June 2016 - Xymon - Xymon mailman web

bad processing of client data on the server
by Scot.Kreienkamp＠la-z-boy.com 24 Jun '16

24 Jun '16

A few weeks ago there was a thread on this list about xymon confusing the client reports by reporting results from one client on another client entirely. I had been watching strange things happen to my Xymon instance occasionally and just now caught the first irrefutable proof that was indeed happening in my environment. The ports test page for retv6034 contains the results from another server entirely, which can be proven by comparing the text of the ports page with the client data report. Xymon server has obviously gotten this wrong in processing somewhere as the client data brought back through the client data link at the bottom of the ports test page contains the correct data. The two servers are multiple hops away from both each other and the Xymon server, and the Xymon server load at the time was .1 and 96% idle CPU usage. Here's a snippet from the ports test page from retv6034 at the time, which was reporting red due to missing ports that were being monitored on retv6034: TCP 10.103.1.63:135 10.1.1.34:40773 ESTABLISHED TCP 10.103.1.63:135 10.1.2.23:57996 ESTABLISHED TCP 10.103.1.63:135 10.1.7.55:12679 ESTABLISHED TCP 10.103.1.63:135 10.1.7.55:12722 ESTABLISHED TCP 10.103.1.63:135 10.1.7.56:20008 ESTABLISHED TCP 10.103.1.63:135 10.112.1.62:52119 ESTABLISHED TCP 10.103.1.63:135 10.125.1.63:23527 ESTABLISHED TCP 10.103.1.63:139 0.0.0.0:0 LISTENING And here's the entire ports section from the client data report for retv6034. This is the correct data for what should have been on the page: [ports] Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 127.0.0.1:8005 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:8009 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:60111 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:35060 0.0.0.0:* LISTEN tcp 0 0 10.170.1.114:53 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN tcp 0 0 10.170.1.114:33972 10.1.1.200:1984 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:15971 FIN_WAIT2 tcp 0 0 10.170.1.114:8080 10.170.1.240:7519 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:63015 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:64431 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:32815 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:10363 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:54788 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:54629 ESTABLISHED tcp 0 0 10.170.1.114:8080 10.170.1.242:25603 FIN_WAIT2 tcp 0 0 10.170.1.114:8080 10.170.1.240:52365 TIME_WAIT tcp 0 0 10.170.1.114:44018 10.1.2.50:514 ESTABLISHED tcp 0 0 10.170.1.114:8080 10.170.1.241:15201 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:10447 FIN_WAIT2 tcp 0 0 10.170.1.114:8080 10.170.1.241:1043 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:17144 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:13427 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:4912 TIME_WAIT tcp 0 0 10.170.1.114:33974 10.1.1.200:1984 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:52295 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:18884 TIME_WAIT tcp 0 0 10.170.1.114:913 10.170.1.220:2049 ESTABLISHED tcp 0 0 10.170.1.114:58396 10.1.2.54:2003 ESTABLISHED tcp 0 0 10.170.1.114:8080 10.1.1.200:50195 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:3119 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:54730 TIME_WAIT tcp 0 0 10.170.1.114:33976 10.1.1.200:1984 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:10171 ESTABLISHED tcp 0 0 10.170.1.114:8080 10.170.1.240:42249 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:6831 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:51631 TIME_WAIT tcp 0 0 10.170.1.114:58394 10.1.2.54:2003 ESTABLISHED tcp 0 0 10.170.1.114:8080 10.170.1.242:63087 TIME_WAIT tcp 0 0 10.170.1.114:33978 10.1.1.200:1984 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:20554 FIN_WAIT2 tcp 0 0 10.170.1.114:49506 10.1.7.75:389 ESTABLISHED tcp 0 0 10.170.1.114:8080 10.170.1.240:47234 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.242:47185 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.241:50056 TIME_WAIT tcp 0 0 10.170.1.114:8080 10.170.1.240:26500 TIME_WAIT tcp 0 0 :::111 :::* LISTEN tcp 0 0 :::44688 :::* LISTEN tcp 0 0 :::36886 :::* LISTEN udp 0 0 0.0.0.0:993 0.0.0.0:* udp 0 0 0.0.0.0:995 0.0.0.0:* udp 0 0 0.0.0.0:878 0.0.0.0:* udp 0 0 0.0.0.0:110 0.0.0.0:* udp 0 0 0.0.0.0:111 0.0.0.0:* udp 0 0 0.0.0.0:631 0.0.0.0:* udp 0 0 10.170.1.114:123 0.0.0.0:* udp 0 0 127.0.0.1:123 0.0.0.0:* udp 0 0 0.0.0.0:123 0.0.0.0:* udp 0 0 0.0.0.0:647 0.0.0.0:* udp 0 0 0.0.0.0:143 0.0.0.0:* udp 0 0 0.0.0.0:783 0.0.0.0:* udp 0 0 127.0.0.1:921 0.0.0.0:* udp 0 0 0.0.0.0:161 0.0.0.0:* udp 0 0 10.170.1.114:53 0.0.0.0:* udp 0 0 127.0.0.1:53 0.0.0.0:* udp 0 0 0.0.0.0:40131 0.0.0.0:* udp 0 0 0.0.0.0:52420 0.0.0.0:* udp 0 0 0.0.0.0:847 0.0.0.0:* udp 0 0 :::878 :::* udp 0 0 :::111 :::* udp 0 0 :::123 :::* udp 0 0 :::35899 :::* udp 0 0 :::35906 :::* Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D> www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy> [cid:lzbVertical_hres.jpg] This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

