April 2012 - Xymon - Xymon mailman web

Question on df processing for xymonclient-linux.sh
by Mark.Deiss＠acs-inc.com 04 Sep '12

04 Sep '12

In looking df processing in the Linux Xymon client module in client/xymonclient-linux.sh: echo "[df]" EXCLUDES=`cat /proc/filesystems | grep nodev | awk '{print $2}' | xargs echo | sed -e 's! ! -x !g'` df -Pl -x iso9660 -x $EXCLUDES | sed -e '/^[^ ][^ ]*$/{ N s/[ ]*\n[ ]*/ / }' A bit concerned that the df line can have a dangling "-x" option if the EXCLUDES variable is not populated. With a dangling "-x", the df command will abort with a syntax error and the df status will probably end up with a green status with no rrd history being populated. Users would not be aware unless they specifically brought up the green disk display or were reviewing disk trends and noticing the gap. The EXCLUDES variable can become null if the xymon client account loses read access to /proc/filesystems, for some reason the Linux flavor quit using the nodev tag (maybe started using NODEV or Nodev after a patch update....) or the xymon client went onto an (older) Linux version that did not use the /proc system. Suggest a revision either using sed or awk to build the EXCLUDES variable and a modification of the df command to eliminate the dangling "-x" option EXCLUDES=`cat /proc/filesystems 2>/dev/null | awk ' $1 ~ /nodev/ { printf("-x %s ", $2) }'` Or EXCLUDES=`cat /proc/filesystems 2>/dev/null | sed -ne ' /nodev/{ s/nodev[ ]*/ -x / H } ${ x s/\n//g p }'` df -Pl -x iso9660 $EXCLUDES 2>/dev/null | sed -e '/^[^ ][^ ]*$/{ N s/[ ]*\n[ ]*/ / }' If the parsing for nondev entries in /proc/filesystems now blows up for whatever reason (EXCLUDES is null), the df command will be capturing more than is desired which I believe would be preferred over missing the important file systems. Would like to use "2>&1" rather than "2>/dev/null" in the df line except any captured error lines may cause some downstream havoc with the rrd database processing.

4 5

Any alternatives to devmon?
by Paul.Root＠CenturyLink.com 09 Jul '12

09 Jul '12

Does anyone have an alternative to devmon? It's really old, doesn't seem to be being developed and the parsing of exemptions is flaky at best. Paul Root - Engineer III Managed Services Systems - CenturyLink This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

3 3

how to see graphs for last week/month for perticular test ?snapshot report
by pankaj.dorlikar＠gmail.com 11 Jun '12

11 Jun '12

hi, i have 2 problems.. 1)i want to see last month cpu utilization graph for the perticular host,how can i see that? 2)when i want to see snapshot report for say date 2dec09 7:30am,front pages(bb-html etc) shows time stamp of 2dec09 7:0am,but when i click to see status of perticular test of perticular host,it shows me status of 29oct09 12:40pm.how to overcome it? -- Pankaj V. Dorlikar

5 9

xymonnet runtime long on ping tests results sent
by indymichaelb＠gmail.com 16 May '12

16 May '12

What could cause a very long time to send ping test results? PING test completed (166 hosts) 593954.047266 9.117369 PING test results sent 594410.634681 456.587415

2 3

mounted disk character limitation?
by malcolm.hunter＠gmx.com 09 May '12

09 May '12

> ----- Original Message ----- > From: Nordquist, Daniel > Sent: 04/28/12 10:48 PM > To: Malcolm Hunter, xymon at xymon.com > Subject: RE: [Xymon] mounted disk character limitation? > > Where can I download 0.13? http://sourceforge.net/projects/bbwin/ -- BBWin Development - The Windows client for Big Brother and Xymon http://bbwin.sourceforge.net http://xymon.sourceforge.net

6 11

xymon freebsd memory calculations
by Brian.Scott＠tafensw.edu.au 08 May '12

08 May '12

Hi people, I was just trying to track down why the memory used was showing 0% on my FreeBSD systems and have found an interesting bug. The logic in xymond/client/freebsd.c is a little funny with fall back positions depending on what is supplied from the client, but essentially if there is no vmtotal section in the client data (old client) then the figure is used from meminfo which has been pretty good (but perhaps not perfect). If there is a section Free Memory Pages in the vmtoal section then that number is used in preference. Problems: The number is in K bytes so must be adjusted for use. The offset to the end of the searched for string is 19 not 18 (must count the leading newline). We arent calculating memphyused if we use the vmtotal method. The string Free Memory Pages: changes to Free Memory: with revision 234134 by eadler, Wed Apr 11 14:18:18 2012 UTC to /head/sbin/sysctl/sysctl.c (http://svnweb.freebsd.org/base/head/sbin/sysctl/sysctl.c?r1=234133&r2=23413…) My suggested fix is to change the logic at line 82 onwards in xymond/client/freebsd.c to read as follows: if (vmtotalstr) { p = strstr(vmtotalstr, "\nFree Memory Pages:"); if (p) { memphysfree = atol(p + 19)/1024; memphysused = memphystotal - memphysfree; found++; } else { p = strstr(vmtotalstr, "\nFree Memory:"); if (p) { memphysfree = atol(p + 13)/1024; memphysused = memphystotal - memphysfree; found++; } } } Regards, Brian Scott P.S. I have CCd the FreeBSD port maintainer for xymon but offcourse this fix is needed on any server if any monitored client is running FreeBSD.

