- Xymon - Xymon mailman web

NaN errors for AIX 5.3
by hj.beckers＠kreis-steinfurt.de 22 Jun '09

22 Jun '09

Hi, I installed hobbit client on an AIX 5.3 with the client configuration from AIX 5.2. The red/gree/yellow icons are shown, the client data gets transferred, only there are no graphs in the rrd plots. All rows show an empty value field and "NaN" (not a number). top lines from the working AIX 5.2 client data: client astsm01.aix aix [date] Mon Jun 22 15:46:14 2009 [uname] AIX astsm01 2 5 00521F3A4C00 [uptime] 03:46PM up 4 days, 10:07, 0 users, load average: 1.03, 0.89, 0.82 [who] [df] Filesystem 1024-blocks Used Free %Used Mounted on /dev/hd4 262144 201272 60872 77% / /dev/hd2 3604480 3106184 498296 87% /usr /dev/hd9var 786432 365524 420908 47% /var /dev/hd3 1048576 48892 999684 5% /tmp /dev/hd1 327680 197144 130536 61% /home /proc - - - - /proc /dev/hd10opt 1376256 734228 642028 54% /opt top lines from the not working AIX 5.3 client data (not plotted, all info below the graphs "NaN"): client asrz21.aix aix [date] Mon Jun 22 15:26:46 2009 [uname] AIX asrz21 3 5 00C2839E4C00 [uptime] 03:26PM up 3 days, 1:45, 4 users, load average: 3.46, 3.65, 3.33 [who] b314111 pts/0 Jun 22 14:56 (asrz21) b314111 pts/1 Jun 22 15:12 (asrz21) b106364 pts/3 Jun 22 11:49 (asrz21) b106364 pts/4 Jun 22 15:18 (ps0114.kreis-steinfurt.lokal) [df] Filesystem 1024-blocks Used Free %Used Mounted on /dev/hd4 1048576 328940 719636 32% / /dev/hd2 6553600 5848636 704964 90% /usr /dev/hd9var 1048576 153160 895416 15% /var /dev/hd3 2097152 65248 2031904 4% /tmp /dev/fwdump 131072 348 130724 1% /var/adm/ras/platform /dev/hd1 10485760 110564 10375196 2% /home I see no big difference, no language problem. Any hints? Yours hjb

1 0

Configuring Hobbit 4.2.0 to save various test results on disk
by mbw＠u.washington.edu 21 Jun '09

21 Jun '09

Hi, Im migrating from Big Bro and have a test that I send back to the BB server called "WHOZIT" - I then parse those files on the BB server and generate additional and combined results pages. On Hobbit, it appears that this "storing" of data received is turned off. I looked at my Debian Lenny configuration files for this and it looks like I have to enable "data" in my /etc/hobbit/hobbitlaunch.cfg file. This is what I did: [bbdata] ENVFILE /usr/lib/hobbit/server/etc/hobbitserver.cfg NEEDS hobbitd CMD hobbitd_channel --channel=data --log=$BBSERVERLOGS/data.log hobbitd_filestore --data restarting the hobbit server and looking later in /var/lib/hobbit/logs and /data, I only see a couple of new files for the local machine. So I dont think I understand how to configure this properly. I am just dumping a bunch of plaintext out from my client and sending it back - I really dont even care about the status part - I just want the text, and I only need to store it for the WHOZIT test, I dont care about storing raw data files for any other test. I would appreciate a pointer to the docs or tips on how to do this. hobbit/lenny uptodate 4.2.0.dfsg-14lenny2 thanks, Matt

2 1

Problem with hobbit 4.2.0 on Solaris 10 with ZFS enabled
by tj_yang＠hotmail.com 20 Jun '09

20 Jun '09

When running hobbit server 4.2.0 on sparc Solaris 10 with ZFS enabled, the ZFS data is a pair of mirror disks to hold hobbit server data. This is the error messages I was seeing. hobbit at server$ tail bb-display.log 2009-06-09 08:57:35 Whoops ! bb failed to send message - timeout 2009-06-09 08:57:35 hobbitd status-board not available 2009-06-09 11:28:19 Whoops ! bb failed to send message - timeout 2009-06-09 11:28:21 hobbitd status-board not available 2009-06-09 11:43:48 Whoops ! bb failed to send message - timeout 2009-06-09 11:43:48 hobbitd status-board not available 2009-06-09 12:29:05 Whoops ! bb failed to send message - timeout 2009-06-09 12:29:07 hobbitd status-board not available 2009-06-09 13:18:33 Whoops ! bb failed to send message - timeout 2009-06-09 13:18:35 hobbitd status-board not available hobbit at server$ And it was causing false PROC alerts got sent out due to process output got cut off early. limiting ZFS physical memory maximum usage by setting ARC variable to 3G in /etc/system didn't help either. The problem was fixed by disabling the ZFS by migrating from ZFS to SVM. The kenerl phyical memory usage was down from 85% to 20% (of 8G). hobbit server is much stable under this setting. The observation is that hobbit server doesn't work well under high phyical memory usage condition. I am wondering if any other hobbit sites using Soalris 10+ZFS has similar problem. T.J. Yang _________________________________________________________________ Hotmail® has ever-growing storage! Don’t worry about storage limits. http://windowslive.com/Tutorial/Hotmail/Storage?ocid=TXT_TAGLM_WL_HM_Tutori…

