- Xymon - Xymon mailman web

Trying to send to dual xymon servers
by d.tom.schmitt＠L-3com.com 02 Nov '09

02 Nov '09

Sorry for this entry being so long. I am trying to include as much info as possible. Running Xymon 4.3.0-0.beta2 on CentOS 5.3. I am trying to send to 2 xymon servers (Primary - monitor1, Secondary - monitor2) from multiple clients. CLIENTS BEING TESTED: o Linux (tomvip) o BBWin (sltst03) o Current BB clients that are in service (slcts00) It worked after we set the 1984 TCP port in the firewall for a short time and then quit. I am also having the same problem when setting the BBWin to point to both server (it works and then it stops to one of them). If I add both addresses to the actual BB windows client, they both report the exact same icons to both servers and the BB server. I was able to get both the BB and the BBWin clients to run on the same Windows server. We setup a different registry name for the BBWin client (e.g. slcts00 vs. slcts00.csw.L-3com.com for BB). I have the iptables firewalls on both monitor1 and monitor2 OFF. cd /etc/init.d ./iptables stop I get PURPLE icons on monitor1 and OK icons on monitor2: (for Linux, but just dashed for BBWin). G=green, W=white, P=purple conn cpu disk files http info memory/mem msgs ports procs ssh sslcert trends svcs Monitor1: tomvip.csw.l-3com.com G P P P G G P P P P G G G Monitor1: slcts00.csw.l-3com.com G G G G G G G G G (BB Client) Monitor1: sltst03.csw.L-3com.com G G G G G G G G G (BBWin also uptime, who) Monitor2: tomvip.csw.l-3com.com G G G W G G G G W W G G G Monitor1: slcts00.csw.l-3com.com G G G G G G G G G (BB Client) Monitor1: sltst03.csw.L-3com.com G -- -- G -- -- -- G -- (BBWin) tomvip.csw.l-3com.com: Beginning of file from /root/XYMON/client/etc/hobbitclient.cfg: #----------------------------------------------------------------------- ------- # You may not have to set HOBBITCLIENTHOME= or BBOSTYPE= but I set them here #----------------------------------------------------------------------- ------- # Directory for the Hobbit client files HOBBITCLIENTHOME=/root/XYMON/client BBOSTYPE=linux # List can include: # aix, dynix, greebsd, hp-ux, irix, linux # redhat, debian, openbsd, netbds, osf # sco, unixware, sunos, solaris, etc. # See: http://xymon.trantor.org/doku.php/monitors:bbswap # For setup up of an extension script to monitor swap space. #----------------------------------------------------------------------- ------- # TO REPORT TO MORE THAN ONE XYMON SERVER JUST ADD MORE THAN ONE BBDISP= LINE # You can use either the IP Addresses or the URLs. #----------------------------------------------------------------------- ------- BBDISP="monitor1.csw.l-3com.com" # IP address of the 1st Hobbit server BBDISP="monitor2.csw.l-3com.com" # IP address of the 2nd Hobbit server-if setup BBDISPLAYS="0.0.0.0" # IP of multiple Hobbit servers. # BBDISP must be "0.0.0.0". CONFIGCLASS="$BBOSTYPE" # Default configuration class for logfiles # PATH setting for the client scripts PATH="/bin:/usr/bin:/sbin:/usr/sbin:/etc" I have tried it without the BBDISPLAYS="" set - still the same output. Messages on tomvip from /root/XYMON/client/logs/hobbitclient.log: 2009-10-26 13:21:26 Whoops ! bb failed to send message - Connection failed 2009-10-26 13:31:31 Could not connect to bbd at monitor1.csw.l-3com.com:1984 - No route to host 2009-10-26 13:31:31 Whoops ! bb failed to send message - Connection failed 2009-10-26 13:36:43 Could not connect to bbd at monitor1.csw.l-3com.com:1984 - No route to host 2009-10-26 13:36:43 Whoops ! bb failed to send message - Connection failed 2009-10-26 13:41:37 Could not connect to bbd at monitor1.csw.l-3com.com:1984 - No route to host 2009-10-26 13:41:37 Whoops ! bb failed to send message - Connection failed I can ping the monitor1 server with no problems. BB-HOSTS Entries for: (wrapped lines for ease of reading) MONITOR1: 127.0.0.1 monitor1.csw.l-3com.com # bbd conn ssh http://monitor1.csw.l-3com.com apache=http://monitor1.csw.l-3com.com/server-status? auto TRENDS:*,apache:apache|apache1|apache2|apache3 128.170.1.161 monitor2.csw.l-3com.com # bbd conn ssh http://monitor2.csw.l-3com.com apache=http://monitor2.csw.l-3com.com/server-status? auto TRENDS:*,apache:apache|apache1|apache2|apache3 128.170.1.203 tomvip.csw.l-3com.com # conn ssh tftp http://tomvip.csw.l-3com.com/ https://tomvip.csw.l-3com.com./ MONITOR2: 128.170.1.151 monitor1.csw.l-3com.com # bbd conn ssh http://monitor1.csw.l-3com.com apache=http://monitor1.csw.l-3com.com/server-status? auto TRENDS:*,apache:apache|apache1|apache2|apache3 127.0.0.1 monitor2.csw.l-3com.com # bbd conn ssh http://monitor2.csw.l-3com.com apache=http://monitor2.csw.l-3com.com/server-status? auto TRENDS:*,apache:apache|apache1|apache2|apache3 128.170.1.203 tomvip.csw.l-3com.com :q! # conn ssh tftp http://tomvip.csw.l-3com.com/ https://tomvip.csw.l-3com.com/ RULES for iptables (iptables -L): zCurrently Running: (iptables stopped) Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination [root at monitor2 ~]# When firewall is enabled: [root at monitor2 ~]# cat IPTABLES-L.txt Chain INPUT (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination RH-Firewall-1-INPUT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain RH-Firewall-1-INPUT (2 references) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT icmp -- anywhere anywhere icmp any ACCEPT esp -- anywhere anywhere ACCEPT ah -- anywhere anywhere ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns ACCEPT udp -- anywhere anywhere udp dpt:ipp ACCEPT tcp -- anywhere anywhere tcp dpt:ipp ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-ns ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-dgm ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-ssn ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:microsoft-ds ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:bb REJECT all -- anywhere anywhere reject-with icmp-host-prohibited [root at monitor2 ~]# I am getting more confused as I go along, something works and then it stops working and I am not sure what I did to change the results? Thanks, Tom Schmitt Senior IT Staff - R&D Phone (801) 594-3030 Cell (801) 231-7230 D.Tom.Schmitt at L-3Com.com \\\\|||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo--

