- Xymon - Xymon mailman web

SMTP test where TCP connection opens but immediately dropped?
by david.baldwin＠ausport.gov.au 04 Mar '09

04 Mar '09

I have various servers which I am checking for SMTP servers running or not running. This all works fine if there is or isn't a service listening on the port. The problem comes with Windows boxes which are running an SMTP server for localhost relay only but it allows connection from the LAN but drops the connection immediately. It would apply to any kind of service that is using a libwrap style client IP check which relies on opening the TCP connection to determine the client IP address and then denying access. This shows up as a yellow if I specify smtp or red for !smtp. Is there a way to test for a TCP connection which immediately drops as a green? For this case, I want to be alerted if the server does start accepting SMTP connections. It's effectively the opposite of smtp:s. Maybe defined something new in bb-services? There doesn't seem to be a lot of options on the expected response string - substring of the response received looks like that's all, no option to check response length for example. green on zero response length and red for refused or non-zero length would be ideal. How about smtp:z ? My testing shows the following reports for the various cases: * no smtp server running - smtp = red, !smtp = green, smtp:s =red, !smtp:s =green $ nc -v nosmtp 25 </dev/null nosmtp.ausport.gov.au [10.x.x.x] 25 (smtp) : Connection refused $ telnet nosmtp 25 Trying 10.x.x.x... telnet: connect to address 10.x.x.x: Connection refused telnet: Unable to connect to remote host: Connection refused * smtp server running - smtp = green, !smtp = red, smtp:s =yellow, !smtp:s =red $ nc -v smtp 25 </dev/null smtp.ausport.gov.au [10.x.x.x] 25 (smtp) open 220 smtp.ausport.gov.au ESMTP $ telnet smtp 25 Trying 10.x.x.x... Connected to smtp.ausport.gov.au (10.x.x.x). Escape character is '^]'. 220 smtp.ausport.gov.au ESMTP QUIT 221 Bye Connection closed by foreign host. * smtp accepting only for localhost - smtp = yellow, !smtp = red, smtp:s =yellow, !smtp:s =red $ nc -v windows 25 </dev/null windows.ausport.gov.au [10.x.x.x] 25 (smtp) open $ telnet windows 25 Trying 10.x.x.x... Connected to windows.ausport.gov.au (10.x.x.x). Escape character is '^]'. Connection closed by foreign host. Thanks, David. -- David Baldwin - IT Unit Australian Sports Commission www.ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au Leverrier Street Bruce ACT 2617 ------------------------------------------------------------------------------------- Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender. -------------------------------------------------------------------------------------

1 0

hobbitping latency reporting with multiple hosts
by nick.nauwelaerts＠thomsonreuters.com 03 Mar '09

03 Mar '09

Hello, We are having some discrepancies with the latencies xymon reports in it's conn tests as opposed to what we were seeing in other monitoring programs. What we're seeing is that xymon reports a much higher latency for certain hosts than what we're used to. We are using hobbitping from xymon 4.2.2 on x64, novell suse linux enterprise server 10 sp2. We think we've tracked it down to the following: We are testing with 3 hosts: 194.109.6.92 - www.xs4all.nl 195.130.131.39 - www.telenet.be 212.27.48.10 - www.free.fr These are used as an example, but our real world tests with internal hosts show the same issue. Anyway, when we ping each of these hosts we don't see any issue: % ./hobbitping 194.109.6.92 194.109.6.92 is alive (6 ms) ./hobbitping 195.130.131.39 195.130.131.39 is alive (2 ms) % ./hobbitping 212.27.48.10 212.27.48.10 is alive (16 ms) However, as soon as we start combining hosts we see strange results: ./hobbitping 195.130.131.39 194.109.6.92 195.130.131.39 is alive (22 ms) 194.109.6.92 is alive (6 ms) ./hobbitping 195.130.131.39 194.109.6.92 212.27.48.10 195.130.131.39 is alive (44 ms) 194.109.6.92 is alive (22 ms) 212.27.48.10 is alive (16 ms) Even multiple tests on the same host show this: % ./hobbitping 195.130.131.39 195.130.131.39 195.130.131.39 195.130.131.39 is alive (44 ms) 195.130.131.39 is alive (22 ms) 195.130.131.39 is alive (2 ms) We've found a reference to someone who might have the same issue, but there wasn't any follow up to that: http://www.hswn.dk/hobbiton/2008/09/msg00188.html Is anyone else seeing this issue? thx // nick

