June 2020 - Xymon - Xymon mailman web

Proxy HTTPS requests don't use CONNECT
by canne74＠gmail.com 05 Jul '20

05 Jul '20

Hi, I am trying to setup some squid proxy checks with Xymon 4.3.17 (or 4.3.28: I have 2 servers in manual failover). * I added the `--bb-proxy-syntax` flag to the [xymonnet] section of tasks.cfg * I added a line with "1.1.1.1 proxy # testip http://1.1.1.1:3128/https://github.com/" to hosts.cfg * I spun up a tcpdump, and I see requests coming as "GET https://github.com/ HTTP/1.1" instead of the expected "CONNECT github.com:443" The error page states: > https://www.github.com/ - Not Implemented > > If I use "https" as the protocol for the proxy part, I get > https://github.com/ - SSL error > and Unspecified SSL error in SSL_connect to 30755/tcp on host 1.1.1.1: > error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol > in the log (of course I cannot read the request through tcpdump) Is there anything I am missing? Thank you -- Nicola

2 1

Question on controlling alerts.
by jacob＠shadowsoft.com 01 Jul '20

01 Jul '20

If I have multiple files being checked or multiple services being checked how do I control alerts for a specific item.? Such as two processes:? Process1 and Process2.? One of them goes red.? How do I send an alert based on the correct item.? Is it indexed or something.? I have looked in forums and email history for last several years but have not found how to do this? Thanks Paul Jordan

2 1

IPv6 and state of developement
by Krinetzki＠itc.rwth-aachen.de 24 Jun '20

24 Jun '20

Dear all, Our university is now moving from IPv4 to IPv6 and we want to continue using Xymon as a monitoring tool, but we are facing some difficulties. I have now compiled the latest archive version [r8119] from the 4.x-master. The compilation process ran without problems, but there were problems when starting the xymon-client and the xymon-server because of wrongly set variables. Fortunately this was solved, now client and server are running, but neither the server nor the client get correct monitoring data. With an IPv6 only Xymon server the client reports the following in the logs: 2020-06-23 10:07:20.222067 Whoops ! Failed to send message (timeout) 2020-06-23 10:07:20.222133 -> 2020-06-23 10:07:20.222137 -> Recipient '2a00:8a60:1:9304::1', timeout -2 2020-06-23 10:07:20.222141 -> 1st line: 'extcombo 1100 3484' The IP of the Client is 2a00:8a60:1:9304::1:5. So imho there is missing a block. Even the ping Tests doesn't work. Any suggestions, where to look? The IPv6 addresses are in the normal IPv6 format, in the config file and in the hosts.cfg. Maybe someone can give me a hint. The next question: Is there any developing at the moment or should we switch to a better maintained monitoring system? Regards Stephan -- Stephan Krinetzki IT Center Gruppe: Systemgruppe Linux Abteilung: Systeme & Betrieb RWTH Aachen University Seffenter Weg 23 52074 Aachen Tel: +49 241 80-24866 Fax: +49 241 80-22134 krinetzki at itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kan?le des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ?

2 1

HTTPS monitoring, with different IP
by mailinglists＠websitemanagers.com.au 21 Jun '20

21 Jun '20

I have a strange setup, my web server is behind a 1:1 NAT, and xymon is also behind the same router. The router doesn't support network pinning (ie, go out, and then translate on the way back in again), so the network test simply timeout. I've found a "solution" which is to configure xymon to talk to the internal IP address instead of the external one, but instead of changing the DNS or using /etc/hosts file, I want to keep this change to the xymon config. So currently I have this: 0.0.0.0??? ??? www.mysite.com.au??? ??? ??? # noconn httpstatus;https://mysite.com.au=10.0.0.23/;2.. This solves the problem for the http column (I get a green dot, and everything is OK), but I get a red dot for sslcert because xymon is looking at the wrong SSL certificate (not using SNI correctly). I'm using the xymon package from debian version 4.3.28-5+deb10u1 in case that is relevant. Is there a solution to have xymon correctly monitor the SSL certificate when using a different IP address? Regards, Adam

2 1

usemultipart during report generation (minor)
by conor＠conormccarthy.ie 19 Jun '20

19 Jun '20

Hi there, a rogue "\n" prevents (some) browsers from handling the content and meta- refresh during report generation. Per-spec, headers follow immediately after the multipart separator line. Applies to xymon-4.4 alpha. see attached for a trivial patch. Thanks & regards, Conor.