2 3

[hobbit] monitor processes by owner
by josie_wells＠yahoo.com 02 Nov '09

02 Nov '09

Thank you Bruce, Patrick, Jerald and David for your suggestions. Although Patrick's idea sounds good I would like to monitor other processes as well if possible. To confirm the the reasoning behind what I am trying to do, I am trying to see if the number of oracle owned processes ever comes close to the limit defined by the OS (MAXUPROC I think it's called) - a problem we have had in the past. Therefore I'd like it to include all oracle processes rather than monitoring the oracle port as Bruce suggests. Maybe the custom script is the way to go - but I'd really like to avoid that if I can. Josie --- On Mon, 11/2/09, White, Bruce <bewhite at fellowes.com> wrote: > From: White, Bruce <bewhite at fellowes.com> > Subject: RE: [hobbit] monitor processes by owner > To: hobbit at hswn.dk > Date: Monday, November 2, 2009, 3:26 PM > I track and graph Oracle DB > connections and connections to our Oracle forms server not > via processes but by port connections. This is easily > done under the ports test, without any changes to > code. In your hobbit-clients.cfg file, add a PORT rule > which defines the port used to make the connection and a > TRACK option. > > .....Bruce > > > > > Bruce White > Senior Enterprise Systems Engineer | Phone: 630-671-5169 | > Fax: 630-893-1648 | bewhite at fellowes.com > | http://www.fellowes.com/ > > > > Disclaimer: The information contained in this message may > be privileged and confidential and protected from > disclosure. If the reader of this message is not the > intended recipient or an employee or agent responsible for > delivering this message to the intended recipient, you are > hereby notified that any dissemination, distribution or > copying of this communication is strictly prohibited. If you > have received this communication in error, please notify us > immediately by replying to the message and deleting it from > your computer. Thank you. Fellowes, Inc. > > -----Original Message----- > From: Patrick Nixon [mailto:pnixon at gmail.com] > > Sent: Thursday, October 29, 2009 11:58 AM > To: hobbit at hswn.dk > Subject: Re: [hobbit] monitor processes by owner > > Sort of similar to Jerald's idea, but it'll get you the > graphs easier. :) > > On your db server, go into the client's etc directory and > modify the hobbitclient.cfg. > > changing > PS="ps ax" > to > PS="ps ax | $GREP oracle" > > Caveat: This will restrict you to *JUST* monitoring > processes for oracle, nothing else on the server in > question. > > On Thu, Oct 29, 2009 at 10:02 AM, Sheets, Jerald <Jerald.Sheets at turner.com> > wrote: > > How about write a custom script that is green when > your ps -ef |grep > > <procname> has the appropriate user, yellow if > say, 1 or two is owned > > by someone else, and maybe red if 5 or more? > > > > You could also do no middle ground, too. Green > or red. > > > > Fairly trivial, but it would not be monitored as a > PROC, it would be a > > custom check. > > > > Jerald Sheets > > Sr. Systems Engineer > > CNN News Systems > > * Jerald.Sheets at turner.com > > * 404.878.0566 *404.293.8762 > > > > > > > > > > > > -----Original Message----- > > From: Josie Wells [mailto:josie_wells at yahoo.com] > > Sent: Thursday, October 29, 2009 6:40 AM > > To: hobbit at hswn.dk > > Subject: [hobbit] monitor processes by owner > > > > Hi, > > > > I am new to this mailing list so apologies if I am > breaking any > > protocol by sending this mail out to this address - I > have searched > > the faqs and can find no answer. > > > > What I am trying to do is to monitor processes by the > owner. > > > > In hobbit-clients.cfg I can specify a string to search > for in the > > process name but I can find no way to look in the USER > column. > > > > If I could, then I could get a count of processes > owned by oracle and > > graph it out. > > > > Is this possible? > > > > Many thanks > > > > Josie > > > > > > > > > > To unsubscribe from the hobbit list, send an e-mail to > > > hobbit-unsubscribe at hswn.dk > > > > > > > > To unsubscribe from the hobbit list, send an e-mail to > > > hobbit-unsubscribe at hswn.dk > > > > > > > > To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk > > > > To unsubscribe from the hobbit list, send an e-mail to > hobbit-unsubscribe at hswn.dk > > >