6 6

[trunk] hobbitd_alert bug ?
by obeau79＠gmail.com 03 Mar '09

03 Mar '09

Hi, I'm running trunk (that i downloaded the first week a january) i have identified a bug, i dont know if it has been resolved since. to reproduce the problem : set alerts with different duration and delays here's my configuration: HOST=debian SERVICE=%(ping|http) COLORS=red RECOVERED DURATION>1 MAIL obeau79 at gmail.com REPEAT=24h FORMAT=PLAIN HOST=debian SERVICE=%(ping|http) COLORS=red RECOVERED DURATION>3 MAIL obeau79 at gmail.com REPEAT=1h FORMAT=PLAIN -> i get the first alerts, but not the second one (i suspect that the different REPEAT value is causing the problem) olivier

1 0

apache
by oyvind.bjorge＠telenor.com 03 Mar '09

03 Mar '09

Hi all! I have just installed a xymon server, but don't get the apache config correct. I have added a directory and an alias in httpd.conf: Alias /xymon/ "/local/xymon/server/www" <Directory "/local/xymon/server/www"> Options Indexes FollowSymLinks Includes MultiViews Order allow,deny Allow from all </Directory> ScriptAlias /xymon-cgi/ "/local/xymon/cgi-bin/" <directory "/local/xymon/cgi-bin"> AllowOverride None Options ExecCGI Includes Order allow,deny Allow from all </Directory> At first I got error messages with no access towards http://myserver/xymon, but after adjusting filsystem rights I instead get a directory listing. Index of /xymon [ICO] Name Last modified Size Description [DIR] Parent Directory - [TXT] bb.html 27-Feb-2009 12:29 7.9K [TXT] bb2.html 27-Feb-2009 12:29 2.7K [TXT] bbnk.html 27-Feb-2009 12:29 2.2K [DIR] gifs/ 26-Jan-2009 16:28 - [DIR] help/ 26-Jan-2009 16:28 - [DIR] html/ 26-Jan-2009 16:28 - [TXT] index.html 27-Feb-2009 12:29 7.9K [DIR] menu/ 26-Jan-2009 16:28 - [DIR] notes/ 26-Jan-2009 16:28 - [DIR] rep/ 26-Jan-2009 16:28 - [DIR] snap/ 26-Jan-2009 16:28 - [DIR] wml/ 26-Jan-2009 16:28 - If I try to select index.html (or bb.html) or typing the filename in the url, I get an 404 error: Not Found The requested URL /xymon/index.html was not found on this server. Any suggestions? Øyvind

4 4

Books about Hobbit
by ataudte＠temenos.com 03 Mar '09

03 Mar '09

Hello, I will start a project with Hobbit this year. Are there any Books about this tool or is the Man-Page the only reference? Regards, Andreas Taudte IT Services TEMENOS The Banking Software Company Hahnstrasse 31-35 60528 Frankfurt/Main T: +49 69 66537-224 F: +49 69 66537-113 E: ataudte at temenos.com <mailto:ataudte at temenos.com> www.temenos.com <http://www.temenos.com/> *************************************** ACTIS.BSP IT Services GmbH Hahnstrasse 31-35, 60528 Frankfurt/Main Handelsregister: HRA 46129 Frankfurt Geschäftsführer: Armin Holst *************************************** P Consider the environment. Please don't print this e-mail unless you really need to. Disclaimer: If you have received this e-mail in error please notify the sender. Please note that any views or opinions presented in this e-mail are solely those of the author and do not necessarily represent those of TEMENOS. We recommend that you check this e-mail and any attachments against viruses. TEMENOS accepts no liability for any damage caused by any malicious code or virus transmitted by this e-mail.

