greetings, in my company we have firewalls with cellular failover/backup cards built in them. I need to be alerted when we fail over to these cards. I am currently pinging the T1 WAN interface and get alerts when it goes down, but I need to get an acknowledgement that the cell card did in fact fail over and the VPN was re-established. we also want to use this alerting to see if the cards are randomly dialing out.
If I ping the cell cards static IP it is down (red) when it is not dialed, so I need alert on green status. I also do not want my main status pages to be red all the time. is there a way to say "red is good, but green is bad"?
Other monitoring tools allow for contingencies like 'if the WAN IP is down, then try pinging the WWAN IP, but do not ping WWAN IP until then." can hobbit do this?
Kenneth Falor | Network Administrator | First Choice Emergency Room
Maybe the dialup tag will help you. This example is white most of the time, but will turn green should the IP become responsive.
172.16.10.49 otherconnection.isp.com # testip dialup
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle
On Mon, Nov 2, 2009 at 12:02 PM, Kenneth Falor <kenneth.falor at fcer.com>wrote:
greetings, in my company we have firewalls with cellular failover/backup cards built in them. I need to be alerted when we fail over to these cards. I am currently pinging the T1 WAN interface and get alerts when it goes down, but I need to get an acknowledgement that the cell card did in fact fail over and the VPN was re-established. we also want to use this alerting to see if the cards are randomly dialing out.
If I ping the cell cards static IP it is down (red) when it is not dialed, so I need alert on green status. I also do not want my main status pages to be red all the time. is there a way to say "red is good, but green is bad"?
Other monitoring tools allow for contingencies like 'if the WAN IP is down, then try pinging the WWAN IP, but do not ping WWAN IP until then." can hobbit do this?
Kenneth Falor | Network Administrator | First Choice Emergency Room
This appears to be a great way to go. thanks.
Kenneth Falor | Network Administrator | First Choice Emergency Room C: 214 542 7072 | F: 972.899.6665 | Kenneth.Falor at FCER.com<mailto:Kenneth.Falor at FCER.com>
From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: Monday, November 02, 2009 11:07 AM To: hobbit at hswn.dk Subject: Re: [hobbit] red is good
Maybe the dialup tag will help you. This example is white most of the time, but will turn green should the IP become responsive.
172.16.10.49 otherconnection.isp.com<http://otherconnection.isp.com> # testip dialup
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle
On Mon, Nov 2, 2009 at 12:02 PM, Kenneth Falor <kenneth.falor at fcer.com<mailto:kenneth.falor at fcer.com>> wrote: greetings, in my company we have firewalls with cellular failover/backup cards built in them. I need to be alerted when we fail over to these cards. I am currently pinging the T1 WAN interface and get alerts when it goes down, but I need to get an acknowledgement that the cell card did in fact fail over and the VPN was re-established. we also want to use this alerting to see if the cards are randomly dialing out.
If I ping the cell cards static IP it is down (red) when it is not dialed, so I need alert on green status. I also do not want my main status pages to be red all the time. is there a way to say "red is good, but green is bad"?
Other monitoring tools allow for contingencies like 'if the WAN IP is down, then try pinging the WWAN IP, but do not ping WWAN IP until then." can hobbit do this?
Kenneth Falor | Network Administrator | First Choice Emergency Room
Folks
I set up a check to match a string for a web email server in my bb-hosts file to ensure that the page was loading properly. The check looked like:
10.10.5.173 foobar.pnl.gov # class:server cont=WebMail;https://foobar.pnl.gov;WebMail.Access
The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded?
Thanks for your help.
Regards,
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
Folks
I set up a check to match a string for a web email server in my bb-hosts file to ensure that the web server was functioning correctly The check looked like:
10.10.5.173 foobar.pnl.gov # class:server cont=WebMail;https://foobar.pnl.gov;WebMail.Access
The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded?
I apologize if you have received this posting twice. There were network problems when I sent it out originally. I'm not sure it got out.
Thanks for your help.
Regards,
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
Can you try
10.10.5.173 foobar.pnl.gov # class:server cont=WebMail;https://foobar. pnl.gov/index.html;WebMail.Access
or instead of index.html put in what file is DocumentIndex (Apache term). I'm guessing the IIS server isn't redirecting properly.
