- > This communication is intended for the use of the recipient to whom it > is addressed, and may contain confidential, personal, and or privileged > information. Please contact us immediately if you are not the intended > recipient of this communication, and do not copy, distribute, or take > action relying on it. Any communications received in error, or > subsequent reply, should be deleted or destroyed. > --- _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0

ntpdate / sntp
by Phil.Crooker＠orix.com.au 12 Jul '11

12 Jul '11

Hi all, I just setup ntp checking for the first time. With SuSE they have themselves deprecated ntpdate - it now only outputs a message saying to use sntp instead. I only worked out sntp can be used by looking at the xymonnet source code. It would be helpful if a commented SNTP entry were put in xymonserver.cfg - here is a suggestion: #SNTP="/usr/sbin/sntp" # Path to the 'sntp' program - sntp will be used instead of ntpdate if set Also, it would help to have a mention in the hosts.cfg man page, perhaps something like the following wording: This test uses the "ntpdate" or the "sntp" utility to check for a NTP server. This is selected by setting the environment variable in $XYMONHOME/etc/xymonserver.cfg. Finally, the -u parameter for sntp inserted by xymonnet - the full list: "-u -d %d %s" - doesn't work with the sntp that comes with the ntp distribution. -u is not a parameter. many thanks for xymon, Phil

1 0

bbproxy only agent status
by olivier＠audry.fr 11 Jul '11

11 Jul '11

hello I would like to use bbproxy only for the status/data reported by the agent and not the test done by the hobbit server. It's possible ? thx for your help oau

1 0

SNMP Traps with Xymon
by Neil.Simmonds＠express-gifts.co.uk 11 Jul '11

11 Jul '11

Hi all, I'm trying to get SNMP Traps from VMWare showing up in Xymon. I think the issue is with the trap format from VMWare and I suspect I may need to tweak my snmptt.conf file for this. I have attached my snmptt.conf file and here is a an example of what I am seeing in my /var/log/messages file. (Text in italics has replaced what actually shows in the log for security reasons) Jul 8 11:08:02 hostname snmptrapd[7399]: 2011-07-08 11:08:02 full host name [IP ADDRESS] (via UDP: [IP ADDRESS ]:60701) TRAP, SNMP v1, community public SNMPv2-SMI::enterprises.6876.50 Enterprise Specific Trap (201) Uptime: 28 days, 20:3 3:40.64 SNMPv2-SMI::enterprises.6876.50.301 = STRING: "At vm" SNMPv2-SMI::enterprises.6876.50.302 = STRING: " " SNMP v2-SMI::enterprises.6876.50.303 = STRING: "host name" SNMPv2-SMI::enterprises.6876.50.304 = STRING: "Error (Red)" SNMPv2-SMI:: enterprises.6876.50.305 = STRING: "Error (Red)" SNMPv2-SMI::enterprises.6876.50.306 = STRING: "Heartbeat is missing for VM - (Heartb eat stopped)" >From what I can see it appears that VMWare sends multiple OID's in the same trap. Has anybody got this working or can suggest a solution? Thanks, Neil Simmonds Operations Analyst Operations Support Group Express Gifts Ltd. neil.simmonds at express-gifts.co.uk Tel :- 01254 303092 Fax :- 01254 303100 Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority ------------ NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

2 1

client problems
by malcolm.hunter＠gmx.com 08 Jul '11

08 Jul '11

> ----- Original Message ----- > From: Christoph Schug > Sent: 07/08/11 09:19 AM > To: Scot Kreienkamp > Subject: Re: [Xymon] client problems > > The problem is in the reporting of the network info for BBWin on Windows > > 2008. I've attached a graph from one of my systems running 2008 to > > illustrate, but the basic problem is the ifstat section reports include > > junk with every report. Here's one from the same host as the graph: > > > > [ifstat] > > 10.101.1.211 0 0 > > 127.0.0.1 0 0 > > 253.255.255.255 0 0 > > You might want to check out this patch > http://sourceforge.net/mailarchive/forum.php?thread_name=BANLkTi%3DYgF17cDF… Thanks Christoph, this patch has now been applied to the source code in Subversion trunk. We're hoping to release the next version soon, so the fix will be included in that. Malcolm

