<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>tom's blog &#187; Monitoring</title>
	<atom:link href="http://tom.knaupp.com/category/monitoring/feed/" rel="self" type="application/rss+xml" />
	<link>http://tom.knaupp.com</link>
	<description>free software, security and a bunch of my strange thoughts</description>
	<lastBuildDate>Tue, 23 Mar 2010 22:38:01 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>exim graphs</title>
		<link>http://tom.knaupp.com/2009/02/25/exim-graphs/</link>
		<comments>http://tom.knaupp.com/2009/02/25/exim-graphs/#comments</comments>
		<pubDate>Wed, 25 Feb 2009 21:21:27 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Mailserver]]></category>
		<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[exim]]></category>
		<category><![CDATA[graph]]></category>
		<category><![CDATA[log]]></category>
		<category><![CDATA[statistic]]></category>
		<category><![CDATA[syslog]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/?p=186</guid>
		<description><![CDATA[Because I did not found a tool to create graphs (the way I want it) from exim logs, I wrote a little bash script that suits my needs. &#160; Example graph: &#160; &#160; Download: exim_rrd-0.9.5.1 (updated 2009-03-07 [bugfix]) &#160; I&#8217;m not a programmer, so the script can be improved &#8211; no question : ) If [...]]]></description>
			<content:encoded><![CDATA[<p>Because I did not found a tool to create graphs (the way I want it)<br />
from exim logs, I wrote a little bash script that suits my needs.<br />
&nbsp;<br />
Example graph:<br />
&nbsp;<br />
<img class="alignnone size-full wp-image-185" title="mailfilter graph" src="http://tom.knaupp.com/wp-content/uploads/mailfilter-1week.png" alt="mailfilter graph" width="617" height="307" /><br />
&nbsp;<br />
Download: <a href="http://tom.knaupp.com/wp-content/uploads/exim_rrd-0.9.5">exim_rrd-0.9.5.1</a> (updated 2009-03-07 [bugfix])<br />
&nbsp;<br />
I&#8217;m not a programmer, so the script can be improved &#8211; no question : )<br />
If you have any hints, please tell me.<br />
&nbsp;<br />
&nbsp;<br />
Usage: run as cronjob, i.e.<br />
<code># mail statistic<br />
*/5 * * * * /usr/local/bin/exim_rrd > /dev/null 2> /dev/null</code><br />
&nbsp;<br />
&nbsp;<br />
dependencies:<br />
rrdtool [ <a href="http://oss.oetiker.ch/rrdtool/">http://oss.oetiker.ch/rrdtool/</a> ]  ^ thanks to Tobias Oetiker<br />
(e)grep<br />
- &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; - &#8211; -<br />
tested with:<br />
rrdtool 1.2.23, rrdtool 1.2.27<br />
openSUSE 10.3 (i586), exim 4.69 main log<br />
openSUSE 11.0 (i586), exim 4.69 main log</p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2009/02/25/exim-graphs/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Monitoring Software Raid Devices with Nagios 2.x</title>
		<link>http://tom.knaupp.com/2007/12/06/monitoring-software-raid-devices-with-nagios-2x/</link>
		<comments>http://tom.knaupp.com/2007/12/06/monitoring-software-raid-devices-with-nagios-2x/#comments</comments>
		<pubDate>Thu, 06 Dec 2007 14:19:51 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[nagios]]></category>
		<category><![CDATA[software raid]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/2007/12/06/monitoring-software-raid-devices-with-nagios-2x/</guid>
		<description><![CDATA[Just found a plugin to monitor the status of software raid devices. Other raid devices like megaide, megaraid, etc. are supported, too. Thanks a lot to Steve Shipway for providing this great tool. Supported devices: Version 1.1: IPS; Solaris, AIX, Linux software RAID; megaide Version 2.0: Added megaraid, mpt (serveraid), aacli (serveraid) Download here or [...]]]></description>
			<content:encoded><![CDATA[<p>Just found a plugin to monitor the status of software raid devices. Other raid devices like megaide, megaraid, etc. are supported, too. Thanks a lot to <a href="http://www.steveshipway.org/software/" title="Steve Shipway, Software" target="_blank">Steve Shipway</a>  for providing this great tool.<br />
