- Xymon - Xymon mailman web

Xymond crashing when scheduling disable in 4.3.15
by Johan.Sjoberg＠deltamanagement.se 24 Feb '14

24 Feb '14

Hi. We recently updated our Xymon installation to 4.3.15. Now it seems like we cannot schedule disable from the "Enable/disable" page. We get this error in the xymond.log: 2014-02-17 12:40:28 Whoops ! Failed to send message (timeout) 2014-02-17 12:40:28 -> 2014-02-17 12:40:28 -> Recipient 'x.x.x.x', timeout 15 2014-02-17 12:40:28 -> 1st line: 'status mon01.xymond red - Program crashed' This is the output from gdb. Don't know if it tells you anything? mon01:/usr/local/xymon/server# gdb bin/xymond tmp/core GNU gdb (GDB) 7.0.1-debian Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/local/xymon/server/bin/xymond...done. warning: Can't read pathname for load map: Input/output error. Reading symbols from /usr/lib/libssl.so.0.9.8...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libssl.so.0.9.8 Reading symbols from /usr/lib/libcrypto.so.0.9.8...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libcrypto.so.0.9.8 Reading symbols from /lib/librt.so.1...(no debugging symbols found)...done. Loaded symbols for /lib/librt.so.1 Reading symbols from /lib/libpcre.so.3...(no debugging symbols found)...done. Loaded symbols for /lib/libpcre.so.3 Reading symbols from /lib/libc.so.6...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.6 Reading symbols from /lib/libdl.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libdl.so.2 Reading symbols from /usr/lib/libz.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libz.so.1 Reading symbols from /lib/libpthread.so.0...(no debugging symbols found)...done. Loaded symbols for /lib/libpthread.so.0 Reading symbols from /lib64/ld-linux-x86-64.so.2...(no debugging symbols found)...done. Loaded symbols for /lib64/ld-linux-x86-64.so.2 Core was generated by `xymond --pidfile=/var/log/xymon/xymond.pid --restart=/usr/local/xymon/server/tm'. Program terminated with signal 6, Aborted. #0 0x00007f12064c71b5 in raise () from /lib/libc.so.6 Johan Sjöberg Delta Management AB Tulegatan 30 113 53 Stockholm Sweden Phone: +46 8 501 125 09 Cell: +46 70 751 99 17 Support: +46 8 501 125 18 support at deltamanagement.se <mailto:support at deltamanagement.se>www.deltamanagement.se<http://www.deltamanagement.se/> [http://www.deltamanagement.se/images/mailfooter_delta.gif] [http://www.deltamanagement.se/images/climatecare_small.gif] Koldioxidneutral IT-drift El, kontorsvärme och tjänsteresor kompenseras med hjälp av ClimateCare

2 3

NetBSD inode test patches
by gendalia＠iastate.edu 21 Feb '14

21 Feb '14

http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=48575 has what I'm using in the package on NetBSD. I've also attached them. Tracy

1 0

Fun with metrics: can I get an alert recipient programmatically ?
by betsy.schwartz＠gmail.com 21 Feb '14

21 Feb '14

I'm working on metrics to track our response time to yellow alerts. I can get the current state of the yellows on the board with /usr/local/xymon/server/bin/xymon localhost "xymondboard color=yellow fields=hostname,testname ,color,lastchange,acktime This will tell me f I have an un-acked yellow, and I know how long it's been yellow. Now I want to sort these out by which group gets the alerts. One way to find out is: /usr/local/xymon/server/bin/xymond_alert --test $hostname $testname --color=$color --duration=$duration |grep "Mail alert" and then parse the result for the destination group. But is there a way I can get that information directly from xymon? Or is it stored in some deep memory structure? Just curious, it'd be cleaner code if the info can come from a query thanks Betsy (wishing it were easier to correlate ack info with color change info, the acklogs are in a separate space and format from the colors)

1 0

Xymon nmap integrstion/plugin
by mate33＠ymail.com 21 Feb '14

21 Feb '14

Hello Is there any way to integrate nmap or similar program into xymon web page. What I would like is to scan the network with nmap then write all the host into xymon for monitoring.(from xymon web page) May to do a security check with nmap every day to see if someone taped into the network and make an alarm in xymon. Thanks for all your help guys, Best regards, Mate

2 1

FILES in analysis.cfg
by Rolands＠logicaltech.com.au 21 Feb '14

21 Feb '14

Hi, I started monitoring some files. I can't really understand how this works. Xymon 4.3.10 on Solaris 10 client-local.cfg: [sunos] file:`ls -1 /var/tmp/sys-heartbeat-*` analysis.cfg: HOST=myhost FILE /var/tmp/sys-heartbeat-myhost red MTIME<3700 FILE /var/tmp/sys-heartbeat-testing red MTIME<3700 On myhost I got a file /var/tmp/sys-heartbeat-myhost but /var/tmp/sys-heartbeat-testing is missing (for testing) If sys-heartbeat-myhost is older than 3700 second the files test goes red. If sys-heartbeat-testing doesn't exist nothing happens at all. The sys-heartbeat-testing line does not show up on the test but sys-heartbeat-myhost does. Clicking on the sys-heartbeat-myhost shows me all the file data. The syntax in the manual states. FILE filename [color] [things to check] [TRACK] noexist triggers a warning if the file exists. By default, a warning is triggered for files that have a FILE entry, but which do not exist. That should mean that if the file doesn't exist it should go red. In the examples in analysis.cfg the color is in another spot. # Example: Check that the /var/log/messages file is not empty and was updated # within the past 10 minutes, and go yellow if either fails: # FILE /var/log/messages SIZE>0 MTIME<600 yellow I guess that is just a typo. I have tried both and it seems it doesn't matter. What am I doing wrong? - Roland Soderstrrom

