delayred on conn

list Bakkies Gatvol
Tue, 22 Mar 2016 11:20:20 -0400
Message-Id: <user-cb2ad3e36360@xymon.invalid>

Thanks to all

I tried again today and it seemed to work. The yellow was unexpected, but nice. Maybe trying something new late on Friday is just not worth it ....

at Tue Mar 22 10:55:23 EDT 2016

10.83.19.249 granite_ip_printer #DESCR:socket-9100 delayred=conn:9


Tue Mar 22 11:10:27 2016     red     0:04:17
Tue Mar 22 11:00:57 2016     yellow     0:09:30

From: user-76fdb6883669@xymon.invalid
To: user-76fdb6883669@xymon.invalid; user-ce4d79d99bab@xymon.invalid; xymon at xymon.com
Date: Fri, 18 Mar 2016 22:06:20 +0000
Subject: Re: [Xymon] delayred on conn

Ok, this time it looks like it's working:

$ iptables -I INPUT 1 -p icmp -s 10.5.130.117 -j REJECT --reject-with icmp-host-prohibited
$ date
Fri Mar 18 16:52:57 CDT 2016

Then on the server:

Fri Mar 18 16:55:44 2016 yellow 0:01:11
Fri Mar 18 16:47:12 2016 green 0:08:32

So I’m guessing it should change red at 17:01:57 or so.

Yes, it did:

Fri Mar 18 17:04:45 2016 red 0:00:20
Fri Mar 18 16:55:44 2016 yellow 0:09:01
Fri Mar 18 16:47:12 2016 green 0:08:32

However, it also meant that it paged out immediately, not waiting 5 minutes after it turned red from yellow.

-----Original Message-----
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T
Sent: Friday, March 18, 2016 4:52 PM
To: 'John Thurston'; xymon at xymon.com
Subject: Re: [Xymon] delayred on conn

It didn't work for me. Pretty weird though.

I started with this:

10.5.136.247    wilee                   # ntp delayred=conn:9

Then, put in a rule in iptables to block pings. It went red immediately.

And paged after 5 minutes, as my alerts tells it.

Then the weird thing happened. It changed to yellow.

Hold on, I’m going to test again. I bet hosts.cfg hadn't been re-read yet. So it's probably an invalid test.

BTW, 4.3.21 on the server and client.

I'll reply again in 15 minutes or so.

-----Original Message-----
From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of John Thurston
Sent: Friday, March 18, 2016 4:34 PM
To: xymon at xymon.com
Subject: Re: [Xymon] delayred on conn

On 3/18/2016 1:27 PM, John Thurston wrote:
- snip -

Can anyone confirm that "delayred" is working for them with conn?

Ohhhh. I think I see something interesting.

In xymond.c, I see the following comment:

        /* Ignore any delays when we start with a purple status */

My test case was to change a noconn tag on a host to conn. Which meant I
went from clear/no-state to red. I haven't read the rest of that code,
but I suspect my test would be valid only if starting from a green state.

--
    Do things because you should, not just because you can.

John Thurston    XXX-XXX-XXXX
user-ce4d79d99bab@xymon.invalid
Enterprise Technology Services
Department of Administration
State of Alaska

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.