February 2014 - Xymon - Xymon mailman web

DHCP monitoring
by Jorge.Lopes＠optinet.net 03 Mar '14

03 Mar '14

Good Morning, Has anyone updated/modified the DHCP plugin for xymon, Currently we are using the following ext script to monitor our DHCP servers on 2008 however we seem to be running into issues on 2012 Thanks in advance. Jorge BBDHCP.VBS ~~~~~~~~~~~~~~ option Explicit ' BigBrother External Script for testing to see if Dhcp is up and responding on Window 2003 and above ' Gives Scope details running on the server specified With Active/Excluded and Available leases ' Installation ' 1) Modify the vairables below to match your system. ' 2) Add the script to your externals list in bbntcfg on the DHCP Server. ' so that it runs at least every 6500 seconds ' 3) Make sure you set the Saved Logs Location to %BBHOME%\ext ' Author Graeme Shea, Shea Technology Pty Ltd. graeme AT shea.com.au ' Adapted from and very heavly based on work by Brett Wilson - Brett_Wilsons at hotmail.com and André Hugener Dim Server, Alias, Yellow, Red, BBext, Colour, Col, WshShell, FileSys, OutDhcp, Version, BBextFolder Dim Check, Dhcp, NoDhcp, Status, Scope, Line, u, Tokens, Tmp, InUse, Free, BB, BBin, pend, j '---Vairables--- Server = "DHCPservername" ' Dhcp Server to test (not neccessarily the server running from) Alias = "DHCPServername" 'Name machine is known at BB server "," instead of "."!!! Yellow = 3 ' Min Available Leases when BB turns Yellow Red = 2 ' Min Available Leases when BB turns Red '---End Vairables--- '---Nothing to Change under this line--- 'On Error Resume Next' '------------------------------------------------------------------------------------- ' Version 0.1 Oringal version using dhcpcmd.exe for NT4 Resource kit ' Version 0.2 Uses builting Windows 2003 netsh command. ' Version 0.2.1 Fixed dialog error on 64bit systems. Version = "0.2.1" Set WshShell = WScript.CreateObject("WScript.Shell") Set FileSys = CreateObject("Scripting.FileSystemObject") On Error Resume Next BBext = WshShell.RegRead("HKLM\SOFTWARE\bbwin\tmppath\") ' If 64 bit system then reg file has moved and will raise an error. If Err Then err.clear BBext = ("c:\progra~2\bbwin\tmp")' If Err Then MsgBox " Big Brother Client not installed. ",," Fatal Error. " End If on Error GoTo 0 End If If BBext = "" Then MsgBox " Big Brother External Path not set. You need to set the Saved Logs Location " _ & VbCrLf & " using the bbntcfg utility. ",," Fatal Error. " WScript.Quit End If On Error GoTo 0 'Need short path names or else Netsh creates a c:\program file. Set BBextFolder = FileSys.GetFolder(BBext) BBext = BBextFolder.ShortPath Status = "status " & Alias & ".dhcp " Dhcp = "cmd /c " & "Netsh.exe dhcp server \\"& Server & " show mibinfo > " & bbext & "\dhcp.txt" WshShell.run Dhcp, 0, True ' Check to see that Dhcp is running Set Check = FileSys.OpenTextFile (bbext & "\dhcp.txt") NoDhcp = Check.ReadLine If InStr(1,NoDhcp, "Unable") OR InStr(1,NoDhcp, "Not Found")Then Dhcp = "No" Status = "red " & Status & " red" & " " & Now() & Vbcrlf &_ "Warning!! Dhcp Is not Running On Server - " & Server End If ' If Dhcp is running retrieve Active Scopes and lease numbers Do While Not check.AtEndOfStream Line = Check.ReadLine u = Instr(1,Line,"Subnet") if u <> 0 Then tokens = Split( Line,"=") tmp = Check.ReadLine Inuse = Split( tmp,"=") tmp = Check.ReadLine Free = Split( tmp,"=") tmp = Check.ReadLine pend = Split( tmp,"=") j=(Cint(Free(1))+Cint(Inuse(1))+Cint(pend(1))) If j < 1 Then Colour = "blue" Else Colour = "green" if Col < 1 Then Col = 1 End If If Cint(Free(1)) <= Yellow Then Colour = "yellow" If Col < 2 Then Col = 2 End If End If If Cint(Free(1)) <= Red Then Colour = "red" Col = 3 End If End If Scope = Scope & " Scope " & Tokens(1) & " " & Fix(Inuse(1)) & " Active/Excluded" &_ VbCrlf & "&" & Colour & " Scope " & Tokens(1) & " " & Fix(Free(1)) & " Available" &_ VbCrlf & " Scope " & Tokens(1) & " " & Fix(pend(1)) & " Pending" & VbCrlf &_ "Status: " & Colour & VbCrlf & VbCrlf End If Loop Colour = "red" If Col = 0 Then Colour = "blue" End If If Col = 1 Then Colour = "green" End If If Col = 2 Then Colour = "yellow" End If If Dhcp <> "No" Then Status = colour & "+2h " & Status & Colour & " " & Now() & Vbcrlf & _ "Dhcp is running on Server " & Server & " with the following configuration" & VbCrLf End If Set OutDhcp = filesys.CreateTextFile(BBext & "\dhcp", True) OutDhcp.WriteLine Status OutDhcp.WriteLine Scope OutDhcp.WriteLine "" OutDhcp.WriteLine "BBDhcp Version " & Version Outdhcp.close Check.close This email and its contents are subject to an email legal notice that can be viewed at http://www.naspers.com/disclaimer.php Should you be unable to access the link provided, please email us for a copy at csc at optinet.net Hierdie e-pos en sy inhoud is onderhewig aan 'n regskennisgewing oor elektroniese pos wat gelees kan word by http://www.naspers.com/afrikaans/voorbehoud.php 'n Afskrif kan aangevra word by csc at optinet.net

