March 2016 - Xymon - Xymon mailman web

SSLCert test dependency on HTTP?
by Scot.Kreienkamp＠la-z-boy.com 28 Mar '16

28 Mar '16

Hi all, I have sslcert tests that keep going purple 30 minutes after the HTTP test starts failing. If the HTTP test is failing I know the sslcert test is going to fail, so I would expect there to be an implied dependency on the http test. There doesn't seem to be one though. Is there any way to do this in the configuration? I tried adding a dependency but it doesn't seem to have any effect. Thanks! Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

5 12

Depends tag working configuration
by rower.master＠gmail.com 28 Mar '16

28 Mar '16

Hi All, I´m trying to make the "depends=" hosts.cfg tag to work on Xymon version 4.3.24. Reading some old threads here, it became not clear to me if this configuration tag currently works or not. Has someone here have the depends tag working? I know I can use the route tag, but my intention it´s to use another network protocol and not ICMP for the dependency. Thanks & Regards, Mario

2 3

IP swap
by Jeevan.Reddy＠colt.net 28 Mar '16

28 Mar '16

Hi team, We did a IP swap between 2 hosts. No changes are done on DNS records of hostnames. Xymon is polling wrong server now, that is still xymon is polling the IP's before the IP swap. Please help , what should be done. For example Host1 with IP 10.10.10.1 on hardware HP Host2 with IP 10.10.10.2 on hardware Dell I did config as Configuring host2 IP on HP server and host1 IP on Dell server with out change on DNS records. Now xymon is polling wrong host. Please help [sign] Jeevan Reddy.G Tech Lead (Unix) , Technology Shared services Colt Technology Services India Pvt Ltd 5th & 6th Floor, Silver Oak, B Wing, Manyata Embassy Business Park, Nagawara, Bangalore - 560045 DDI: +44 20 3353 5165 Mob: +91 9342293041/ www.colt.net<http://www.colt.net/> [Colt Disclaimer] This email is from an entity of the Colt group of companies. Colt Group S.A., K2 Building, Forte 1, 2a rue Albert Borschette, L-1246 Luxembourg, R.C.S. B115679. Corporate and contact information for our entities can be found at http://colt.net/uk/en/Colt-Group-of-Companies/index.htm. Internet communications are not secure and Colt does not accept responsibility for the accurate transmission of this message. Content of this email or its attachments is not legally or contractually binding unless expressly previously agreed in writing by Colt

4 4

TODO
by Galen.Johnson＠sas.com 27 Mar '16

27 Mar '16

?Hey, I was poking around in the source after pulling down the latest version. I noticed a TODO file in the docs folder (interestingly it mentions the SMTP issues recently brought up on the list). I see that the timestamp on that file is 2011. I'm just curious how much (if any) of that list as been completed, how much is still relevant since it seems to be based on an email from 2005, and if it's referenced when adding/fixing features. Just a curiosity. =G=

1 0

Replacing the smtp test in protocols.cfg
by john.thurston＠alaska.gov 25 Mar '16

25 Mar '16

The default test in protocols.cfg is > [smtp] > send "mail\r\nquit\r\n" > expect "220" > options banner > port 25 All of my smtp servers accept the connection, return the 220 response, and return a 50X response due to the mal-formed "mail" command. The test result in Xymon is green because of the 220 response, but my smtp logs an error for each connection. I can replace the send-string with: send "quit\r\n" and get better behavior, but I expect that I'll need to make this change every time I update Xymon. It does not appear that re-defining the smtp test in a later (included) .cfg file replaces the first definition. Two questions: Is there anyone for whom this test is _not_ filling up the error log on their smtp server? If I edit the native protocol.cfg, am I correct that I'll need to replace protocols.cfg with each code update? -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Enterprise Technology Services Department of Administration State of Alaska

3 6

mailing list opt-out
by toyin＠agege.com 25 Mar '16

25 Mar '16

Greetings, Due to unnecessary phone calls and internet publishing. My name is Toyin Orokotan and I wish to be fully remove from your website as well as all the other website and database that you own. Sincerely, Toyin