6 12

spoofed IP's in hosts.cfg
by kspringer＠innovateteam.com 21 Feb '14

21 Feb '14

I use xymon to monitor not only servers but also many specific URL's through ports that we host for various purposes. Some of the things I monitor are behind multiple NAT firewalls and the IP's of the hosts are not only irrelevant but not forwarded through my firewall and thus not needed to be in my hosts.cfg file which is not on my local network. I did some searching and saw that I could enter 0.0.0.0 for the IP's, but now my hosts.cfg file doesn't work. What can I enter as the IP's for hosts in my hosts.cfg file when I don't want the IP's specified? Thank you. ------------------------------------------------ Kris Springer

2 1

PfSense firewall client
by kspringer＠innovateteam.com 20 Feb '14

20 Feb '14

I've got some PfSense firewalls that I would love to have running with xymon client. Anyone have a step-by-step guide to get this working? PfSense is BSD. Thank you. ------------------------------------------------ Kris Springer

2 1

MACHINEDOTS setting not working
by kspringer＠innovateteam.com 20 Feb '14

20 Feb '14

I've got a client Ubuntu machine setup with the MACHINEDOTS setting in it's cfg file but it's stats are getting ignored by the server. The only way I can get the stats to show up on the server side for this client is to add the CLIENT:hostname setting in the server's hosts.cfg file. Any idea why the MACHINEDOTS way of doing it doesn't seem to work? Thank you. ------------------------------------------------ Kris Springer

1 0

FreeBSD [ifstat] processing
by jlaidman＠rebel-it.com.au 20 Feb '14

20 Feb '14

Hiya I have some FreeBSD systems that run IPv6, and the numbers that Xymon are graphing are not quite right. I think I've pinned down the cause as being the ifstat matching regexp, not being able to handle either multiple bound IP addresses, or IPv6 addresses. My system has output from "netstat -i -b -n" something like this: Name Mtu Network Address Ipkts Ierrs Ibytes Opkts Oerrs Obytes Coll em0 1500 <Link#1> aa:bb:cc:dd:ee:ff 855109239 246 119882177806 4445784528 0 1678631985244 0 em0 1500 fe80:1::666:6 fe80:1::666:66ff: 5652 - 403008 8487 - 565928 - em0 1500 192.168.1.0 192.168.1.66 3669836 - 327402522 4441615751 - 1612495913591 - em0 1500 6006:6000:0:6 6006:6000:0:6006: 186828 - 13051632 33119395 - 3319372758 - <snipped> lo0 16384 <Link#3> 2420387 0 296603593 2420667 0 296585785 0 lo0 16384 ::1/128 ::1 193448 - 17014491 217323 - 22687570 - lo0 16384 fe80:6::1/64 fe80:6::1 0 - 0 0 - 0 - lo0 16384 127.0.0.0/8 127.0.0.1 2227042 - 279599853 2226396 - 279550576 - lo1 16384 <Link#4> 398523 0 55461313 398523 0 55461150 0 lo1 16384 192.168.2.0 192.168.2.66 317552009 - 63772241684 383671 - 50695917 - lo1 16384 6006:6000:600 6006:6000:600::66 29688469 - 10867392950 4 - 2982 - <snipped> The Xymon client explicitly excludes the "link" lines, and all of the "lo" lines. Makes sense, except that it doesn't work for me. It seems that the Xymon server-side parsing is only picking up the line with the IPv4 address (192.168.1.66) and ignores all the others for the interface. Also, I can't see where Xymon handles multiple lines for the same interface, and I don't think it does. And finally, this server has loopback interfaces lo1, lo2 and so on, with alternative IP addresses for this server. Most of the traffic that arrives at this server is addressed to the loopback interfaces. So even if Xymon could parse these lines, multiple of them, the client script excludes all of the loopback interfaces. What's the best way to solve this? The lo[1-n] NICs could be added back in. But I don't know that this is very useful. The intent of the [ifstat] data is to record and display bytes that come in and out of physical NICs that communicate with the outside world, but my extra loopback interfaces' traffic isn't being counted. For this reason, it seems to make sense that the "link" lines are probably the best for this, as I would think that they would show packets contained only in physical frames (ethernet or some other medium). However, I think the "link" lines also show things like ARP and other layer-2 traffic that might not be as useful. Has anyone else looked into this, or done monitoring of FreeBSD interfaces? Is there a better command to run on FreeBSD for this? I'd really like to get this fixed up. Cheers Jeremy

2 3

FILES in analysis.cfg
by Nick＠Pettefar.com 19 Feb '14

19 Feb '14

Is there also a way to have the red with a wildcard? I am thinking specifically about /var/core/core* files which are very important to know if they exist but have undetermined names. We also need the alarm to stay on until the core* files are removed. Regards, Nick Pettefar > Date: Tue, 18 Feb 2014 22:54:30 +0100 > From: Henrik St?rner <henrik at hswn.dk> > Subject: Re: [Xymon] FILES in analysis.cfg >> So how do I get the files test go RED on a missing file? > > OK, I had to do some testing with this. > > The problem is that when the file does not exist, then the `ls -1 ...` > will not produce any output. Without any output, Xymon cannot tell that > there is a file-check happening. > > If you have an explicit filename in client-local.cfg, then the FILE > check in analysis.cfg works as expected, because the xymon client will > report that the specific file is missing. > > So: > > client-local.cfg: > [myhost] > file:/var/tmp/sys-heartbeat-myhost > > analysis.cfg > HOST=myhost > FILE %^/var/tmp/sys-heartbeat-.* MTIME<3700 > > This will go red if the file is missing, or it exists and is older than > 3700 seconds. > > > Regards, > Henrik Call Send SMS Add to Skype You'll need Skype CreditFree via Skype

2 1