From jared@psg.com Tue Jul 16 22:59:20 2002 Received: from someone claiming to be psg.com puck.NOSPAM (smmsp@psg.com [147.28.0.62]) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) with ESMTP id g6H2xJWt002411 for ; Tue, 16 Jul 2002 22:59:19 -0400 (envelope-from jared@psg.com) Received-Date: Tue, 16 Jul 2002 22:59:19 -0400 Received: from jared by psg.com with local (Exim 3.36 #1) id 17Uf0I-000Foz-00 for sysmon-help@puck.nether.net; Tue, 16 Jul 2002 19:57:26 -0700 To: sysmon-help@puck.nether.net Date: Tue, 16 Jul 2002 19:57:26 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-Id: From: Jared Mauch Subject: [sysmon-help] test of new list Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: i have changed the setup for sysmon-help to use MailMan xxq instead of SmartList. Please let me know if you have/see any problems. From mahesh_patil_99@rediffmail.com Thu Aug 1 15:37:10 2002 Received: from someone claiming to be phat.nether.net puck.NOSPAM (phat.nether.net [204.212.45.10]) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) with ESMTP id g71JaJsi020028 for ; Thu, 1 Aug 2002 15:37:09 -0400 (envelope-from mahesh_patil_99@rediffmail.com) Received-Date: Thu, 1 Aug 2002 15:37:09 -0400 Received: from someone claiming to be webmail7.rediffmail.com PhAT.NOSPAM (webmail7.rediffmail.com [202.54.124.152] (may be forged)) by phat.nether.net (8.11.6/8.11.2) with SMTP id g71IA7T24572 for ; Thu, 1 Aug 2002 14:10:07 -0400 (EDT) Received: (qmail 30903 invoked by uid 510); 31 Jul 2002 13:46:26 -0000 Date: 31 Jul 2002 13:46:26 -0000 Message-ID: <20020731134626.30902.qmail@webmail7.rediffmail.com> Received: from unknown (202.88.174.68) by rediffmail.com via HTTP; 31 Jul 2002 13:46:26 -0000 MIME-Version: 1.0 From: "Mahesh Chandra Patil" Reply-To: "Mahesh Chandra Patil" To: sysmon-help@puck.nether.net Content-type: text/plain; format=flowed Content-Disposition: inline Subject: [sysmon-help] Is it possible, to monitor every object at different time frequency..? Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: Hi, Greetings to all the guru's I have about 70 different objects in my sysmon.conf filewhich are being monitored. The current time frequency at which all my objects are being monitored is "config queuetime 60" i.e every minute. But I would like to have some of the objects in the list to be monitored every 2 hours. I mean, about 20 objects of the list are WWW servers and I dont want to monitor them every minute. I want to monitor them only once in an hour or two. Can some body guide me with the settings.. waiting anxiously. Thanks for the coming reply. regards Mahesh. From jared@puck.nether.net Tue Aug 6 07:56:34 2002 Received: (from jared@localhost) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) id g76BuY7a023624; Tue, 6 Aug 2002 07:56:34 -0400 (envelope-from jared) Received-Date: Tue, 6 Aug 2002 07:56:34 -0400 Date: Tue, 6 Aug 2002 07:56:34 -0400 From: Jared Mauch To: "Bruce S. Garlock" Cc: sysmon-help@puck.nether.net Message-ID: <20020806115634.GJ14167@puck.nether.net> References: <3D138921.183A0E82@garlockprinting.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3D138921.183A0E82@garlockprinting.com> User-Agent: Mutt/1.4i Subject: [sysmon-help] Re: sysmon 0.91.11 / spawn program problems Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Help: List-Post: List-Subscribe: , List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: This is due to a bug related to lack of testing of the spawn feature in my 'lab'. I'll release a new version in a few days that reflects this fix. - jared On Fri, Jun 21, 2002 at 04:10:42PM -0400, Bruce S. Garlock wrote: > I am trying to get sysmond to spawn a program when a service fails, but > it does not work correctly. Here is an example of my /etc/sysmon.conf > file, with the relevant config information: > > object imap { > ip "linux.server"; > type imap; > desc "IMAP"; > username "guest"; > password "guest"; > dep "linux.server"; > spawn "/usr/local/bin/inetdrefresh.sh"; > contact "root@linux.server"; > }; > > > And here is sysmond running in debug mode: > > [root@linux sysmon_scripts]# sysmond -d > sysmond: 16:03:29 Starting System Monitor version v0.91.11 > System Monitor version v0.91.11 > sysmond started on linux.server > contact when 3/1 > sh: refresh.sh: command not found > > As you can see, sysmond is not reading the spawn line correctly. Please > advise.. > > Best regards, > > Bruce > > -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From jared@puck.nether.net Sun Aug 18 15:55:56 2002 Received: (from jared@localhost) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) id g7IJtuDN028789 for sysmon-help@puck.nether.net; Sun, 18 Aug 2002 15:55:56 -0400 (envelope-from jared) Received-Date: Sun, 18 Aug 2002 15:55:56 -0400 Date: Sun, 18 Aug 2002 15:55:56 -0400 From: Jared Mauch To: sysmon-help@puck.nether.net Message-ID: <20020818195556.GC27916@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i Subject: [sysmon-help] new release 0.91.12 Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: few things.. sysmon-0.91.12 is out. it fixes problems with the spawn feature as well as adding some warnings for some misconfigurations i've seen recently. it also allows the queuetime to be configured on a per-object basis. this should allow people who don't want a common queuetime in large configs to do this properly. as always, report bugs to me or via the bugzilla interface at http://puck.nether.net/bugzilla/ enjoy. ftp://puck.nether.net/pub/jared/sysmon-0.91.12.tar.gz md5 d7fcfcf7e1e4224a2a6975a749f89735 - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From leo@ubiobio.cl Thu Sep 12 13:29:04 2002 Received: from someone claiming to be zafiro.ciencias.ubiobio.cl puck.NOSPAM (zafiro.ciencias.ubiobio.cl [146.83.193.221]) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) with ESMTP id g8CHT0Ja008849 for ; Thu, 12 Sep 2002 13:29:03 -0400 (envelope-from leo@ubiobio.cl) Received-Date: Thu, 12 Sep 2002 13:29:03 -0400 Received: from localhost (leo@localhost) by zafiro.ciencias.ubiobio.cl (8.11.6/8.11.6) with ESMTP id g8CHT8r03091 for ; Thu, 12 Sep 2002 13:29:11 -0400 X-Authentication-Warning: zafiro.ciencias.ubiobio.cl: leo owned process doing -bs Date: Thu, 12 Sep 2002 13:29:08 -0400 (CLT) From: Leonardo Saavedra Henriquez X-Sender: leo@zafiro.ciencias.ubiobio.cl To: sysmon-help@puck.nether.net Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: [sysmon-help] conf error Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: Hi all I have aproblem with my sysmon configuration file In my /usr/local/etc/sysmon.conf: -- root=mulder; object mulder { ip "200.x.y.z"; type ping; desc "mulder"; dep "200.x.y.zz"; }; object zafiro { ip "146.x.y.z"; type ping; desc "Fac. de Ciencias."; contact "leo@ubiobio.cl"; }; --- But when i try to start, show me: -- mulder:/usr/local/etc# start-stop-daemon --start --exec /usr/local/bin/sysmond sysmond: 13:27:20 No quotes on line 1, some are needed to enclose root name sysmond: 13:27:20 object zafiro has no relationship. It will not be monitored. sysmond: 13:27:20 object mulder has no relationship. It will not be monitored. sysmond: 13:27:20 Starting System Monitor version v0.91.12 System Monitor version v0.91.12 /usr/local/bin/sysmond started on mulder sysmond: 13:27:20 no configured root? forked process as pid 2506 mulder:/usr/local/etc# sysmond: 13:27:21 no configured root? sysmond: 13:27:22 no configured root? sysmond: 13:27:23 no configured root? --- But i have a root >: what's wrong? TIA -- +------------------------------------------------------+ | Leonardo Saavedra Henriquez | leo@ubiobio.cl | | Est. Ing Civil en Informatica | U. del Bio-Bio | +------------------------------------------------------+ May the UID 0 be with You! From jared@puck.nether.net Thu Sep 12 13:37:15 2002 Received: (from jared@localhost) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) id g8CHbFj2009096; Thu, 12 Sep 2002 13:37:15 -0400 (envelope-from jared) Received-Date: Thu, 12 Sep 2002 13:37:15 -0400 Date: Thu, 12 Sep 2002 13:37:15 -0400 From: Jared Mauch To: Leonardo Saavedra Henriquez Cc: sysmon-help@puck.nether.net Subject: Re: [sysmon-help] conf error Message-ID: <20020912173715.GN30384@puck.nether.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4i Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: On Thu, Sep 12, 2002 at 01:29:08PM -0400, Leonardo Saavedra Henriquez wrote: > > Hi all > I have aproblem with my sysmon configuration file > > In my /usr/local/etc/sysmon.conf: > -- > root=mulder; > > object mulder { > ip "200.x.y.z"; > type ping; > desc "mulder"; > dep "200.x.y.zz"; > }; > > object zafiro { > ip "146.x.y.z"; > type ping; > desc "Fac. de Ciencias."; > contact "leo@ubiobio.cl"; > }; > --- > > But when i try to start, show me: > -- > mulder:/usr/local/etc# start-stop-daemon --start --exec > /usr/local/bin/sysmond > sysmond: 13:27:20 No quotes on line 1, some are needed to enclose root > name I think the above message is the key ;-) change root=mulder to root="mulder"; all should be well. > sysmond: 13:27:20 object zafiro has no relationship. It will not be > monitored. > sysmond: 13:27:20 object mulder has no relationship. It will not be > monitored. > sysmond: 13:27:20 Starting System Monitor version v0.91.12 > System Monitor version v0.91.12 > /usr/local/bin/sysmond started on mulder > sysmond: 13:27:20 no configured root? > forked process as pid 2506 > mulder:/usr/local/etc# sysmond: 13:27:21 no configured root? > sysmond: 13:27:22 no configured root? > sysmond: 13:27:23 no configured root? > --- > > But i have a root >: > > what's wrong? > > > TIA > > -- > +------------------------------------------------------+ > | Leonardo Saavedra Henriquez | leo@ubiobio.cl | > | Est. Ing Civil en Informatica | U. del Bio-Bio | > +------------------------------------------------------+ > May the UID 0 be with You! > > _______________________________________________ > Sysmon-help mailing list > Sysmon-help@puck.nether.net > http://puck.nether.net/mailman/listinfo/sysmon-help -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From corey@baldwin.net Tue Sep 17 09:30:59 2002 Received: from someone claiming to be c000.snv.cp.net puck.NOSPAM (h002.c000.snv.cp.net [209.228.32.66]) by puck.nether.net (8.12.3/8.9.3.2001112601.msa) with SMTP id g8HDUnJa024090 for ; Tue, 17 Sep 2002 09:30:59 -0400 (envelope-from corey@baldwin.net) Received-Date: Tue, 17 Sep 2002 09:30:59 -0400 Received: (cpmta 21040 invoked from network); 17 Sep 2002 06:31:50 -0700 Received: from 68.42.68.205 (HELO corey) by smtp.baldwin.net (209.228.32.66) with SMTP; 17 Sep 2002 06:31:50 -0700 X-Sent: 17 Sep 2002 13:31:50 GMT From: "Corey Baldwin" To: Date: Tue, 17 Sep 2002 09:32:13 -0400 Message-ID: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0004_01C25E2D.1AB36960" X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Importance: Normal Subject: [sysmon-help] Segmentation fault Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.11 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: This is a multi-part message in MIME format. ------=_NextPart_000_0004_01C25E2D.1AB36960 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: 7bit In Redhat 7.2, I get a segmentation fault when trying to add the line "config queuetime 60;" to my config file. Is there any other way to keep the system checks from continuously going? --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.389 / Virus Database: 220 - Release Date: 9/16/02 ------=_NextPart_000_0004_01C25E2D.1AB36960 Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
In = Redhat 7.2, I get=20 a segmentation fault when trying to add the line "config queuetime 60;" = to my=20 config file.  Is there any other way to keep the system checks from = continuously going? 
------=_NextPart_000_0004_01C25E2D.1AB36960-- From jared@puck.nether.net Tue Oct 1 19:32:26 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.9.3.2001112601.msa) id g91NWQTO010958; Tue, 1 Oct 2002 19:32:26 -0400 (envelope-from jared) Received-Date: Tue, 1 Oct 2002 19:32:26 -0400 Date: Tue, 1 Oct 2002 19:32:26 -0400 From: Jared Mauch To: sysmon-help@puck.nether.net Cc: sysmon-announce@puck.nether.net Message-ID: <20021001233226.GC10678@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i Subject: [sysmon-help] reporting functionality requirements Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: i've known for quite a long time that the reporting in sysmon leaves a fair amount to be desired. do people have any requirements or things that other packages don't do that you'd be interested in seeing sysmon do? i'm going to be releasing a bugfix release tomorrow then thinking about the future of sysmon and what my plans are to continue development.. (as compared to just fixing bugs). - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From jared@puck.nether.net Thu Oct 3 15:20:10 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.9.3.2001112601.msa) id g93JKASZ028548; Thu, 3 Oct 2002 15:20:10 -0400 (envelope-from jared) Received-Date: Thu, 3 Oct 2002 15:20:10 -0400 Date: Thu, 3 Oct 2002 15:20:10 -0400 From: Jared Mauch To: sysmon-announce@puck.nether.net Cc: sysmon-help@puck.nether.net Message-ID: <20021003192010.GA28336@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i Subject: [sysmon-help] sysmon-0.91.13 out Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: sysmon-0.91.13 is now out. it contains a few minor bugfixes. i plan on doing a "beta" release of some new features then incrementing the software revision to 0.92 This will likely include the ability to have sysmon do some data dumping/reporting into an xml formatted file and possibly some c/perl tool to parse it and generate some reports. - jared ftp://puck.nether.net/pub/jared/ http://www.sysmon.org/ -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From user@mail.rineco.com Tue Oct 15 16:20:29 2002 Received: from someone claiming to be mail.rineco.com puck.NOSPAM (IDENT:root@mail.rineco.com [216.60.221.168]) by puck.nether.net (8.12.6/8.9.3.2001112601.msa) with ESMTP id g9FKKSs0023934 for ; Tue, 15 Oct 2002 16:20:28 -0400 (envelope-from user@mail.rineco.com) Received-Date: Tue, 15 Oct 2002 16:20:28 -0400 Received: from localhost (user@localhost) by mail.rineco.com (8.9.3/8.9.3) with ESMTP id PAA11623 for ; Tue, 15 Oct 2002 15:21:05 -0500 Date: Tue, 15 Oct 2002 15:21:04 -0500 (CDT) From: To: sysmon-help@puck.nether.net Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: [sysmon-help] sysmon(client) Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: Hi, I seem to be having some problems with the sysmon client. Sysmond appears to be functioning correctly and outputs the correct information to the web page used for monitoring, but when I connect via the sysmon client none of the host information on those being monitored is there. I looked through the mailing list, and didn't see anything, but perhaps I'm overlooking something. Here's an example of what I see on my side: Server: 192.168.197.225 Current Time: Oct 15 15:13:57 2002 Hostname Type Port Count Notif Stat Time Failed -------------------------------------------------------------------------------- ^@ I'm pretty sure the first time I ran the client it worked just fine (I'm not sure if I'm just recalling what it looked like on Sysmon's Home Page or not), but not since. Any and all help would be appreciated. -=tim From jared@puck.nether.net Tue Oct 15 17:25:06 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.9.3.2001112601.msa) id g9FLP6MH027779; Tue, 15 Oct 2002 17:25:06 -0400 (envelope-from jared) Received-Date: Tue, 15 Oct 2002 17:25:06 -0400 Date: Tue, 15 Oct 2002 17:25:06 -0400 From: Jared Mauch To: user@mail.rineco.com Cc: sysmon-help@puck.nether.net Subject: Re: [sysmon-help] sysmon(client) Message-ID: <20021015212506.GA26589@puck.nether.