Xymon Mailing List Archive search

Solaris proc listing reporting multiple process that don't appear to exist.

7 messages in this thread

list Quentin White · Mon, 31 Jul 2006 15:28:45 +0100 ·
I have 11 Sun V210 machines that have same version of hobbit client
installed (hobbit-4.2-beta-20060605) and 10 of them report correctly on
my procs tests. However, one does not - it reports the multple copies of
some processes when there is one of each and no copies of others when
the processes are clearly visable in the process listing.  I believe the
client is reporting correctly but the server is having some trouble
working it out. 

Config in hobbit-clients.cfg on the server is below and works for
lo-dev01, lo-dev02... lo-dev10.

HOST=%lo-dev.*
        PROC inetd 1 1 yellow
        PROC cron 1 -1 yellow
        PROC syslogd 1 1 yellow
        PROC dtlogin 1 1 yellow
        PROC ypbind 1 1 yellow
        PROC rpcbind 1 1 yellow

How can I debug this???

Procs page:

 inetd (found 0, req. between 1 and 1)
 cron (found 7, req. 1 or more)
 syslogd (found 0, req. between 1 and 1)
 dtlogin (found 12, req. between 1 and 1)
 ypbind (found 0, req. between 1 and 1)
 rpcbind (found 12, req. between 1 and 1)

  PID  PPID     USER    STIME S PRI %CPU        TIME %MEM  RSS  VSZ
COMMAND
    0     0     root   Jul_01 T  96  0.0        0:01  0.0    0    0
sched
    1     0     root   Jul_01 S  59  0.0        0:25  0.0  184 1272
/etc/init -
    2     0     root   Jul_01 S  98  0.0        0:13  0.0    0    0
pageout
    3     0     root   Jul_01 S  60  0.2    02:28:33  0.0    0    0
fsflush
  425     1     root   Jul_01 S  59  0.0        0:00  0.1  920 1816
/usr/lib/saf/sac -t 300
  227     1     root   Jul_01 S  59  0.0        0:02  0.1  592 1080
/usr/lib/utmpd
  127     1     root   Jul_01 S  59  0.0        0:07  0.1 1216 2344
/usr/sbin/rpcbind
   57     1     root   Jul_01 S  59  0.0        0:00  0.1  832 2368
/usr/lib/sysevent/syseventd
   65     1     root   Jul_01 S  59  0.0        0:25  0.1 2008 3600
/usr/lib/picl/picld
  140     1     root   Jul_01 S  59  0.0        0:00  0.1  944 2168
/usr/lib/netsvc/yp/ypbind
  130     1     root   Jul_01 S  59  0.0        0:00  0.1  832 2344
/usr/sbin/keyserv
  156     1     root   Jul_01 S  59  0.0        0:00  0.1  936 2104
/usr/sbin/inetd -s
  428   425     root   Jul_01 S  59  0.0        0:00  0.1 1120 1992
/usr/lib/saf/ttymon
23878 23876      as3   Jul_28 S  59  0.0        0:00  0.1 2008 6776
/usr/local/sbin/sshd -R
  259     1     root   Jul_01 S  59  0.0        0:00  0.1 1064 3128
/usr/sbin/mdmonitord
  240   238     root   Jul_01 S  59  0.0        0:00  0.1  520 1760
/usr/sadm/lib/smc/bin/smcboot
  186     1     root   Jul_01 S  59  0.0        0:00  0.1 1472 3856
/usr/lib/autofs/automountd
  239   238     root   Jul_01 S  59  0.0        0:00  0.1  520 1760
/usr/sadm/lib/smc/bin/smcboot
  197     1     root   Jul_01 S  59  0.0        0:01  0.1 1360 2896
/usr/sbin/syslogd -t
  202     1     root   Jul_01 S  59  0.0        1:05  0.1 1472 2464
/usr/sbin/cron
  238     1     root   Jul_01 S  59  0.0        0:00  0.1  920 1760
/usr/sadm/lib/smc/bin/smcboot
  172     1     root   Jul_01 S  59  0.0        0:00  0.1 1024 2208
/usr/lib/nfs/lockd
  173     1   daemon   Jul_01 S  59  0.0        0:00  0.1 1320 3208
/usr/lib/nfs/statd
  247     1     root   Jul_01 S  59  0.0        0:00  0.1 1304 4552
/usr/lib/sendmail -bd -q15m
  262     1     root   Jul_01 S  59  0.0        2:39  0.1 1344 3952
/usr/local/sbin/sshd
  248     1    smmsp   Jul_01 S  59  0.0        0:00  0.1  976 4528
/usr/lib/sendmail -Ac -q15m
24450   262     root 14:20:59 S  59  0.0        0:00  0.2 3128 6752
/usr/local/sbin/sshd -R
..... Truncated.