2 1

Disk Ignore - easy
by DKDeckert＠Hormel.com 19 Jun '09

19 Jun '09

Hey everyone. I have a slight problem and i dont know why it is not working. I am trying to ignore a disk that is mounted on /diskname the actual path is /dev/diskname i want to ignore it or even not have it show up red, because it is always full (its static) i have tried the following in bb-hosts....each one i have waited for about 10 min HOST=hostname DISK %^/diskname IGNORE DISK /diskname IGNORE DISK * 90 95 /diskname IGNORE DISK * 90 95 /dev/diskname IGNORE DISK /dev/diskname IGNORE DISK %^/dev/diskname IGNORE I dont know why its not working...hmmm Thanks in advanced everyone. Notice: This communication is an electronic communication within the meaning of the Electronic Communications Privacy Act, 18 U.S.C. � 2510. Its disclosure is strictly limited to the recipient(s) intended by the sender of this message. This transmission and any attachments may contain proprietary, confidential, attorney-client privileged information and/or attorney work product. If you are not the intended recipient, any disclosure, copying, distribution, reliance on, or use of any of the information contained herein is STRICTLY PROHIBITED. Please destroy the original transmission and its attachments without reading or saving in any matter and confirm by return email.

5 6

[hobbit] RE: Hobbit Security (Cross-Site Scripting)
by stewartl42＠gmail.com 19 Jun '09

19 Jun '09

It's usually a bit more complicated that just quoting the user input. I'm actually scanning a fresh install with IBM Appscan Enterprise when you mentioned it... :) On Fri, Jun 19, 2009 at 11:09 AM, David Cecchino < david.cecchino at datacure.com> wrote: > HP Webinspect scans of xymon show it is vulnerable to XSS , is there a > way of putting quotes around the url variables/strings? > > > > > -- Stewart -- An infinite number of mathematicians walk into a bar. The first one orders a beer. The second orders half a beer. The third, a quarter of a beer. The bartender says "You're all idiots", and pours two beers.

1 1

bbmrtg.pl help
by jhoskinson＠1stel.com 19 Jun '09

19 Jun '09

Hello all I need to alarm on bandwidth thresholds so I have added bbmrtg.pl using this guide, http://www.pleiades.com/mrtgbb/. Everything is working expect when bbmrtg.pl runs it reports "In: bytes/sec (0.0%) Out: bytes/sec (0.0%)". When look at the graph produced by mrtg-rrd.cgi, it reports the correct usage which in case is "Current In: 68.8 Mb/s Current Out: 25Mb/s". It is as if bbmrgt.pl is not reading the rrd file. Here is what my mrtg.cfg file looks like. ### Global Config Options # for UNIX # WorkDir: /home/http/mrtg # for Debian WorkDir: /var/www/mrtg LogFormat: rrdtool LibAdd: /usr/lib/perl5/ IconDir: /mrtg # or for NT # WorkDir: c:\mrtgdata ### Global Defaults # to get bits instead of bytes and graphs growing to the right # Options[_]: growright, bits EnableIPv6: no Target[bb-hostname_Vl1]: #Vl1:public at host: # bb* = Big Brother info bb*host[bb-hostname_Vl1]: bb-hostname bb*svc[bb-hostname_Vl1]: int49-56 bb*althost[bb-hostname_Vl1]: Internet link. bb*altsvc[bb-hostname_Vl1]: traffic bb*yellow[bb-hostname_Vl1]: 9% bb*red[bb-hostname_Vl1]:10% bb*unit[bb-hostname_Vl1]: bits/sec bb*in[bb-hostname_Vl1]:In bb*out[bb-hostname_Vl1]: Out SetEnv[bb-hostname_Vl1]: MRTG_INT_IP="1.1.1.1" MRTG_INT_DESCR="Interface to internet link." Options[bb-hostname_Vl1]: growright, bits MaxBytes[bb-hostname_Vl1]: 125000000 Title[bb-hostname_Vl1]: Traffic Analysis for Vl1 -- bb-hostname.foo.com PageTop[bb-hostname_Vl1]: <h1>Traffic Analysis for Vl1 -- bb-hostname.foo.com</h1> <div id="sysdetails"> <table> <tr> <td>System:</td> <td>bb-hostname.foo.com in FOO</td> </tr> <tr> <td>Maintainer:</td> <td>foo at foo.com</td> </tr> <tr> <td>Description:</td> <td>internet link </td> </tr> <tr> <td>ifType:</td> <td>propVirtual (53)</td> </tr> <tr> <td>ifName:</td> <td>Vl1</td> </tr> <tr> <td>Max Speed:</td> <td>125.0 MBytes/s</td> </tr> <tr> <td>Ip:</td> <td>1.1.1.1()</td> </tr> </table> </div> Here is the output when I bbmrtg.pl by hand localhost status internet.traffic green Wed Jun 17 13:59:04 2009 &green<A HREF="http://foo.com/cgi-bin/mrtg-rrd.cgi/br2-cci_vl1.html">Traffic Analysis for Vl1 -- bb-hostname.1stel.com:</A> *In: bits/sec (0.0%) Out: bits/sec (0.0%*) <CENTER> <A HREF="http://foo.com/cgi-bin/mrtg-rrd.cgi/bb-hostname_vl1.html"><IMG SRC="http://foo.com/cgi-bin/mrtg-rrd.cgi/bb-hostname_vl1-day.png" ALT="Last 24 Hours" BORDER=0></A> </CENTER> <TABLE BORDER=1 ALIGN=CENTER> <TR> <TH COLSPAN=6>Rules</TH> </TR> <TR> <TD>In</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 9.0%</TD> <TD BGCOLOR=yellow>> 9.0%</TD> <TD BGCOLOR=red>> 10.0%</TD> </TR> <TR> <TD>Out</TD> <TD BGCOLOR=red>< 0.0%</TD> <TD BGCOLOR=yellow>< 0.0%</TD> <TD BGCOLOR=green>0.0% - 9.0%</TD> <TD BGCOLOR=yellow>> 9.0%</TD> <TD BGCOLOR=red>> 10.0%</TD> </TR> </TABLE> Thanks in advance -- Jared Hoskinson 1stel, Inc. Desk 817.357.1013 FAX 817.357.1513