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle
On Thu, Nov 5, 2009 at 2:32 PM, Smith, Cathy <cathy.smith at pnl.gov> wrote:
Folks
I set up a check to match a string for a web email server in my bb-hosts file to ensure that the web server was functioning correctly The check looked like:
10.10.5.173 foobar.pnl.gov # class:server cont=WebMail;https://foobar. pnl.gov;WebMail.Access
The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded?
I apologize if you have received this posting twice. There were network problems when I sent it out originally. I'm not sure it got out.
Thanks for your help.
Regards,
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
What worked was to get the full redirection the browser. I did a wget from my hobbit server to download the SGML file. Then I did a string match on text that I found in that file. My first string match was not in the SGLM file. It's a picture included by the Java script.
Thanks for your help.
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
From: Josh Luthman [mailto:josh at imaginenetworksllc.com] Sent: Thursday, November 05, 2009 11:42 AM To: hobbit at hswn.dk Subject: Re: [hobbit] Check for string on web site failing
Can you try
10.10.5.173 foobar.pnl.gov <http://pnl.gov/> # class:server cont=WebMail;https://foobar.pnl.gov <http://pnl.gov/> /index.html;WebMail.Access
or instead of index.html put in what file is DocumentIndex (Apache term). I'm guessing the IIS server isn't redirecting properly.
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle
On Thu, Nov 5, 2009 at 2:32 PM, Smith, Cathy <cathy.smith at pnl.gov> wrote:
Folks
I set up a check to match a string for a web email server in mybb-hosts file to ensure that the web server was functioning correctly The check looked like: 10.10.5.173 foobar.pnl.gov # class:server cont=WebMail;https://foobar.pnl.gov;WebMail.Access The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded? I apologize if you have received this posting twice. There were network problems when I sent it out originally. I'm not sure it got out. Thanks for your help. Regards, Cathy --- Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
Smith, Cathy wrote:
What worked was to get the full redirection the browser. I did a wget from my hobbit server to download the SGML file. Then I did a string match on text that I found in that file. My first string match was not in the SGLM file. It's a picture included by the Java script.
Thanks for your help.
Another solution to this is to use the ext script 'urlplus' which will follow redirects (via Location: headers not Javascript).
David.
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
*From:* Josh Luthman [mailto:josh at imaginenetworksllc.com] *Sent:* Thursday, November 05, 2009 11:42 AM *To:* hobbit at hswn.dk *Subject:* Re: [hobbit] Check for string on web site failing
Can you try
10.10.5.173 foobar.pnl.gov <http://pnl.gov/> # class:server cont=WebMail;https://foobar.pnl.gov <http://pnl.gov/>/index.html;WebMail.Access
or instead of index.html put in what file is DocumentIndex (Apache term). I'm guessing the IIS server isn't redirecting properly.
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle
On Thu, Nov 5, 2009 at 2:32 PM, Smith, Cathy <cathy.smith at pnl.gov <mailto:cathy.smith at pnl.gov>> wrote:
Folks I set up a check to match a string for a web email server in my bb-hosts file to ensure that the web server was functioning correctly The check looked like: 10.10.5.173 foobar.pnl.gov <http://pnl.gov> # class:server cont=WebMail;https://foobar.pnl.gov <http://pnl.gov>;WebMail.Access The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded? I apologize if you have received this posting twice. There were network problems when I sent it out originally. I'm not sure it got out. Thanks for your help. Regards, Cathy --- Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov <mailto:cathy.smith at pnl.gov> 509.375.2687
-- David Baldwin - IT Unit Australian Sports Commission www.ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au Leverrier Street Bruce ACT 2617
Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au
This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
David
Where do I find that script?
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
-----Original Message----- From: David Baldwin [mailto:c Sent: Thursday, November 05, 2009 5:02 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Check for string on web site failing
Smith, Cathy wrote:
What worked was to get the full redirection the browser. I did a wget from my hobbit server to download the SGML file. Then I did a string match on text that I found in that file. My first string match
was not in the SGLM file. It's a picture included by the Java script.
Thanks for your help.