2 1

alert only on down service
by dave＠antognini.com 02 Nov '09

02 Nov '09

Hi guys, Simple question, probably answered somewhere but I can't find it. How do I alert only on a service (win) that is down? I tried Services=svcs in hobbit-alert and it didn't work Thanks Dave

2 1

monitor processes by owner
by josie_wells＠yahoo.com 02 Nov '09

02 Nov '09

Hi, I am new to this mailing list so apologies if I am breaking any protocol by sending this mail out to this address - I have searched the faqs and can find no answer. What I am trying to do is to monitor processes by the owner. In hobbit-clients.cfg I can specify a string to search for in the process name but I can find no way to look in the USER column. If I could, then I could get a count of processes owned by oracle and graph it out. Is this possible? Many thanks Josie

5 4

Maintaining original Hobbit / Xymon server
by Tom.Stewart＠landsend.com 02 Nov '09

02 Nov '09

All, We have migrated from our old hobbit server to the new xymon server. We changed platforms, so I'm trying to figure out a way to allow users to view the old data on the original server for the next year or so without having all the tests go purple. Does anyone have any ideas? Thank you for any input. Tom

5 6

Problem with 4.3.0.0-beta2
by Tom.Stewart＠landsend.com 30 Oct '09

30 Oct '09

All, Since we just switched to this version on a RHEL 5, we have been getting some erroneous errors about issues. Here is an example. yellow Fri Oct]30 13:10:23 CDT 2009 , 3 users, 605 procs, load= &yellow Load is HIGH System clock is -3 seconds off I also have seen this with some of the disk testing and other tests. It seems to be very random. We did adjust our message size to the following and that seem to help some, but we are still getting erroneous errors. hobbitserver.cfg:MAXMSG_CLIENT="1536" hobbitserver.cfg:MAXMSG_DATA="1536" hobbitserver.cfg:MAXMSG_STATUS="1536" All our config files are the same as we had on the Hobbit server, so nothing there has changed. Tom

1 0

Help with hobbitd_channel and hobbitd_filestore
by tlewick＠tradebotsystems.com 30 Oct '09