1 0

bbmrtg.pl
by mailinglist＠tikklik.nl 24 Jun '16

24 Jun '16

Hello, I have used xymon / BB for many years. I had to do a reinstall (server crash) I had a collum traffic But I cant get this to work again. If I manualy run the script bbmrtg.pl I see localhost status mx2.mx2....com green Thu Jun 23 17:08:02 2016 but that has to be mx2..com the configfile looks like this bb*host[mx2..com]: mx2..com bb*svc[mx2..com]: mx2..com bb*unit[mx2..com]: bytes/sec bb*althost[mx2..com]: mx2..com bb*altsvc[mx2..com]: traffic I see a ghost report reported host mx2...com.mx2... any idees how to fixc this?

2 1

Custom Tests
by joshuasocrates＠gmail.com 23 Jun '16

23 Jun '16

Hello again Xymon members, I'm very new to both Unix systems and Xymon, and I have to say learning Xymon on a Unix system is currently leaving me pretty stumped for a lot of things. Right now I am attempting to create a script that will read the past 20 minutes of a log file, and report an array of values back to Xymon. I am looking for the end result to have a "green face" if less than five zeroes are detected, a yellow from 5 - 10, and a red from 10 and up. I have the script written, but I am unsure how to implement it into Xymon and have the results printed out when I click on the face beneath the test column. Results to be viewed after clicking the test column are in the format as followed: TIMESTAMP DATANAME DATATYPE FREQUENCY TIMEFRAME With respective info included. So how would I go around formatting the end result of a test to look like this when you clicked for more information? Cheers all! Joshua H

2 1

SSL/HTTPS enabling on existing Xymon Server
by shekar.raaja＠gmail.com 22 Jun '16

22 Jun '16

Hello Xymon Team, I would like to enable SSL on XYMON Server to support https requests. As I am seeing connection time out errors for HTTPS URL's. Our configuration supports HTTP perfectly fine and for your information it is in production and live, so we don't want to do reinstall of Xymon servers. Rather than is there any configuration changes we can make on existing configs and do the server restart?? Xymon Version we are using Xymon version 4.3.7 I just installed Openssl OpenSSL 1.0.1e-fips 11 Feb 2013 Please let me know if any concerns. Thanks and Regards Raja Shekar

1 0

EXTIME still valid ?
by rltexas1＠gmail.com 22 Jun '16

22 Jun '16

Is the EXTIME option still valid in the alerts.cfg I am having problems testing the following EXTIME=1:1140:1240 Should be exclude Monday's 11:40 to 12:40. Will test EXTIME=M:1140:1240 But if it's M for Monday what would Sunday be ? Thanks

4 4

Reload error
by joshuasocrates＠gmail.com 22 Jun '16

22 Jun '16

I've been getting an error with Xymon since I edited the host page last, and for the life of me I cannot figure out why. Error is as follows: -> Recipient 'xxx.xxx.xxx.xx', timeout 15 -> 1st line: 'config hosts.cfg' Cannot load hosts.cfg from xymond, code 7 Failed to load from xymond, reverting to file-load Whoops! Failed to send a message (timeout) And this repeats for a while in /alert.log. As a result, my xymon page is currently saying it is still... Fri Jun 17 07:35:35 2016. I would like to avoid posting my actual hosts.cfg page, but if it comes to that I will do so. Does anyone have any suggestions? I've compared my hosts.cfg file to others I can find, and I don't see any reason why there should be errors. Thanks, Joshua