3 2

Changes to Non-Green report?
by tawilcox＠fs.fed.us 28 Feb '14

28 Feb '14

Is it possible to add the group to the non-green report, and if so, how? Is there another alternative that I can't figure out yet? Ted This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.

1 0

bbtest-net false conn alerts
by Ross.Hamilton＠brevanhoward.com 28 Feb '14

28 Feb '14

Hello I'm investigating why bbtest-net runs are taking what I think is a long time on an xymon server. The bbtest-net status displayed on the webpage looks like so. Statistics: Hosts total : 2832 Hosts with no tests : 966 Total test count : 2730 Status messages : 2954 Alert status msgs : 0 Transmissions : 30 DNS statistics: # hostnames resolved : 1108 # succesful : 2004 # failed : 38 # calls to dnsresolve : 1116 TCP test statistics: # TCP tests total : 773 # HTTP tests : 327 # Simple TCP tests : 446 # Connection attempts : 772 # bytes written : 48486 # bytes read : 3283786 Error output: [Edited for brevity] 27 lines of this nature ... Host foo appears twice in bb-hosts! This may cause strange results dnsresolve - internal error, name 'ldnpgec01v' not in cache 17 lines of this nature ... bbtest-net: Cannot resolve IP for host bar TIME SPENT Event Starttime Duration bbtest-net startup 9601848.473961 - Service definitions loaded 9601848.481606 0.007644 Tests loaded, hostname lookups done 9601860.506724 12.025118 Test engine setup completed 9601860.519996 0.013271 TCP tests completed 9601875.790148 15.270152 PING test completed (1896 hosts) 9601945.698899 69.908750 PING test results sent 9601950.407327 4.708427 Test result collection completed 9601950.407684 0.000357 LDAP test engine setup completed 9601950.407685 0.000001 LDAP tests executed 9601950.407686 0.000001 LDAP tests result collection completed 9601950.407687 0.000000 DNS tests executed 9601951.952093 1.544405 NTP tests executed 9601963.812322 11.860229 Test results transmitted 9601963.881021 0.068698 bbtest-net completed 9601964.053873 0.172851 TIME TOTAL 115.579911 The lines in error output are the result of configuration put in by another team. I can correct it by changing some scripts, but I don't think that is causing the problem I'm looking into. The bit I'm interested in is "PING test completed (1896 hosts)" and why it takes 70 seconds. bbtest-net is set to run in hobbitlaunch.cfg like so. CMD bbtest-net --report --ping --checkresponse --concurrency=512 --no-ares If I run it manually from the command line like so, the ping tests complete in less than a millisecond. /bbtest-net --no-ares --report --ping --checkresponse --concurrency=512 --no-update -debug PING test completed (1896 hosts) 9600209.001178 0.000537 The reason I'm investigating is we often get a flurry of false connectivity alerts from xymon when the time taken to run bbtest-net spikes for some reason. There is another (contingency) host I have that I am doing some tests on. When I run bbtest-net manually on this host, the ping tests take about 40s. On the contingency host, in the --debug output there isn't an explanation for the time taken, the timestamps go straight from "TCP tests completed" to 40s later. 2014-02-28 11:05:51 TCP tests completed normally 2014-02-28 11:06:33 More than one ping result for 192.168.180.94 I have many of these "more than one ping result for <IP>" could they be contributing? I was assuming not. Does anyone have any pointers for things I could look at or test? The bb-network.log doesn't have anything other than the error output previously mentioned. On an unrelated note, a big thanks to everyone for participating on these lists (particularly Henrik for supporting and providing a great product). It has been a great help to me over the years. Regards, Ross

