[sysmon-help] possible Bug numkilled?
Jared Mauch
jared at sysmon.org
Fri Apr 25 16:45:51 EDT 2003
Hmm.
This is quite strange.
The ping test send a packet every about 2 seconds or so
and after 7 pings (so, ~14 seconds) it declares a host 'down',
adding in some other cpu burden time, this leaves a lot of time
unaccounted for in why the test has been running for ~97 seconds.
Same for the mail.home.nl check. Something caused the program
to 'pause' (for whatever reason) creating this timegap.
The system also logs when a check starts taking more than 45 seconds
or so, and logs a message each second saying 'hey, something isn't right here'
the lack of these messages here indiciates to me that there was some other
transient problem, are you using sendmail? Perhaps sendmail is taking
too long of a time to 'accept' the message for delivery and adding
that delay, or there is some dns resolver issues, but it's a little bit
too hard to say right now.
I'll add in a sendmail runtime check, that's my only guess
considering that it just notified you of the 213.51.140.1 host
being down, perhaps something associated with that notification
used a lot of time.
I need to review the code, but perhaps I should fork()
then execuate sendmail or whatever else to not pause monitoring
while you are warned/told about this.
- Jared
On Fri, Apr 25, 2003 at 09:37:30PM +0200, Eddie Lania wrote:
> So more logging output.
>
> It's not only pop3;
>
> Apr 25 2003-18:51:49 : 213.51.128.65 (213.51.128.65) SMTP server at @Home is
> Host Down 00:00:03
> Apr 25 2003-18:51:49 : smtp5.wanadoo.nl (194.134.35.176) POP3 server at
> Wanadoo is Host Down 00:00:03
> Apr 25 2003-18:52:01 : 194.134.35.177 (194.134.35.177) SMTP server at
> Wanadoo is Host Down 00:00:03
> Apr 25 2003-18:52:11 : 213.51.128.65 (213.51.128.65) POP3 server at @Home is
> Host Down 00:00:03
> Apr 25 2003-18:52:28 : r1-fe3-0-sec.hnglo1.ov.home.nl (213.51.140.1) gateway
> Roden at @Home is Unpingable 00:00:04
> Apr 25 2003-18:53:48 : Killing stale check
> cc184157-a.roden1.dr.home.nl:ping:0 lasting 97.033485secs
> Apr 25 2003-18:53:48 : Killing stale check 213.51.210.1:ping:0 lasting
> 97.033501secs
> Apr 25 2003-18:53:48 : Killing stale check
> cc184157-a.roden1.dr.home.nl:ping:0 lasting 97.037064secs
> Apr 25 2003-18:53:48 : Killing stale check 213.51.210.1:ping:0 lasting
> 97.037079secs
> Apr 25 2003-18:53:48 : cc184157-a.roden1.dr.home.nl (213.51.240.149)
> cc184157-a is Unpingable 00:00:05
> Apr 25 2003-18:55:03 : r6-atm3-3-0-154-sec.rdc1.ov.home.nl (213.51.210.1)
> gateway Leek at @Home is Unpingable 00:00:06
> Apr 25 2003-18:55:03 : Killing stale check mail.home.nl:tcp:25 lasting
> 75.219368secs
> Apr 25 2003-18:55:03 : possible Bug numkilled = 1 -- normally should never
> exceed zero
>
> Eddie.
>
> ----- Original Message -----
> From: "Chad Kouse" <chad.kouse at toohome.com>
> To: "Eddie Lania" <e.lania at elton.nl>; <sysmon-help at puck.nether.net>
> Sent: Friday, April 25, 2003 4:26 PM
> Subject: RE: [sysmon-help] possible Bug numkilled?
>
>
> Jared,
>
> Better open that bug back up again :)
>
> http://puck.nether.net/bugzilla-2.17.3/show_bug.cgi?id=21
>
> --chad
>
> -----Original Message-----
> From: Eddie Lania [mailto:e.lania at elton.nl]
> Sent: Friday, April 25, 2003 2:45 AM
> To: sysmon-help at puck.nether.net
> Subject: [sysmon-help] possible Bug numkilled?
>
>
> Hello all,
>
> I have two systems running sysmon, one at home and one at work.
> On both systems sysmond dies from time to time with the following error:
>
> Apr 25 2003-01:35:34 : Killing stale check mail.home.nl:pop3:0 lasting
> 61.994049secs
> Apr 25 2003-01:35:34 : possible Bug numkilled = 1 -- normally should never
> exceed zero
>
> It seems this only happens when pop3 services are unreacheable.
> Both systems are running sysmon v0.91.18.
>
> Any help would be welcome.
>
> Thanks.
>
> Eddie Lania.
>
>
>
> My sysmon.conf:
>
> root = "my.default.gateway-obj";
> ;
> ;;
> #
> # Comments can look like this
> ; or this
>
> # create a file for web page users
> #config statusfile html "/usr/local/htdocs/index.html";
> config statusfile html "/var/www/html/sysmon/index.html";
>
> # Log devices that are up/down
> config logging file "/var/log/sysmond.log";
>
> # Show systems that are up also
> config showupalso;
>
> # Configure an authentication key -- Default is none
> #config authkey "Debug";
>
> # Set the sender to be sysmon at localhost
> config sender "sysmon";
>
> # Expire in-process dns cache this often
> config dnsexpire 7200;
>
> # Do not queue more than this many objects to be checked at once
> config maxqueued 50;
>
> # Not implemented yet
> #config snmp-trap; # catch snmp-traps
>
> ############################################################################
> ###
>
>
> #
> # Eerst de lokale gateway's bepalen.
