- Xymon - Xymon mailman web

mixing red and yellow alerts in a --test check
by didds3＠yahoo.co.uk 06 Mar '15

06 Mar '15

is there a way to mix a --test page check between alert colours? I can use eg server/bin/xymond_alert --test TESTBOX http --color=yellow --duration=120 --time=1425224089 server/bin/xymond_alert --test TESTBOX http --color=red --duration=2 --time=1425224089 but I want to check a combination of the two - when the two hour yellow alert (set to not page) is followed by the tow minute red alert (which shoud not page for 30 minutes) The context of this is that we are being paged for the red alert which in itself has not reached the 30 minute duration configured and we belive its because the red iummediately follows the yellow and the COMBINED alert duration exceeds 30 minutes. the alerts.cfg entry is HOST=TESTBOX SERVICE=http TIME=w:0000:0759,w:1830:2359,06:0000:2359 COLOR=red MAIL check at xxx.co.uk DURATION>30m REPEAT=15 the --test paging check works as expected and correctly for color=red and testing with durations of 29 and 31 minutes The http check itself is an external script which has worked fine for years and years and years. it is purely this combination of yellow and red alerts that we suspect is the reason for our otherwise unexpected paging (unexpected throughout naivety I hasten to add :-) cheers ian

1 0

Frequent core dumps
by colin.coe＠gmail.com 05 Mar '15

05 Mar '15

Hi all Over the last day or so,been getting a lot of xymonnet core dumps. Here's the debugging info as per http://xymon.sourceforge.net/xymon/help/known-issues.html --- [root at xymon_srv 09:06 /var/lib/xymon/tmp]# file core.15685 core.15685: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from '/usr/libexec/xymon/xymonnet --ping --checkresponse portal01 portal02 TAB002' [root at xymon_srv 09:06 /var/lib/xymon/tmp]# gdb /usr/libexec/xymon/xymonnet core.15685 GNU gdb (GDB) Red Hat Enterprise Linux (7.2-75.el6) Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-redhat-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/libexec/xymon/xymonnet...Reading symbols from /usr/lib/debug/usr/libexec/xymon/xymonnet.debug...done. done. [New Thread 15685] Missing separate debuginfo for Try: yum --enablerepo='*-debug*' install /usr/lib/debug/.build-id/f1/5837b82aa5f929c8237a97e4a8b924b457ad7e Reading symbols from /usr/lib64/libcares.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libcares.so.2 Reading symbols from /lib64/libldap-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libldap-2.4.so.2 Reading symbols from /lib64/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/librt.so.1 Reading symbols from /lib64/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libz.so.1 Reading symbols from /usr/lib64/libssl.so.10...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libssl.so.10 Reading symbols from /usr/lib64/libcrypto.so.10...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libcrypto.so.10 Reading symbols from /lib64/libpcre.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libpcre.so.0 Reading symbols from /lib64/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib64/libc.so.6 Reading symbols from /lib64/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/liblber-2.4.so.2 Reading symbols from /lib64/libresolv.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libresolv.so.2 Reading symbols from /usr/lib64/libsasl2.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsasl2.so.2 Reading symbols from /usr/lib64/libssl3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libssl3.so Reading symbols from /usr/lib64/libsmime3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libsmime3.so Reading symbols from /usr/lib64/libnss3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnss3.so Reading symbols from /usr/lib64/libnssutil3.so...(no debugging symbols found)...done. Loaded symbols for /usr/lib64/libnssutil3.so Reading symbols from /lib64/libplds4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libplds4.so Reading symbols from /lib64/libplc4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libplc4.so Reading symbols from /lib64/libnspr4.