30 Oct '09

Final update, for me at least. I can get at the data I want by running: ./bb 127.0.0.1 "hobbitdlog hostname.cpu" I'd like to know if there is a "better" way to get this, or more "correct" way, but this will work for me... -----Original Message----- From: Taylor Lewick Sent: Friday, October 30, 2009 11:17 AM To: 'hobbit at hswn.dk' Subject: RE: Help with hobbitd_channel and hobbitd_filestore More digging, this stems from the fact that I was passing channel=client, and hobbit_filestore doesn't support the client channel, at least in the version I have, i.e. 4.2.0 I just tried running: bbcmd hobbitd_channel --channel=data --log=/home/hobbit/data/logs/clientcpu.log hobbitd_filestore --data and that did work. So now it's a question of, how do I get hobbitd_filestore to work with hobbit_channel --channel=client? Modify hobbitd_filestore.c? -----Original Message----- From: Taylor Lewick Sent: Friday, October 30, 2009 10:58 AM To: 'hobbit at hswn.dk' Subject: RE: Help with hobbitd_channel and hobbitd_filestore I think this is a problem with hobbitd_filestore getting/reading the correct file I changed the hobbitd_channel command to: ./hobbitd_channel --channel=client --log=/home/hobbit/data/logs/logfile.txt get_channel_data.pl The get_channel_data.pl was a very simple perl script I wrote just to see if it was getting data from Standard Input. And it worked. The perl script is just: #!/usr/bin/pl $FH="/home/hobbit/data/logs/clientchannel.log": open (OUTFILE, ">$FH"); while ( <STDIN> ) { chomp $_; print OUTFILE "$_\n"; } close (OUTFILE); So clientchannel.log has the output I'd expect to see. And the logfile is no longer being populated with "Our child has failed and will not talk to us... Cause bad file descriptor" messages The only similar post I could find on this was the following thread, http://www.hswn.dk/hobbiton/2006/08/msg00326.html But that was back a few years and was for someone who was running on AIX, and it looked inconclusive. FYI, I'm running hobbit 4.2.0 on a Suse 10.2 server.

1 0

Help with hobbitd_channel and hobbitd_filestore
by tlewick＠tradebotsystems.com 30 Oct '09

30 Oct '09

I think this is a problem with hobbitd_filestore getting/reading the correct file I changed the hobbitd_channel command to: ./hobbitd_channel --channel=client --log=/home/hobbit/data/logs/logfile.txt get_channel_data.pl The get_channel_data.pl was a very simple perl script I wrote just to see if it was getting data from Standard Input. And it worked. The perl script is just: #!/usr/bin/pl $FH="/home/hobbit/data/logs/clientchannel.log": open (OUTFILE, ">$FH"); while ( <STDIN> ) { chomp $_; print OUTFILE "$_\n"; } close (OUTFILE); So clientchannel.log has the output I'd expect to see. And the logfile is no longer being populated with "Our child has failed and will not talk to us... Cause bad file descriptor" messages The only similar post I could find on this was the following thread, http://www.hswn.dk/hobbiton/2006/08/msg00326.html But that was back a few years and was for someone who was running on AIX, and it looked inconclusive. FYI, I'm running hobbit 4.2.0 on a Suse 10.2 server.

1 0

Help with hobbitd_channel and hobbitd_filestore
by tlewick＠tradebotsystems.com 30 Oct '09

30 Oct '09

Hey all. I want to process the CPU pages for our Windows hosts to see if a given process exceeds a certain memory size. I wrote a perl script to do this against the files in /home/hobbit/data/hostdata But that directory only contains files that are a day old, or state change files, and I'd like my program to work against data that is closer to real time, i.e. a few minutes old is fine. So I tried running from the command line as user hobbit: ./hobbitd_channel --channel=data --log=/home/hobbit/data/logs/clientcpu.log hobbitd_filestore --data --only=cpu And in the clientcpu.log I just see entry after entry of: 009-10-30 08:26:47 Our child has failed and will not talk to us: Channel data, PID 28876, cause Bad file descriptor Anyone have any idea what I'm doing wrong, or how I go about using hobbit_channel and hobbit_filestore correctly? FYI, running ./bbcmd hobbitd_channel --channel=client cat > /home/hobbit/data/logs/clientlogs.log Works, but it just runs in a continuous loop and is giving me all status messages for all clients, so its really not that helpful... Thanks, Taylor

1 0

IPv6
by david.bandel＠gmail.com 30 Oct '09

30 Oct '09

Folks, Searched the archives and found a few IPv6 inquiries, but only that there are no plans to support it. While I'm not a programmer, I suspect it would actually be fairly simple to implement (please correct me if I'm wrong). This is starting to become a priority for me. I need to monitor my ssh servers, but they all only respond now to ipv6, so I can't :-(. For those of you who care, after monitoring my ipv6 only ssh logs, the automated attacks against my servers has dropped from over 10,000 attacks per day to 0. Have not had a single attack in months. Haven't seen that in over 10 years now. I'm sure this is only a temporary thing, but it sure is nice. I have only one other piece of software I can't replace (besides hobbit) that needs to support ipv6 and I will be ready. Those of you watching the bogon list might know how close we are to complete ipv4 exhaustion, and in some areas of the world ipv4 addresses are no longer available. If there is anything I can do to expedite a move to support ipv6, let me know. Thanx, David A. Bandel -- Focus on the dream, not the competition. - Nemesis Air Racing Team motto

6 9