> #
>
> object my.default.gateway-obj {
> ip "192.168.168.1";
> type ping;
> desc "Gateway elton-intra.net";
> dep "router";
> contact "root at localhost";
> };
>
> object router {
> ip "ns1.elton-intra.net";
> type udp;
> port 53;
> desc "nameserver";
> contact "root at localhost";
> };
>
>
> #
> # En natuurlijk de gateway voor internet.
> #
>
> object Gateway.athome.roden {
> ip "213.51.140.1";
> type ping;
> desc "Gateway @Home RODEN";
> dep "router";
> contact "root at localhost";
> };
>
>
> #
> # Hier de "local peers" die altijd on-line moeten zijn.
> #
>
> object Ntserver1.elton-intra.net {
> ip "ntserver1.elton-intra.net";
> type tcp;
> port 139;
> desc "Ntserver1";
> dep "router";
> contact "root at localhost";
> };
>
> object Elton-edi.elton-intra.net {
> ip "elton-edi.elton-intra.net";
> type tcp;
> port 139;
> desc "EDI computer";
> dep "router";
> contact "root at localhost";
> };
>
> object Scosysv.elton-intra.net {
> ip "scosysv.elton-intra.net";
> type tcp;
> port 139;
> dep "router";
> desc "SCO UNIX server";
> contact "root at localhost";
> };
>
>
> #
> # En de lokale "services" zoals POP3, SMTP en TELNET
> #
>
> object Pop3.elton-intra.net {
> ip "mail.elton-intra.net";
> type pop3;
> username "eddie";
> password "xxxxxx";
> desc "POP3 service at Ntserver1";
> dep "router";
> contact "root at localhost";
> };
>
> object Smtp.elton-intra.net {
> ip "mail.elton-intra.net";
> type smtp;
> desc "SMTP service at Ntserver1";
> dep "router";
> contact "root at localhost";
> };
>
> object Pop3.elton-isps.elton-intra.net {
> ip "elton-isps.elton-intra.net";
> type pop3;
> username "eddie";
> password "xxxxxx";
> desc "POP3 service at Elton-isps";
> dep "router";
> contact "root at localhost";
> };
>
> object Smtp.elton-isps.elton-intra.net {
> ip "elton-isps.elton-intra.net";
> type smtp;
> desc "SMTP service at Elton-isps";
> dep "router";
> contact "root at localhost";
> };
>
> object Telnet.elton-intra.net {
> ip "scosysv.elton-intra.net";
> type tcp;
> port 23;
> dep "router";
> desc "Telnet service at Scosysv";
> contact "root at localhost";
> };
>
>
> #
> # De externe POP3 en SMTP servers.
> #
>
> object Pop3.euronet.nl {
> ip "pop.euronet.nl";
> type pop3;
> username "elton";
> password "xxxxxx";
> desc "POP3 server at Euronet";
> dep "Gateway.athome.roden";
> contact "root at localhost";
> };
>
> object Pop3.home.nl {
> ip "mail.home.nl";
> type pop3;
> username "ellenelton";
> password "xxxxxx";
> desc "POP3 server at @Home";
> dep "Gateway.athome.roden";
> contact "root at localhost";
> };
>
> object Smtp.euronet.nl {
> ip "smtp.euronet.nl";
> type smtp;
> desc "SMTP server at Euronet";
> dep "Gateway.athome.roden";
> contact "root at localhost";
> };
>
> object Smtp.home.nl {
> ip "mail.home.nl";
> type smtp;
> desc "SMTP server at @Home";
> dep "Gateway.athome.roden";
> contact "root at localhost";
> };
>
>
> #
> # Hier de server van mezelf thuis.
> #
>
> object Gateway.athome.leek {
> ip "213.51.210.1";
> type ping;
> desc "Gateway @Home LEEK";
> dep "Gateway.athome.roden";
> contact "e.lania at home.nl";
> };
>
> object cc47962-a.leek1.gr.home.nl {
> ip "cc47962-a.leek1.gr.home.nl";
> type ping;
> desc "cc47962-a";
> dep "Gateway.athome.roden";
> contact "e.lania at home.nl";
> };
>
>
> #
> # Nog enkele voorbeelden.
> #
>
> #object telnet-nether.net {
> # ip "nether.net";
> # type tcp;
> # port 23;
> # dep "nether.net";
> # desc "telnetd-nether.net";
> # contact "admin at example.com";
> #};
> #
> #object smtp-nether.net {
> # ip "nether.net";
> # type smtp;
> # dep "nether.net";
> # desc "smtp-nether.net";
> # contact "admin at example.com";
> #};
> #
>
> _______________________________________________
> Sysmon-help mailing list
> Sysmon-help at puck.nether.net
> http://puck.nether.net/mailman/listinfo/sysmon-help
>
> _______________________________________________
> Sysmon-help mailing list
> Sysmon-help at puck.nether.net
> http://puck.nether.net/mailman/listinfo/sysmon-help
--
Jared Mauch | pgp key available via finger from jared at puck.nether.net
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
More information about the Sysmon-help
mailing list