Another solution to this is to use the ext script 'urlplus' which will follow redirects (via Location: headers not Javascript).
David.
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
-- *From:* Josh Luthman [mailto:josh at imaginenetworksllc.com] *Sent:* Thursday, November 05, 2009 11:42 AM *To:* hobbit at hswn.dk *Subject:* Re: [hobbit] Check for string on web site failing
Can you try
10.10.5.173 foobar.pnl.gov <http://pnl.gov/> # class:server cont=WebMail;https://foobar.pnl.gov <http://pnl.gov/>/index.html;WebMail.Access
or instead of index.html put in what file is DocumentIndex (Apache term). I'm guessing the IIS server isn't redirecting properly.
Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373
"When you have eliminated the impossible, that which remains, however improbable, must be the truth." --- Sir Arthur Conan Doyle
On Thu, Nov 5, 2009 at 2:32 PM, Smith, Cathy <cathy.smith at pnl.gov <mailto:cathy.smith at pnl.gov>> wrote:
Folks I set up a check to match a string for a web email server in my bb-hosts file to ensure that the web server was functioning correctly The check looked like: 10.10.5.173 foobar.pnl.gov <http://pnl.gov> # class:server cont=WebMail;https://foobar.pnl.gov<http://pnl.gov>;WebMail.Access The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded? I apologize if you have received this posting twice. There were network problems when I sent it out originally. I'm not sure it got out. Thanks for your help. Regards, Cathy --- Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov <mailto:cathy.smith at pnl.gov> 509.375.2687
-- David Baldwin - IT Unit Australian Sports Commission www.ausport.gov.au Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616 david.baldwin at ausport.gov.au Leverrier Street Bruce ACT 2617
Keep up to date with what's happening in Australian sport visit http://www.ausport.gov.au
This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
I would recommend pulling up the web interface in a browser and look at the final redirected page which should be the login screen. Then look at the source text and see what would be a good match. Sent from my BlackBerry
-----Original Message----- From: "Smith, Cathy" <cathy.smith at pnl.gov> Date: Thu, 5 Nov 2009 11:32:12 To: <hobbit at hswn.dk> Subject: [hobbit] Check for string on web site failing
Folks
I set up a check to match a string for a web email server in my bb-hosts file to ensure that the web server was functioning correctly The check looked like:
10.10.5.173 foobar.pnl.gov # class:server cont=WebMail;https://foobar.pnl.gov;WebMail.Access
The check worked fine until this past weekend when the email server was migrated from Exchange 2003 to Exchange 2007. Now instead of an index.html file being downloaded, I get a SGML document. Even though the same string is in the title tag in the document, the check fails. Can someone suggest a way to check that the page has properly loaded?
I apologize if you have received this posting twice. There were network problems when I sent it out originally. I'm not sure it got out.
Thanks for your help.
Regards,
Cathy
Cathy L. Smith IT Engineer Pacific Northwest National Laboratory cathy.smith at pnl.gov 509.375.2687
check out !conn
On Mon, Nov 2, 2009 at 12:02 PM, Kenneth Falor <kenneth.falor at fcer.com> wrote:
greetings, in my company we have firewalls with cellular failover/backup cards built in them. I need to be alerted when we fail over to these cards. I am currently pinging the T1 WAN interface and get alerts when it goes down, but I need to get an acknowledgement that the cell card did in fact fail over and the VPN was re-established. we also want to use this alerting to see if the cards are randomly dialing out.
If I ping the cell cards static IP it is down (red) when it is not dialed, so I need alert on green status. I also do not want my main status pages to be red all the time. is there a way to say "red is good, but green is bad"?
Other monitoring tools allow for contingencies like 'if the WAN IP is down, then try pinging the WWAN IP, but do not ping WWAN IP until then." can hobbit do this?
Kenneth Falor | Network Administrator | First Choice Emergency Room
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Kenneth Falor wrote:
greetings, in my company we have firewalls with cellular failover/backup cards built in them. I need to be alerted when we fail over to these cards. I am currently pinging the T1 WAN interface and get alerts when it goes down, but I need to get an acknowledgement that the cell card did in fact fail over and the VPN was re-established. we also want to use this alerting to see if the cards are randomly dialing out.
