- Xymon - Xymon mailman web

RECOVERED and NOTICE in alerts.cfg
by scoile＠mcclatchyinteractive.com 31 Jul '14

31 Jul '14

In alerts.cfg, are RECOVERED and NOTICE rules, or recipients? If I include either on a rule line, xymon_alert --dump-config doesn't show them, but if I include them on a recipient line, it does. The documentation (in-file comments, man page) says they're rules, but they don't appear to work on rule lines (that don't also include a recipient). Is this expected/intended behavior? If so, can someone help me understand why? Xymon 4.3.12 -- *Steve Coile*Senior Network and Systems Engineer, McClatchy Interactive <http://www.mcclatchyinteractive.com/> Office: 919-861-1247 | Mobile: 919-622-5369 | Fax: 919-861-1300

1 0

TCP Wrappers for xymond
by jlaidman＠rebel-it.com.au 31 Jul '14

31 Jul '14

Hiya I'm planning on deploying a Xymon server on the Internet, and would like to lock it down as much as possible. I'll be creating iptables rules to limit access to port 1984. However, I'd really like to have a fallback protection mechanism, in case (or for when) the iptables rules are not being applied, or are misconfigured. It seems to me that the use of libwrap (TCP wrappers) would suit me nicely, so that I could add hosts into /etc/hosts.allow as required. I will already be using this for other services such as ssh. However, there doesn't appear to be a simple way for xymond to use libwrap. From what I understand, there are two ways to achieve TCP wrapper support: one way is to compile the daemon to dynamically link to the libwrap library; the other is to run the daemon from inetd/xinetd. Neither of these seem to be available for xymond. Can anyone suggest a simple way to do this? Would it be easy to recompile xymond with libwrap support? In the back of my mind, I seem to recall that the libwrap library re-implements all of the socket calls from libc, and so maybe all that's required is to have "-lwrap" before "-lc" in a Makefile somewhere. One idea that came to mind is to have xymond listen only on 127.0.0.1 only, and have xinetd listening on 0.0.0.0, which then connects any incoming socket to 127.0.0.1 (using the "redirect" config options). But this is a bit too message for my liking, because I don't want my operations staff confused by the extra complexity. Also, I suspect this will provide a reduction in throughput when compared to xymond listening directly, not only due to the extra connection overhead, but also perhaps limiting xymond's ability to do any clever things like pre-forking. Also the extra logging might cause a backlog. Or maybe I'm worrying about nothing, and this is a perfectly elegant solution. The best I could hope for, would be explicit support for compiling it in, perhaps with "--with-libwrap" and "--without-libwrap" options for configure. Cheers Jeremy

3 3

Xymongrep in 4.3.17 does not load local hosts.cfg
by wk.fdmdb＠gmail.com 29 Jul '14