<br />
<a href="http://tom.knaupp.com/wp-content/uploads/nagios_check_raid.png" title="Screenshot Nagios Raid Monitoring" rel="lightbox"><img src="http://tom.knaupp.com/wp-content/uploads/nagios_check_raid.thumbnail.png" alt="Screenshot Nagios Raid Monitoring" /></a><br />
<br />
Supported devices:<br />
Version 1.1: IPS; Solaris, AIX, Linux software RAID; megaide<br />
Version 2.0: Added megaraid, mpt (serveraid), aacli (serveraid)<br />
<br />
Download <a href="http://tom.knaupp.com/wp-content/uploads/check_raid-20tar.gz" title="check_raid-2.0">here</a> or from the guys at <a href="http://www.nagiosexchange.org/cgi-bin/page.cgi?g=Detailed%2F1692.html;d=1" title="NagiosExchange / check_raid" target="_blank">NagiosExchange</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2007/12/06/monitoring-software-raid-devices-with-nagios-2x/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Statistics of tom&#8217;s blog &#8230;</title>
		<link>http://tom.knaupp.com/2007/11/13/awstats-statistics/</link>
		<comments>http://tom.knaupp.com/2007/11/13/awstats-statistics/#comments</comments>
		<pubDate>Tue, 13 Nov 2007 21:01:54 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Monitoring]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/2007/11/14/awstats-statistics/</guid>
		<description><![CDATA[I&#8217;m a little surprised about the OS of the visitors of my site: Windows: 73,7 % Linux: 17,3 % Mac: 5,4 % Others: 3,6 % At least the browser ratio is quite open source related Firefox: 62 % M$ IE: 30,1 % Safari: 2 % Opera: 1,4 % Others: 4,5 % powered by AWStats]]></description>
			<content:encoded><![CDATA[<p>I&#8217;m a little surprised about the <a href="http://en.wikipedia.org/wiki/Operating_system" title="Operating System" target="_blank">OS</a> of the visitors of my site:</p>
<ul>
<li><img src="http://tom.knaupp.com/wp-content/uploads/win_ico.png" alt="windows icon" /> Windows: 73,7 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/linux_ico.png" alt="linux icon" /> Linux: 17,3 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/mac_ico.png" alt="mac icon" /> Mac: 5,4 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/unknown_ico.png" alt="unknown icon" />Others:        3,6 %</li>
</ul>
<p>At least the browser ratio is quite open source related <img src='http://tom.knaupp.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<ul>
<li><img src="http://tom.knaupp.com/wp-content/uploads/firefox_ico.png" alt="firefox icon" /> Firefox: 62 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/msie_ico.png" alt="ms ie icon" /> M$ IE: 30,1 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/safari_ico.png" alt="safari icon" /> Safari:  2 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/opera_ico.png" alt="opera icon" /> Opera:  1,4 %</li>
<li><img src="http://tom.knaupp.com/wp-content/uploads/unknown_ico.png" alt="unknown icon" />Others: 4,5 %</li>
</ul>
<p><font size="1">powered by <a href="http://awstats.sourceforge.net/" title="AWStats - Free log file analyzer for advanced statistics" target="_blank">AWStats</a></font></p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2007/11/13/awstats-statistics/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Using multiple logiles in one awstats config</title>
		<link>http://tom.knaupp.com/2007/05/21/using-multiple-logiles-in-one-awstats-config/</link>
		<comments>http://tom.knaupp.com/2007/05/21/using-multiple-logiles-in-one-awstats-config/#comments</comments>
		<pubDate>Mon, 21 May 2007 14:11:23 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Distributions]]></category>
		<category><![CDATA[Monitoring]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/2007/05/21/using-multiple-logiles-in-one-awstats-config/</guid>
