- Xymon - Xymon mailman web

AIX 4.3.3 going purple on netstat test after 3-5 days
by jeffnewman75＠gmail.com 07 Nov '06

07 Nov '06

All, I sent an earlier message about both 4.2.0 and 4.2.0 with the latest patches going totally purple after 3-5 days. The process hobbit gets hung up on is netstat -an | grep ^tcp I have the following settings applied on the server: MAXMSG_CLIENT="900000" MAXMSG_STATUS="900000" MAXMSG_STACHG="900000" MAXLINE_STACHG="900000" I have 4 AIX 4.3.3 clients with this "going purple" problem, with no errors in any logs that I can find. Any help would be apprieciated. Thanks, Jeff

1 0

Problem with Regular Expression in Alert
by geoff.hallford＠gmail.com 07 Nov '06

07 Nov '06

Hi Everyone, I am having an issue where Hobbit will not take multiple alert parameters if one of them is a regular expression. I have my hobbit built with MRTG integration. My example is that I want to have my catch all rule exclude all msgs and interfaces (in the format int01-08, int09-16, ...). This works: COLOR=red EXSERVICE=%^int.* This doesn't work: COLOR=red EXSERVICE=msgs,%^int.* Does anyone have any hints, how to get this working? Maybe even a logical approach to get it working and not necessary a technical approach? Thanks.

3 4

Limiting Alerting by recipient?
by eric-list-1＠softlution.com 07 Nov '06

07 Nov '06

Hello, I've now got SMS alerting in Hobbit configured and running (using the smstools package and a Falcom Samba 55 USB modem under SuSE Linux Enterprise Server 9), and I'm experiencing a very different behaviour for Hobbit from what I was accustomed to in Big Brother. Basically, in Hobbit I get an SMS alert for every host/test combination that fails. We have situations where that generates about 10 SMS messages for a single true error. Sending ten messages where one would suffice seems a bit wasteful. In Big brother the default behaviour was to send one SMS message only, upon the first fail, and then suspend sending more messages to the same recipient until the repeat delay was expired. Is there any way to get this behaviour in Hobbit 4.2.0, or has anyone already created something generally useful in e.g. the SMS alert interface script he is using? If no-one has a solution, I'm going to write my own. Just checking if I'm about to re-invent the wheel! Regards, Eric.

2 1

adding hostname on mouse over ?
by thomas.seglard.enata＠cnp.fr 07 Nov '06

07 Nov '06

Hello, We have a lot of pages with a lot of lines within. Admins are asking me if it's possible to add server hostname into the little popup when you have your mouse over a test. From now on, we just have nameoftest:color:time, I want to be able to have hostname:nameoftest:color:time. I don't find anything in ~BBHOME§/server/web/* files... Could you help me, please ? Sincerly, Thomas Ce message (et toutes ses pieces jointes eventuelles) est confidentiel et etabli a l'intention exclusive de ses destinataires. Toute utilisation de ce message non conforme a sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. L'internet ne permettant pas d'assurer l'integrite de ce message, CNP Assurances et ses filiales declinent toute responsabilite au titre de ce message, s'il a ete altere, deforme ou falsifie. ***** This message and any attachments (the "message") are confidential and intended solely for the addressees. Any unauthorised use or dissemination is prohibited. E-mails are susceptible to alteration. Neither CNP Assurances nor any of its subsidiaries or affiliates shall be liable for the message if altered, changed or falsified.