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libnspr4.so Reading symbols from /lib64/libpthread.so.0...(no debugging symbols found)...done. [Thread debugging using libthread_db enabled] Loaded symbols for /lib64/libpthread.so.0 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Reading symbols from /lib64/libgssapi_krb5.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libgssapi_krb5.so.2 Reading symbols from /lib64/libkrb5.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5.so.3 Reading symbols from /lib64/libcom_err.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libcom_err.so.2 Reading symbols from /lib64/libk5crypto.so.3...(no debugging symbols found)...done. Loaded symbols for /lib64/libk5crypto.so.3 Reading symbols from /lib64/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libdl.so.2 Reading symbols from /lib64/libcrypt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libcrypt.so.1 Reading symbols from /lib64/libkrb5support.so.0...(no debugging symbols found)...done. Loaded symbols for /lib64/libkrb5support.so.0 Reading symbols from /lib64/libkeyutils.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libkeyutils.so.1 Reading symbols from /lib64/libfreebl3.so...(no debugging symbols found)...done. Loaded symbols for /lib64/libfreebl3.so Reading symbols from /lib64/libselinux.so.1...(no debugging symbols found)...done. Loaded symbols for /lib64/libselinux.so.1 Reading symbols from /lib64/libnss_files.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/libnss_files.so.2 Core was generated by `/usr/libexec/xymon/xymonnet --ping --checkresponse portal01 portal02 TAB002'. Program terminated with signal 6, Aborted. #0 0x0000003fcda32625 in raise () from /lib64/libc.so.6 Missing separate debuginfos, use: debuginfo-install c-ares-1.10.0-3.el6.x86_64 cyrus-sasl-lib-2.1.23-15.el6_6.1.x86_64 glibc-2.12-1.149.el6_6.5.x86_64 keyutils-libs-1.4-5.el6.x86_64 krb5-libs-1.10.3-33.el6.x86_64 libcom_err-1.41.12-21.el6.x86_64 libselinux-2.0.94-5.8.el6.x86_64 nspr-4.10.6-1.el6_5.x86_64 nss-3.16.2.3-3.el6_6.x86_64 nss-softokn-freebl-3.14.3-22.el6_6.x86_64 nss-util-3.16.2.3-2.el6_6.x86_64 openldap-2.4.39-8.el6.x86_64 openssl-1.0.1e-30.el6_6.5.x86_64 pcre-7.8-6.el6.x86_64 zlib-1.2.3-29.el6.x86_64 (gdb) bt #0 0x0000003fcda32625 in raise () from /lib64/libc.so.6 #1 0x0000003fcda33e05 in abort () from /lib64/libc.so.6 #2 0x0000000000420ab3 in sigsegv_handler (signum=<value optimized out>) at sig.c:57 #3 <signal handler called> #4 0x0000003fcda81171 in __strlen_sse2 () from /lib64/libc.so.6 #5 0x0000003fcda80e86 in strdup () from /lib64/libc.so.6 #6 0x000000000040d2a4 in setup_ssl (item=0xa136c0) at contest.c:653 #7 0x000000000040edef in do_tcp_tests (timeout=10, concurrency=256) at contest.c:1150 #8 0x000000000040aaf3 in main (argc=6, argv=0x7fffe1c7a008) at xymonnet.c:2461 (gdb) [root at xymon_srv 09:08 /var/lib/xymon/tmp]# cat ping-stderr.15685.00 ICMP Network Unreachable from 172.22.31.1 for ICMP Echo sent to 172.31.64.27 ICMP Network Unreachable from 172.22.31.1 for ICMP Echo sent to 172.31.64.27 ICMP Network Unreachable from 172.22.31.1 for ICMP Echo sent to 172.31.64.27 ICMP Network Unreachable from 172.22.31.1 for ICMP Echo sent to 172.31.64.27 [root at xymon_srv 09:08 /var/lib/xymon/tmp]# --- Notes: - TAB002 is 172.31.64.27 - TAB002 hosts.cfg entry is "172.31.64.27 TAB002 # conn nonongreen" - server is RHEL6 x86_64 with RPM 4.3.18-1.el6.x86_64 from Terabithia Anyone else seeing this? Thanks CC

3 4

Regarding xymon alerts
by itlinkstonisha＠gmail.com 05 Mar '15

05 Mar '15

Hi, I have setup xymon server 4.3.10, here I have the issue with xymon alerts. When conn test for a xymon client fail, I get alerts for all the services monitored on the client, same when I reboot the client then the recovered alert I get for all the services. In such situation I just wants the alert for conn test not all the services. Please help me to avoid this flood of alerts. "Apologizing does not mean that you are wrong and the other one is right... It simply means that you value the relationship much more than your ego.."

