- Xymon - Xymon mailman web

xymon with tls1.2
by ve2cii＠canasoft.net 21 Jul '17

21 Jul '17

Hi, This did not work. It still uses the default system openssl. Hi Frank, what happens if you leave out the --ssllib and --sslinclude parameters? It is an unusual location for OpenSSL to be installed, so I guess you compiled it yourself? It also ought to pull in libdl.so automatically, but that probably requires some magic when compiling OpenSSL. Anyway, I believe you can work around it by setting NETLIBS in xymon-4.3.27/build/Makefile.Linux like NETLIBS="-ldl" On 7/21/17 10:41, Henrik Størner via Xymon wrote: > Hi Frank, > > what happens if you leave out the --ssllib and --sslinclude > parameters? It is an unusual location for OpenSSL to be installed, so > I guess you compiled it yourself? > > It also ought to pull in libdl.so automatically, but that probably > requires some magic when compiling OpenSSL. > > Anyway, I believe you can work around it by setting NETLIBS in > xymon-4.3.27/build/Makefile.Linux like > > NETLIBS="-ldl" -- sysadm cronomagic.com/gemstelecom.com e-mail ve2cii at canasoft.net POWERED BY LINUX

1 0

xymon with tls1.2
by ve2cii＠canasoft.net 21 Jul '17

21 Jul '17

Hi, I have removed the openssl that goes with the linux. That broke a bunch of stuff. So I had to put it back for now till I compile apache etc against the new ssl libraries. For now I am concentrating on xymon. The way it is xymon is "insisting" on using the old default ssl libraries. Hi Frank, what happens if you leave out the --ssllib and --sslinclude parameters? It is an unusual location for OpenSSL to be installed, so I guess you compiled it yourself? It also ought to pull in libdl.so automatically, but that probably requires some magic when compiling OpenSSL. Anyway, I believe you can work around it by setting NETLIBS in xymon-4.3.27/build/Makefile.Linux like NETLIBS="-ldl" Regards, Henrik On 7/21/17 10:41, Henrik Størner via Xymon wrote: > Hi Frank, > > what happens if you leave out the --ssllib and --sslinclude > parameters? It is an unusual location for OpenSSL to be installed, so > I guess you compiled it yourself? > > It also ought to pull in libdl.so automatically, but that probably > requires some magic when compiling OpenSSL. > > Anyway, I believe you can work around it by setting NETLIBS in > xymon-4.3.27/build/Makefile.Linux like > > NETLIBS="-ldl" > > > Regards, > > Henrik -- sysadm cronomagic.com/gemstelecom.com e-mail ve2cii at canasoft.net POWERED BY LINUX

1 0

xymon with tls1.2
by ve2cii＠canasoft.net 21 Jul '17

21 Jul '17

I am re-sending this from my member account. Hi everyone, We are changing all our SSL web sites on windows over to tls1.2. So I have upgraded the openssl on the xymon server. I have run into an ssl issue compiling xymon-4.3.27 and xymon-4.3.28 openssl is in /usr/share/openssl-1.0.21 ./configure.server --ssllib /usr/share/openssl-1.0.21/lib --sslinclude /usr/share/openssl-1.0.21/include This is my error: Checking for OpenSSL ... Compiling with SSL library works OK /usr/share/openssl-1.0.21/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_globallookup': dso_dlfcn.c:(.text+0x1a): undefined reference to `dlopen' dso_dlfcn.c:(.text+0x31): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x3b): undefined reference to `dlclose' /usr/share/openssl-1.0.21/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_pathbyaddr': dso_dlfcn.c:(.text+0x81): undefined reference to `dladdr' dso_dlfcn.c:(.text+0xf8): undefined reference to `dlerror' /usr/share/openssl-1.0.21/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_func': dso_dlfcn.c:(.text+0x3fe): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x46f): undefined reference to `dlerror' /usr/share/openssl-1.0.21/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_var': dso_dlfcn.c:(.text+0x4ee): undefined reference to `dlsym' dso_dlfcn.c:(.text+0x571): undefined reference to `dlerror' /usr/share/openssl-1.0.21/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_unload': dso_dlfcn.c:(.text+0x5d7): undefined reference to `dlclose' /usr/share/openssl-1.0.21/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load': dso_dlfcn.c:(.text+0x697): undefined reference to `dlopen' dso_dlfcn.c:(.text+0x6f5): undefined reference to `dlclose' dso_dlfcn.c:(.text+0x72c): undefined reference to `dlerror' collect2: ld returned 1 exit status make: *** [test-link] Error 1 Warning: Cannot link with SSL library OpenSSL include- or library-files not found. -- Regards, Frank Torontour Network Administrator frank at cronomagic.com 514-341-1579 EXT-214 1-800-427-6012 Ext-214 -- sysadm cronomagic.com/gemstelecom.com e-mail ve2cii at canasoft.net POWERED BY LINUX