2 2

Problem with TIME specification in hobbit-alerts.cfg?
by Eric.vdM＠Softlution.com 07 Nov '06

07 Nov '06

Hello, I'm still having problems with alert configuration in Hobbit. I've configured notifications as follows: > # On which colors should we alert? > $ALERT_COLORS=COLOR=purple,red > > # Mail rule > $MAIL_BEHEER=MAIL beheer at softlution.com FORMAT=TEXT REPEAT=10069920 RECOVERED NOTICE > > # SMS rule > $SMS_SUPPORT=SCRIPT /Hobbit/server/ext/pg/smsalert support FORMAT=SMS REPEAT=30 TIME=W:0800:0900,W:1700:2300,60:0800:2300 DURATION>5 RECOVERED NOTICE > > PAGE=<page> $ALERT_COLORS > $SMS_SUPPORT > > HOST=%.* $ALERT_COLORS > $MAIL_BEHEER hobbitd_alert --dumpconfig and hobbitd_alert --test seem to think this configuration is fine. smsalert is basically a wrapper around smstools' sendsms command, I've added phone number aliases so the actual phone numbers don't show up in the info column pages, and I've added basic logging with timestamps and sendsms exit codes. It has worked fine so far.) However, this morning at 8:00 AM no SMS was sent on a red condition which had already lasted for hours (it started at 00:44 AM) and is shown on the page <page>. A mail alert was sent as soon as the condition started, but an SMS is never sent and neither notifications.log nor my smsalert.log show any attempt to send an SMS. Am I doing something wrong here? Best regards, Eric.

1 0

ganglia-style graph aggregation with hobbit
by gn1＠sanger.ac.uk 07 Nov '06

07 Nov '06

Hello, I'd like to completely replace the ganglia system we have here with hobbit. Most of the needed features are there, except the ability to produce aggregated graphs with multiple hosts, as in http://monitor.millennium.berkeley.edu/?c=PSI%20Cluster&m=&r=hour&s=descend… I suppose the following things will need to be done: - find a neat way to group the hosts (all the hosts in a group or a page for instance) - collect all the values from the rrd for all the hosts in a group and add them (when different from 0/NaN) - graph the result What would be the best way to do it? I'd like not to reinvent the wheel, so if some bits are already existing, I'd better use them... Cheers, Gildas

7 14

Multi-host process graphs
by jonescr＠cisco.com 06 Nov '06

06 Nov '06

Has anyone had any luck in creating multi-hosts process graphs? Here are the steps I have done so far in trying to get it to work. If anyone sees what I am doing wrong, any advice would be appreciated. 1. Created a multi definition in hobbitgraphs.cfg [processes-multi] FNPATTERN processes.(.+).rrd TITLE Multi-host Process counts YAXIS # DEF:cnt at RRDIDX@=@RRDFN@:count:AVERAGE -l 0 -A LINE2:cnt at RRDIDX@#@COLOR@:@RRDPARAM@ GPRINT:cnt at RRDIDX@:LAST: \: %10.1lf (cur) GPRINT:cnt at RRDIDX@:MAX: \: %10.1lf (max) GPRINT:cnt at RRDIDX@:MIN: \: %10.1lf (min) GPRINT:cnt at RRDIDX@:AVERAGE: \: %10.1lf (avg)\n 2. Edited hobbit/server/web/hostgraphs_form and added the extra option for process counts: <option value="processes">Process counts</option> 3. Made sure that the process rrds are there (I know they are anyway because I see the graphs in trends): $ ls data/rrd/prod-web-1/processes.* data/rrd/prod-web-1/processes.Apache_portal.rrd data/rrd/prod-web-1/processes.Apache_tomcat.rrd data/rrd/prod-web-1/processes.Apache_research.rrd data/rrd/prod-web-1/processes.Apache_main.rrd data/rrd/prod-web-1/processes.Apache_proxy.rrd Now when I go to the Metrics Report, and select prod-web-2 and prod-web2, along with Process counts. I get a missing graph, so something isn't working right. The same hosts work fine with other multi-host graphs like la1, cpu, etc. any ideas? -Charles

1 0

Port Monitoring
by paul.moore＠verizonbusiness.com 06 Nov '06

06 Nov '06

Is there a way to setup hobbit's port monitoring to alert when a specific device has X number of established connections on particular port? IE alerting when one client has 20 sessions connected to port 80 signifying a DOS attack? Paul Moore V966-5159 MSO OSS Support -=-=-=-=-= Pinky, Are You Pondering What I'm Pondering? Well, I think so Brain but if Jimmy cracks corn and no one cares, why does he keep doing it?