This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
list Henrik Størner · Mon, 31 Jul 2006 16:59:13 +0200 ·
quoted from Quentin White
On Mon, Jul 31, 2006 at 03:28:45PM +0100, Quentin White wrote:
I have 11 Sun V210 machines that have same version of hobbit client
installed (hobbit-4.2-beta-20060605) and 10 of them report correctly on
my procs tests. However, one does not - it reports the multple copies of
some processes when there is one of each and no copies of others when
the processes are clearly visable in the process listing.  I believe the
client is reporting correctly but the server is having some trouble
working it out. 
First thing to do is to look at the "ps" listing this client sends to
Hobbit. On the "procs" status page, near the bottom is a link to the
"Client data". In there is a section beginning with "[ps]" - this is the
data used for the procs status. You can also access it directly via a
URL like this:
http://my.hobbit.server/hobbit-cgi/bb-hostsvc.sh?CLIENT=lo-dev01&SECTION=ps

You can also grab it from the Hobbit server with
   bb 127.0.0.1 "clientlog lo-dev01 section=ps"
If you could run this command and dump the output to a file, then mail
it to me that would be helpful.


Regards,
Henrik
list Nicolas Lienard · Mon, 31 Jul 2006 18:00:13 +0200 (CEST) ·
Hi,

I m  trying to monitore a specific URL with the words "http://"; in it:

http://www.xxx.com/front/module/render/http://yyyyy.com/HOME

It seems hobbit tries to monitore http://yyyyy.com/HOME only.

Is it a bug ?

Thanks in advance
Regards;

Nicolas Lienard
list Henrik Størner · Mon, 31 Jul 2006 18:03:08 +0200 ·
quoted from Nicolas Lienard
On Mon, Jul 31, 2006 at 06:00:13PM +0200, Nicolas wrote:
I m  trying to monitore a specific URL with the words "http://"; in it:

http://www.xxx.com/front/module/render/http://yyyyy.com/HOME

It seems hobbit tries to monitore http://yyyyy.com/HOME only.

Is it a bug ?
No, it's a feature. Your URL happens to be just like the one
Hobbit uses for testing URL's through a proxy server.

I haven't tried, but I think it might work if you change the
last part of the URL to use a "%3a" instead of the colon. Like

http://www.xxx.com/front/module/render/http%3a//yyyyy.com/HOME


Regards,
Henrik
list Nicolas Lienard · Mon, 31 Jul 2006 18:46:56 +0200 (CEST) ·
Hi
quoted from Henrik Størner
No, it's a feature. Your URL happens to be just like the one
Hobbit uses for testing URL's through a proxy server.

I haven't tried, but I think it might work if you change the
last part of the URL to use a "%3a" instead of the colon. Like

http://www.xxx.com/front/module/render/http%3a//yyyyy.com/HOME

I modified the url :

http://xww.xxx.com/front/module/render/http%3a//yyyyy.com/HOME

I ve still this error:

 Mon Jul 31 18:09:36 2006: Not Found

Date: Mon, 31 Jul

red http://yyyyy.com/HOME - Not Found
Date: Mon, 31 Jul

HTTP/1.1 404 Not Found
Date: Mon, 31 Jul 2006 16:10:05 GMT
Server: Apache/2.0.52 (Red Hat)
Content-Length: 279
Connection: close
Content-Type: text/html; charset=iso-8859-1

Seconds:     0.00


Is there another way to disable the proxy feature for this http check ?

tbanks

regards
Nicolas lienard

Regards,
Henrik

list Nicolas Lienard · Mon, 31 Jul 2006 18:50:19 +0200 (CEST) ·
Sorry i answeared to fast.

Now, the status is "no report" and hobbit server repors this:

Error output:
Malformed URL - no 'scheme:' in 'http%3a//yyyy.com/HOME'
Invalid URL for http test - ignored:
http://www.xxxx.com/front/module/render/http%3a//yyyyy.com/HOME

It doesn t like the "%3a" strings.

Regards,

Nicolas
quoted from Nicolas Lienard

I modified the url :

http://xww.xxx.com/front/module/render/http%3a//yyyyy.com/HOME

I ve still this error:

 Mon Jul 31 18:09:36 2006: Not Found

Date: Mon, 31 Jul

red http://yyyyy.com/HOME - Not Found
Date: Mon, 31 Jul

HTTP/1.1 404 Not Found
Date: Mon, 31 Jul 2006 16:10:05 GMT
Server: Apache/2.0.52 (Red Hat)
Content-Length: 279
Connection: close
Content-Type: text/html; charset=iso-8859-1

Seconds:     0.00


Is there another way to disable the proxy feature for this http check ?

tbanks

regards
Nicolas lienard

Regards,
Henrik

list Henrik Størner · Mon, 31 Jul 2006 21:54:35 +0200 ·
quoted from Nicolas Lienard
On Mon, Jul 31, 2006 at 06:50:19PM +0200, Nicolas wrote:
It doesn t like the "%3a" strings.
Apparently not. OK, so this will require a code change. For a 
quick fix, you can edit the lib/url.c file in your Hobbit source.
Around line 560-570 or so you'll see these lines:

        if (poststart) getescapestring(poststart, &bburl->postdata, NULL);
        if (expstart)  getescapestring(expstart, &bburl->expdata, NULL);

        p = strstr(urlstart, "/http");	 <--- find this line
        if (p) {
                proxystart = urlstart;
                urlstart = (p+1);
                *p = '\0';
        }

        parse_url(urlstart, bburl->desturl);

Replace the line I've marked with

        p = NULL;

That will simply disable the proxy url function, and your original URL
should work as intended.


Regards,
Henrik