I think that this means that your Hobbit client sent more data than the Hobbit server was configured to accept. You need to look at the data sent by this client and decide if that amount of data is normal. If so, then you need to change the Hobbit server configuration so it will accept more data from clients. Several of the tests have a link to "client data available" so you can see the message. There is also a CGI you can run to get the last client dump, but I forget what it is.
When I had this problem, I was getting very long host routing tables from AIX agents. Some crucial information was getting lost that appeared later in the client message, and this was causing false alarms to trigger. Since the routing table information did not appear to be used, I just disabled the "netstat -nr" test. Someday I may turn it back on and go modify the hobbitd configuration to allow more data -- and I will be "correct."
GLH
From: Scheblein, Adam [mailto:adam.scheblein at marquette.edu]
Sent: Monday, September 11, 2006 9:27 AM
To: hobbit at hswn.dk
Subject: [hobbit] proc/port error messages error messages
Greetings,
Recently I have been getting the following error messages in my
hobbitd section about my proc column for one of my hosts:
Oversize data/client msg from [IP Address] truncated (n=760399,
limit 524288) First line: [Hostname]|hp-ux|hp-ux Oversize status msg from [IP Address] for [Hostname]:ports truncated (n=514197, limit=262144)
Any thoughts??
Thanks,
Adam