3 2

Xymond and xymonnet quirks
by poppy.ben＠marshfieldclinic.org 02 May '12

02 May '12

After getting the latest Xymon 4.3.4 finally working on CentOS 6 64-bit, I'm seeing a few quirks that I'd appreciate some input on. First, under Xymonnet tests, it's alerting Yellow because the time spent is too long (over 300). The culprit is DNS tests executed taking over 340 itself.. Can anyone shed some light on this? I know I saw some other threads about putting in a --no-ares but I wanted to see if there was something else I might be missing before I change the functionality of the tests.. Next, under Xymond, I'm getting a ton of multiple statuses reports for CONN tests. I can't seem to find a clear archive of what would cause that other than having both IP's listed when you have 2 display servers.. Both servers reference each other as a client and in xymonserver.cfg.. Thanks for any help, -Ben ______________________________________________________________________ The contents of this message may contain private, protected and/or privileged information. If you received this message in error, you should destroy the e-mail message and any attachments or copies, and you are prohibited from retaining, distributing, disclosing or using any information contained within. Please contact the sender and advise of the erroneous delivery by return e-mail or telephone. Thank you for your cooperation.

4 14

Windows service monitoring
by Neil.Simmonds＠express-gifts.co.uk 01 May '12

01 May '12

Hi all, We are monitoring various Windows services using BBWin 0.12 in central mode reporting to a Xymon 4.3.4 server. In the analysis.cfg file for a number of servers we have the following type of entry, SVC SQLSERVERAGENT status=started startup=automatic As far as I can see from the analysis.cfg help that is exactly the correct format, however when this flags red, we get the following message, SQLSERVERAGENT is started/automatic - want started/automatic When I look down the list of processes SQLSERVERAGENT is clearly shown as stopped, SQLSERVERAGENT automatic stopped SQLSERVERAGENT Does anyone have any idea why the message is incorrect and if there is a way to fix it? Regards, Neil Simmonds Operation Analyst (Operations Support Group) Express Gifts Limited Express House Clayton Business Park Accrington Lancashire BB5 5JY T: 01254 303092 | E: neil.simmonds at Express-Gifts.co.uk Name & Registered Office: EXPRESS GIFTS LIMITED, 2 GREGORY ST, HYDE, CHESHIRE, ENGLAND, SK14 4TH, Company No. 00718151. Express Gifts Limited is authorised and regulated by the Financial Services Authority -------------- NOTE: This email and any information contained within or attached in a separate file is confidential and intended solely for the Individual to whom it is addressed. The information or data included is solely for the purpose indicated or previously agreed. Any information or data included with this e-mail remains the property of Findel PLC and the recipient will refrain from utilising the information for any purpose other than that indicated and upon request will destroy the information and remove it from their records. Any views or opinions presented are solely those of the author and do not necessarily represent those of Findel PLC. If you are not the intended recipient, be advised that you have received this email in error and that any use, dissemination, forwarding, printing, or copying of this email is strictly prohibited. No warranties or assurances are made in relation to the safety and content of this e-mail and any attachments. No liability is accepted for any consequences arising from it. Findel Plc reserves the right to monitor all e-mail communications through its internal and external networks. If you have received this email in error please notify our IT helpdesk on +44(0) 1254 303030

2 2

cipher list in sslcert column
by ralphmitchell＠gmail.com 01 May '12

01 May '12

I was looking at the list of available ciphers in the sslcert column, and I'm wondering exactly what that's showing? Even when the server is running mod_nss with FIPS-140 turned on, the ciphers list still includes 40-bit & 56-bit ciphers, which are definitely not supposed to be available. So, would I be right in thinking that "Available Ciphers" means "Ciphers available on the Xymon server", rather than "Ciphers that the remote system will accept"?? I was hoping that it was showing the list of ciphers the remote server would accept, because that would tie-in with the "sslbits" option specifying a minimum encryption level. As it is, if I set sslbits=256 for my FIPS-140 server, xymon alerts because it thinks the minimum available bits is 40. I'm going to try sslscan (http://sourceforge.net/projects/sslscan/) tomorrow and see what it says. From what I've read this evening, it may be necessary to hit the remote server with a request for every available encryption, and see what it will accept. That's how sslscan does it. So, does anybody know for sure if the cipher list is local to the xymon server, or is it somehow gathered from the remote server?? Ralph Mitchell

3 3

recovered mails with attachment
by daniel＠wolfimnetz.de 30 Apr '12

30 Apr '12

Hi Henrik, yes, the source of the mails is different. The 'good' or plain text mails have: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit and the 'bad' ones have: Content-Type: application/octet-stream Content-Transfer-Encoding: base64 but this happens on the xymon server. I see from /var/log/maillog Apr 30 13:07:40 xymon64 sSMTP[16315]: 354 Start mail input; end with <CRLF>.<CRLF> Apr 30 13:07:40 xymon64 sSMTP[16315]: Received: by xymon64.domain.com (sSMTP sendmail emulation); Mon, 30 Apr 2012 13:07:40 +0200 Apr 30 13:07:40 xymon64 sSMTP[16315]: From: "xymon Monitor" <xymon at xymon64.domain.com> Apr 30 13:07:40 xymon64 sSMTP[16315]: Date: Mon, 30 Apr 2012 13:07:40 +0200 Apr 30 13:07:40 xymon64 sSMTP[16315]: To: daniel at domain.com Apr 30 13:07:40 xymon64 sSMTP[16315]: Subject: Xymon server.domain.com:http recovered Apr 30 13:07:40 xymon64 sSMTP[16315]: User-Agent: Heirloom mailx 12.4 7/29/08 Apr 30 13:07:40 xymon64 sSMTP[16315]: MIME-Version: 1.0 Apr 30 13:07:40 xymon64 sSMTP[16315]: Content-Type: application/octet-stream Apr 30 13:07:40 xymon64 sSMTP[16315]: Content-Transfer-Encoding: base64 KR Daniel

2 1