- Xymon - Xymon mailman web

Monitoring NetWare - Changing between purple & green frequently
by TMoore＠rooneyholdings.com 17 Feb '06

17 Feb '06

Hello all, I'm using the Perl/MRTGEXT.NLM combination designed for BigBrother to monitor NetWare systems (it's all I could find). My problem is that the system on which I'm testing frequently changes between "purple" and "green/yellow" statuses for the items it's tracking. This happens about every five minutes, which is to say it spends 5 minutes in the "purple" status for the MRTGEXT.NLM based tests, and 5 minutes or so in the normally reporting states. I've tried playing around with the interval settings, to no real avail, but I'm not sure I know 100% what I'm doing. Any help is greatly appreciated...Also, for what it's worth, here's some possibly relevant config entries: BB-HOSTS: ... 192.168.26.7 mdfwfp16.tamu.rbc.app # ncp dns nwstats ... HOBBITLAUNCH [bbdisplay] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd GROUP generators CMD bbgen $BBGENOPTS --report LOGFILE $BBSERVERLOGS/bb-display.log INTERVAL 1m [bbnet] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD bbtest-net --report --ping --checkresponse LOGFILE $BBSERVERLOGS/bb-network.log INTERVAL 90 [nwstats] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD $BBHOME/ext/nwstats2bb_wrap.sh LOGFILE $BBSERVERLOGS/nwstats.log INTERVAL 1m

1 0

[hobbit] Intervals and graphs
by greg.hubbard＠eds.com 17 Feb '06

17 Feb '06

Doug, The RRD definitions have a "valid time" -- default is 600 seconds, or 10 minutes. So if your values are not updated within 10 minutes they are considered invalid. Problem is that you may have to fiddle in the source to change these default settings to accommodate non-standard polling intervals... GLH -----Original Message----- From: Doug Ledbetter [mailto:dougl at mybetter.com] Sent: Friday, February 17, 2006 12:46 PM To: hobbit at hswn.dk Subject: [hobbit] Intervals and graphs Hello, I'm running a Hobbit server and have one other client connecting to it. All are running Linux. So far I've been pleased with it except for one issue. I changed the interval from 5m to 15m for several settings (bbcombotest, bbnet, hobbitclient) in the "hobbitlaunch.cfg" config file (on both the server & client), restarted the Hobbit server and client and then noticed that it stopped graphing. It would still update the current status board, etc. but it stopped adding to the graphs. I let it go like this for a few days and then recently set the intervals back to 5m, restarted the server and client and then it started adding to the graphs again. Is this normal? Shouldn't I be able to run the tests every 15 minutes instead of every 5 and still get graphs? Am I missing something? Thanks, -dougl ____________________________________________________________ Doug Ledbetter --> dougl at mybetter.com MyBetter Web Hosting - Budget Web Hosting http://www.mybetter.com/ PGP Public Key: http://www.mybetter.com/public_key.html To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

query message : hobbit protocol question
by etienne.grignon＠gmail.com 17 Feb '06

17 Feb '06

Henrik, I'm having problems to implement query message. I'm sending the message bellow to the socket : query myserver.cpu Then, on the recv call, I get nothing. Then, the socket seems to be closed after somes seconds. Is it the right syntax ? or is there a way to find what's going on on the server at this moment ? It is done against hobbit 4.1.1 Thank you for your help, Etienne

2 2

Potential patches for Darwin and FreeBSD
by glarkin＠sourcehosting.net 17 Feb '06

17 Feb '06

Hi folks, I am using Mac OS X 10.3.9 for my Hobbit server, and I'm monitoring some RH9 Linux boxes and FreeBSD 4.11 boxes. The FreeBSD box reported disk problems as soon as I got the client installed. The filesystem type "linprocfs" is not ignored during the disk checks, so I patched hobbitclient-freebsd.sh to omit it, since it always reports 100% usage. I also patched hobbitclient-darwin.sh a couple of days ago to fix an argument problem with "df" that resulted in this error message over and over in my hobbitclient.log file: df: illegal option -- T usage: df [-b | -H | -h | -k | -m | -P] [-ailn] [-t type] [file | filesystem ...] Henrik (or anyone else), if you want these patches, email me separately and I'll send them to you or place them somewhere for download. If there's a better way to submit patches, let me know. Regards, Greg, SourceHosting.net, LLC Ready. Set. Code. http://www.sourcehosting.net/