1 0

how to use xymon-client-4.3.17-1.el5.x86_64.rpm; Xymon 4.3.17 released
by kpeng＠partycity.com 27 Feb '14

27 Feb '14

I downloaded the xymon-client rpm from http://terabithia.org/rpms/xymon/el5/xymon-client-4.3.17-1.el5.x86_64.rp m And installed on one of my RH 5.5 64 bit server: [root at pctyfin01dev kpeng]# rpm -Uvh xymon-client-4.3.17-1.el5.x86_64.rpm Install went OK, but after install, I wondered: 1. How can I configure the xymon-client points to my xymon server? 2. How to start the client agent? -----Original Message----- From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of J.C. Cleaver Sent: Tuesday, February 25, 2014 1:06 PM To: Xymon Mailing List Subject: Re: [Xymon] Xymon 4.3.17 released On Tue, February 25, 2014 9:24 am, Mark Felder wrote: > I've pushed 4.3.17 to FreeBSD's ports. Thanks for your continued > efforts, Henrik. > > http://svnweb.freebsd.org/ports/head/net-mgmt/xymon-server/Makefile?revi sion=346008&view=markup I've also built an updated 4.3.17 set of RPMs for RHEL/CentOS 5/6 and Fedora 18+. They're available at http://terabithia.org/rpms/xymon/ Thanks, as always, Henrik for an awesome and flexible monitoring project! Regards, -jc _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

2 2

Xymon conn icon shows white, rather than green
by kpeng＠partycity.com 26 Feb '14

26 Feb '14

I recently setup a Xymon server. After turn on, the web page all the "conn" item shows white, rather than green: (I only put contents on hosts.cfg and /etc/hosts files, not going deep into any other configuration yet). When I use fping, it shows the server is alive: [root at island-vm etc]# fping BOOMIAPP01 BOOMIAPP01 is alive Where is the configuration file to control it?

5 12

"Not possible to test https-sites via a proxy"
by linuxmasterjedi＠free.fr 26 Feb '14

26 Feb '14

Hi, I would like to test HTTPS website trough my web proxy, but I read on the Xymon documentation : "HTTP Testing via proxy [...] http://webproxy.sample.com:3128/http://www.foo.com/ would be the syntax for testing the www.foo.com website via the proxy running on "webproxy.sample.com" port 3128. [...] Note that it is not possible to test https-sites via a proxy, nor is it possible to use https for connecting to the proxy itself. [...]" Any change this restriction has been removed/improved ? Thanks