		<description><![CDATA[With awstats you can create great statistics and graphs about the access of your website. If you want to use more than one logfile in a configuration file, you can use logresolvemerge.pl which is included in the awstats package. i.e.: LogFile="/path2/awstats/tools/logresolvemerge.pl /var/log/apache/access_log /var/log/apache/another_log &#124;" Test your configuration: /path2/awstats.pl -config=sitename -update]]></description>
			<content:encoded><![CDATA[<p>With <a href="http://awstats.sourceforge.net/" title="Free log file analyzer for advanced statistics (GNU GPL)" target="_blank">awstats</a> you can create great statistics and graphs about the access of your website. If you want to use more than one logfile in a configuration file, you can use <em>logresolvemerge.pl</em> which is included in the awstats package.<br />
<br />
i.e.:<br />
<code>LogFile="/path2/awstats/tools/logresolvemerge.pl /var/log/apache/access_log /var/log/apache/another_log |"</code><br />
<br />
Test your configuration:<br />
<code>/path2/awstats.pl -config=sitename -update</code></p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2007/05/21/using-multiple-logiles-in-one-awstats-config/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Nagios 2.x Plugin check_mrtgtraf buggy?</title>
		<link>http://tom.knaupp.com/2007/02/23/nagios-2x-plugin-check_mrtgtraf-buggy/</link>
		<comments>http://tom.knaupp.com/2007/02/23/nagios-2x-plugin-check_mrtgtraf-buggy/#comments</comments>
		<pubDate>Fri, 23 Feb 2007 17:44:02 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[check_mrtgtraf]]></category>
		<category><![CDATA[mrtg]]></category>
		<category><![CDATA[nagios]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/?p=23</guid>
		<description><![CDATA[affected: &#8230; nagios plugins 1.4.3 nagios plugins 1.4.5 nagios plugins 1.4.6 (Feb, 05 &#8211; 2007) I was trying to implement the check_mrtgtraf plugin for nagios. A test run in bash using the command ./check_mrtgtraf -F /my/mrtg/log/server.log -w "196608,196608" -c "235929,235929" resulted in the following &#8220;error&#8221;: Traffic UNKNOWN &#8211; Avg. In = 2.3 KB/s, Avg. Out [...]]]></description>
			<content:encoded><![CDATA[<p>affected:<br />
&#8230;<br />
nagios plugins 1.4.3<br />
nagios plugins 1.4.5<br />
nagios plugins 1.4.6 (Feb, 05 &#8211; 2007)<br />
<br />
I was trying to implement the check_mrtgtraf plugin for nagios.<br />
A test run in bash using the command<br />
<code>./check_mrtgtraf -F /my/mrtg/log/server.log -w "196608,196608" -c "235929,235929"</code><br />
resulted in the following &#8220;error&#8221;:<br />
Traffic UNKNOWN &#8211; Avg. In = 2.3 KB/s, Avg. Out = 2.3 KB/s ..<br />
<br />
In my constellation the result should be &#8220;Traffic OK&#8221;, because the limit of 0,19 MByte/s (1,5 MBit) has not been reached. On <a href="http://archive.netbsd.se/?ml=nagios-users&amp;a=2007-01&amp;t=3034707" title="archive.netbsd.se" target="_blank">http://archive.netbsd.se</a> I found a hint from Israel Brewster that fixed it:</p>
<blockquote><p>From: Israel Brewster<br />
Date: 2007-01-26 17:54:06<br />
&#8212;<br />
I&#8217;m pretty sure this is a bug. I ran into the same thing, but was able to fix it easily enough in the source code. Looking at the original code for this plugin, you can find the section where it sets the output state, something like:<br />
<br />
if (incoming_rate &gt; incoming_critical_threshold<br />
|| outgoing_rate &gt;<br />
outgoing_critical_threshold) {<br />
result = STATE_CRITICAL;<br />
}<br />
else if (incoming_rate &gt; incoming_warning_threshold<br />
|| outgoing_rate &gt;<br />
outgoing_warning_threshold) {<br />
result = STATE_WARNING;<br />
}<br />
<br />
This may not be exact, as I have modified the code somewhat, but I think it is pretty close, if not. At any rate, what you&#8217;ll notice is that while the result is set to STATE_CRITICAL or STATE_WARNING, depending on the circumstances, it is never set to STATE_OK (as you mentioned in your original message), which means that it remains in its STATE_UNKNOWN default state if the traffic is OK, to fix it, all you need to do is add the two lines:<br />