1 0

[hobbit] Swamped with e-mails
by neil.camp＠deca.mil 17 Feb '06

17 Feb '06

Sorry for filling up your mailbox. See, if Hobbit was not so useful, we would not want to e-mail you so much ;-) --neil ManTech DeCA Operations Systems Administrator (804) 734-8353 neil.camp at deca.mil -----Original Message----- From: Henrik Stoerner [mailto:henrik at hswn.dk] Sent: Friday, February 17, 2006 6:51 AM To: hobbit at hswn.dk Subject: [hobbit] Swamped with e-mails Guys & gals, my mailbox is currently overflowing - I have about 2000 hobbit-related e-mails that I need to read through. I'll probably spend most of the week-end clearing the back-log. So please - don't mail me directly unless you've got something that is *really* urgent (or has nothing to do with Hobbit). Regards, Henrik To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

1 0

Swamped with e-mails
by henrik＠hswn.dk 17 Feb '06

17 Feb '06

Guys & gals, my mailbox is currently overflowing - I have about 2000 hobbit-related e-mails that I need to read through. I'll probably spend most of the week-end clearing the back-log. So please - don't mail me directly unless you've got something that is *really* urgent (or has nothing to do with Hobbit). Regards, Henrik

1 0

Difficulty with CPU/disk/procs columns
by glarkin＠sourcehosting.net 16 Feb '06

16 Feb '06

Hi there, First of all, let me say - Hobbit is great! I set aside some hours yesterday to get things set up, and it's working really well. Here's my setup: Hobbit version 4.1.2p1 BBDISPLAY/BBNET/BBPAGER: Mac OS X 10.3.9 machine Hostname: Gregory-Larkins-Computer.local Client: RedHat 9 (2.4.20-31.9.progeny.8 i686 i686 i386 GNU/Linux) Hostname: patches The one problem I'm having is that I can't get the CPU/disk/procs columns to display for the client I'm monitoring. I double- and triple-checked by bb-hosts, hobbit-clients.cfg, firewall, etc. So far, everything looks good, but there must be a problem somewhere. I've followed the advice here (http://hobbitmon.sourceforge.net/docs/hobbit-tips.html#noclient) but I haven't fixed the problem yet. Here are the relevant parts of my config files: **** **** bb-hosts **** **** 192.168.1.240 Gregory-Larkins-Computer.local # BBDISPLAY BBPAGER BBNET bbd http://localhost/ ssh smtp ftp 204.8.45.68 www.sourcehosting.net # CLIENTNAME:patches http://www.sourcehosting.net/ **** **** ******** **** **** **** **** hobbit-clients.cfg **** **** HOST=Gregory-Larkins-Computer.local PROC named 1 1 PROC /usr/local/sbin/dyndnsd 1 1 PROC ntpd 1 1 HOST=patches LOAD 3.0 5.0 DEFAULT # These are the built-in defaults. UP 1h LOAD 5.0 10.0 DISK * 90 95 MEMPHYS 100 101 MEMSWAP 50 80 MEMACT 90 97 **** **** ****************** **** **** I've checked that messages are getting through the firewall around the BBDISPLAY machine by running strace on the client machine. I also checked the msg.txt file on the client to make sure that the client name is correct: *** *** *** *** [hobbit at patches tmp]$ head -5 msg.txt client patches.linux [date] Thu Feb 16 14:26:26 EST 2006 [uname] Linux patches 2.4.20-31.9.progeny.8 #1 Thu Jun 9 22:44:19 EDT 2005 i686 i686 i386 GNU/Linux *** *** *** *** The client name looks OK to me, and the messages are getting through the firewall as far as I know. I ran ktrace on the Mac OS X machine to make sure that the client messages are received, and it looks like they are, but what file should the msg.txt data be written to? I've looked in the data subdirectory, but haven't found it yet. I would guess that's related to my problem. What other things should I do to troubleshoot this problem? Thanks very much for a great tool, Greg SourceHosting.net, LLC Ready. Set. Code. http://www.sourcehosting.net/

