December 2014 - Xymon - Xymon mailman web

XymonPSclient
by SKreien＠la-z-boy.com 11 Feb '15

11 Feb '15

Hey everyone, I'm trying out the PS client again after using it 1-2 years ago and it causing too many problems. I'm hoping the impact on the clients will have been lessened since I tried it last. I have the PS client installed and configured, but I never show any connection to the xymon server while monitoring with tcpdump. Also, I never get any files created in the temp directory. Here's the dump of the config below: PS C:\Xymon> .\xymonclient.ps1 config XymonPSClient config: servers : xymon.internal.hq loopinterval : 60 maxlogage : 30 clientlower : 1 Settable Params and values: clientbbwinmembug=1 clientconfigfile=C:\Users\skreien\AppData\Local\Temp\xymonconfig.cfg clientfqdn=1 clientlogfile=C:\Users\skreien\AppData\Local\Temp\xymonclient.log clientlower=1 clientname=corpvskreien.na.lzb.hq clientremotecfgexec=0 loopinterval=60 maxlogage=30 reportevt=1 servers= xymon.internal.hq slowscanrate=72 wanteddisks=3 wantedlogs=Application System Security The Xymon server is running as it is receiving messages from hundreds of other clients. This is an internal only server so iptables is off, Windows firewall is off, and I can successfully telnet from the client to the Xymon server port so there is nothing standing in the way. The server is Redhat 5.5, client is Win7. Any ideas? Scot Kreienkamp This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

9 12

Message send via trends shows last_ds as UNKN.
by prashantkad＠gmail.com 09 Feb '15

09 Feb '15

With a simple script I’m trying to send message to Xymon using trends message. The RRD file get’s created with specified DS but the value for <last_ds> appears as UNKN. I have tried removing whitespaces and all but still no luck. Can anyone point what issue it could be ? This is what I have in script: /app/home/xymon/bin/xymon --debug smpapp-dt-a3s.net "data smpapp-dt-a1d.ula.net.trends [test.rrd] DS:XYZ:GAUGE:600:0:U 1323233 DS:ABC:GAUGE:600:U:U 12312312" -Prashant

2 3

Blue report for last month
by Rolands＠logicaltech.com.au 03 Feb '15

03 Feb '15

Hi, I need to generate a report that shows all blue for last month with host/test/start-time/end-time Ideally this would be generated by running the Availability report and choosing all or maybe a new entry blue. I played around with running statusreport.cgi but it can't do history. It seems report.cgi takes away all blue. How can I generate a blue report for last month? - Roland

1 2

local mode client
by gendalia＠iastate.edu 02 Feb '15

02 Feb '15

One of my co-workers has installed xymon 4.3.7, and wants to use local mode for configuration. The display server is not receiving anything from his machine if things run normally, but when run by hand, xymon can send data from his server (Solaris) to the display server. I enabled xymond_client --debug in xymonclient.sh: if test "$LOCALMODE" = "yes"; then echo "@@" >> $MSGTMPFILE $XYMONHOME/bin/xymond_client --debug --local --config=$XYMONHOME/etc/localclient .cfg <$MSGTMPFILE And now I'm getting this: + ../bin/xymond_client --debug --local --config=../etc/localclient.cfg 11655 2012-02-14 16:20:29 Want msg 1, startpos 0, fillpos 0, endpos -1, usedbytes=0, bufleft=528383 11655 2012-02-14 16:20:29 Got 161874 bytes 11655 2012-02-14 16:20:29 ../bin/xymond_client: Got message 1 @client#1|0|127.0.0.1|neptune.lib.iastate.edu|sunos 11655 2012-02-14 16:20:29 startpos 161874, fillpos 161874, endpos -1 11655 2012-02-14 16:20:29 Opening file ../etc/localclient.cfg 11655 2012-02-14 16:20:29 Compiling regex ^/zones.*/ 11655 2012-02-14 16:20:29 Client report from host neptune.lib.iastate.edu 11655 2012-02-14 16:20:29 neptune.lib.iastate.edu: Duplicate client message at time 0, seq 1, lastseq 0 11655 2012-02-14 16:20:29 Want msg 2, startpos 161874, fillpos 161874, endpos -1, usedbytes=0, bufleft=366509 11655 2012-02-14 16:20:29 get_xymond_message: Returning NULL due to EOF + rm -f ../tmp/msg.neptune.lib.iastate.edu.txt I'm not sure where to go from here. Does local mode still work for most people? -Tracy