2 2

[hobbit] Hosts going purple
by CHRIS.MORRIS＠RWEnpower.com 06 Nov '06

06 Nov '06

Check the size of the client message file compared to the MAXMSG_CLIENT, MAXMSG_STATUS and MAXMSG_STACHG settings in the hobbitserver.cfg file, if you have lots of ports open on that host it can create a large amount of output which is too big for Hobbit to process. > -----Original Message----- > From: Jeff Newman [SMTP:jeffnewman75 at gmail.com] > Sent: Thursday, November 02, 2006 4:12 PM > To: hobbit at hswn.dk > Subject: [hobbit] Hosts going purple > > Hi, > > I am running the latest hobbit server/client (with all the patches > applied) and I still have AIX hosts going purple due to the netstat > command (nearest I can tell) > > From ps: > # ps -ef | grep hob > hobbit 13306 16692 0 03:58:28 - 0:00 sh > /usr/local/hobbit/client/bin/hobbitclient.sh > hobbit 15572 13306 0 03:58:28 - 0:00 sh > /usr/local/hobbit/client/bin/hobbitclient-aix.sh > root 16262 12252 0 11:07:52 pts/0 0:00 grep hob > hobbit 16692 1 0 Oct 30 - 0:03 > /usr/local/hobbit/client/bin/hobbitlaunch > --config=/usr/local/hobbit/client/etc/clientlaunch.cfg > --log=/usr/local/hobbit/client/logs/clientlaunch.log > --pidfile=/usr/local/hobbit/client/logs/clientlaunch.devarb2.pid > hobbit 18104 15572 64 03:58:29 - 206:41 netstat -an > hobbit 20870 15572 0 03:58:29 - 2:55 grep ^tcp > > If I go on that host (which is purple right now) and run "netstat -an > | grep ^tcp" it runs just fine. > > This happens mostly on AIX 4.3.3 > > There is nothing in any log file on the client to indicate any problem. > > Can provide any needed info. > > Thanks, > Jeff > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither RWE npower nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). *****************************************************************************

2 3

Warnings and patch oddities
by rmunsch＠solutionsforprogress.com 06 Nov '06

06 Nov '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm seeing a slew of these on a fresh DL of hobbit 4.2.0 and the allinone.patch: currant:~# patch -p5 <allinone.patch missing header for unified diff at line 4 of patch patching file hobbit-4.2.0/bbdisplay/bbgen.h missing header for unified diff at line 39 of patch patching file hobbit-4.2.0/bbdisplay/loadbbhosts.c missing header for unified diff at line 132 of patch patching file hobbit-4.2.0/bbdisplay/loadbbhosts.h missing header for unified diff at line 145 of patch patching file hobbit-4.2.0/bbdisplay/loaddata.c missing header for unified diff at line 244 of patch patching file hobbit-4.2.0/bbdisplay/pagegen.c missing header for unified diff at line 376 of patch patching file hobbit-4.2.0/bbnet/bbtest-net.c i don't really know what they mean. I note also that the patching instructions are not correct as-is. They state: http://www.hswn.dk/hobbitsw/patches/ 'All patches should be applied using GNU patch. "cd" to the hobbit-4.2.0 directory, then run "patch -p0 <allinone.patch".' However, since the path specified in the patch file is /home/henrik/hobbit/release/hobbit-4.2.0 i do not think this will work unless you are Henrik :) - -- Rob Munsch Solutions For Progress IT www.solutionsforprogress.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFT4hQBvBcJFK6xYURAgmbAJ95lVRJNE+Jjp/9st7VnKtx08iqhACeIUv0 2aprSUKlWaDoTENC0Dk8mUE= =WBvU -----END PGP SIGNATURE-----

2 1