2 1

New Hobbit server install validation
by Rafal.Roginela＠AmeriCashLoans.net 02 Mar '09

02 Mar '09

Hi All, I have a 4.2 install of Hobbit up and running and I am very happy with it. It runs on an old Gateway workstation with a Celeron and 512MB and performs stellar! CentOs 5 nothing fancy. I was going to move it to a more recent piece of hardware a Dell OptiPlex 320, which at least it is under warranty. I had the Idea of running it as a Xen VM on a Debian host. Is this a bad idea? Clarification of purpose: I'm really not going to run anything else on the Xen except for this one VM and maybe and I mean maybe a test xymon VM directly replicated from the working production VM. This is to provide me with a quick failover ability of copying the image (from backup or if the HD is intact directly from there) to another Xen host and BLAMO xymon is running within minutes. Does this sound OK? Is there a better way to accomplish this? Thank you, Rafal Roginela Network Engineer AmeriCash Loans, LLC This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.

6 11

bbproxy and hobbitfetch together?
by camorae＠googlemail.com 02 Mar '09

02 Mar '09

Hi guys, Im thinking if its possible to use hobbitfetch to collect data from bbproxy. Bellow u can see my situation: I have a hobbitserver in one network, where i can monitor all my clients in this network. Now I want to monitor other clients which are in another network (behind a firewall). The problem is, that have to poll all data (all clients) from only one client (it would be the bbproxy). Is it possible? Sorry about my english... if i wasnt clear enought, i can try to explain better. TIA Moraes

1 0

Set of Icons for ! tests
by eric.j.boyd＠gmail.com 01 Mar '09

01 Mar '09

Would it be possible to have an icon such as a green X to indicate that a test like !ftp is not responding? -Eric

1 0

[hobbit] xymon RPMS for RHEL/Centos 3/4/5
by bgmilne＠staff.telkomsa.net 27 Feb '09

27 Feb '09

----- "Martin Flemming" <martin.flemming at desy.de> wrote: > Hi, Buchan ! > > Stupid question by me, > but how must i rebuild the srpm on ScientificLinux/RHEL, i've got this > error > > rpmbuild --rebuild xymon-4.2.3-1.rhel5.src.rpm > > sh: %{mdkversion}/10: syntax error: operand expected (error token is > "%{mdkversion}/10") > sh: %{mdkversion}/10: syntax error: operand expected (error token is > "%{mdkversion}/10") > Fehler: Fehlgeschlagene Paket-Abhängigkeiten: > fping wird benötigt von xymon-4.2.3-0.1.mdk.i386 > This is a by-product of me re-using the Mandriva source RPM (as I do for a lot of other packages), and relying on some Mandriva macros. > .. i know, a simple rpm-question :-( Grab this file, and drop it in /etc/rpm : http://staff.telkomsa.net/packages/SRPMS/openldap/macros.mdk4rh I'll add an error message to this effect (as I did on the OpenLDAP packages) on the next packages. Regards, Buchan

2 1

[hobbit] HTTP response time test
by bgmilne＠staff.telkomsa.net 27 Feb '09

27 Feb '09

----- "Jason Hand" <jason at hands4christ.org> wrote: > I cannot find anything mentioning if Hobbit/Xymon can test how long an > > HTTP or HTTPS page takes to respond and alert on that. In other > words, if a site is in a hung state so that it still technically > "responds" but it takes 5 seconds for the page to respond how does > Hobbit/Xymon handle that? I want to make sure that if a site that we > > are monitoring takes longer than a couple of seconds to load we are > alerted, > > Do any of you do a test like that and how are you doing it? As far as I remember, the default http test (assuming you have provided the full url to the site you want to test) will go red if the server doesn't respond with an appropriate status code within the timeout (which defaults to 10s). If you need custom timeouts for different hosts, then you may need something more complex than that (although you should consult the documentation, see the coverage of the --timeout option in the bbtest-net man page). Regards, Buchan

1 0