2 2

MRTG for Switches - OK why?
by Todd.Costa＠state.ma.us 16 Feb '06

16 Feb '06

Hello again, After I sent the email below. I figured I would continue my reading and also go back to how I used BB to see if I could put the pieces together in Hobbit 4.1.2p1. I currently use Debian (Sarge) 3.1 as my platform of choice and needed to add another lib to get things moving. Eventually, I figured out that I needed to use cfgmaker with the appropriate options and switches. Good so far. I had removed my previous host names from bb-hosts and dropped the names with the bb command. Waited and cleaned up any residual left of those names in the Hobbit file structure. I commented out the mrtg in hobbitlaunch.cfg before I did the previous steps and finished reading up on cfgmaker. OK, so I decided on what I wanted in cfgmaker and went with the naming convention Henrik provided in his docs. I ran cfgmaker though a script and generated the mrtg.cfg file. Went throught it and mod'd it some more to my liking. Cool so far was what I was thinking. Now I am ready to put the ip and hostname back in bbhosts and to wait a few minutes later for the basic columns to appear. I quickly went through the hobbit logs and notice a couple of things like creating directories, yada yada..., then I noticed in the trend column the MRTG graphs were showing up. OK stop I thought. I didn't uncomment the mrtg in hobbitlaunch.cfg. What gives? So now I am confused. Why is this happening and what would be the purpose of enabling it in hobbitlaunch if hobbit already does it automatically. I am guessing the RRDtool is automatically picking up that I want stats from mrtg.cfg I just created. I think this is what I meant when hobbit makes thing alot easier. So does anyone understand what I am describing? Any discussion on this would help me understand what I am seeing. Thanks in advance TMC > -----Original Message----- > From: Costa, Todd (DMH) > Sent: Wednesday, February 15, 2006 4:39 PM > To: Hobbit (E-mail) > Subject: MRTG for Switches > > > Hello Hob-sters, > > I am wondering were I can find some mrtg cfg examples > that will let me track port traffic activity on switches? I > recently followed the integrating steps for MRTG data into > Hobbit. And I now see MRTG in the trends link which is cool. > But I now want to watch by ports and generate graphs per > port. Can this still be done? I once did this through BB and > I remember it being tricky and cumbersome to do. But so far, > everything I have tried with hobbit has gotten easier to deal > with. I hope its the same with what I am asking now. Any help > and input is appreciated. > > > Todd M. Costa > Commonwealth of Massachusetts >

1 0

[hobbit] Logfile monitoring - I'd like some comments
by Mark.Deiss＠acs-inc.com 16 Feb '06

16 Feb '06

Suggest that the framework be able to support a client side model in addition to the server side model being contemplated (i.e. a bulk of the handling being done on the hobbit collector server). It is fine to talk about some initial client side processing and passing assorted areas of interest from system and application log files for the real work to be done on the collector. The point about administrating multiple clients from a central collector with rules is well taken. (Aside: why not use swatch as much as possible?). I think client-side processing will be important on AIX and Tru64 servers which maintain system error logs that are in a binary format. You need the platform tools to effectively parse the output. Passing this out in date ranges for later, further processing on a hobbit collector will result in a maintenance support issue. You need some flexibility in how much to pass on which I do not see being practical on a collector-side model. The AIX and Tru64 crowd will still be spending time on the clients making client-side rule decisions on their regular expressions on how much to relay to the collector for a particular event. Getting a valid set of information out of a particular event is not always a simple, predictable matter. This area has been addressed with external modules developed on deadcat using different approaches. It would appear sites using AIX and Tru64 will be starting from scratch with the Hobbit model and will need to develop some new tools to fit within the Hobbit collector side model. Gets worse for Tru64 with the newer versions that require parsing tool sets that even HP support is not happy with. I am amused per the one HP list recommendation that you do not parse the ~5.1+ binary error logs - for a failure, you ship the logs to HP support and let them struggle with it. (sigh....I have resorted to scanning the newer logs using the older tools such as dia out of desperation) At least initially, the easist approach would be for the Hobbit collector side approach to follow the stated aim regarding the ascii text files, application and OS. The AIX and Tru64 sites may want to run one of the deadcat variants as a client side only model and tweak it as a totally separate client test. For the linux client base, why not configure logwatch to parse your application/system logs and pump them over into the hobbit collector for the additional processing? This product is capable of handling log files with various date names. I "think".... it may also be able to handle compressed files. -----Original Message----- From: Hubbard, Greg L [mailto:greg.hubbard at eds.com] Sent: Wednesday, February 15, 2006 5:40 PM To: hobbit at hswn.dk Subject: RE: [hobbit] Logfile monitoring - I'd like some comments My two cents/pence/francs/pesetas/whatever (I am overcharging): I think it would be cool if the Hobbit client could watch arbitrary log files for arbitrary messages and turn that into status alarms. But don't assume that /var/log or /var/adm or /var/adm is accessible to ordinary (as in Hobbit client) users -- not around here, anyway. Besides, I already have another solution for managing my UNIX syslogs -- what I don't have is a way to manage all of my application log files. Wonder how it would work if the client somehow retrieved "orders" from the BB server at startup and this was used to drive a client-side scanner? I like the notion of centralized configuration, but... Otherwise, you might as well forward all the logs to the central server (syslog-ng?) and have the server parse them. But this wouldn't work for the logs that I want to root through with the clients. GLH -----Original Message----- From: Rob Munsch [mailto:rmunsch at solutionsforprogress.com] Sent: Wednesday, February 15, 2006 4:22 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Logfile monitoring - I'd like some comments Henrik Stoerner wrote: >the amount of log data that Hobbit needs to process. So you can setup a >regexp of stuff in the logfile that you *never* want to see, and a >regexp of stuff that you *always* want to report - regardless of how >much the log grows. > Well, that covers my comment. I'd much rather give a list of "this stuff is always Good" than try to cover every instance of Bad, so that's awesome. It would be ideal if the central config was somewhat bb-hosts-ish, and could accept (in addition to aforementioned includes) host-specific directives for what to log. I am assuming that how to react will already be host-specific like every other test, yes? As far as the logs rotating out... couldn't hobbit look for an environment variable for the format of the rotated logs...? The filenames vary host to host, but on a given host, a quick look at /var/log tells you what to expect, right? Lastly - being someone who couldn't program his way out of a paper stack, i will now cheekily suggest that on install, hobbit could look at /var/log and guesstimate the format, and ask for human confirmation (as it already does for the hobbit user and homedir). Even if this automated | dream doesn't happen, could it still be set manually or via config? -- Rob Munsch Solutions For Progress IT To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk

2 2

Problems with latest snapshot
by CHRIS.MORRIS＠RWEnpower.com 16 Feb '06

16 Feb '06

Hi Henrik, I am trying to use the latest snapshot to have a play with the Logfile monitoring. I tried yesterday's as well but have similar problems. All configures and compiles ok but the following are issues. 1) bb-hostsvc.sh works for info and trends columns but get "Premature end of script headers" for all other tests. url is "http://server/hobbit-cgi/bb-hostsvc.sh?HOST=hostname&SERVICE=test" whereas on working system from 30th Jan snapshot the url is "http://server/hobbit-cgi/bb-hostsvc.sh?HOSTSVC=hostname.test&IP=192.168.0.1 0&DISPLAYNAME=hostname" 2) hobbitd keeps crashing with signal 6. The hobbitlaunch.log shows :- 2006-02-16 10:34:37 Status: Host=trl0002, test=bbtest 2006-02-16 10:34:37 Status: Host=trl0002, test=http 2006-02-16 10:34:37 Status: Host=trl0002, test=bbd 2006-02-16 10:34:37 Status: Host=trl0002, test=conn 2006-02-16 10:34:37 Status: Host=trl0002, test=bbgen 2006-02-16 10:34:37 Status: Host=trl0002, test=hobbitd 2006-02-16 10:34:37 Loaded 6 status logs 2006-02-16 10:34:37 Setting up network listener on 0.0.0.0:1985 2006-02-16 10:34:37 Setting up signal handlers 2006-02-16 10:34:37 Setting up hobbitd channels 2006-02-16 10:34:37 Setting up status channel (id=1) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',1) 2006-02-16 10:34:37 ftok() returns: 0x1056815 2006-02-16 10:34:37 shmget() returns: 0x5A000C 2006-02-16 10:34:37 Setting up stachg channel (id=2) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',2) 2006-02-16 10:34:37 ftok() returns: 0x2056815 2006-02-16 10:34:37 shmget() returns: 0x5A800D 2006-02-16 10:34:37 Setting up page channel (id=3) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',3) 2006-02-16 10:34:37 ftok() returns: 0x3056815 2006-02-16 10:34:37 shmget() returns: 0x5B000E 2006-02-16 10:34:37 Setting up data channel (id=4) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',4) 2006-02-16 10:34:37 ftok() returns: 0x4056815 2006-02-16 10:34:37 shmget() returns: 0x5B800F 2006-02-16 10:34:37 Setting up notes channel (id=5) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',5) 2006-02-16 10:34:37 ftok() returns: 0x5056815 2006-02-16 10:34:37 shmget() returns: 0x5C0010 2006-02-16 10:34:37 Setting up enadis channel (id=6) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',6) 2006-02-16 10:34:37 ftok() returns: 0x6056815 2006-02-16 10:34:37 shmget() returns: 0x5C8011 2006-02-16 10:34:37 Setting up client channel (id=7) 2006-02-16 10:34:37 calling ftok('/usr/local/hobb/server',7) 2006-02-16 10:34:37 ftok() returns: 0x7056815 2006-02-16 10:34:37 shmget() returns: 0x5D0012 2006-02-16 10:34:37 Setting up logfiles 2006-02-16 10:39:39 Task hobbitd terminated by signal 6 and gdb shows This GDB was configured as "i386-redhat-linux"... Core was generated by `hobbitd --pidfile=/var/log/hobbit2/hobbitd.pid --restart=/usr/local/hobb/server'. Program terminated with signal 6, Aborted. Reading symbols from /lib/i686/libc.so.6...done. Loaded symbols for /lib/i686/libc.so.6 Reading symbols from /lib/ld-linux.so.2...done. Loaded symbols for /lib/ld-linux.so.2 #0 0x40050801 in __kill () from /lib/i686/libc.so.6 (gdb) bt #0 0x40050801 in __kill () from /lib/i686/libc.so.6 #1 0x400505da in raise (sig=6) at ../sysdeps/posix/raise.c:27 #2 0x40051d82 in abort () at ../sysdeps/generic/abort.c:88 #3 <signal handler called> #4 0x400a9671 in strstr (phaystack=0x0, pneedle=0x8066358 "\n[linux]\n") at ../sysdeps/generic/strstr.c:58 #5 0x08050569 in do_message (msg=0x8066300, origin=0x805a716 "") at hobbitd.c:3033 #6 0x08053083 in main (argc=8, argv=0xbfffe964) at hobbitd.c:4051 #7 0x4003f177 in __libc_start_main (main=0x8051ad0 <main>, argc=8, ubp_av=0xbfffe964, init=0x8049338 <_init>, fini=0x805a070 <_fini>, rtld_fini=0x4000e184 <_dl_fini>, stack_end=0xbfffe95c) at ../sysdeps/generic/libc-start.c:129 3) The client is running happily and the server appears to be receiving the data :- snip from hobbitd.log 2006-02-16 12:06:27 -> do_message/1 (19068 bytes): client trl0002.linux linux 2006-02-16 12:06:27 -> update_statistics 2006-02-16 12:06:27 <- update_statistics 2006-02-16 12:06:27 -> oksender 2006-02-16 12:06:27 <- oksender(1-a) 2006-02-16 12:06:27 ->handle_client 2006-02-16 12:06:27 -> posttochannel 2006-02-16 12:06:27 Posting message 1 to 1 readers 2006-02-16 12:06:27 <- posttochannel 2006-02-16 12:06:27 <-handle_client 2006-02-16 12:06:27 Setup complete 2006-02-16 12:06:27 Sending heartbeat to pid 10123 Any ideas ? Regards, Chris **************************************************************************** The information contained in this email is intended only for the use of the intended recipient at the email address to which it has been addressed. If the reader of this message is not an intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination or copying of the message or associated attachments is strictly prohibited. If you have received this email in error, please contact the sender by return email or call 01793 877777 and ask for the sender and then delete it immediately from your system.Please note that neither RWE npower nor the sender accepts any responsibility for viruses and it is your responsibility to scan attachments (if any). *****************************************************************************

2 1