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4i Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: Hello, the sysmon client only displays hosts that are currently down. - Jared On Tue, Oct 15, 2002 at 03:21:04PM -0500, user@mail.rineco.com wrote: > Hi, > > I seem to be having some problems with the sysmon client. Sysmond appears > to be functioning correctly and outputs the correct information to the web > page used for monitoring, but when I connect via the sysmon client none of > the host information on those being monitored is there. > > I looked through the mailing list, and didn't see anything, but perhaps > I'm overlooking something. > > Here's an example of what I see on my side: > Server: 192.168.197.225 Current Time: Oct 15 15:13:57 > 2002 > Hostname Type Port Count Notif Stat Time Failed > -------------------------------------------------------------------------------- > ^@ > > I'm pretty sure the first time I ran the client it worked just fine (I'm > not sure if I'm just recalling what it looked like on Sysmon's Home Page > or not), but not since. > > Any and all help would be appreciated. > > -=tim > > _______________________________________________ > Sysmon-help mailing list > Sysmon-help@puck.nether.net > http://puck.nether.net/mailman/listinfo/sysmon-help -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From lklawson@heapy.com Wed Dec 4 12:12:24 2002 Received: from someone claiming to be c2smtp.heapy.com puck.NOSPAM (mail.heapy.com [206.103.243.229]) by puck.nether.net (8.12.6/8.12.6) with SMTP id gB4HCJph011636 for ; Wed, 4 Dec 2002 12:12:21 -0500 Received: from Connect2 Message Router by c2smtp.heapy.com via Connect2-SMTP 4.32; Wed, 4 Dec 2002 12:03:03 -0500 Message-ID: <7DFCEE3001053100@c2smtp.heapy.com> Date: Wed, 4 Dec 2002 11:51:00 -0500 From: Kirk Lawson Organization: Heapy Engineering To: sysmon-help@puck.nether.net ("sysmon-help@puck.nether.net") Importance: Normal X-SMF-Hop-Count: 1 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit X-Mailer: Connect2-SMTP 4.32 MHS/SMF to SMTP Gateway Subject: [sysmon-help] spawn problems Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: I'm having trouble getting the spawn command to work right. The .conf entry looks like: object Sound { ip "192.168.22.2"; type ping; desc "Doesn't exist so please gen. a message."; contact "my-email@mycompany.com"; dep "my.default.gateway-obj"; spawn "/etc/rc.d/init.d/callAudibleAllarm"; }; It correctly notes the "down" but when it tries to spawn this small script (which simply starts off a repeating "beep" warning) this error is generated: "sh: c.d/init.d/callAudibleAlarm: No such file or directory" What's the deal and, more importantly, how do I fix it? Peace favor your sword --- "In these modern times, many men are wounded for not having weapons or knowledge of their use." -Achille Marozzo, 1536 From jared Wed Dec 4 12:14:14 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.12.6) id gB4HEEI0011729; Wed, 4 Dec 2002 12:14:14 -0500 Date: Wed, 4 Dec 2002 12:14:14 -0500 From: Jared Mauch To: Kirk Lawson Cc: "\"sysmon-help@puck.nether.net\"" Subject: Re: [sysmon-help] spawn problems Message-ID: <20021204171414.GB9855@puck.nether.net> References: <7DFCEE3001053100@c2smtp.heapy.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <7DFCEE3001053100@c2smtp.heapy.com> User-Agent: Mutt/1.4i Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: There was a recent fix for sysmon that solved this problem. which version are you using? I recommend 0.91.14 - jared On Wed, Dec 04, 2002 at 11:51:00AM -0500, Kirk Lawson wrote: > > I'm having trouble getting the spawn command to work right. > > The .conf entry looks like: > object Sound { > ip "192.168.22.2"; > type ping; > desc "Doesn't exist so please gen. a message."; > contact "my-email@mycompany.com"; > dep "my.default.gateway-obj"; > spawn "/etc/rc.d/init.d/callAudibleAllarm"; > }; > > It correctly notes the "down" but when it tries to spawn this small > script (which simply starts off a repeating "beep" warning) this error is > generated: > > "sh: c.d/init.d/callAudibleAlarm: No such file or directory" > > What's the deal and, more importantly, how do I fix it? > > Peace favor your sword > --- > "In these modern times, many men are wounded for not having weapons or > knowledge of their use." > -Achille Marozzo, 1536 > > _______________________________________________ > Sysmon-help mailing list > Sysmon-help@puck.nether.net > http://puck.nether.net/mailman/listinfo/sysmon-help -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From lklawson@heapy.com Wed Dec 4 12:54:16 2002 Received: from someone claiming to be dymwsm06.mailwatch.com puck.NOSPAM (dymwsm06.mailwatch.com [204.253.83.42]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gB4HsFph013764 for ; Wed, 4 Dec 2002 12:54:15 -0500 Received: from MWSC0213.MW4.MAILWATCH.COM (mwsc0213.mw4.mailwatch.com [204.253.83.252]) by dymwsm06.mailwatch.com (8.11.0/8.11.0) with ESMTP id gB4HsP301834 for ; Wed, 4 Dec 2002 12:54:25 -0500 Received: from mail pickup service by MWSC0213.MW4.MAILWATCH.COM with Microsoft SMTPSVC; Wed, 4 Dec 2002 12:54:25 -0500 Received: from 204.253.83.39 ([204.253.83.39]) by MWSC0213 with SMTP id 0002000dc6a30b6f-cffd-455e-a7a2-fc6afb043b6b; Wed, 04 Dec 2002 12:54:23 -0500 Received: from c2smtp.heapy.com (mail.heapy.com [206.103.243.229]) by dymwsm15.mailwatch.com (8.12.6/8.12.6) with SMTP id gB4HsLSw024266 for ; Wed, 4 Dec 2002 12:54:21 -0500 Received: from Connect2 Message Router by c2smtp.heapy.com via Connect2-SMTP 4.32; Wed, 4 Dec 2002 12:55:04 -0500 Message-ID: Date: Wed, 4 Dec 2002 12:45:00 -0500 From: Kirk Lawson Organization: Heapy Engineering To: sysmon-help@puck.nether.net ("sysmon-help@puck.nether.net") Subject: RE: [sysmon-help] spawn problems Importance: Normal X-SMF-Hop-Count: 1 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit X-Mailer: Connect2-SMTP 4.32 MHS/SMF to SMTP Gateway X-MW-BTID: 090425000020023386446300012 X-MW-CTIME: 1039024461 HOP-COUNT: 1 X-MAILWATCH-INSTANCEID: 0102000dc6a30b6f-cffd-455e-a7a2-fc6afb043b6b X-OriginalArrivalTime: 04 Dec 2002 17:54:25.0570 (UTC) FILETIME=[2F139820:01C29BBE] Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: Ah. That would explain it. I swear I checked the change logs and didn't see this as a fixed issue. :P Oh well. Thanks. Peace favor your sword --- "In these modern times, many men are wounded for not having weapons or knowledge of their use." -Achille Marozzo, 1536 > -----Original Message----- > From: Jared Mauch > Sent: Wednesday, December 04, 2002 12:14 PM > To: Kirk Lawson > Cc: ""sysmon-help@puck.nether.net"" > Subject: Re: [sysmon-help] spawn problems > > > -------------------------------------------------------------- > ---------------- > There was a recent fix for sysmon that solved this problem. > > which version are you using? > > I recommend 0.91.14 > > - jared > > On Wed, Dec 04, 2002 at 11:51:00AM -0500, Kirk Lawson wrote: > > > > I'm having trouble getting the spawn command to work right. > > > > The .conf entry looks like: > > object Sound { > > ip "192.168.22.2"; > > type ping; > > desc "Doesn't exist so please gen. a message."; > > contact "my-email@mycompany.com"; > > dep "my.default.gateway-obj"; > > spawn "/etc/rc.d/init.d/callAudibleAllarm"; > > }; > > > > It correctly notes the "down" but when it tries to spawn > this small > > script (which simply starts off a repeating "beep" warning) > this error is > > generated: > > > > "sh: c.d/init.d/callAudibleAlarm: No such file or directory" > > > > What's the deal and, more importantly, how do I fix it? > > > > Peace favor your sword > > --- > > "In these modern times, many men are wounded for not having > weapons or > > knowledge of their use." > > -Achille Marozzo, 1536 > > > > _______________________________________________ > > Sysmon-help mailing list > > Sysmon-help@puck.nether.net > > http://puck.nether.net/mailman/listinfo/sysmon-help > > -- > Jared Mauch | pgp key available via finger from jared@puck.nether.net > clue++; | http://puck.nether.net/~jared/ My statements > are only mine. > From jared Wed Dec 4 12:56:56 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.12.6) id gB4HuulZ013866; Wed, 4 Dec 2002 12:56:56 -0500 Date: Wed, 4 Dec 2002 12:56:56 -0500 From: Jared Mauch To: Kirk Lawson Cc: "\"sysmon-help@puck.nether.net\"" Subject: Re: [sysmon-help] spawn problems Message-ID: <20021204175656.GC9855@puck.nether.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4i Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: # Changes for 0.91.12 fix issue with spawn :) - jared On Wed, Dec 04, 2002 at 12:45:00PM -0500, Kirk Lawson wrote: > > Ah. That would explain it. > > I swear I checked the change logs and didn't see this as a fixed issue. > :P > From elh@outreachnetworks.com Wed Dec 4 15:52:58 2002 Received: from someone claiming to be proverbs.outreachnetworks.com puck.NOSPAM (proverbs.outreachnetworks.com [65.196.249.4]) by puck.nether.net (8.12.6/8.12.6) with SMTP id gB4Kqvph021660 for ; Wed, 4 Dec 2002 15:52:57 -0500 Received: (qmail 87184 invoked from network); 4 Dec 2002 20:53:08 -0000 Received: from adsl-66-73-181-75.dsl.sfldmi.ameritech.net (HELO preacher.outreachnetworks.com) (66.73.181.75) by proverbs.outreachnetworks.com with SMTP; 4 Dec 2002 20:53:08 -0000 Received: (qmail 9486 invoked by uid 1000); 4 Dec 2002 20:53:06 -0000 Date: Wed, 4 Dec 2002 15:53:06 -0500 From: "Eric L. Howard" To: sysmon-help@puck.nether.net Message-ID: <20021204205306.GB9259@outreachnetworks.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-Favorite-Scripture: Romans 8:18 X-Theocratic-Rule-Advocate: http://www.crossmovement.com X-Registered-Secret-Agent: Agent Double-Naught Seven X-Operating-System: Linux 2.4.18-bf2.4 Subject: [sysmon-help] missing quotes? Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: sysmond: 14:40:06 missing quotes on line 13 in /usr/local/etc/sysmon.conf sysmond: 14:40:06 Starting System Monitor version v0.91.14 System Monitor version v0.91.14 This is line 13: config logging syslog none; I didn't think that line needed any quotes. If I try to set logging to syslog (w/o a facility noted), I get the following (excuse the long lines): sysmond: 14:47:29 Unknown information c found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information o found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information n found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information f found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information i found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information l found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information o found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information i found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information n found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information s found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information y found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information s found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information l found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information o found in line /usr/local/etc/sysmon.conf:13 sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 Setting a facility gets me: sysmond: 14:49:47 missing quotes on line 13 in /usr/local/etc/sysmon.conf sysmond: 14:49:47 Starting System Monitor version v0.91.14 System Monitor version v0.91.14 Am I missing anything w/ the config logging syslog option? ~elh -- Eric L. Howard e l h @ o u t r e a c h n e t w o r k s . c o m ------------------------------------------------------------------------ www.OutreachNetworks.com 313.297.9900 ------------------------------------------------------------------------ JabberID: elh@jabber.org Advocate of the Theocratic Rule From jared Wed Dec 4 15:55:09 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.12.6) id gB4Kt9rg021728; Wed, 4 Dec 2002 15:55:09 -0500 Date: Wed, 4 Dec 2002 15:55:09 -0500 From: Jared Mauch To: "Eric L. Howard" Cc: sysmon-help@puck.nether.net Subject: Re: [sysmon-help] missing quotes? Message-ID: <20021204205509.GC17113@puck.nether.net> References: <20021204205306.GB9259@outreachnetworks.