2 1

NSSM & Xymon PowerShell Client
by christopherrowson＠gmail.com 18 Jul '17

18 Jul '17

Hi list, I've been asked to look at a Xymon install which needs updating. The first thing I noticed was that the monitored Windows servers in the environment are using the old BBWin client which doesn't seem to be maintained any longer. Checking the mailing list I've noticed that a lot of people are now using the WinPSClient so I've been trying to familiarise myself with it. As I hadn't come across the software before, I ran the source for NSSM (the manager which runs the PS script as a service) past a C++ code analysis tool and it came out with a few /potential/ issues. The critical and high vulnerabilities are: Critical: Use of memmove Allows Buffer Overflow ------------------------------------------------------- - The size limit is larger than the destination buffer, while the source is a char* and so, could allow a buffer overflow to take place. - nssm-master\io.cpp Line 213 High: LoadLibrary ------------------ - The function searches several paths for a library if called with a filename, but no path. This can allow trojan DLLs to be deployed, regardless of the presence of the correct DLL. Manually check the code to ensure that the full path is specified. - nssm-master\imports.cpp Line 15 I'm not a C++ programmer, but looking at the code, the findings of the analysis tool look at least possible. Has anybody else performed code scrutiny against this aspect of the solution who can confirm or deny any issues? I also wondered if there's any particular reason why the PowerShell script can't be run at intervals by task scheduler instead of running as a service? Thanks, Chris

3 5

Xymon on Centos7 and migrate history and rrd from old Xymon
by chrisp＠lightstoneauto.co.za 17 Jul '17

17 Jul '17

Good day My current Xymon still runs on a now unsupported centos5 server. I am prepping a Centos7 server for my new xymon instance 1 - I found the xymon repo, please refer to https://centos.jordy.eu/centos-test/ Is this a trusted repository to use? 2 - Is there a guide available that I can follow to migrate xymon configs, history data and rrd data to the new server? Kind regards [https://lsc-assets.scdn1.secure.raxcdn.com/lssig/AUTOlogoW.png] Chris Pretorius [https://lsc-assets.scdn1.secure.raxcdn.com/lssig/phone.png] 0872367740 [https://lsc-assets.scdn1.secure.raxcdn.com/lssig/email.png] chrisp at lightstone.co.za<mailto:chrisp at lightstone.co.za> [https://lsc-assets.scdn1.secure.raxcdn.com/lssig/web.png] www.signio.co.za<http://www.signio.co.za> [https://lsc-assets.scdn1.secure.raxcdn.com/lssig/address.png] Centurion Square, 3rd Floor, cnr Heuwel and Gordon Hood rd, Centurion This communication is subject to Lightstone's email disclaimer<http://www.lightstone.co.za/portal/content/email-disclaimer.aspx>

3 2

Powershell client from external server
by jason.jones＠codelsoftware.com 16 Jul '17

16 Jul '17

Hi all, I was just wondering if anyone had any step-by-step instructions or advise about sending the client data from the powershell client over a secure connection, we have a few external servers that we would like to start having their disk usage etc. sent back but would prefer if this was done over SSL or similar. Kind Regards, Jason. Jason Jones Codel Software Ltd Unit 1C Charnwood Park Bridgend CF31 3PL +44 (0)1656 750 858 +44 (0)1656 648 649 info at codelsoftware.com http://www.codelsoftware.com Follow Us: @codel_software at activabsence Linkedin http://www.activabsence.co.uk Registered in Wales No. 5838660 DELIVERING QUALITY: At Codel Software we are committed to delivering quality software, services and client interactions. We have demonstrated this through quality audits and customer satisfaction. Codel Software is an ISO 9001:2008 certified company. CONFIDENTIALITY NOTICE: This message is confidential and for the use only of the intended recipient. If you receive the message in error you are not entitled to disseminate, copy or use the contents in any way. In such circumstances please forward the message back to the sender. WARNING :While Codel Software takes steps to prevent computer viruses from being transmitted via electronic mail attachments we cannot guarantee that attachments do not contain computer virus code. You are therefore strongly advised to undertake anti virus checks prior to accessing the attachment to this electronic mail. Codel Software grants no warranties regarding performance use or quality of any attachment and undertakes no liability for loss or damage howsoever caused. If you do not want to receive similar communications by e-mail from Codel Software, please reply to this e-mail with 'remove' in the subject line. Help the environment –please don't print this email unless you really need to! ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

3 2

Xymon "port" check intermittent failures for ssh TCP port 22 state=LISTEN
by jlaidman＠rebel-it.com.au 12 Jul '17

12 Jul '17

Hi I'm getting what appear to be false-positives for the port test that is monitoring the LISTEN socket for port 22, as opened by the sshd daemon. A few times a month, Xymon will show that the server is not listening on port 22, and 5 minutes later, the listening port is back again. The sshd process has never crashed or been reconfigured (eg with SIGHUP), and no other listening ports are showing the same behaviour. The client messages for the server during these events are complete and uncorrupted. The simplest fix is to use delayred to suppress alerts for 5 minutes. However, I would like to work out what's causing this behaviour. I don't believe this a problem with Xymon at all, and instead the netstat output in the client message is exactly what the OS provided the Xymon client. My guess is that it's due to a the way sshd works - perhaps it periodically rebinds to the socket - but nothing in the sshd logs seems to correlate with these events. If anyone can suggest what might be causing this, or how to investigate further, I'd be grateful. This problem happens for about a quarter of the servers in a pool, and no others. All servers are identical in OS, software and general configuration, but the servers affected by this tend to be the ones taking the most traffic and under the most load (although there's plenty of spare CPU cycles even on the most heavily-used server). I have two Xymon servers, each monitoring independently of the other, and this problem is reported by both Xymon servers, although at completely different dates and times. Cheers Jeremy