1 0

Terabithia or compile
by john.thurston＠alaska.gov 18 Jun '20

18 Jun '20

Ahh, the age-old question . . Last time I installed a xymon server, it was on Solaris and I compiled from source. I now need to deploy a new server on linux (specifically CentOS). What say ye? A) yum install from Terabithia B) make from source -- -- Do things because you should, not just because you can. John Thurston 907-465-8591 John.Thurston at alaska.gov Department of Administration State of Alaska

6 10

Display xymon server modules on own line
by kunci＠struzak.com 18 Jun '20

18 Jun '20

My old hobbit config:127.0.0.1???? localhost? # noconn bbd NAME:"xymon server modules"group Servers<server1-ip>? server1? ? # http://server1/???? NOCOLUMNS:files,ports<server2-ip>? server2??? # http://server2/path NOCOLUMNS:files,ports<server3-ip>? ... ... used to display hobbit-server-specific tests separate from the other tests, even though the modules reported actually run on server1.? This was a nifty trick not to have these tests listed for all servers, with only server1 reporting, and others displaying dashes. After moving to xymon, on the "xymon server modules" I only see bbd, info, and trends; xymond, xymongen, and xymonnet magically moved to the server1 line, defeating the purpose of this split. How can I achieve this split, where xymon server modules are listed on their own line? --Marcin

2 4

AUTO: Jason Jones is no longer employed at Codel
by jason.jones＠codelsoftware.com 18 Jun '20

18 Jun '20

An HTML attachment was scrubbed... URL: <http://lists.xymon.com/pipermail/xymon/attachments/20200618/24c89fb5/attach…>

2 1

[xymon] Terabithia RPMs still active?
by earle＠isolar.DynDNS.ORG 18 Jun '20

18 Jun '20

On 17 Jun 2020, at 3:00, xymon-request at xymon.com wrote: > Does anybody know if terabithia.org is still maintaining Fedora RPMs > for > xymon?? I exchanged emails with Japheth over half a year ago, but > have > not received any replies to more recent inquiries; RPMs for Fedora 31 > are not working and for 32 are missing altogether; the latest changes > in > Testing are from early May. Not working? Hmmn, news to me ... -- root at vm-fed ~]# cat /etc/fedora-release Fedora release 31 (Thirty One) [root at vm-fed ~]# rpm -q xymon-client xymon-client-local xymon-client-4.3.30-1.fc31.x86_64 xymon-client-local-4.3.30-1.fc31.x86_64 -- Oh yeah, now I remember - Japheth built some weird (unnecessary?) dependency upon "/bin/dash" into the Fedora 31 RPMs that I couldn't get to resolve, even though "/bin/dash" existed. I kludged around it via this temporary hack (I'll take "working" over "efficiency" any day): -- [root at vm-fed SPECS]# diff -rC 1 xymon.spec.rpmsave xymon.spec *** xymon.spec.rpmsave 2020-01-20 14:00:21.000000000 -0800 --- xymon.spec 2020-06-12 23:03:36.482862568 -0700 *************** *** 56,58 **** --- 56,62 ---- %else + %if 0%{?fedora} < 30 %global shell /bin/dash + %else + %global shell /bin/sh + %endif %endif -- and rebuilding the RPMs from the spec file. (Hopefully this will drag him out of the woodwork to berate me for doing this.) - Greg

1 0

Terabithia RPMs still active?
by kunci＠struzak.com 17 Jun '20

17 Jun '20

Does anybody know if terabithia.org is still maintaining Fedora RPMs for xymon?? I exchanged emails with Japheth over half a year ago, but have not received any replies to more recent inquiries; RPMs for Fedora 31 are not working and for 32 are missing altogether; the latest changes in Testing are from early May. Alternatively, does anyone know of another repo with Fedora 31 or 32 RPMs for xymon? --Marcin

2 1