2 2

PULLDATA flag not behaving as documented
by john.thurston＠alaska.gov 23 Jan '15

23 Jan '15

The "pulldata" flag is documented as supporting an explicit ip:port combination. In the man file for hosts.cfg: > pulldata[=[IP][:port]] > This option is recognized by the xymonfetch(8) utility, and causes it to poll the host for client data. The optional IP-address and port-number can be used if the client-side msgcache(8) daemon is listening on a non-standard IP-address or port-number. but the application does not seem to be picking up the ipaddress or port specified. It always uses the address of the host. Take the following example config line: 1.2.3.4 foo.bar.com # pulldata=5.6.7.8:2014 noconn By the documentation, I expect it to try pull data from 5.6.7.8 on port 2014. It does not. It always tries to pull from 1.2.3.4 on port 1984 Looking in xymonfetch.c, I see where the parsing is done to identify explicit IP addresses. Using a "xymondboard fields=XMH_FLAG_PULLDATA", all I get back is "PULLDATA". There is never an IP address listed. My C isn't good enough to trace farther back through the code :( I think there may be an error in the parsing of the pulldata tag. Can anyone help me unwind this and tell me what I'm doing wrong (or if there is a bug I'll have to figure out how to patch)? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

4 4

xymonnet - fatal signal caught
by feld＠feld.me 05 Jan '15

05 Jan '15

I am now hitting this upon the upgrade to 4.3.18. I've tried building against the supplied c-ares instead of the system c-ares (1.10.0 on FreeBSD) to no effect. vm# gdb ../bin/xymonnet xymonnet.core GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Core was generated by `xymonnet'. Program terminated with signal 6, Aborted. Reading symbols from /usr/lib/libssl.so.7...done. Loaded symbols for /usr/lib/libssl.so.7 Reading symbols from /lib/libcrypto.so.7...done. Loaded symbols for /lib/libcrypto.so.7 Reading symbols from /usr/local/lib/libpcre.so.1...done. Loaded symbols for /usr/local/lib/libpcre.so.1 Reading symbols from /lib/libc.so.7...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /lib/libthr.so.3...done. Loaded symbols for /lib/libthr.so.3 Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x0000000801266a1a in kill () from /lib/libc.so.7 [New Thread 801c06400 (LWP 100117/xymonnet)] (gdb) bt #0 0x0000000801266a1a in kill () from /lib/libc.so.7 #1 0x0000000801265149 in abort () from /lib/libc.so.7 #2 0x0000000000423f01 in sigsegv_handler (signum=<value optimized out>) at sig.c:57 #3 <signal handler called> #4 0x0000000801262f8b in strlen () from /lib/libc.so.7 #5 0x0000000000425218 in addtobuffer_many (buf=0x801c19830) at strfunc.c:140 #6 0x000000000041199c in display_rr (aptr=<value optimized out>, abuf=<value optimized out>, alen=<value optimized out>, response=0x801cd9100) at dns2.c:475 #7 0x00000000004111f3 in dns_detail_callback (arg=0x801cd9100, status=<value optimized out>, timeouts=<value optimized out>, abuf=0x7fffffffb2f0 "▒▒\205", alen=130) at dns2.c:268 #8 0x000000000041814d in search_callback () #9 0x0000000000417b7e in qcallback () #10 0x0000000000417113 in end_query () #11 0x000000000041788e in process_answer () #12 0x00000000004168c7 in processfds () #13 0x000000000041067b in dns_ares_queue_run (channel=0x801d07000) at dns.c:172 #14 0x0000000000410b23 in dns_test_server (serverip=<value optimized out>, hostname=0x801c19744 "feld.me", banner=0x801c19750) at dns.c:341 #15 0x000000000040a694 in main (argc=4, argv=0x7fffffffc990) at xymonnet.c:1049 Even with xymonnet --no-ares it will crash. It seems that does not turn off the c-ares codepath entirely as c-ares is still mentioned in the backtrace. Does anyone have any clue what is causing this? I see in the backtrace at #7 that may very well be some unicode character it is choking on, but I don't have any unicode characters in DNS... If this is really an intermittent problem with c-ares it would be wise to consider an alternative that is under heavy development like libasr: https://www.opensmtpd.org/announces/libasr-1.0.0.txt

2 2

Alert for server connection or CLOSE_WAIT threshold?
by maik＠vegasystems.com 03 Jan '15

03 Jan '15

Does someone know an add-on what check the CLOSE_WAIT total or threshold of a server? This would be a good help to get active against attacks, before the server gets too busy. Maik

3 2

Freebsd port may interest Henrik
by jungleboogie0＠gmail.com 31 Dec '14

31 Dec '14

Hello All, http://lists.xymon.com/pipermail/xymon/2014-December/040849.html On Monday 22 December Mark Felder composed: > To clarify: it's not possible to build xymon against an OpenSSL > *without* SSLv2 cipher support. I assume xymon will break if you remove > any cipher instead of detecting what is available and reducing feature > set. Yes, this is true and sorry for not being more clear. + I see the freeBSD ports was updated Xymon updated to 4.3.18 but I don't suppose this provides the options to build without sslv2, correct? -- inum: 883510009027723 sip: jungleboogie at sip2sip.info xmpp: jungle-boogie at jit.si

3 4

AIX DF monitoring
by acano＠fossil.com 31 Dec '14

31 Dec '14

If you change the default [df] in xymonclient-aix.sh to report in megs or gigs the monitoring will break because a space is added in the block column 'MB blocks' or 'GB blocks'. To fix the issue and report only on local filesystems id suggest updating the df command in xymonclient-aix.sh to the following: # The awk stuff is to make sure we don't get hung on NFS mount by only looking at local (jfs(2)?) file systems # The sed stuff is to make sure lines are not split into two. df -Im `/usr/sbin/lsfs -c | /usr/bin/awk -F: '{if( $3 ~ /jfs/ ){print $1}}'` | sed -e 's/ blocks/_blocks/' ... While at it update the inode df to: # Added -l to report only on local FSs /usr/sysv/bin/df -il ... -- ------------------------------ Allan Cano System Administrator 3 IS Operations Fossil Group 901 S. Central Expwy. Richardson TX 75080 United States www.fossilgroup.com t: 469-587-3211 m: 469-571-3933 f: 972-238-4909 e: acano at fossil.com

1 0

Unknown option : --tooltips=always
by didds3＠yahoo.co.uk 31 Dec '14

31 Dec '14

| Overnight, my xymon server's own bbgen check for itself has gone yellow, and the following is showing on the xymon webpage for the alert. bbgen for Hobbit version 4.2.3 Statistics: Hosts : 11 Status messages : 134 Purple messages : 0 Pages : 1 Error output: Unknown option : --tooltips=always | TIME SPENT Event Starttime Duration Startup 30404255.680141 - Load links done 30404255.680281 0.000139 Load bbhosts done 30404255.680442 0.000161 ACK removal done 30404255.680464 0.000021 Load STATE done 30404255.681359 0.000895 Color calculation done 30404255.681364 0.000005 Hobbit pagegen start 30404255.681370 0.000006 Hobbit pagegen done 30404255.682117 0.000746 BB2 generation done 30404255.682812 0.000694 BBNK generation done 30404255.682944 0.000131 Summary transmission done 30404255.682944 0.000000 Run completed 30404255.682945 0.000000 TIME TOTAL 0.002803 I have stopped the daemon, killed any remaining processes (vmstat etc) and restarted the daemon - no change. has anyopne any ideas 1) how to "fix" this (googling shows nothing) 2) why its just started overnight? There have been no changes. I did note also that on startup the following error was shown " xgetenv: Cannot find value for variable XYMONGENOPTS" cheers ian | |

2 2