29 Jul '14

Hi, I compiled xymon 4.3.17 on Suse 11 distribution successfuly and the server is running. But when I call xymongrep I get the following: xymon at n1000 > xymongrep test 2014-07-29 09:24:01 Cannot load /opt/xymon/default/server/etc/hosts.cfg, or file is empty Xymon is installed in /opt/xymon/default/. The file exists and has the necessery permissions: -rw-rw-r-- 1 xymon users 1308 2014-07-18 14:45 /opt/xymon/default/server/etc/hosts.cfg The hosts.cfg is also not empty and worked with Xymon 4.2.3. With strace I don't see that xymongrep even tries to open the file: execve("/home/xymon/bin/xymongrep", ["xymongrep", "test"], [/* 53 vars */]) = 0 brk(0) = 0x620000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f5d000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/tls/x86_64/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/tls/x86_64", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/tls/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/tls", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/x86_64/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2/x86_64", 0x7fff9b784f80) = -1 ENOENT (No such file or directory) open("/opt/xymon/default/instantclient_11_2/librt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/opt/xymon/default/instantclient_11_2", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=46795, ...}) = 0 mmap(NULL, 46795, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffdf0f51000 close(3) = 0 open("/lib64/librt.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\"\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=47241, ...}) = 0 mmap(NULL, 2132976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf0b37000 fadvise64(3, 0, 2132976, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf0b3f000, 2093056, PROT_NONE) = 0 mmap(0x7ffdf0d3e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7ffdf0d3e000 close(3) = 0 open("/opt/xymon/default/instantclient_11_2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\354\1\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1661568, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f50000 mmap(NULL, 3528808, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf07d9000 fadvise64(3, 0, 3528808, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf092e000, 2093056, PROT_NONE) = 0 mmap(0x7ffdf0b2d000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x154000) = 0x7ffdf0b2d000 mmap(0x7ffdf0b32000, 18536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0b32000 close(3) = 0 open("/opt/xymon/default/instantclient_11_2/libpthread.so.0", O_RDONLY) = -1 ENOENT (No such file or directory) open("/lib64/libpthread.so.0", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 at Z\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=135690, ...}) = 0 mmap(NULL, 2212736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffdf05bc000 fadvise64(3, 0, 2212736, POSIX_FADV_WILLNEED) = 0 mprotect(0x7ffdf05d3000, 2097152, PROT_NONE) = 0 mmap(0x7ffdf07d3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7ffdf07d3000 mmap(0x7ffdf07d5000, 13184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdf07d5000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4f000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4e000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f4d000 arch_prctl(ARCH_SET_FS, 0x7ffdf0f4e700) = 0 mprotect(0x7ffdf07d3000, 4096, PROT_READ) = 0 mprotect(0x7ffdf0b2d000, 16384, PROT_READ) = 0 mprotect(0x7ffdf0d3e000, 4096, PROT_READ) = 0 mprotect(0x61a000, 4096, PROT_READ) = 0 mprotect(0x7ffdf0f5e000, 4096, PROT_READ) = 0 munmap(0x7ffdf0f51000, 46795) = 0 set_tid_address(0x7ffdf0f4e9d0) = 12224 set_robust_list(0x7ffdf0f4e9e0, 0x18) = 0 futex(0x7fff9b78584c, FUTEX_WAKE_PRIVATE, 1) = 0 futex(0x7fff9b78584c, 0x189 /* FUTEX_??? */, 1, NULL, 7ffdf0f4e700) = -1 EAGAIN (Resource temporarily unavailable) rt_sigaction(SIGRTMIN, {0x7ffdf05c18b0, [], SA_RESTORER|SA_SIGINFO, 0x7ffdf05cb6a0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0x7ffdf05c1940, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7ffdf05cb6a0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 brk(0) = 0x620000 brk(0x641000) = 0x641000 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(1984), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) select(4, [3], [3], NULL, {15, 0}) = 1 (out [3], left {14, 999998}) getsockopt(3, SOL_SOCKET, SO_ERROR, [72058139498774528], [4]) = 0 write(3, "config hosts.cfg", 16) = 16 shutdown(3, 1 /* send */) = 0 select(4, [3], [], NULL, {15, 0}) = 1 (in [3], left {14, 999998}) recvfrom(3, "", 32767, 0, NULL, NULL) = 0 shutdown(3, 0 /* receive */) = -1 ENOTCONN (Transport endpoint is not connected) shutdown(3, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(3) = 0 open("/etc/localtime", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 fstat(3, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffdf0f5c000 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 2309 lseek(3, -1467, SEEK_CUR) = 842 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\t\0\0\0\t\0\0\0\0"..., 4096) = 1467 close(3) = 0 munmap(0x7ffdf0f5c000, 4096) = 0 write(2, "2014-07-29 09:28:47 ", 202014-07-29 09:28:47 ) = 20 write(2, "Cannot load /opt/xymon/default/s"..., 70Cannot load /opt/xymon/default/server/etc/hosts.cfg, or file is empty ) = 70 exit_group(3) = ? Actually, instead of opening the file it is trying to get it via network: socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(1984), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) select(4, [3], [3], NULL, {15, 0}) = 1 (out [3], left {14, 999998}) getsockopt(3, SOL_SOCKET, SO_ERROR, [72058139498774528], [4]) = 0 write(3, "config hosts.cfg", 16) = 16 Which does not work as the port is not 1984 but 1988. But why does it try to make network connection and doesn't open the local file. And even then it writes to stdout that it tries to open the file locally but it doesn't. Thanks in advance for your help. WK

2 1

how to ext script with bbwin ?
by bakgat8＠hotmail.com 28 Jul '14

28 Jul '14

I don't usually do windows. I have installed bbwin from here http://jmac-software.blogspot.com/2012/03/xymon-windows-client-set-up-guide… I found below post via google ... but there is still large gaps in my understanding. What format do you write a report in the bbwin tmp directory? Can I specify a column name ? Hi Ryan, I didn't understand why you use bbwincmd. You could use the externals agent to run your program every 5 minutes and your agent would just has to write a report in the bbwin tmp directory. Then, BBWin would take care to read the file and send the status to the hobbit server. That would be much easier for you. Don't you think ? Etienne. Can somebody give me more info or point me to any docs online? Thanks Bakkies