<br />
else<br />
result = STATE_OK;<br />
<br />
Immediately following the closing bracket on the code block above, and recompile. At least, that fixed it for me. I have plugins version 1.4.3, I don&#8217;t know if this issue has been fixed in a newer version of the plugins or not (current is 1.4.5)</p></blockquote>
<p>
That workaround did it for me, too.<br />
You can download my patched version of the c source right here: <a href="http://tom.knaupp.com/wp-content/uploads/check_mrtgtraf.c" title="check_mrtgtraf.c - fixed version">check_mrtgtraf.c &#8211; fixed version</a></p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2007/02/23/nagios-2x-plugin-check_mrtgtraf-buggy/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>Do you like statistics?</title>
		<link>http://tom.knaupp.com/2007/02/13/do-you-like-statistics/</link>
		<comments>http://tom.knaupp.com/2007/02/13/do-you-like-statistics/#comments</comments>
		<pubDate>Tue, 13 Feb 2007 08:38:35 +0000</pubDate>
		<dc:creator>tom</dc:creator>
				<category><![CDATA[Monitoring]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://tom.knaupp.com/?p=15</guid>
		<description><![CDATA[An easy way to get some traffic statistics of your router/ firewall/ switches and all the other stuff that supports snmp is the utility mrtg. It helps you to find out quickly if more traffic than usual is passing your line. So you can interact fast if something suspicious is going on&#8230; Whether your hardware [...]]]></description>
			<content:encoded><![CDATA[<p>An easy way to get some traffic statistics of your router/ firewall/ switches and all the other stuff that supports <a href="http://en.wikipedia.org/wiki/Snmp" target="_blank" title="Simple Network Management Protocol">snmp</a> is the utility <a href="http://oss.oetiker.ch/mrtg/" target="_blank" title="The Multi Router Traffic Grapher">mrtg</a>.<br />
<br />
<a href="http://tom.knaupp.com/wp-content/uploads/mrtg.png" title="mrtg graph" rel="lightbox"><img src="http://tom.knaupp.com/wp-content/uploads/mrtg.thumbnail.png" alt="mrtg graph" /></a><br />
<br />
It helps you to find out quickly if more traffic than usual is passing your line. So you can interact fast if something suspicious is going on&#8230;<br />
<br />
Whether your hardware supports snmp can be found out using the command:<br />
<code>snmpwalk -v 2c -c public 10.0.0.1 | less</code><br />
<br />
-v = version (2c)<br />
-c = community-password  (public)<br />
-ip = ip address of your hardware (10.0.0.1)<br />
<br />
Don&#8217;t care too much about the output &#8211; it&#8217;s enough for the beginning if there is some at all&#8230;<br />
<br />
1)<br />
In the first step we&#8217;re generating a basic config (can be done by hand, but that&#8217;s rough work):<br />
<code>cfgmaker -global 'WorkDir: /srv/www/htdocs/mrtg' \<br />
--output=/etc/mrtg.cfg public@10.0.0.1 public@10.0.0.2</code><br />
<br />
WorkDir: output directory for the graphs<br />
&#8211;output: target configuration file<br />
public@10.0.0.1: first router<br />
public@10.0.0.2: second router / switch / whatever<br />
<br />
2)<br />
With the following command you can create some basic web pages:<br />
<code>indexmaker -output=/srv/www/htdocs/mrtg/index.html \<br />
-title="My Title" /etc/mrtg.cfg</code><br />
<br />
-output: target index file<br />
-title: title of the web page<br />
/etc/mrtg.cfg: path to configuration file<br />
<br />
3)<br />
To get your statistics updated automatically, insert a cronjob like this:<br />
<code>*/5 * * * * env LANG=C /usr/bin/mrtg /etc/mrtg.cfg \<br />
--logging=/var/log/mrtg.log</code></p>
]]></content:encoded>
			<wfw:commentRss>http://tom.knaupp.com/2007/02/13/do-you-like-statistics/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