2 1

XymonPSClient v1.99
by zak.beck＠accenture.com 05 Mar '15

05 Mar '15

Hi Some minor updates: * ifstat - remove loopback interfaces (Brandon Dale) * ifstat - remove zone information from IPv6 addresses * add option to override client software name (e.g. to bbwin) - set in xymonclient_config.xml * ifstat changed to send IPv4 data by default. IPv6 data can be sent using the ifstat directive in client-local.cfg. * updated documentation The XymonPSClient.doc file has been updated to include the new configuration items. Zak

1 0

Xymon PowerShell Windows client
by zak.beck＠accenture.com 05 Mar '15

05 Mar '15

Hi David First of all, thanks for providing us with a great starting point with the Powershell client. We've discussed this in-house and agree that the best long term solution would be to fix/extend the server code. Now, it's been a long time since I looked at any C code, but it looks to me (looking at commit 7594 in trunk) that do_ifstat.c needs the following addition: case OS_SCO_SV: if (pickdata(bol, ifstat_sco_sv_pcres[0], 0, &ifname, &rxstr, &txstr)) dmatch = 7; break; + case OS_WIN32_POWERSHELL: case OS_WIN32_BBWIN: if (pickdata(bol, ifstat_bbwin_pcres[0], 0, &ifname, &rxstr, &txstr)) dmatch = 7; break; Zak From: David Baldwin [mailto:david.baldwin at ausport.gov.au] Sent: 04 March 2015 23:50 To: Jeremy Laidman; Beck, Zak Subject: Re: [Xymon] Xymon PowerShell Windows client On 5/03/15 10:00 AM, Jeremy Laidman wrote: On 04/03/2015 7:49 PM, <zak.beck at accenture.com <mailto:zak.beck at accenture.com> > wrote: > Unfortunately, you can't fake the BBWin identifier for just one section – you have to change the client to report in as BBwin. It was changed so that we could experimentally use separate configuration options for BBWin clients and Powershell clients. Of course the best option is to extend the server to match the features of the client. It wouldn't take much (like one line) to add the powershell OS into the ifstat handler, running the same code as for bbwin. I took a look at the current code in trunk today - the powershell client (however that is detected) looks like it is treated the same as BBWin at present. Server-side extension in the C code is fine for those comfortable with that, but makes it difficult for those wanting to just try out the new client against an existing server. David. J _______________________________________________ Xymon mailing list Xymon at xymon.com <mailto:Xymon at xymon.com> http://lists.xymon.com/mailman/listinfo/xymon -- David Baldwin - Senior Systems Administrator (Datacentres + Networks) Information and Communication Technology Services Australian Sports Commission http://ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au <mailto:david.baldwin at ausport.gov.au> 1 Leverrier Street Bruce ACT 2617 Our Values: RESPECT + INTEGRITY + TEAMWORK + EXCELLENCE _____ Keep up to date with what's happening in Australian sport visit www.ausport.gov.au <http://www.ausport.gov.au> This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender. _____

1 0

Xymon PowerShell Windows client
by BDale＠kitchengroup.com.au 05 Mar '15

05 Mar '15

Hi Zak, I want to be able to see the network traffic in/out on each NIC on my windows machines running the new PowerShell client, I have never really looked into how this worked in bbwin but if I look at a few example machines I see the following: 1. On a Linux machine I get Network Traffic and TCP/IP Statics graphs on the trends page a. Raw data contains [ifstat] and [netstat] information 2. On a windows machine running BBWin 0.13 I only get a TCP/IP Statics graph on the trends page a. [ifstat] is blank b. [netstat] contains data e.g [netstat] ipPacketsReceived=53513930 ipReceivedHeaderErrors=0 ipReceivedAddressErrors=355513 ipDatagramsForwarded=0 ipUnknownProtocolsReceived=2158 ipReceivedPacketsDiscarded=1266110 ipReceivedPacketsDelivered=52167159 ipOutputRequests=31961136 ipRoutingDiscards=0 ipDiscardedOutputPackets=5221 ipOutputPacketNoRoute=0 ipReassemblyRequired=730696 ipReassemblySuccessful=199056 ipReassemblyFailures=0 ipDatagramsSuccessfullyFragmented=0 ipDatagramsFailingFragmentation=0 ipFragmentsCreated=0 ipv6PacketsReceived=7895 ipv6ReceivedHeaderErrors=0 ipv6ReceivedAddressErrors=0 ipv6DatagramsForwarded=0 ipv6UnknownProtocolsReceived=0 ipv6ReceivedPacketsDiscarded=5199 ipv6ReceivedPacketsDelivered=7908 ipv6OutputRequests=2596918 ipv6RoutingDiscards=0 ipv6DiscardedOutputPackets=0 ipv6OutputPacketNoRoute=2 ipv6ReassemblyRequired=0 ipv6ReassemblySuccessful=0 ipv6ReassemblyFailures=0 ipv6DatagramsSuccessfullyFragmented=0 ipv6DatagramsFailingFragmentation=0 ipv6FragmentsCreated=0 3. On a windows machine running PowerShell client v1.98 I don't get any network related graphs however I seem to have data available: a. [ifstat] contains data e.g [ifstat] fe80::25a5:b99d:55cd:951f%12 2655878237 519887923 10.250.100.163 2655878237 519887923 a. [netstat] contains data e.g [netstat] PacketsReceived=3387463 ReceivedHeaderErrors=0 ReceivedAddressErrors=51034 DatagramsForwarded=0 UnknownProtocolsReceived=0 ReceivedPacketsDiscarded=146872 ReceivedPacketsDelivered=3219450 OutputRequests=950747 RoutingDiscards=0 DiscardedOutputPackets=102 OutputPacketNoRoute=0 ReassemblyRequired=83643 ReassemblySuccessful=27881 ReassemblyFailures=0 DatagramsSuccessfullyFragmented=0 DatagramsFailingFragmentation=0 FragmentsCreated=0 PacketsReceived=1266 ReceivedHeaderErrors=0 ReceivedAddressErrors=0 DatagramsForwarded=0 UnknownProtocolsReceived=0 ReceivedPacketsDiscarded=618 ReceivedPacketsDelivered=1264 OutputRequests=11680 RoutingDiscards=0 DiscardedOutputPackets=0 OutputPacketNoRoute=2 ReassemblyRequired=0 ReassemblySuccessful=0 ReassemblyFailures=0 DatagramsSuccessfullyFragmented=0 DatagramsFailingFragmentation=0 FragmentsCreated=0 The netstat data in the PowerShell client doesn't seem to have the ip / ipv6 infront of the values so they are listed twice in the example above. So I'm not sure what graphs should I be expecting to get under trends with the PowerShell client for network traffic? At the moment I'm guessing the ifstat data isn't in a format xymon will automatically graph and add to the trends page and the same for the netstat data possibly just because it has duplicate values for ipv4 and ipv6. Regards, Brandon From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of zak.beck at accenture.com Sent: Friday, 13 February 2015 8:53 PM To: xymon-developer at lists.sourceforge.net; xymon at xymon.com Subject: [Xymon] Xymon Powershell Windows client Hi all, Today I have uploaded a new version of the Xymon Powershell client to SVN (in sandbox/WinPSClient). We (Accenture) are very pleased to be contributing these changes to the open source community. I've been working on this now for around 8 months on and off and hopefully the changes made will be of benefit to everyone! Whilst making changes, we have focussed mainly on making it work, improving reliability and most importantly improving performance. In most cases, on our 64 bit OS virtual machines, a data collection now takes around 5 seconds. On heavily loaded (CPU load or event log load) servers, the script is now considerably faster than originally. Key to this has been reducing the amount of WMI usage as this was a major culprit. We have also implemented some new features, largely based on our in-house requirements but hopefully useful to others: * Showing the process owner and command line in [procs]. This has been implemented using c# code, compiled at runtime. * Adding Active Directory replication test, Terminal Services sessions test * Ability to restart any stopped Windows service * Client self-update * Dirsize and dirtime checks (which were originally external scripts) Some things have changed slightly; for example, the local configuration which was registry-based is now XML-based (you can still use registry settings if you prefer). In the SVN repository I have also uploaded a Word document which describes how to install and the configuration options. I have uploaded all the revisions we have made to SVN so there is a history of development. Whilst we will endeavour to continue contributing changes and improvements in coming months, this is an open source project and as such we are not offering any formal support. If anyone wishes to bugfix, branch or whatever, please do so! Zak Beck Accenture