1 0

Xymon 4.3.27 Released
by cleaver＠terabithia.org 24 Mar '16

24 Mar '16

Hello all, Xymon 4.3.27 has been released and is now available for download. 4.3.27 is primarily a bug fix release, dealing with several reported issues with the CGI interface and acknowledgement redirects within the "critical view" pages. Additionally, Xymon now tests for the presence of SSLv3 (as well as SSLv2) and will use appropriate initialization methods on systems that have had SSLv3 support removed from the openssl library. 4.3.27 should now compile cleanly on systems that have had that support removed for security reasons. Xymon 4.3.27 is available from the Xymon SourceForge page at https://sourceforge.net/projects/xymon/ Regards, Japheth "J.C." Cleaver Xymon 4.x Maintainer

1 0

Advanced HTML Mail Alert Perl script
by A.Chervonets＠cominder.eu 24 Mar '16

24 Mar '16

Another note: the link generated does not reflect real web-server URL. For example, we use: HTTPS instead of HTTP special port, instead of default one. It would be nice script could read UTL starter from some config file Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/ From: Andrey Chervonets/Cominder/LV To: xymon at xymon.com Date: 23.03.2016 19:20 Subject: Re: Advanced HTML Mail Alert Perl script I have tested it on xymon 4.3.17 - working good, but some notes: It generated at mail body start the link like: See http://hostname/xymon-cgi/bb-hostsvc.sh?HOST=target_host&SERVICE=disk But there is no bb-hostsvc.sh on server. But instead we have svcstatus.sh . Whether it was changes to bb-hostsvc.sh in latest xymon versions? Or perl sript version on xymonton is just fork of addon for older versions ? Best regards, Andrey Chervonets ---------------------- SIA CoMinder http://www.cominder.eu/

3 3

DURATION not working as expected
by johan.sjoberg＠deltait.se 24 Mar '16

24 Mar '16

Hi, We are having problems with the DURATION setting in alerts.cfg, that it doesn't work as expected. The problem is that DURATION counts the time since the test went from OKCOLOR to ALERTCOLOR, and not the time since the alert-triggering color started. This means that if you have the default setting, with yellow as an ALERTCOLOR, and configure SMS alerts for red color with a certain DURATION, SMS will be sent to escalation teams immediately if a test is yellow for more than DURATION, and then goes red. If I configure an alert for red color, I would expect it to start counting the DURATION from when the red color was triggered. Is there some easy hack I can do to change this behavior? The current workaround is to have yellow as an OKCOLOR, but that means we cannot set up any alerts for yellow, and we cannot ack yellow tests. Regards, Johan

2 2

Advice for installing Xymon server supporting TLS 1.2
by ian.burrowes＠gmail.com 24 Mar '16

24 Mar '16

Hi All, I have an older Xymon server (4.3.9) that I am replacing / upgrading to the current version (4.3.26). What I absolutely require from my new build is HTTPS check compatibility with websites that only accept modern security protocols like TLS, i.e. not SSL2 or SSL3, that are no longer safe to use. My existing Xymon server can't connect to some of our more secure websites that only uses TLS 1.1+ or require SNI support. I have been practising my new Xymon build in a virtual environment on CentOS 7.2 but have not been able to get it into a state that can connect to all our more secure websites, usually getting 'SSL Error' on the HTTP check. (error also replicated with wget) I know this is related to the version of OpenSSL installed on the system. I think I want the newest version available! I have tried using both the Terabithia Xymon package and compiling myself. I have also tried to install or upgrade a newer version of OpenSSL either before or after installing xymon. (Often when I update the version of OpenSSL will revert to an older version when I do a 'yum update'). I have searched the mailing list and found others with related issues, but rather than ask for specific troubleshooting steps, I wonder if anyone could provide general advice in terms of the order of installing components when setting up a fresh Xymon server for it to hopefully use the most recent version of OpenSSL available and be able to be updated with yum in future? Kind Regards, Ian

3 2