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021204205306.GB9259@outreachnetworks.com> User-Agent: Mutt/1.4i Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: have you tried: config logging syslog "none"; On Wed, Dec 04, 2002 at 03:53:06PM -0500, Eric L. Howard wrote: > sysmond: 14:40:06 missing quotes on line 13 in /usr/local/etc/sysmon.conf > sysmond: 14:40:06 Starting System Monitor version v0.91.14 > System Monitor version v0.91.14 > > This is line 13: > > config logging syslog none; > > > I didn't think that line needed any quotes. > > If I try to set logging to syslog (w/o a facility noted), I get the > following (excuse the long lines): > > sysmond: 14:47:29 Unknown information c found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information o found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information n found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information f found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information i found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information l found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information o found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information i found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information n found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information s found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information y found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information s found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information l found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information o found in line /usr/local/etc/sysmon.conf:13 > sysmond: 14:47:29 Unknown information g found in line /usr/local/etc/sysmon.conf:13 > > > Setting a facility gets me: > > sysmond: 14:49:47 missing quotes on line 13 in /usr/local/etc/sysmon.conf > sysmond: 14:49:47 Starting System Monitor version v0.91.14 > System Monitor version v0.91.14 > > Am I missing anything w/ the config logging syslog option? > > ~elh > > -- > Eric L. Howard e l h @ o u t r e a c h n e t w o r k s . c o m > ------------------------------------------------------------------------ > www.OutreachNetworks.com 313.297.9900 > ------------------------------------------------------------------------ > JabberID: elh@jabber.org Advocate of the Theocratic Rule > _______________________________________________ > Sysmon-help mailing list > Sysmon-help@puck.nether.net > http://puck.nether.net/mailman/listinfo/sysmon-help -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From elh@outreachnetworks.com Wed Dec 4 16:10:18 2002 Received: from someone claiming to be proverbs.outreachnetworks.com puck.NOSPAM (proverbs.outreachnetworks.com [65.196.249.4]) by puck.nether.net (8.12.6/8.12.6) with SMTP id gB4LAIph022067 for ; Wed, 4 Dec 2002 16:10:18 -0500 Received: (qmail 88179 invoked from network); 4 Dec 2002 21:10:31 -0000 Received: from adsl-66-73-181-75.dsl.sfldmi.ameritech.net (HELO preacher.outreachnetworks.com) (66.73.181.75) by proverbs.outreachnetworks.com with SMTP; 4 Dec 2002 21:10:31 -0000 Received: (qmail 9523 invoked by uid 1000); 4 Dec 2002 21:10:31 -0000 Date: Wed, 4 Dec 2002 16:10:31 -0500 From: "Eric L. Howard" To: sysmon-help@puck.nether.net Subject: Re: [sysmon-help] missing quotes? Message-ID: <20021204211031.GA9511@outreachnetworks.com> Mail-Followup-To: sysmon-help@puck.nether.net References: <20021204205306.GB9259@outreachnetworks.com> <20021204205509.GC17113@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021204205509.GC17113@puck.nether.net> User-Agent: Mutt/1.4i X-Favorite-Scripture: Romans 8:18 X-Theocratic-Rule-Advocate: http://www.crossmovement.com X-Registered-Secret-Agent: Agent Double-Naught Seven X-Operating-System: Linux 2.4.18-bf2.4 Sender: sysmon-help-admin@puck.nether.net Errors-To: sysmon-help-admin@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.0.13 Precedence: bulk List-Unsubscribe: , List-Id: For help with the Sysmon Package List-Post: List-Help: List-Subscribe: , List-Archive: At a certain time, now past, Jared Mauch spake thusly: > have you tried: > > config logging syslog "none"; > > > On Wed, Dec 04, 2002 at 03:53:06PM -0500, Eric L. Howard wrote: > > sysmond: 14:40:06 missing quotes on line 13 in /usr/local/etc/sysmon.conf > > sysmond: 14:40:06 Starting System Monitor version v0.91.14 > > System Monitor version v0.91.14 > > > > This is line 13: > > [snip...] I had not tried the quotes. You may want to update config.html. The quotes appear to be required [with either a facility or none] to keep things quiet at startup. ~elh -- Eric L. Howard e l h @ o u t r e a c h n e t w o r k s . c o m ------------------------------------------------------------------------ www.OutreachNetworks.com 313.297.9900 ------------------------------------------------------------------------ JabberID: elh@jabber.org Advocate of the Theocratic Rule From jamoore2@vt.edu Thu Dec 12 21:43:58 2002 Received: from someone claiming to be albatross.prod.itd.earthlink.net puck.NOSPAM (albatross.mail.pas.earthlink.net [207.217.120.120]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gBD2huux020368 for ; Thu, 12 Dec 2002 21:43:57 -0500 Received: from user104.net531.va.sprint-hsd.net ([65.40.216.104] helo=ZANE) by albatross.prod.itd.earthlink.net with smtp (Exim 3.33 #1) id 18Mfov-0006AB-00 for sysmon-help@puck.nether.net; Thu, 12 Dec 2002 18:44:57 -0800 Message-ID: <001301c2a251$9f8a3200$0264a8c0@ZANE> From: "James T. Moore" To: Date: Thu, 12 Dec 2002 21:44:54 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Subject: [sysmon-help] spawn when a services comes backup X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 02:43:58 -0000 The web documentation indicates that the spawn option can only be used to execute a script when a service fails. It would be great if there was a corresponding option to spawn a script when the service comes back up as well. With this option, it could make doing automatic fail-over and recovery very easy. Is this missing by design or is it just something that hasn't been added yet? J.T. From simon@mtds.com Fri Dec 13 04:19:06 2002 Received: from someone claiming to be mail.mtds.com puck.NOSPAM (mail.mtds.com [194.204.200.6]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gBD9J4ux003332 for ; Fri, 13 Dec 2002 04:19:05 -0500 Received: from pcsimon.mtds.com (pcSimon.mtds.com [194.204.200.53]) by mail.mtds.com (Postfix) with ESMTP id 48A8F16351B; Fri, 13 Dec 2002 09:20:03 +0000 (WET) Received: by pcsimon.mtds.com (Postfix, from userid 500) id 3F62A23C27; Fri, 13 Dec 2002 09:20:02 +0000 (WET) Date: Fri, 13 Dec 2002 09:20:02 +0000 From: Simon White To: "James T. Moore" Subject: Re: [sysmon-help] spawn when a services comes backup Message-ID: <20021213092002.GG2647@mtds.com> References: <001301c2a251$9f8a3200$0264a8c0@ZANE> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <001301c2a251$9f8a3200$0264a8c0@ZANE> User-Agent: Mutt/1.3.27i X-Operating-System: Linux cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 09:19:19 -0000 12-Dec-02 at 21:44, James T. Moore (jamoore2@vt.edu) wrote : > The web documentation indicates that the spawn > option can only be used to execute a script when > a service fails. It would be great if there was a > corresponding option to spawn a script when the > service comes back up as well. With this option, > it could make doing automatic fail-over and recovery > very easy. Is this missing by design or is it just > something that hasn't been added yet? Failover and recovery is better done by something other than a system monitor, but I take your point. I think the best thing is that the spawed script finds a way to monitor if the host down is back up itself, because sysmon by it's nature only checks every few minutes. What is your specific goal here? Maybe I can help you think about it outside of sysmon terms. Sysmon for me is just a monitor, that can trigger pages/emails when a host goes down. Anything more is outside the design goal of sysmon. I am not the developer though, maybe he might like to add this functionality for other reasons... -- |-Simon White, Internet Services Manager, Certified Check Point CCSA. |-MTDS Internet, Security, Anti-Virus, Linux and Hosting Solutions. |-MTDS 14, rue du 16 novembre, Agdal, Rabat, Morocco. |-MTDS tel +212.3.767.4861 - fax +212.3.767.4863 From simon@mtds.com Fri Dec 13 09:01:43 2002 Received: from someone claiming to be mail.mtds.com puck.NOSPAM (mail.mtds.com [194.204.200.6]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gBDE1gux012461 for ; Fri, 13 Dec 2002 09:01:42 -0500 Received: from pcsimon.mtds.com (pcSimon.mtds.com [194.204.200.53]) by mail.mtds.com (Postfix) with ESMTP id CF3E3163508; Fri, 13 Dec 2002 14:02:42 +0000 (WET) Received: by pcsimon.mtds.com (Postfix, from userid 500) id 4A78523C27; Fri, 13 Dec 2002 14:02:41 +0000 (WET) Date: Fri, 13 Dec 2002 14:02:41 +0000 From: Simon White To: "James T. Moore" Subject: Re: [sysmon-help] spawn when a services comes backup Message-ID: <20021213140241.GI3039@mtds.com> References: <001301c2a251$9f8a3200$0264a8c0@ZANE> <20021213092002.GG2647@mtds.com> <000401c2a2ab$8164cf10$0264a8c0@ZANE> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <000401c2a2ab$8164cf10$0264a8c0@ZANE> User-Agent: Mutt/1.3.27i X-Operating-System: Linux cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 14:01:43 -0000 13-Dec-02 at 08:28, James T. Moore (jamoore2@vt.edu) wrote : > I would like to use sysmon to monitor the web sites > because the www monitoring option could be used > to check the web sites and report failure if the machine > is totally dead or is experiencing application failure > (i.e. an error page is returned that does not contain > the string sysmon is looking for). > > When a failure is detected I would like to trigger a script > that removes the ip address of the failed server > from the dns record and adds an iptables rule > to dnat all web traffic to the failed server over to one > of the working servers. > > It would be nice if I could also trigger a rule to add > the failed ip back into the dns record and remove the > ip tables rule when the service comes backup. How about scripting this yourself with wget? wget can retrieve the page, use grep to check for the string, and then run failover if grep returns no match. Then, keep this running and if grep then shows a match, run another script. Sysmon could do this if it returned environment variables or something similar, so that you could see if the host is down or up. Otherwise, set sysmon output to a textfile and awk/grep for up or down so that you can do this. Several ways to skin this cat. Cheers, -- |-Simon White, Internet Services Manager, Certified Check Point CCSA. |-MTDS Internet, Security, Anti-Virus, Linux and Hosting Solutions. |-MTDS 14, rue du 16 novembre, Agdal, Rabat, Morocco. |-MTDS tel +212.3.767.4861 - fax +212.3.767.4863 From jared Fri Dec 13 10:50:55 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.12.6) id gBDFotPr016714; Fri, 13 Dec 2002 10:50:55 -0500 Date: Fri, 13 Dec 2002 10:50:55 -0500 From: Jared Mauch To: Simon White Subject: Re: [sysmon-help] spawn when a services comes backup Message-ID: <20021213155055.GC14574@puck.nether.net> References: <001301c2a251$9f8a3200$0264a8c0@ZANE> <20021213092002.GG2647@mtds.com> <000401c2a2ab$8164cf10$0264a8c0@ZANE> <20021213140241.GI3039@mtds.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20021213140241.GI3039@mtds.com> User-Agent: Mutt/1.4i cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 15:50:56 -0000 This should be fairly simple to implement, the biggest concern I have is that I hate calling external programs. I keep what I consider 'delicate' track of the time that sysmon spends doing varying tasks. execute-on-down and execute-on-up could be easily done. (spawn would be alias to execute-on-down) i just don't want some external task to take forever to run and cause the other tests to be all screwed up. http://puck.nether.net/bugzilla-2.17.1/show_bug.cgi?id=20 - jared On Fri, Dec 13, 2002 at 02:02:41PM +0000, Simon White wrote: > 13-Dec-02 at 08:28, James T. Moore (jamoore2@vt.edu) wrote : > > > I would like to use sysmon to monitor the web sites > > because the www monitoring option could be used > > to check the web sites and report failure if the machine > > is totally dead or is experiencing application failure > > (i.e. an error page is returned that does not contain > > the string sysmon is looking for). > > > > When a failure is detected I would like to trigger a script > > that removes the ip address of the failed server > > from the dns record and adds an iptables rule > > to dnat all web traffic to the failed server over to one > > of the working servers. > > > > It would be nice if I could also trigger a rule to add > > the failed ip back into the dns record and remove the > > ip tables rule when the service comes backup. > > How about scripting this yourself with wget? wget can retrieve the page, > use grep to check for the string, and then run failover if grep returns > no match. > > Then, keep this running and if grep then shows a match, run another > script. > > Sysmon could do this if it returned environment variables or something > similar, so that you could see if the host is down or up. > > Otherwise, set sysmon output to a textfile and awk/grep for up or down > so that you can do this. > > Several ways to skin this cat. > > Cheers, > > -- > |-Simon White, Internet Services Manager, Certified Check Point CCSA. > |-MTDS Internet, Security, Anti-Virus, Linux and Hosting Solutions. > |-MTDS 14, rue du 16 novembre, Agdal, Rabat, Morocco. > |-MTDS tel +212.3.767.4861 - fax +212.3.767.4863 > _______________________________________________ > Sysmon-help mailing list > Sysmon-help@puck.nether.net > http://puck.nether.net/mailman/listinfo/sysmon-help -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From markom@margmidlun.is Fri Dec 13 11:10:20 2002 Received: from someone claiming to be smtp.mmedia.is puck.NOSPAM (smtp.mmedia.is [217.151.160.9]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gBDGAJux017259; Fri, 13 Dec 2002 11:10:20 -0500 Received: from mail.margmidlun.is (mail.margmidlun.is [217.151.161.3]) by smtp.mmedia.is (8.11.6/1.0.0) with ESMTP id gBDGBKZ31905; Fri, 13 Dec 2002 16:11:24 GMT Received: by mail.margmidlun.is with Internet Mail Service (5.5.2653.19) id ; Fri, 13 Dec 2002 16:11:20 -0000 Message-ID: From: Marko Milivojevic To: "'Jared Mauch'" Subject: RE: [sysmon-help] spawn when a services comes backup Date: Fri, 13 Dec 2002 16:11:15 -0000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C2A2C2.430A2A50" cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 16:10:21 -0000 This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C2A2C2.430A2A50 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable OK, since you quoted what I've put into Bugzilla, let me clear what I had in mind there :-). Your concern regarding running external programs is absolutely correct and in place. On the other hand, why would you care about it? = :-). If someone uses broken script to perform some check, it's out of your control, it's not a bad design in Sysmon, isn't it? They asked for it = ;-) IMHO, it's valuable to have the possibility of running external programs to check on certain complex things (*SQL inserts, deletes, = etc., bandwidth or temperature trends (not very simple thing)). It would = greatly improve the value, of already valuable asset such as Sysmon. I'm not programmer by trade, but I believe that timing issues could be addressed somehow. After all, you ARE allowing exec for notify - why = not for check, too? The other thing is - what to expect from external program? I'd believe that return code is the most preferred way. If it's 0, service = is OK, if it's not 0, service is down. Anything coming out to stdout = (meaning there was not an error in software, but in service itself) could go as message body, or whatever. Also, you could reserve certain exit codes = for external program failures, too. Regards, Marko. > -----Original Message----- > From: Jared Mauch [mailto:jared@sysmon.org] > Sent: f=F6studagur, 13. desember 2002. 15:51 > To: Simon White > Cc: sysmon-help@puck.nether.net > Subject: Re: [sysmon-help] spawn when a services comes backup >=20 >=20 > This should be fairly simple to implement, the biggest concern I > have is that I hate calling external programs. I keep what I = consider > 'delicate' track of the time that sysmon spends doing varying > tasks. >=20 > execute-on-down and execute-on-up could be easily done. >=20 > (spawn would be alias to execute-on-down) >=20 > i just don't want some external task to take forever > to run and cause the other tests to be all screwed up. >=20 > http://puck.nether.net/bugzilla-2.17.1/show_bug.cgi?id=3D20 >=20 > - jared [ 8< ] T=F6lvup=F3stur =FEessi er fr=E1 Margmi=F0lun hf., Su=F0urlandsbraut 4, = Reykjav=EDk. Fyrirvara og lei=F0beiningar til vi=F0takenda t=F6lvup=F3sts fr=E1 = Margmi=F0lun hf. er a=F0 finna =E1 vefs=ED=F0unni http://www.mi.is/fyrirvari=20 ------_=_NextPart_001_01C2A2C2.430A2A50 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: [sysmon-help] spawn when a services comes backup