4 6

dynamic logfile name
by r.oliver＠web.de 25 Jul '14

25 Jul '14

Hello! I have an application that creates everyday a new logfile and I want to monitor it. The manpage for client-local.cfg says: The file:FILENAME line defines the filename of the file to monitor. As with the "log:" entries, a filename enclosed in backticks means a command which will generate the filenames dynamically. My question is: From what version on does xymon support this feature? I'm currently running 4.2.3. And can someone give me an example for the syntax with backticks? Thanks in advance! Oliver

1 0

mailing list search
by Sue.Bauer-Lee＠Multiplan.com 25 Jul '14

25 Jul '14

List search seems to be broken ATM. Please does someone with access have a moment to repair? __________________ Sue Bauer-Lee Systems Engineer MultiPlan 535 E. Diehl Rd. Naperville, IL 60563 NOTICE OF CONFIDENTIALITY: This message and any attachments contains confidential information belonging to the sender intended only for the use of the individual or entity named above. If you are not the intended recipient, be advised that copying, disclosure or reliance upon the contents is strictly prohibited. If you have received this message in error please notify the sender immediately. ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

3 3

DDNS instead of IP in hosts.cfg
by gbegin＠csc.com 25 Jul '14

25 Jul '14

Kris, Just have look to the man page of xymonnet: Note: xymonnet performs the connectivity test (ping) based on the hostname, unless the host is tagged with "testip" or the "--dns=ip" option is used. So the target of the connectivity test can be determined by your /etc/hosts file or DNS. Cordialement, Regards,Mit freundlichen Grüßen, Gautier BEGIN CSC • This is a PRIVATE message. If you are not the intended recipient, please delete without copying and kindly advise us by e-mail of the mistake in delivery. NOTE: Regardless of content, this e-mail shall not operate to bind CSC to any order or other contract unless pursuant to explicit written agreement or government initiative expressly permitting the use of e-mail for such purpose • CSC Computer Sciences SAS • Registered Office: Immeuble Le Balzac, 10 Place des Vosges, 92072 Paris La Défense Cedex, France • Registered in France: RCS Nanterre B 315 268 664 From: Kris Springer <kspringer at innovateteam.com> To: Xymon MailingList <xymon at xymon.com> Date: 07/17/2014 11:24 PM Subject: [Xymon] DDNS instead of IP in hosts.cfg Sent by: "Xymon" <xymon-bounces at xymon.com> This may be a stupid question but how do I configure a host in my hosts.cfg file to respond to ping using a dynamic DNS name instead of an IP? I'd like to have my server monitor my home router but it's IP changes. Thank you. ------------------------------------------------ Kris Springer_______________________________________________ Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

2 1

two sshd monitor
by rodolfo＠pilas.guru 25 Jul '14

25 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello: I monitor sshd port with bb-hosts test. Now I have two sshd running, one at standard 22 port (test 'ssh') and one at non-standard 88 port (test 'ssh:88') But the web shows just only one ssh status. What you suggest as a solution to see both tests status? Perhaps create another service definition at bb-service, [ssh-custom] ?? Regards, - -- Rodolfo Pilas @pilasguru http://www.pilas.guru gpg: 1024D/57153363 DAAE 3246 3F7D A420 B7A0 48A5 D120 C773 5715 3363 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iD8DBQFTtaAL0SDHc1cVM2MRAsOzAKCgAknTrH29Pn7Wyrrjl+EJB3ycHgCfR/gs hrWbGUdp6zCKBnqkygm10+s= =cXTW -----END PGP SIGNATURE-----

2 1

XYMON-WebAdmin
by dns1407＠yahoo.com 24 Jul '14

24 Jul '14

Hi, Has anyone get MAGMA tools working on XYMon 4.3.17 on Debian x64? If Yes please tell me how to configure this, because I had followed the installation guide but it do not work and cannot figured out what I've done wrong...I just simple get empty webpage... Thanks... Greetz, DNS

1 0

re-enabled check staying blue
by didds3＠yahoo.co.uk 24 Jul '14

24 Jul '14

Hobbit version 4.2.3 A couple of days ago I disabled a check... and have subsequently re-enabled it. The check NOW shows "<redacted> - mpm Thu Jul 24 15:19:41 2014 -------------------------------------------------------------------------------- Mon Jul 21 12:39:15 SAST 2014 143 requests currently being processed, 157 idle workers Status unchanged in 3 days,2 hours, 14 minutes Status message received from 192.168.240.133" So its showing what it should. However... the check remains blue. (rather than returning to what is should be, green) DAK what may be occuring here? And how I get teh check to return to being "normal" cheers Ian

4 4