If I ping the cell cards static IP it is down (red) when it is not dialed, so I need alert on green status. I also do not want my main status pages to be red all the time. is there a way to say "red is good, but green is bad"?
Other monitoring tools allow for contingencies like 'if the WAN IP is down, then try pinging the WWAN IP, but do not ping WWAN IP until then." can hobbit do this?
I can say I'm fairly sure it is possible, I just do not know how off the top of my head. In Big Brother, this would be done by specifying a test like !conn or something like that, as in "look for no connection." I'd expect a quick look at the docs would turn that up for Xymon as well.
---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer II |$&| |__| | | |__/ | \| _| |novosirj at umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/CST - NJMS Medical Science Bldg - C630 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkrvEqIACgkQmb+gadEcsb5p3QCeOB4O/3A5CfmTdSFXkxWyshGY bikAoMMZpblLCPf9EI6J2Ik2FaZczwa9 =BMQM -----END PGP SIGNATURE-----
You could write a custom script which checks the status of the "conn" test for the interface which is usually down and set a red condition when you see it go to green. The dial-up option would cause this test to be white until it see a connection and goes green. You can do this by issuing:
bb query <hostname.test>
--or-
bb query standby.conn
to get the current status. Then you can change green into red in your script.
......BruceBruce White Senior Enterprise Systems Engineer | Phone: 630-671-5169 | Fax: 630-893-1648 | bewhite at fellowes.com | http://www.fellowes.com/
Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.
From: Kenneth Falor [mailto:kenneth.falor at fcer.com] Sent: Monday, November 02, 2009 11:02 AM To: hobbit at hswn.dk Subject: [hobbit] red is good
greetings, in my company we have firewalls with cellular failover/backup cards built in them. I need to be alerted when we fail over to these cards. I am currently pinging the T1 WAN interface and get alerts when it goes down, but I need to get an acknowledgement that the cell card did in fact fail over and the VPN was re-established. we also want to use this alerting to see if the cards are randomly dialing out.
If I ping the cell cards static IP it is down (red) when it is not dialed, so I need alert on green status. I also do not want my main status pages to be red all the time. is there a way to say "red is good, but green is bad"?
Other monitoring tools allow for contingencies like 'if the WAN IP is down, then try pinging the WWAN IP, but do not ping WWAN IP until then." can hobbit do this?
Kenneth Falor | Network Administrator | First Choice Emergency Room
In <DB352625B11C7B449262DE382AD536C525A2F818F4 at maserati.cars.ad> Kenneth Falor <kenneth.falor at fcer.com> writes:
If I ping the cell cards static IP it is down (red) when it is not dialed, = so I need alert on green status. I also do not want my main status pages to= be red all the time. is there a way to say "red is good, but green is bad= "?
From the bb-hosts man-page:
"!conn" will be green when the host is NOT up, and red if it does appear on the network.
Other monitoring tools allow for contingencies like 'if the WAN IP is down,= then try pinging the WWAN IP, but do not ping WWAN IP until then." can hob= bit do this?
Not quite, Xymon will always ping both of the interfaces. But you could do something like
10.0.0.1 wanconnection # conn=best,192.168.1.1 testipwhere 10.0.0.1 is the primary IP and 192.168.1.1 is the secondary. This will show the "conn" status as green if one or the other IP is up.
Personally, I would probably prefer to get an alert when the primary connection went down, so I would have each of the two connections as separate entries in bb-hosts, and then a combined "virtual" entry for the combined status:
10.0.0.1 wan-primary # testip 192.168.1.1 wan-backup # testip dialup 10.0.0.1 wanconnection # conn=best,192.168.1.1 testip
Then you can trigger a "fix it now!!" alert if "wanconnection" goes red on the conn status, and a "someone should look into it" alert if only "wan-primary" goes red.
Regards, Henrik
participants (9)
-
bewhite＠fellowes.com
-
cathy.smith＠pnl.gov
-
david.baldwin＠ausport.gov.au
-
henrik＠hswn.dk
-
jason＠hands4christ.org
-
josh＠imaginenetworksllc.com
-
kenneth.falor＠fcer.com
-
novosirj＠umdnj.edu
-
pnixon＠gmail.com