        OK, since = you quoted what I've put into Bugzilla, let me clear what I had in mind = there :-).

        Your = concern regarding running external programs is absolutely correct and = in place. On the other hand, why would you care about it? :-). If = someone uses broken script to perform some check, it's out of your = control, it's not a bad design in Sysmon, isn't it? They asked for it = ;-)

        IMHO, it's = valuable to have the possibility of running external programs to check = on certain complex things (*SQL inserts, deletes, etc., bandwidth or = temperature trends (not very simple thing)). It would greatly improve = the value, of already valuable asset such as Sysmon.

        I'm not = programmer by trade, but I believe that timing issues could be = addressed somehow. After all, you ARE allowing exec for notify - why = not for check, too?

        The other = thing is - what to expect from external program? I'd believe that = return code is the most preferred way. If it's 0, service is OK, if = it's not 0, service is down. Anything coming out to stdout (meaning = there was not an error in software, but in service itself) could go as = message body, or whatever. Also, you could reserve certain exit codes = for external program failures, too.


Regards,
Marko.

> -----Original Message-----
> From: Jared Mauch [mailto:jared@sysmon.org]
> Sent: f=F6studagur, 13. desember 2002. = 15:51
> To: Simon White
> Cc: sysmon-help@puck.nether.net
> Subject: Re: [sysmon-help] spawn when a = services comes backup
>
>
>       This should be = fairly simple to implement, the biggest concern I
> have is that I hate calling external = programs.  I keep what I consider
> 'delicate' track of the time that sysmon spends = doing varying
> tasks.
>
>       execute-on-down = and execute-on-up could be easily done.
>
>       (spawn would be = alias to execute-on-down)
>
>       i just don't = want some external task to take forever
> to run and cause the other tests to be all = screwed up.
>
> http://puck.nether.net/bugzilla-2.17.1/show_bug.cgi?id= =3D20
>
>       - jared
[ 8< ]

T=F6lvup=F3stur =FEessi er fr=E1 Margmi=F0lun hf., = Su=F0urlandsbraut 4, Reykjav=EDk. Fyrirvara og lei=F0beiningar til = vi=F0takenda t=F6lvup=F3sts fr=E1 Margmi=F0lun hf. er a=F0 finna =E1 = vefs=ED=F0unni http://www.mi.is/fyrirvari

------_=_NextPart_001_01C2A2C2.430A2A50-- From jared Fri Dec 13 11:25:22 2002 Received: (from jared@localhost) by puck.nether.net (8.12.6/8.12.6) id gBDGPMJF018162; Fri, 13 Dec 2002 11:25:22 -0500 Date: Fri, 13 Dec 2002 11:25:11 -0500 From: Jared Mauch To: Marko Milivojevic Subject: Re: [sysmon-help] spawn when a services comes backup Message-ID: <20021213162506.GD14574@puck.nether.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: User-Agent: Mutt/1.4i cc: sysmon-help@puck.nether.net cc: 'Jared Mauch' X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 16:28:18 -0000 On Fri, Dec 13, 2002 at 04:11:15PM -0000, Marko Milivojevic wrote: > > OK, since you quoted what I've put into Bugzilla, let me clear what > I had in mind there :-). > > Your concern regarding running external programs is absolutely > correct and in place. On the other hand, why would you care about it? :-). > If someone uses broken script to perform some check, it's out of your > control, it's not a bad design in Sysmon, isn't it? They asked for it ;-) If it takes that script more than a few seconds (even up to 30) it will cause those annoying numkilled things. (once i see a test that takes more than 60 seconds, i stop it.. because that shouldn't happen). i would then have to track the time it spent doing exec() then go and skew existings tests to give them that much more buffer time. (eg: i send 1 ping every second, up to 7 pings to determine if a host is down, if I send 1 ping, exec an external proc, it takes 50 seconds to run, i come back with 1-2 seconds already being counted then need to send the other 6 in the ~10 seconds left. I think i have a 2 sec delay between pings). one could miss a host that was down for some time if a check is queued every 60 seconds (default) then taking 50 away from everyone else will cause bad things to happen. > IMHO, it's valuable to have the possibility of running external > programs to check on certain complex things (*SQL inserts, deletes, etc., > bandwidth or temperature trends (not very simple thing)). It would greatly i have snmp support already. you can't do temp trends via snmp? > improve the value, of already valuable asset such as Sysmon. > > I'm not programmer by trade, but I believe that timing issues could > be addressed somehow. After all, you ARE allowing exec for notify - why not > for check, too? well, this would be easy to do, i'm just paranoid about people shooting themselves in the foot with it then coming to me and saying "why does YYY happen", then i say "your external program sucks". > The other thing is - what to expect from external program? I'd > believe that return code is the most preferred way. If it's 0, service is > OK, if it's not 0, service is down. Anything coming out to stdout (meaning > there was not an error in software, but in service itself) could go as > message body, or whatever. Also, you could reserve certain exit codes for > external program failures, too. actually, i'd probally just do this: object extcheck { type ext; exec "/tmp/check"; exit-failure 0; exit-success 25; contact "joe@foo.bar"; }; > > > Regards, > Marko. > > > -----Original Message----- > > From: Jared Mauch [mailto:jared@sysmon.org] > > Sent: föstudagur, 13. desember 2002. 15:51 > > To: Simon White > > Cc: sysmon-help@puck.nether.net > > Subject: Re: [sysmon-help] spawn when a services comes backup > > > > > > This should be fairly simple to implement, the biggest concern I > > have is that I hate calling external programs. I keep what I consider > > 'delicate' track of the time that sysmon spends doing varying > > tasks. > > > > execute-on-down and execute-on-up could be easily done. > > > > (spawn would be alias to execute-on-down) > > > > i just don't want some external task to take forever > > to run and cause the other tests to be all screwed up. > > > > http://puck.nether.net/bugzilla-2.17.1/show_bug.cgi?id=20 > > > > - jared > [ 8< ] > > Tölvupóstur þessi er frá Margmiðlun hf., Suðurlandsbraut 4, Reykjavík. > Fyrirvara og leiðbeiningar til viðtakenda tölvupósts frá Margmiðlun hf. er > að finna á vefsíðunni http://www.mi.is/fyrirvari > -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From markom@margmidlun.is Fri Dec 13 11:59:19 2002 Received: from someone claiming to be phat.nether.net puck.NOSPAM (phat.nether.net [204.212.45.10]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gBDGxHBG001038 for ; Fri, 13 Dec 2002 11:59:17 -0500 Received: from someone claiming to be smtp.mmedia.is PhAT.NOSPAM (smtp.mmedia.is [217.151.160.9]) by phat.nether.net (8.11.6/8.11.2) with ESMTP id gBDGZw314840 for ; Fri, 13 Dec 2002 11:35:59 -0500 (EST) Received: from mail.margmidlun.is (mail.margmidlun.is [217.151.161.3]) by smtp.mmedia.is (8.11.6/1.0.0) with ESMTP id gBDGap224863; Fri, 13 Dec 2002 16:36:51 GMT Received: by mail.margmidlun.is with Internet Mail Service (5.5.2653.19) id ; Fri, 13 Dec 2002 16:36:52 -0000 Message-ID: From: Marko Milivojevic To: "'Jared Mauch'" Subject: RE: [sysmon-help] spawn when a services comes backup Date: Fri, 13 Dec 2002 16:36:51 -0000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C2A2C5.D6803A60" cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 13 Dec 2002 16:59:27 -0000 This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C2A2C5.D6803A60 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable > If it takes that script more than a few seconds (even up to 30) > it will cause those annoying numkilled things. (once i see a test > that takes more than 60 seconds, i stop it.. because that shouldn't > happen). In my book, test of a networked service that takes 30 seconds to complete is the same thing as failed service ;-). > i have snmp support already. you can't do temp trends via snmp? Two things here :-). There is no documentation on how to actually use SNMP in Sysmon :-). Second - yes, you can check the temp itself, but can you check whether it has risen for 5 degrees in past 30 minutes (trend to rise)? = Or if badwidth usage has started going up, etc. > well, this would be easy to do, i'm just paranoid about > people shooting themselves in the foot with it then coming to me and > saying "why does YYY happen", then i say "your external=20 > program sucks". As I mentioned - I understand this, but I'm looking at this not with programmer, but user's eyes :-) > actually, i'd probally just do this: >=20 > object extcheck { > type ext; > exec "/tmp/check"; > exit-failure 0; > exit-success 25; > contact "joe@foo.bar"; > }; Actually, that's the way I'd like to see it, too :-) Marko. T=F6lvup=F3stur =FEessi er fr=E1 Margmi=F0lun hf., Su=F0urlandsbraut 4, = Reykjav=EDk. Fyrirvara og lei=F0beiningar til vi=F0takenda t=F6lvup=F3sts fr=E1 = Margmi=F0lun hf. er a=F0 finna =E1 vefs=ED=F0unni http://www.mi.is/fyrirvari=20 ------_=_NextPart_001_01C2A2C5.D6803A60 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: [sysmon-help] spawn when a services comes backup

>       If it takes that = script more than a few seconds (even up to 30)
> it will cause those annoying numkilled = things.  (once i see a test
> that takes more than 60 seconds, i stop it.. = because that shouldn't
> happen).

        In my = book, test of a networked service that takes 30 seconds
to complete is the same thing as failed service = ;-).

>       i have snmp = support already.  you can't do temp trends via snmp?