4 6

[hobbit] RE: Hobbit Security (Cross-Site Scripting)
by stewartl42＠gmail.com 19 Jun '09

19 Jun '09

Are you saying it is vulnerable? XSS is fixed by validating your inputs. Stewart On Fri, Jun 19, 2009 at 10:04 AM, David Cecchino < david.cecchino at datacure.com> wrote: > Anyone know how to address cross site scripting in hobbitmon? > > > > > -- Stewart -- An infinite number of mathematicians walk into a bar. The first one orders a beer. The second orders half a beer. The third, a quarter of a beer. The bartender says "You're all idiots", and pours two beers.

2 1

Hobbit Security (Cross-Site Scripting)
by david.cecchino＠datacure.com 19 Jun '09

19 Jun '09

Anyone know how to address cross site scripting in hobbitmon?

1 0

Xymon Proxy for 'conn'
by Paul.Root＠qwest.com 19 Jun '09

19 Jun '09

Hi, I've brought up a xymon proxy to get monitoring on some machines that are a couple firewalls away from my main servers. That works fine. What I would like to do now is to have my 'conn' monitor (with fping) monitor some machines that are behind a firewall from my server. This firewall will allow the 1984 traffic, but not a ping. So can I get my bbproxy to do the fping and forward that info to the main server? Currently, my bbproxy is not running hobbitd. I'm kind of thinking that if I enabled hobbitd to just listen on localhost, and the bbproxy on the real ethernet, I could get the fping, and have bbproxy forward to localhost, and the real servers. Does that make sense? Any special config for that, or basically just the --listen=127.0.0.1, and regular proxy stuff? Thanks, Paul. Paul Root 612-664-3385 651-707-7043 IM/MNS Infrastructure

2 5

[hobbit] Hobbit HTTP Monitor Anomalies
by jkwade＠futurefrontiers.com 19 Jun '09

19 Jun '09

We connected up a sniffer. It appears that the HTTPS request never receives a response. Hobbit is sending it out, but a reply never occurs. James _____ From: James Wade [mailto:jkwade at futurefrontiers.com] Sent: Thursday, June 18, 2009 9:42 AM To: hobbit at hswn.dk Subject: [hobbit] Hobbit HTTP Monitor Anomalies So, last weekend, we had a huge conference call because two Production HTTPS URL's that we monitor with Hobbit were getting timeouts exceeding 30 seconds. No other URL's on the Hobbit Server that we monitor were getting any types of timeouts. I have two Hobbit Servers, located at two physical sites, Production & Development. The Production Hobbit Server said that no timeouts occurred on the two HTTPS URL's. However, the Development Hobbit Server (which is the primary monitoring server), indicated that the URL's were timing out. So, the only difference appeared to be in the network. However, our network team looked at the network and showed no latency, and the placed a sniffer on the Development Hobbit Server and saw all HTTPS packets coming back without timeouts. Early this week, we placed a box that sniffs that network and can monitor for specific events. In this case, it's connected to the same network as the Development Hobbit Server, and its monitoring the HTTPS request to the two URL's. Last night, I received timeouts from Hobbit on the URLs, but the sniffer showed not such timeouts. I've checked the Hobbit server, CPU, Load, Network, all the graphs don't show any correlation to the timeouts. Does anyone have any ideas on this puzzle? Thanks..James

3 2