3 5

Threshold Logic Alerting : The complete opposite
by Bradley.Radjoo＠mtn.com 10 Jul '17

10 Jul '17

Hi there, Is it possible to configure an alert upon a threshold not been exceeded but when it's falls below a certain threshold. Example: If real memory usage fall's below 20%, an alert is then sent Kind Regards, - - - - Brad "This email is confidential. If you have received it in error, you are on notice of its status. Please notify us immediately by reply email and then delete this message from your system. Please do not copy it or use it for any purpose, or disclose its contents to any other person as to do so could be a breach of confidentiality. Thank you for your co-operation. " "The information contained in this message is intended solely for the individual to whom it is specifically and originally addressed. This message and its contents may contain confidential or privileged information from MTN Group. If you are not the intended recipient, you are hereby notified that any disclosure or distribution, is strictly prohibited. If you receive this email in error, please notify MTN Group immediately and delete it. MTN Group does not accept any liability or responsibility if action is taken in reliance on the contents of this information . Note that all personal emails are not authorized by MTN Group. "

2 1

Migrated Xymon to new server, graphs not updating
by josh＠imaginenetworksllc.com 08 Jul '17

08 Jul '17

I had a very old Xymon (lots of labels as Hobbitmon) installation that I moved to a new server today. It moved from 32 bit to 64 bit. I did an rrdtool dump & restore and while the new server has the history for the last months/years, it hasn't updated since I did this. Reading through the mailing lists haven't shown me anyone has run into this same issue (at least in this situation). The rrd files and dir are all owned by the Xymon user and have rwx permission. If anyone could give me some ideas to check I would greatly appreciate it! Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373

2 2

Fwd: xymonton.org
by jlaidman＠rebel-it.com.au 07 Jul '17

07 Jul '17

Another vote from me for keeping Xymonton around! Even if I referred to it only once in the next 5 years, I would do so because it's extremely helpful. It's a valuable resource I wouldn't want to be without. On 6 July 2017 at 10:18, Galen Johnson <solitaryr at gmail.com> wrote: > keen...I was planning to make some changes but didn't want to waste my > time if noone was using it. I know Henrik has it referenced on xymon.com > if you look under the "Xymon Project" drop down. Pretty sure it shows up > near the top when you google for xymon. Ideally, I'd like to move as much > content into Xymonton as possible. It is a wiki at it's core (and needs a > little TLC I haven't had time for lately). > > =G= > > On Wed, Jul 5, 2017 at 3:23 PM, Craig Nichols <cnichols at jive.com> wrote: > >> I've had a similar experience. I do do like being able to reference it. >> >> On Wed, Jul 5, 2017 at 1:16 PM, Matt Vander Werf <matt1299 at gmail.com> >> wrote: >> >>> I've found it very useful, especially when I was setting up our new >>> Xymon server not too long ago. >>> >>> Maybe it's not well advertised that it exists? I know it took me a while >>> before I found it. >>> >>> -- >>> Matt Vander Werf >>> >>> On Wed, Jul 5, 2017 at 3:09 PM, Galen Johnson <solitaryr at gmail.com> >>> wrote: >>> >>>> Hey folks, >>>> >>>> I was just reviewing usage and latest updates to monitors on >>>> xymonton.org. I see lots of traffic by bots and spiders but not much >>>> from users. I'm just curious if the community finds it useful at all. I'm >>>> pretty sure deadcat is better than dead (see what I did there?) since Dell >>>> bought Quest. I wasn't able to grab the tests to share on xymonton (if >>>> that was even relevant). >>>> >>>> thanks >>>> >>>> =G= >>>> >>>> >>>> _______________________________________________ >>>> Xymon mailing list >>>> Xymon at xymon.com >>>> http://lists.xymon.com/mailman/listinfo/xymon >>>> >>>> >>> >>> _______________________________________________ >>> Xymon mailing list >>> Xymon at xymon.com >>> http://lists.xymon.com/mailman/listinfo/xymon >>> >>> >> >> >> -- >> *Craig Nichols* >> *NOC Engineer* | Jive Communications, Inc. >> Jive.com | 877-548-3003 | cnichols at jive.com <cnichols at getjive.com> >> <http://www.facebook.com/jive.communications.inc> >> <http://www.twitter.com/getjive> >> <http://jive.us5.list-manage.com/track/click?u=4932d71514b07235957f447d8&id=…> >> <http://www.youtube.com/JiveTraining> >> <http://www.linkedin.com/company/jive-communications-inc> >> > > > _______________________________________________ > Xymon mailing list > Xymon at xymon.com > http://lists.xymon.com/mailman/listinfo/xymon > >

5 5