        Two things = here :-). There is no documentation on how to actually use SNMP in = Sysmon :-).

        Second - = yes, you can check the temp itself, but can you check whether it has = risen for 5 degrees in past 30 minutes (trend to rise)? Or if badwidth = usage has started going up, etc.

>       well, this would = be easy to do, i'm just paranoid about
> people shooting themselves in the foot with it = then coming to me and
> saying "why does YYY happen", then i = say "your external
> program sucks".

        As I = mentioned -  I understand this, but I'm looking at this not = with
programmer, but user's eyes :-)

>       actually, i'd = probally just do this:
>
> object extcheck {
>       type ext;
>       exec = "/tmp/check";
>       exit-failure = 0;
>       exit-success = 25;
>       contact = "joe@foo.bar";
> };

        Actually, = that's the way I'd like to see it, too :-)


Marko.

T=F6lvup=F3stur =FEessi er fr=E1 Margmi=F0lun hf., = Su=F0urlandsbraut 4, Reykjav=EDk. Fyrirvara og lei=F0beiningar til = vi=F0takenda t=F6lvup=F3sts fr=E1 Margmi=F0lun hf. er a=F0 finna =E1 = vefs=ED=F0unni http://www.mi.is/fyrirvari

------_=_NextPart_001_01C2A2C5.D6803A60-- From markom@margmidlun.is Mon Dec 16 05:16:49 2002 Received: from someone claiming to be smtp.mmedia.is puck.NOSPAM (smtp.mmedia.is [217.151.160.9]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id gBGAGmBG016019 for ; Mon, 16 Dec 2002 05:16:49 -0500 Received: from mail.margmidlun.is (mail.margmidlun.is [217.151.161.3]) by smtp.mmedia.is (8.11.6/1.0.0) with ESMTP id gBGAI8j15670 for ; Mon, 16 Dec 2002 10:18:08 GMT Received: by mail.margmidlun.is with Internet Mail Service (5.5.2653.19) id ; Mon, 16 Dec 2002 10:18:21 -0000 Message-ID: From: Marko Milivojevic To: "'sysmon-help@puck.nether.net'" Subject: RE: [sysmon-help] spawn when a services comes backup Date: Mon, 16 Dec 2002 10:18:20 -0000 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C2A4EC.7500D0A0" X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1b6 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Dec 2002 10:16:50 -0000 This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C2A4EC.7500D0A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable > If it takes that script more than a few seconds (even up to 30) > it will cause those annoying numkilled things. (once i see a test > that takes more than 60 seconds, i stop it.. because that shouldn't > happen). In my book, test of a networked service that takes 30 seconds to complete is the same thing as failed service ;-). > i have snmp support already. you can't do temp trends via snmp? Two things here :-). There is no documentation on how to actually use SNMP in Sysmon :-). Second - yes, you can check the temp itself, but can you check whether it has risen for 5 degrees in past 30 minutes (trend to rise)? = Or if badwidth usage has started going up, etc. > well, this would be easy to do, i'm just paranoid about > people shooting themselves in the foot with it then coming to me and > saying "why does YYY happen", then i say "your external=20 > program sucks". As I mentioned - I understand this, but I'm looking at this not with programmer, but user's eyes :-) > actually, i'd probally just do this: >=20 > object extcheck { > type ext; > exec "/tmp/check"; > exit-failure 0; > exit-success 25; > contact "joe@foo.bar"; > }; Actually, that's the way I'd like to see it, too :-) Marko. T=F6lvup=F3stur =FEessi er fr=E1 Margmi=F0lun hf., Su=F0urlandsbraut 4, = Reykjav=EDk. Fyrirvara og lei=F0beiningar til vi=F0takenda t=F6lvup=F3sts fr=E1 = Margmi=F0lun hf. er a=F0 finna =E1 vefs=ED=F0unni http://www.mi.is/fyrirvari=20 ------_=_NextPart_001_01C2A4EC.7500D0A0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: [sysmon-help] spawn when a services comes backup

>       If it takes that = script more than a few seconds (even up to 30)
> it will cause those annoying numkilled = things.  (once i see a test
> that takes more than 60 seconds, i stop it.. = because that shouldn't
> happen).

        In my = book, test of a networked service that takes 30 seconds
to complete is the same thing as failed service = ;-).

>       i have snmp = support already.  you can't do temp trends via snmp?

        Two things = here :-). There is no documentation on how to actually use SNMP in = Sysmon :-).

        Second - = yes, you can check the temp itself, but can you check whether it has = risen for 5 degrees in past 30 minutes (trend to rise)? Or if badwidth = usage has started going up, etc.

>       well, this would = be easy to do, i'm just paranoid about
> people shooting themselves in the foot with it = then coming to me and
> saying "why does YYY happen", then i = say "your external
> program sucks".

        As I = mentioned -  I understand this, but I'm looking at this not = with
programmer, but user's eyes :-)

>       actually, i'd = probally just do this:
>
> object extcheck {
>       type ext;
>       exec = "/tmp/check";
>       exit-failure = 0;
>       exit-success = 25;
>       contact = "joe@foo.bar";
> };

        Actually, = that's the way I'd like to see it, too :-)


Marko.

T=F6lvup=F3stur =FEessi er fr=E1 Margmi=F0lun hf., = Su=F0urlandsbraut 4, Reykjav=EDk. Fyrirvara og lei=F0beiningar til = vi=F0takenda t=F6lvup=F3sts fr=E1 Margmi=F0lun hf. er a=F0 finna =E1 = vefs=ED=F0unni http://www.mi.is/fyrirvari