4 10

stop using dns and /etc/hosts
by didds3＠yahoo.co.uk 04 Mar '15

04 Mar '15

I have a hosts.cfg entry 1.2.3.4 server1 where 1.2.3.4 is server1's INTERNAL IP address but its conn check is red because xymon is actually trying to ping its external, NATTed, address 5.6.7.8 which it cannot reach. Its because DNS is resolving the IP 5.6.7.8 I can use a local hosts file entry to override that again, but I'd rather have some way fo telling xymon to only use entries in hosts.cfg and ignore native resolution. How might i achieve that? cheers Ian

4 3

*.sh links download, not display
by jkikpole＠cairodurham.org 04 Mar '15

04 Mar '15

I'm trying to setup a new Xymon server. This is only my second time doing this and the last time was years ago, so I'm probably missing something obvious. I have the big grid of status messages running on /xymon.html now. However, if I click on one of the icons the browser will download a file instead of displaying detailed status info. As an example, I clicked on /xymon-cgi/svcstatus.sh?HOST=<hostname>&SERVICE=ldap and it just downloaded a file named svcstatus.sh. I'm betting I missed a setting in my Apache 2.4 configuration. Can anyone offer suggestions? -- Jaime Kikpole Network Administrator Cairo-Durham Central School District Technical Support: help at cairodurham.org go.cairodurham.org/techtips -- This electronic message and any attachment(s) may contain confidential or legally privileged information protected by law from further disclosure and is intended only for the individual or entity identified above as the addressee. If you are not the addressee (or the employee or agency responsible to deliver it to the addressee), or if this message has been addressed to you in error, you are hereby notified that you may not copy, forward, disclose or use any part of this message or any attachment(s). Please notify the sender immediately by return email or telephone and permanently delete this message and attachment(s) from your system.

2 2

The requested URL /xymon-cgi/showgraph.sh was not found on this server.
by David.Diep＠dc.gov 04 Mar '15

04 Mar '15

Hi everyone, I am unable to generate Metric Reports, I get as far as the 'Metrics Report' page. When I select 'Generate Report', I get a broken image icon. A little digging shows that the showgraph.sh script isn't anywhere on the server. I installed XYMON using the tarball method, on an RHEL 6 machine. Any idea why its missing this script? Thanks.

2 2

Bug in 4.3.18 HTTPD graph display
by Scot.Kreienkamp＠la-z-boy.com 04 Mar '15

04 Mar '15

Hi everyone, I upgraded from 4.3.17 to 4.3.18 recently, and after the upgrade I noticed that some of my custom graphs have disappeared. It seems that anytime I have a dash in the test name the graph doesn't work at all. The RRD files exist and are still being updated, and they all worked in 4.3.17 with no errors. Additionally, I'm getting error messages like this in some of my HTTPD logs for graphs that do still work as well as the ones that no longer work: 2015-02-26 10:08:36 Sendto failed: Connection refused, referer: http://retv6100.na.lzb.hq/xymon-cgi/svcstatus.sh?HOST=rets5032.na.lzb.hq&SE… Here's the full request: 10.1.28.203 - - [26/Feb/2015:10:08:36 -0500] "GET /xymon-cgi/showgraph.sh?host=rets5032.na.lzb.hq&service=ncv:DBHealth&graph_width=576&graph_height=120&disp=rets5032%2ena%2elzb%2ehq&nostale&color=green&graph_start=1424790516&graph_end=1424963316&graph=hourly&action=view HTTP/1.1" 200 34331 "http://retv6100.na.lzb.hq/xymon-cgi/svcstatus.sh?HOST=rets5032.na.lzb.hq&SE…" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C)" Any help is appreciated. Scot Kreienkamp This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, please note that you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.

2 4