2 1

Intelligent CPU Load Settings
by howe.bill＠gmail.com 21 Jun '16

21 Jun '16

FYI, For those that don't want to wait for a variable or for the xymon server to out of the box handle this situation, I thew together a quick script that is working in our environment to auto populate client CPU loads. 1. Download text file attachment (xymon_client_cpuload_calc.txt), rename to have a .sh ending, place file on Xymon server. (someplace such as /root/scripts/) 2. Install pre-req package: "bc" (this allows bash string to floating point number conversion) 3. Edit script in the "Customize Here" section: - Edit multipliers (number of procs * number for warning and critical CPU load thresholds) - Note the default for the auto load directory or change it. 4. Create the auto load directory on the Xymon server (default: /etc/xymon/analysis.d/auto-cpuload.d) 5. Add the auto load directory to the Xymon main analysis.cfg file so it is included: (default: "directory /etc/xymon/analysis.d/auto-cpuload.d" to /etc/xymon/analysis.cfg ) 6. Setup the script to auto run via cron (-v is verbose output) - *Example*: - /etc/cron.daily/xymon-calc-cpuload.sh #!/bin/bash # Description: Execute xymon script to auto calculate cpu load from hostdata ######################### /root/scripts/xymon_client_cpuload_calc.sh -v &> /root/scripts/xymon_client_cpuload_calc.log Bill Howe howe.bill at gmail.com <http://www.linkedin.com/in/whowe> On Mon, May 30, 2016 at 3:28 PM, Bill <howe.bill at gmail.com> wrote: > JC, > > Awesome, glad its on its way! > > Is the nproc collection currently available in a xymon variable? > > That way, it can be worked around with a server side cron for now. > > Thank you, > > Bill Howe > howe.bill at gmail.com > > > On 05/30/2016 01:42 AM, J.C. Cleaver wrote: > >> >> On Sat, May 28, 2016 2:11 pm, Bill wrote: >> >>> Xymon'ers, >>> >>> Is there any planned functionality to be able to dynamically set a xymon >>> client's LOAD alert settings based upon how many processors it has? >>> >>> The current static defaults are not too helpful, and hand editing an >>> entry in /etc/xymon/analysis/*.cfg for every server just shouldn't have >>> to be done. >>> >>> _*Ideally*_ >>> It would be best if along with the "top" view that is reported by >>> clients, they also reported their CPU count (either with "nproc" or >>> "grep -c proc /proc/cpuinfo") >>> >>> Then the CPU count could be shown on client's "cpu" service page. <= >>> Critical information when determining if load is a problem or not. >>> >>> Since the count would then be reported to and available on the xymon >>> server, it could then be possible to set warnings and criticals based >>> off of CPU count. (IE Warn at a load number equal to CPU count, Critical >>> at a number equal to CPU count x 1.5) >>> >>> >> Hi Bill, >> >> It's definitely planned, but not quite in there yet. It'll likely need to >> be an additional (distinct) RRD file with a separate set of (normalized) >> thresholds. >> >> The collection of number of processes for some OS's went in in >> https://sourceforge.net/p/xymon/code/7707 >> >> >> HTH, >> -jc >> >> >

1 1

Process needs restart monitor
by robert.herron＠gmail.com 21 Jun '16

21 Jun '16

My Google-fu of the maillist archive is weak and I didn't see anything relevant on Xymonton. I have a job pool that is restarted weekly via cron if no jobs are running. I would like to be alerted if its process start time is more than 2 weeks ago. Is there a native way to alert that a process hasn't has been running too long? Sort of like the analysis.cfg "UP" check but for a process. Thanks.

1 0

Xymon Graph propagated with -nan
by Foster.Patch＠accuweather.com 17 Jun '16

17 Jun '16

Hello, I have a custom monitor that I created which will monitor connections and requests. (http://pastebin.com/bdLZfFAW) The monitor works properly, however the graphing does not. This image displays what is wrong with the graph: http://imgur.com/ZFKkPYs. I have also attached my rrd dump of this monitor. (http://pastebin.com/CRadmAHu) Finally, attached is the graph definition for the test, located in graphs.cfg (http://pastebin.com/zX1HNi3p) I know the issue here is that the last_ds is picking up the values as "U", which is bad, but I don't know what to do about it. Any help would be appreciated, thanks, Foster Patch Web Server Technician AccuWeather

2 3

403 Forbidden - ou don't have permission to access /xymon on this server
by gopal.anandarao＠wipro.com 17 Jun '16

17 Jun '16

Hello All, I am getting following error after installing Xymon and trying to access xymon URL. Forbidden You don't have permission to access /xymon on this server. ________________________________ Apache/2.4.18 (Ubuntu) Server at 10.207.12.135 Port 80 Appreciate any help. I have apache2 (Ubuntu version) installed and web server processes are running under www-data UNIX user. Xymon web directory is owned by xymon UNIX user, however with 755 permission. Hence I do not see any issue with www-data user having access to xymon web directories. Is any other security settings that needs to be done? Thanks in advance. Gopal The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

3 3