------_=_NextPart_001_01C2A4EC.7500D0A0-- From swapana_ghosh@yahoo.com Tue Feb 11 02:55:09 2003 Received: from someone claiming to be web41313.mail.yahoo.com puck.NOSPAM (web41313.mail.yahoo.com [66.218.93.62]) by puck.nether.net (8.12.6/8.12.6) with SMTP id h1B7t8Wp019055 for ; Tue, 11 Feb 2003 02:55:08 -0500 Message-ID: <20030211075650.3061.qmail@web41313.mail.yahoo.com> Received: from [151.204.68.99] by web41313.mail.yahoo.com via HTTP; Mon, 10 Feb 2003 23:56:50 PST Date: Mon, 10 Feb 2003 23:56:50 -0800 (PST) From: Swapana Ghosh To: sysmon-help@puck.nether.net MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailman-Approved-At: Thu, 13 Feb 2003 08:53:18 -0500 Subject: [sysmon-help] Bad Resp Error X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Feb 2003 07:55:09 -0000 Hi to all I have installed the sysmon , but for few sites i am getting 'Bad Resp' error , but the site is ok and i can browse it properly!! Then what what for this error is coming? Regds. __________________________________________________ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com From pcian@telcel.net.ve Sun Feb 2 12:39:14 2003 Received: from someone claiming to be mta01.t-net.net.ve puck.NOSPAM (ssmtp.telcel.net.ve [200.35.65.10]) by puck.nether.net (8.12.6/8.12.6) with ESMTP id h12HdDAD009442 for ; Sun, 2 Feb 2003 12:39:13 -0500 Received: from telcel.net.ve (jruiz.t-net.net.ve [200.35.64.247]) (authenticated (0 bits))h129m1S03420 for ; Sun, 2 Feb 2003 13:48:02 +0400 (GMT) Sender: jesus@telcel.net.ve Message-ID: <3E3D57EF.E5CDEED8@telcel.net.ve> Date: Sun, 02 Feb 2003 13:39:59 -0400 From: Jesus Ruiz X-Mailer: Mozilla 4.79 [en] (X11; U; SunOS 5.8 sun4u) X-Accept-Language: en, ja MIME-Version: 1.0 To: sysmon-help@sysmon.org Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Thu, 13 Feb 2003 08:53:32 -0500 Subject: [sysmon-help] Help X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 02 Feb 2003 17:39:14 -0000 I trying to use sysmon. but I have the follow problem. bash-2.05# /usr/local/bin/sysmond ld.so.1: /usr/local/bin/sysmond: fatal: relocation error: file /usr/lib/libcrypto.so.0.9.6: symbol __register_frame_info: referenced symbol not found Killed My machine data are: SunOS XXXX 5.8 Generic_108528-18 sun4u sparc bash-2.05# gcc -v Reading specs from /usr/local/lib/gcc-lib/sparc-sun-solaris2.8/3.1/specs Configured with: ../configure --with-as=/usr/ccs/bin/as --with-ld=/usr/ccs/bin/ld --disable-nls Thread model: posix gcc version 3.1 From pareilly@tcd.ie Tue Apr 15 13:34:35 2003 Received: from someone claiming to be dux1.tcd.ie puck.NOSPAM (dux1.tcd.ie [134.226.1.23]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3FHYZcL031943 for ; Tue, 15 Apr 2003 13:34:35 -0400 Received: from web2.tcd.ie (web2.tcd.ie [134.226.1.115]) by dux1.tcd.ie (Postfix) with ESMTP id 9DC1C5AB for ; Tue, 15 Apr 2003 18:34:34 +0100 (IST) Date: Tue, 15 Apr 2003 18:34:34 +0100 (IST) From: Paul Reilly To: sysmon-help@puck.nether.net Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: [sysmon-help] states? X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Apr 2003 17:34:36 -0000 what do the different states mean? internal-killed? Conn Ref I can kinda guess. Is there a list of all the states and their meanings? Paul From jared Tue Apr 15 13:50:09 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3FHo9iu000449; Tue, 15 Apr 2003 13:50:09 -0400 Date: Tue, 15 Apr 2003 13:50:09 -0400 From: Jared Mauch To: Paul Reilly Subject: Re: [sysmon-help] states? Message-ID: <20030415175009.GB28760@puck.nether.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.4i cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Apr 2003 17:50:09 -0000 On Tue, Apr 15, 2003 at 06:34:34PM +0100, Paul Reilly wrote: > > what do the different states mean? > > internal-killed? Internal-Killed happens when a check is being "processed" for more than 45 seconds. None of the checks when they are behaving correctly should take that long to be performed. > Conn Ref Connection Refused. It's just a shortened version of it so it can more easily fit on cell phones/pagers. > I can kinda guess. Is there a list of all the states and their meanings? You can check src/config.h, they are mostly straightforward. /* Return Values */ #define SYSM_OK 0 #define SYSM_CONNREF 1 #define SYSM_NETUNRCH 2 #define SYSM_HOSTDOWN 3 #define SYSM_TIMEDOUT 4 #define SYSM_NODNS 5 #define SYSM_UNPINGABLE 6 #define SYSM_THROTTLED 7 (news server [INN] is throttled) #define SYSM_NOAUTH 8 #define SYSM_NORESP 9 #define SYSM_INPROG 10 (internal value for in-progress, can't be a state) #define SYSM_BAD_AUTH 11 #define SYSM_BAD_RESP 12 #define X500_WEDGED 13 #define SYSM_KILLED 14 /* killed locally */ #define SYSM_HOSTUNRCH 15 #define SYSM_RTT_HIGH 16 #define SYSM_SNMP_REBOOT 17 #define SYSM_SNMP_HIGH 18 #define SYSM_SNMP_LOW 19 #define SYSM_SNMP_OOR 20 (out of range) #define SYSM_SNMP_NOTEXACT 21 -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From pareilly@tcd.ie Tue Apr 15 13:54:45 2003 Received: from someone claiming to be dux1.tcd.ie puck.NOSPAM (dux1.tcd.ie [134.226.1.23]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3FHsjcL000704 for ; Tue, 15 Apr 2003 13:54:45 -0400 Received: from web2.tcd.ie (iss.tcd.ie [134.226.1.115]) by dux1.tcd.ie (Postfix) with ESMTP id 0A0D75F5; Tue, 15 Apr 2003 18:54:45 +0100 (IST) Date: Tue, 15 Apr 2003 18:54:45 +0100 (IST) From: Paul Reilly To: Jared Mauch Subject: Re: [sysmon-help] states? In-Reply-To: <20030415175009.GB28760@puck.nether.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: "sysmon-help@puck.nether.net" X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Apr 2003 17:54:46 -0000 > > internal-killed? > > Internal-Killed happens when a check is being "processed" > for more than 45 seconds. None of the checks when they are behaving > correctly should take that long to be performed. > OK. I see. What about the 'spawn /path/to/program/which/takes/long/time' option? Is this spawn program execution time included in the process time? > #define X500_WEDGED 13 wedged? > #define SYSM_RTT_HIGH 16 rtt? Great. Thanks. Paul From jared Tue Apr 15 13:58:20 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3FHwKcM000938; Tue, 15 Apr 2003 13:58:20 -0400 Date: Tue, 15 Apr 2003 13:58:20 -0400 From: Jared Mauch To: Paul Reilly Subject: Re: [sysmon-help] states? Message-ID: <20030415175820.GA858@puck.nether.net> References: <20030415175009.GB28760@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.4i cc: "sysmon-help@puck.nether.net" cc: Jared Mauch X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Apr 2003 17:58:22 -0000 On Tue, Apr 15, 2003 at 06:54:45PM +0100, Paul Reilly wrote: > > > > internal-killed? > > > > Internal-Killed happens when a check is being "processed" > > for more than 45 seconds. None of the checks when they are behaving > > correctly should take that long to be performed. > > > OK. I see. > What about the 'spawn /path/to/program/which/takes/long/time' option? > Is this spawn program execution time included in the process time? nope. spawn is only done on failure out of page.c when a notification is done. > > #define X500_WEDGED 13 > > wedged? this is for University of Michigan. I don't think they use it anymore. > > #define SYSM_RTT_HIGH 16 > > rtt? not implemented yet.. but i've reserved the error code :) - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From pareilly@tcd.ie Tue Apr 15 14:08:07 2003 Received: from someone claiming to be dux1.tcd.ie puck.NOSPAM (dux1.tcd.ie [134.226.1.23]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3FI86cL001887 for ; Tue, 15 Apr 2003 14:08:07 -0400 Received: from web2.tcd.ie (web2.tcd.ie [134.226.1.115]) by dux1.tcd.ie (Postfix) with ESMTP id 83AA1558 for ; Tue, 15 Apr 2003 19:08:06 +0100 (IST) Date: Tue, 15 Apr 2003 19:08:06 +0100 (IST) From: Paul Reilly To: "sysmon-help@puck.nether.net" Subject: Re: [sysmon-help] states? In-Reply-To: <20030415175820.GA858@puck.nether.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Apr 2003 18:08:07 -0000 > nope. spawn is only done on failure out of page.c when > a notification is done. > ok. cool. > this is for University of Michigan. I don't think they use > it anymore. > OK. Ok, all others understood. thanks. BTW - Did you get my email about the list archives ? Paul From jared Tue Apr 15 14:09:01 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3FI91Fr002081; Tue, 15 Apr 2003 14:09:01 -0400 Date: Tue, 15 Apr 2003 14:09:01 -0400 From: Jared Mauch To: Paul Reilly Subject: Re: [sysmon-help] states? Message-ID: <20030415180901.GC858@puck.nether.net> References: <20030415175820.GA858@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.4i cc: "sysmon-help@puck.nether.net" X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Apr 2003 18:09:02 -0000 On Tue, Apr 15, 2003 at 07:08:06PM +0100, Paul Reilly wrote: > > > nope. spawn is only done on failure out of page.c when > > a notification is done. > > > ok. cool. > > > this is for University of Michigan. I don't think they use > > it anymore. > > > OK. > > Ok, all others understood. thanks. > > BTW - Did you get my email about the list archives ? we use mailman. www.list.org - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From jared Thu Apr 17 22:57:14 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3I2vEsb018741 for sysmon-help@puck.nether.net; Thu, 17 Apr 2003 22:57:14 -0400 Date: Thu, 17 Apr 2003 22:57:14 -0400 From: Jared Mauch To: sysmon-help@puck.nether.net Message-ID: <20030418025714.GA18626@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.4i Subject: [sysmon-help] snmp survey X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Apr 2003 02:57:15 -0000 Is anyone other than myself using the snmp feature set of sysmon? If so, what features do you believe are missing? What would help you operate your hosts/network if it was available in sysmon? I'm mostly going to concentrate the featureset on snmp based features at this point as the rest of the codebase has been fairly static the past few months. - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From lklawson@heapy.com Fri Apr 18 08:02:29 2003 Received: from someone claiming to be dymwsm17.mailwatch.com puck.NOSPAM (dymwsm17.mailwatch.com [204.253.83.165]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3IC2ScL031447 for ; Fri, 18 Apr 2003 08:02:28 -0400 Received: from mwsc0229.mw4.mailwatch.com (mwsc0229.mw4.mailwatch.com [204.253.83.214]) by dymwsm17.mailwatch.com (8.11.0/8.11.0) with ESMTP id h3IC2jk12013 for ; Fri, 18 Apr 2003 08:02:45 -0400 Received: from mail pickup service by mwsc0229.mw4.mailwatch.com with Microsoft SMTPSVC; Fri, 18 Apr 2003 08:02:44 -0400 Received: from 204.253.83.71 ([204.253.83.71]) by MWSC0229 with SMTP id 0002001d512db164-f970-4a19-b242-90f2e5ee359b; Fri, 18 Apr 2003 08:02:44 -0500 Received: from c2smtp.heapy.com (adsl-68-23-90-49.dsl.dytnoh.ameritech.net [68.23.90.49]) by dymwsm09.mailwatch.com (8.12.9/8.12.9) with SMTP id h3IC2i1g017063 for ; Fri, 18 Apr 2003 08:02:44 -0400 Received: from Connect2 Message Router by c2smtp.heapy.com via Connect2-SMTP 4.32; Fri, 18 Apr 2003 08:03:37 -0500 Message-ID: <23E1F33001053100@c2smtp.heapy.com> Date: Fri, 18 Apr 2003 8:02:00 -0500 From: Kirk Lawson Sender: Kirk Lawson Organization: Heapy Engineering To: sysmon-help@puck.nether.net ("SYSMON-H@SMTP {sysmon-help@puck.nether.net}") Subject: RE: [sysmon-help] snmp survey Importance: Normal X-SMF-Hop-Count: 1 MIME-Version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit X-Mailer: Connect2-SMTP 4.32 MHS/SMF to SMTP Gateway X-MW-BTID: 090025000020031084336400012 X-MW-CTIME: 1050667364 HOP-COUNT: 1 X-MAILWATCH-INSTANCEID: 0102001d512db164-f970-4a19-b242-90f2e5ee359b X-OriginalArrivalTime: 18 Apr 2003 12:02:44.0984 (UTC) FILETIME=[6BE9EF80:01C305A2] X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Apr 2003 12:02:29 -0000 > Is anyone other than myself using the snmp feature set of > sysmon? Not yet, but planning to. So far the "live" polling has been quite effective for what we've needed. > If so, what features do you believe are missing? What would > help you operate your hosts/network if it was available in sysmon? I would find it a lot easier if I understood SNMP better. :-) > I'm mostly going to concentrate the featureset on snmp based > features at this point as the rest of the codebase has been > fairly static the past few months. Cool. Peace favor your sword --- "In these modern times, many men are wounded for not having weapons or knowledge of their use." -Achille Marozzo, 1536 From sysmon@oc2noc.com Fri Apr 18 12:00:04 2003 Received: from someone claiming to be iophase.com puck.NOSPAM (iophase.com [66.34.207.1]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3IG03cL016676; Fri, 18 Apr 2003 12:00:03 -0400 Received: from iophase.com (localhost [127.0.0.1]) by iophase.com (8.12.8/8.12.8) with ESMTP id h3IG0M9g012066; Fri, 18 Apr 2003 09:00:23 -0700 From: "Eric Hendrickson" To: Jared Mauch , sysmon-help@puck.nether.net Subject: Re: [sysmon-help] snmp survey Date: Fri, 18 Apr 2003 09:00:21 -0700 Message-Id: <20030418155009.M85557@iophase.com> In-Reply-To: <20030418025714.GA18626@puck.nether.net> References: <20030418025714.GA18626@puck.nether.net> X-Mailer: iophase Inc. WebMail 1.90 20030318 X-OriginatingIP: 68.5.234.81 (erich) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Apr 2003 16:00:04 -0000 Hi Jared, I would like to use the SNMP features of Sysmon. I guess my first request would be more detailed documentation so that I can really get up to speed on Sysmon's SNMP capabilities. It's a wonderful tool and I'm eager to use it for SNMP polling and management. Keep up the great work! -Eric ---------- Original Message ----------- From: Jared Mauch To: sysmon-help@puck.nether.net Sent: Thu, 17 Apr 2003 22:57:14 -0400 Subject: [sysmon-help] snmp survey > Is anyone other than myself using the snmp feature set of > sysmon? > > If so, what features do you believe are missing? What would > help you operate your hosts/network if it was available in sysmon? > > I'm mostly going to concentrate the featureset on snmp based > features at this point as the rest of the codebase has been > fairly static the past few months. > > - jared > > -- > Jared Mauch | pgp key available via finger from > jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ > My statements are only mine. _______________________________________________ > Sysmon-help mailing list > Sysmon-help@puck.nether.net > http://puck.nether.net/mailman/listinfo/sysmon-help ------- End of Original Message ------- From jared Fri Apr 18 14:45:29 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3IIjTNo031206; Fri, 18 Apr 2003 14:45:29 -0400 Date: Fri, 18 Apr 2003 14:45:29 -0400 From: Jared Mauch To: Eric Hendrickson Subject: Re: [sysmon-help] snmp survey Message-ID: <20030418184529.GA30607@puck.nether.net> References: <20030418025714.GA18626@puck.nether.net> <20030418155009.M85557@iophase.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030418155009.M85557@iophase.com> User-Agent: Mutt/1.5.4i cc: sysmon-help@puck.nether.net cc: Jared Mauch X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Apr 2003 18:45:35 -0000 On Fri, Apr 18, 2003 at 09:00:21AM -0700, Eric Hendrickson wrote: > Hi Jared, > > I would like to use the SNMP features of Sysmon. I guess my first request > would be more detailed documentation so that I can really get up to speed on > Sysmon's SNMP capabilities. > > It's a wonderful tool and I'm eager to use it for SNMP polling and > management. Keep up the great work! here's a few examples. I'll work on getting better snmp docs available. Let me know if you have any questions. Example of checking a Juniper power-supply for failure. It polls the oid and compares the return value with the number 2, which reflects normal operational state. Any other value represents a failed power supply. object juniper.example.com.PS-A { ip "juniper.example.com"; type snmp; snmp-type "exact"; snmp-exact "2"; oid ".1.3.6.1.4.1.2636.3.1.13.1.6.2.1.0.0"; community "public"; desc "juniper.example.com PS A has failed"; dep "juniper.example.com-ping"; contact "netadmin@example.com"; }; Example of alerting on high cpu utilization on a cisco router. This compares the 1 min value from 'sh proc cpu' with 25. If it is over 25%, it generates an 'alert'. object cisco.example.com.cpu { ip "cisco.example.com"; type snmp; snmp-type "high"; snmp-high "25"; oid ".1.3.6.1.4.1.9.2.1.57.0"; community "public"; desc "cisco.example.com CPU usage"; dep "cisco.example.com"; }; Example of temp based alarm for cisco device: If temp goes above 28C, generate alarm. object cisco.example.com-temp { ip "cisco.example.com"; type snmp; snmp-type "high"; oid ".1.3.6.1.4.1.9.9.13.1.3.1.3.1"; desc "TEMP ALERT TOO WARM"; snmp-high "28"; community "public"; contact "netadmin@example.com"; dep "cisco.example.com"; }; Example of Cisco router, check memory free. Watch for leaks or decreasing amount of memory available: object cisco.example.com-snmp-mem-free { ip "cisco.example.com"; type snmp; snmp-type "low"; oid ".1.3.6.1.4.1.9.9.48.1.1.1.6.1"; desc "cisco.example.com-memory free"; snmp-low "69200000"; community "public"; contact "netadmin@example.com"; dep "cisco.example.com"; }; > > -Eric > > > ---------- Original Message ----------- > From: Jared Mauch > To: sysmon-help@puck.nether.net > Sent: Thu, 17 Apr 2003 22:57:14 -0400 > Subject: [sysmon-help] snmp survey > > > Is anyone other than myself using the snmp feature set of > > sysmon? > > > > If so, what features do you believe are missing? What would > > help you operate your hosts/network if it was available in sysmon? > > > > I'm mostly going to concentrate the featureset on snmp based > > features at this point as the rest of the codebase has been > > fairly static the past few months. > > > > - jared > > > > -- > > Jared Mauch | pgp key available via finger from > > jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ > > My statements are only mine. > _______________________________________________ > > Sysmon-help mailing list > > Sysmon-help@puck.nether.net > > http://puck.nether.net/mailman/listinfo/sysmon-help > ------- End of Original Message ------- -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From bengan@ibanez.bengan.sunet.se Sat Apr 19 01:53:07 2003 Received: from someone claiming to be ibanez.bengan.sunet.se puck.NOSPAM (ibanez.bengan.sunet.se [193.10.90.66]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3J5r6cL005082; Sat, 19 Apr 2003 01:53:07 -0400 Received: from bengan by ibanez.bengan.sunet.se with local (Exim 3.36 #1) id 196lIP-00024u-00; Sat, 19 Apr 2003 07:53:53 +0200 Date: Sat, 19 Apr 2003 07:53:53 +0200 From: Bengt =?iso-8859-1?B?R/ZyZOlu?= To: Jared Mauch Subject: Re: [sysmon-help] snmp survey Message-ID: <20030419055352.GF3343@sunet.se> References: <20030418025714.GA18626@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030418025714.GA18626@puck.nether.net> User-Agent: Mutt/1.4i Sender: "Bengt Gorden,,," cc: sysmon-help@puck.nether.net X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Apr 2003 05:53:12 -0000 Hi! I would really like to have traps implemented in sysmon. Also, a delta between two variables with a hysteresis to trigger an alarm would be nice. - Bengan ----------------------------------------------------------- - KTHNOC/SUNET/NORDUnet | http://www.sunet.se/~bengan | 08-7906586 - From jared Sat Apr 19 09:49:17 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3JDnH7o028128; Sat, 19 Apr 2003 09:49:17 -0400 Date: Sat, 19 Apr 2003 09:49:17 -0400 From: Jared Mauch To: Bengt =?iso-8859-1?B?R/ZyZOlu?= Subject: Re: [sysmon-help] snmp survey Message-ID: <20030419134916.GD30131@puck.nether.net> References: <20030418025714.GA18626@puck.nether.net> <20030419055352.GF3343@sunet.se> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20030419055352.GF3343@sunet.se> User-Agent: Mutt/1.5.4i cc: sysmon-help@puck.nether.net cc: Jared Mauch X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Apr 2003 13:49:22 -0000 On Sat, Apr 19, 2003 at 07:53:53AM +0200, Bengt Gördén wrote: > > Hi! > > I would really like to have traps implemented in sysmon. Also, a delta What would you like the traps to do? How should an alert generated from a trap be 'cleared'? What if receipt of a trap from a host queues all the checks for that host for an active polling. The trap would just indicate that something happened, then sysmon would go out and check the device. > between two variables with a hysteresis to trigger an alarm would be > nice. > Would a 'rate' type clause work? I'm thinking about how I want to handle interfaces and want the ability to generate an alert if they get close to full as well as if the pps rate is higher than some multiple of the average over the past 24 hours, or if it's a massive spike over previous pps rates on an interface. eg: if an interface has never peaked over 130Mb/s in the past 24 hours, and it begins doing 440m suddenly it should generate some sort of traffic level alert until the stats averaging over the past 24 hours (or longer, this will likely be configurable) makes the rate fall into the formula. - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From qbeng@bdg.centrin.net.id Wed Apr 16 22:21:46 2003 Received: from someone claiming to be andromeda.centrin.net.id puck.NOSPAM (andromeda.centrin.net.id [202.146.255.9]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3H2LgcL032566 for ; Wed, 16 Apr 2003 22:21:44 -0400 Received: from bdg.centrin.net.id (localhost.localdomain [127.0.0.1]) h3H2Lq3B029384 for ; Thu, 17 Apr 2003 09:21:52 +0700 Received: from kristiawan ([202.146.247.114]) by bdg.centrin.net.id (8.12.5/8.12.5) with SMTP id h3H2Lks1020501 for ; Thu, 17 Apr 2003 09:21:51 +0700 Message-ID: <004801c30488$8826e6a0$0c0310ac@yogya> From: "carpenter" To: Date: Thu, 17 Apr 2003 09:24:41 +0700 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0041_01C304C3.2D098BC0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Mailman-Approved-At: Sat, 19 Apr 2003 09:53:17 -0400 Subject: [sysmon-help] qmail - sysmon X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Apr 2003 02:21:47 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_0041_01C304C3.2D098BC0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have success install sysmon 0.91.18 I can monitor the status of all my network services but when there is an error (unpingable) system can't send e-mail = notification. there is an error message :=20 /libsmb/nmblib.c:send_udp(756) packet send failed to 202,146.247.127(138) ERRNO=3DInvalid argument=20 by the way i used qmail not sendmail Can i used qmail not sendmail, how to configure that thanks ------=_NextPart_000_0041_01C304C3.2D098BC0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I have success install sysmon = 0.91.18
I can monitor the status of all my = network=20 services
but when there is an error (unpingable) = system=20 can't send e-mail notification.
there is an error message : =
 