1 0

client problems
by malcolm.hunter＠gmx.com 08 Jul '11

08 Jul '11

Hi Scott, > ----- Original Message ----- > From: Scot Kreienkamp > Sent: 07/07/11 04:39 PM > To: Buchan Milne, xymon at xymon.com > Subject: Re: [Xymon] client problems > The BBWin client doesn't report networking data > correctly on Win2008 and has been abandoned for years. That means I > have no way to monitor Windows 2008, and I have more coming online > daily. I'm using BBWin on Windows 2008 (32- and 64-bit). What exactly is the problem? I'm now on the BBWin project, so maybe can work on a resolution. Regards, Malcolm

3 2

client problems
by malcolm.hunter＠gmx.com 07 Jul '11

07 Jul '11

Hi Scot, > ----- Original Message ----- > From: Scot Kreienkamp > Sent: 07/07/11 08:39 PM > To: Malcolm Hunter, xymon at xymon.com > Subject: RE: [Xymon] client problems > The problem is in the reporting of the network info for BBWin on Windows > 2008. I've attached a graph from one of my systems running 2008 to > illustrate, but the basic problem is the ifstat section reports include > junk with every report. Here's one from the same host as the graph: > > [ifstat] > 10.101.1.211 0 0 > 127.0.0.1 0 0 > 253.255.255.255 0 0 Yes, I can reproduce this on my Windows 7 PC as well. It appears to be a problem interpreting the output of netstat. Because Win7 and 2008 include IPv6, it's giving a different result. Malcolm

2 1

client problems
by SKreien＠la-z-boy.com 07 Jul '11

07 Jul '11

Anyone? Bueller? Scot Kreienkamp From: Scot Kreienkamp Sent: Monday, June 27, 2011 2:07 PM To: 'xymon at xymon.com' Subject: client problems Hi everyone, Due to some frustrations with the existing clients I have decided to have a go at rolling my own. In the process I have run into some strange behavior with the server side data collector/processor that I've been struggling with for over a week now that I could really use some help with. I've been searching the man pages and the email archives and haven't been able to find anything like what I've run into. My first try with sending reports was with the CPU column. After figuring out that the server was crashing because my lines were too long, I am able to send in a complete report as verified by the client data screen. However, the data collector isn't processing it correctly for reasons that I am unable to determine. First, once it gets past the last line of the cpu section on the web page there are a few processes that repeat. Second, the first line of text containing the up/load/procs message isn't bold like in other hosts. Third, the CPU load number is never added to the RRD. I have run several tcpdumps on other clients to capture their submissions and I was able to fix some problems by comparing mine to those, but now mine looks identical from what I can tell. Here is what the top and bottom of the pages look like: The last 6 lines are duplicates of the lines above. That is not included in the data that was sent though, so how is it getting it? Also, why isn't the value being picked up for the RRD? Here's my client data report: [collector:] client corpdskreien,na,lzb,hq.bbwin win32 [date] Mon June 27 13:37:05 2011 [osversion] Microsoft Windows 7 X64 Service Pack 0 Build 7600 [cpu] up: 2 days, 1 users, 73 procs, load=1% CPU PID Image Name Memory Owner 0% 4 System 56280K 0% 332 smss.exe 1324K SYSTEM 0% 420 csrss.exe 4924K SYSTEM 0% 524 wininit.exe 4628K SYSTEM 0% 564 services.exe 11432K SYSTEM 0% 584 lsass.exe 18472K SYSTEM 0% 592 lsm.exe 6528K SYSTEM 0% 708 svchost.exe 10092K SYSTEM 0% 840 svchost.exe 9776K NETWORK SERVICE 0% 944 svchost.exe 20036K LOCAL SERVICE 0% 988 svchost.exe 137268K SYSTEM 0% 1016 svchost.exe 41676K SYSTEM 0% 424 audiodg.exe 17672K LOCAL SERVICE 0% 1084 svchost.exe 16328K LOCAL SERVICE 0% 1180 Smc.exe 9316K SYSTEM 0% 1240 svchost.exe 29444K NETWORK SERVICE 0% 1304 ccSvcHst.exe 2696K SYSTEM 0% 1524 spoolsv.exe 17628K SYSTEM 0% 1560 svchost.exe 14452K LOCAL SERVICE 0% 1684 atashost.exe 3624K SYSTEM 0% 1716 BESClient.exe 7108K SYSTEM 0% 1748 svchost.exe 10344K LOCAL SERVICE 0% 1788 mdm.exe 5724K SYSTEM 0% 1840 MotoHelper.exe 23804K SYSTEM 0% 432 Rtvscan.exe 808K SYSTEM 0% 1940 wsnm.exe 5904K SYSTEM 0% 2792 svchost.exe 5952K NETWORK SERVICE 0% 2584 SearchIndexer.exe 39820K SYSTEM 0% 2724 csrss.exe 30080K SYSTEM 0% 2020 winlogon.exe 6244K SYSTEM 0% 1520 taskhost.exe 10488K skreien 0% 684 dwm.exe 5964K skreien 0% 1952 explorer.exe 66160K skreien 0% 3332 Spark.exe 80640K skreien 0% 3388 BTTray.exe 9564K skreien 0% 3396 SnagIt32.exe 22072K skreien 0% 3420 openvpn-gui-1.0.3.exe 4948K skreien 0% 3432 jusched.exe 6896K skreien 0% 3440 ccApp.exe 748K skreien 0% 3552 AdobeARM.exe 10792K skreien 0% 3564 concentr.exe 6188K skreien 0% 3576 SmcGui.exe 7032K skreien 0% 3680 qttask.exe 3900K skreien 0% 3724 wfcrun32.exe 9064K skreien 0% 3760 TscHelp.exe 3656K skreien 0% 3768 SnagPriv.exe 4124K skreien 0% 3792 ProtectionUtilSurrogate.exe 13808K skreien 0% 4348 jucheck.exe 10004K skreien 0% 3308 OUTLOOK.EXE 157256K skreien 0% 4212 OSPPSVC.EXE 13144K NETWORK SERVICE 0% 2628 vRD70.exe 127780K skreien 0% 4216 putty.exe 8896K skreien 0% 3672 iexplore.exe 43748K skreien 0% 2332 iexplore.exe 53600K skreien 0% 1928 BESClientUI.exe 1172K skreien 0% 3992 wireshark.exe 90848K skreien 0% 3480 iexplore.exe 54908K skreien 0% 2964 iexplore.exe 156008K skreien 0% 2640 PresentationFontCache.exe 23012K LOCAL SERVICE 0% 3112 taskmgr.exe 11796K skreien 0% 5500 dumpcap.exe 7172K skreien 0% 4048 conhost.exe 3464K skreien 0% 5440 iexplore.exe 118652K skreien 0% 5884 SciTE.exe 15576K skreien 0% 4648 WmiPrvSE.exe 22620K SYSTEM 0% 5408 AutoIt3Help.exe 20852K skreien 0% 5592 SearchProtocolHost.exe 16488K skreien 0% 6080 SearchFilterHost.exe 5888K SYSTEM 0% 1872 AutoIt3Wrapper.exe 10552K skreien 0% 2388 AutoIt3_x64.exe 24936K skreien 0% 908 AutoIt3Wrapper.exe 8548K skreien 0% 1704 WmiPrvSE.exe 7456K NETWORK SERVICE [clock] epoch: 1309181827 local: Mon June 27 13:37:05 2011 I can send them in as client side reports and all is well, but it doesn't work when using the data collector/client message. Oh... also, how do I pull the client side config from the xymon server? Thanks for the help. Scot Kreienkamp This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

4 6

Devmon oid with dynamic hosts
by kconnell＠ryerson.ca 07 Jul '11

07 Jul '11

Trying to poll/graph CPU stats for some L2 workgroup switches. it works fine, except its possible for the stack to be 1 unit or up to a max of 8 units. If I set 8 diff oids to poll for each unit it will work fine with a 8 unit stack, but if the stack is lower in count, then I get the "clear icon" for the units that don't exist..... I understand, yea that's correct, some of the polls are done on units that don't exist, but that's fine, cause they don't. Can I have it poll for all 8 units, but show only for those that answer ? Or maybe don't show clear for those polls ? Ken Connell Intermediate Network Engineer Computer & Communication Services Ryerson University 350 Victoria St RM AB50 Toronto, Ont M5B 2K3 416-979-5000 x6709

2 1