1 1

.cfg mods during upgrade
by john.thurston＠alaska.gov 26 Feb '14

26 Feb '14

I'm looking at the 4.3.17 release (Thank you, Herick) I was able to build and install without an errors (even on Solaris!). It all worked out, but I noticed a few configuration files needed a little help and I'm looking for guidance regarding best-practice with these. :: protocols.cfg :: I have modified a few of the stock protocols. My modifications were moved to the bottom and the stock entries were re-inserted. For example, I have created column-aliases for a test with: > # Create an alias to reduce confusion with ldap query tests > [ldap|ldapPort] > port 389 and after the version upgrade, my file contains: > [ldap] > port 389 >... > [ldap|ldapPort] > port 389 I just edited the file, removed the re-inserted lines, and replaced my comment line. What is the suggested way to handle this? Even if just leaving the dual entries is acceptable, I've lost my comments so my future-self will be confused. :: tasks.cfg :: Almost the same as protocols, but I discovered the tasks.d directory and I've moved my tasks into a file in that location. Should I expect files there to remain un-touched during upgrades? :: graphs.cfg :: Just like protocols.cfg. My new lines are present but my comments have been stripped. I can re-insert them, but should I expect to do this step with each upgrade? I haven't studied source on this yet. Is there a similar "directory" directive for graphs? :: xymonserver.cfg :: Arrgh. My comments are gone! Is there some way to flag the comments for retention, or do I need to relocate them to massive README in another directory. -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

2 1

Xymon 4.3.17 released
by henrik＠hswn.dk 25 Feb '14

25 Feb '14

Hi, another Sunday - another release. (Well, not quite - I skipped last Sunday). 4.3.17 is available on Sourceforge in a few moments. This version solves a bug where scheduling an "enable" or "disable" of a test would crash xymond. Apart from that, it also includes a series of minor fixes for problems with building Xymon - especially in a client-only configuration - on Solaris. Best regards, Henrik

4 3

XYMON Proxy Issue
by gbegin＠csc.com 25 Feb '14

25 Feb '14

Hello, Here a part of the solution: Communication Issue ==================== Observing le connections between agents and proxy using netstat, I see a lot of CLOSE_WAIT on the side of the proxy and some SYN_SENT on the side of agents. => The xymonproxy program doesn't close its connections, then the system reach its limit of nbr of active connections and refuse the new ones. Modifying the creation of the socket in the C program, we were successfull in making the connections correctly handled: 230d229 < struct linger so_linger; 715,717d713 < so_linger.l_onoff = 0; < so_linger.l_linger = 10; < setsockopt(cwalk->ssocket, SOL_SOCKET, SO_LINGER, &so_linger, sizeof(so_linger)); Select Issue ==================== In the C program, the line n = select(maxfd+1, &fdread, &fdwrite, NULL, &selecttmo); is in error because the n generated is equaled to -1 . We didn't found yet why and how the solve it. Any idea ? Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN Next Absences: - From 3th Apr to 21th Apr System Tools Team Lead CACEIS and APERAM accounts CSC Computer Sciences Luxembourg S.A. 12D Impasse Drosbach L-1882 Luxembourg Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | gbegin at csc.com | www.csc.com CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664 From: Gautier Begin/LUX/CSC To: xymon at xymon.com, "Xymon" <xymon-bounces at xymon.com> Date: 02/19/2014 10:44 AM Subject: Re: [Xymon] XYMON Proxy Issue Any news ? Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN From: Gautier Begin/LUX/CSC at CSC To: xymon at xymon.com, "Xymon" <xymon-bounces at xymon.com> Date: 02/17/2014 06:56 PM Subject: Re: [Xymon] XYMON Proxy Issue Sent by: "Xymon" <xymon-bounces at xymon.com> Hi, I made a truss on the xymonproxy process and get such errors (ECONNABORTED/EINPROGRESS) 16881/1: 33.7424 0.0002 fcntl(6, F_SETFL, FNONBLOCK) = 0 16881/1: 33.7427 0.0003 connect(6, 0xFFBFD838, 16, SOV_DEFAULT) = 0 16881/1: 33.7429 0.0002 shutdown(4, SHUT_RDWR, SOV_DEFAULT) = 0 16881/1: 33.7430 0.0001 close(4) = 0 16881/1: 33.7432 0.0002 close(5) = 0 16881/1: 33.7433 0.0001 pollsys(0xFFBFD320, 4, 0xFFBFD3D8, 0x00000000) = 4 16881/1: 33.7435 0.0002 read(9, " c o n f i g b b w i n".., 8185) = 29 16881/1: 33.7437 0.0002 read(7, 0x000544E3, 9124) = 0 16881/1: 33.7439 0.0002 getsockopt(6, SOL_SOCKET, SO_ERROR, 0xFFBFD4B8, 0xFFBFD4B4, SOV_DEFAULT) = 0 16881/1: 33.7440 0.0001 write(6, " d a t a S N F N L X 2".., 402) = 402 16881/1: 33.7465 0.0025 accept(3, 0x0004E7A0, 0xFFBFD4B0, SOV_DEFAULT) Err#130 ECONNABORTED ... 6881/1: 33.2151 0.0002 accept(3, 0x0004E810, 0xFFBFD4B0, SOV_DEFAULT) = 8 16881/1: 33.2152 0.0001 fcntl(8, F_SETFL, FNONBLOCK) = 0 16881/1: 33.2153 0.0001 time() = 1392657199 16881/1: 33.2155 0.0002 shutdown(4, SHUT_RDWR, SOV_DEFAULT) = 0 16881/1: 33.2156 0.0001 close(4) = 0 16881/1: 33.2158 0.0002 shutdown(7, SHUT_WR, SOV_DEFAULT) = 0 16881/1: 33.2160 0.0002 close(5) = 0 16881/1: 33.2161 0.0001 time() = 1392657199 16881/1: 33.2162 0.0001 so_socket(PF_INET, SOCK_STREAM, IPPROTO_IP, "", SOV_DEFAULT) = 4 16881/1: 33.2163 0.0001 fcntl(4, F_SETFL, FNONBLOCK) = 0 16881/1: 33.2166 0.0003 connect(4, 0xFFBFD838, 16, SOV_DEFAULT) Err#150 EINPROGRESS 16881/1: 33.2167 0.0001 pollsys(0xFFBFD328, 5, 0xFFBFD3D8, 0x00000000) = 3 16881/1: 33.2168 0.0001 read(8, " c o n f i g b b w i n".., 8185) = 31 16881/1: 33.2171 0.0003 read(6, " s t a t u s C A C X N".., 49145) = 9630 .. Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN Next Absences: - From 20th Feb to 21th Feb - From 3th Apr to 21th Apr System Tools Team Lead CACEIS and APERAM accounts CSC Computer Sciences Luxembourg S.A. 12D Impasse Drosbach L-1882 Luxembourg Global Outsourcing Service | p:+352 24 834 276 | m:+352 621 229 172 | gbegin at csc.com | www.csc.com CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664 From: Gautier Begin/LUX/CSC at CSC To: xymon at xymon.com Date: 02/17/2014 04:55 PM Subject: [Xymon] XYMON Proxy Issue Sent by: "Xymon" <xymon-bounces at xymon.com> Hello I'm using XYMON 4.3.12 under Solaris 10.5 Since I put a proxy between my XYMON server and ~1000 agents, I have such pbl: - Many test are in pruple state, especially BBWin agents. - Even if the test is green, nothing is displayed in RRD graph. - I find timeout messages in logs (agents and server and xymonnet on the proxy): 2014-02-17 15:58:32 -> Recipient '10.195.243.205', timeout 15 2014-02-17 15:58:32 -> 1st line: 'combo' 2014-02-17 16:02:53 Whoops ! Failed to send message (timeout) - The xymonproxy log always complaining with a message that I don't understand: 2014-02-17 12:59:30 xymonproxy version 4.3.12 starting 2014-02-17 12:59:30 Listening on 0.0.0.0:1984 2014-02-17 12:59:30 Sending to Xymon server(s) 10.195.241.64:1984 2014-02-17 12:59:30 select() failed: Invalid argument 2014-02-17 12:59:30 select() failed: Invalid argument 2014-02-17 12:59:30 select() failed: Invalid argument - Many connections in TIME_WAIT from the proxy to the server, sometime the status is SYN_SENT - Tests coming from a second xymonproxy with fewer BBWin agents ( ~70) are working fine. I tried to play with timeout parameters on servers with no succès. Any idea ? Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon _______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

1 0

Cisco ASR1000 template for Devmon
by kpeng＠partycity.com 24 Feb '14

24 Feb '14

I have just registered Xymon community yesterday. Is this the right place to ask technical questions? From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T Sent: Monday, February 24, 2014 4:23 PM To: 'xymon' Subject: [Xymon] Cisco ASR1000 template for Devmon Anybody have a template for an ASR1000 for devmon? Paul Root Lead Engineer CenturyLink Network Reliability Operations Center 600 Stinson Blvd, N.E. Flr 2N Minneapolis, MN 55413 Direct: (651)312-5207 Paul.Root at centurylink.com

2 1