/libsmb/nmblib.c:send_udp(756)<= /DIV>
packet send failed to=20 202,146.247.127(138) ERRNO=3DInvalid = argument 
 
by the way i used = qmail not=20 sendmail
Can i used qmail not sendmail, how to = configure=20 that
 
thanks
 
 
 
 
------=_NextPart_000_0041_01C304C3.2D098BC0-- From jared Tue Apr 22 00:22:27 2003 Received: (from jared@localhost) by puck.nether.net (8.12.9/8.12.6) id h3M4MR8Q018237 for sysmon-help@puck.nether.net; Tue, 22 Apr 2003 00:22:27 -0400 Date: Tue, 22 Apr 2003 00:22:27 -0400 From: Jared Mauch To: sysmon-help@puck.nether.net Message-ID: <20030422042227.GA16265@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.4i Subject: [sysmon-help] cpu utilization X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Apr 2003 04:22:27 -0000 well, i finally hunted down a major cpu utilization issue in sysmon today. at/around line 1294 in syswatch.c, add statuschanged=FALSE; as follows and rebuild. You will notice a significant decrease in cpu utilization: -- snip -- /* dump current network status to a file */ if ((html != -1) && (statuschanged || showupalso)) { dump_to_file(statusfilename, html); statuschanged = FALSE; } -- snip -- This will also cause an increased disk spin/writes that are probally not worthwhile for you. Enjoy. - jared -- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine. From bengan@ibanez.bengan.sunet.se Tue Apr 22 03:48:56 2003 Received: from someone claiming to be ibanez.bengan.sunet.se puck.NOSPAM (iii.pilsnet.sunet.se [192.36.125.162]) by puck.nether.net (8.12.9/8.12.6) with ESMTP id h3M7mtM3021728; Tue, 22 Apr 2003 03:48:56 -0400 Received: from bengan by ibanez.bengan.sunet.se with local (Exim 3.36 #1) id 197sXV-0002Sa-00; Tue, 22 Apr 2003 09:50:05 +0200 Date: Tue, 22 Apr 2003 09:50:05 +0200 From: Bengt =?iso-8859-1?B?R/ZyZOlu?= To: Jared Mauch Subject: Re: [sysmon-help] snmp survey Message-ID: <20030422075004.GI3343@sunet.se> References: <20030418025714.GA18626@puck.nether.net> <20030419055352.GF3343@sunet.se> <20030419134916.GD30131@puck.nether.net> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <20030419134916.GD30131@puck.nether.net> User-Agent: Mutt/1.4i Sender: "Bengt Gorden,,," cc: sysmon-help@puck.nether.net cc: Jared Mauch X-BeenThere: sysmon-help@puck.nether.net X-Mailman-Version: 2.1.1 Precedence: list List-Id: For help with the Sysmon Package List-Unsubscribe: , List-Archive: List-Post: