unknown host question 🔗 link

Olivier Beau a écrit :

Hi all,

when i comment an entry in my bb-hosts file,
the host disappears from the display, which is normal.

i haven't done a "drop hostname" yet,
and , i don't see any "unknown host" in my log files..

this brings me to the question : if someone deletes hosts in the bb-hosts file,
how do i know which hosts to "drop" ?
 

Olivier Beau a écrit :

Hi all,

when i comment an entry in my bb-hosts file,
the host disappears from the display, which is normal.

i haven't done a "drop hostname" yet,
and , i don't see any "unknown host" in my log files..

this brings me to the question : if someone deletes hosts in the bb-hosts
file,
how do i know which hosts to "drop" ?

Hi Olivier

if you run hobbitd with the option "--ghosts=log", you'll see them in the "hobbitd" colum. Here's an example :

Ghost reports:
  10.50.8.10      reported host cyclopes


The man page says that :

--ghosts={allow|drop|log}
              How to handle status messages from unknown  hosts.  The  "allow"
              setting  accepts  all status messages, regardless of whether the
              host is known in the  bb-hosts  file  or  not.  "drop"  silently
              ignores  reports  from unknown hosts. "log" works like drop, but
              logs the event in the  hobbitd  output  file.   The  default  is
              "allow", unless the BBGHOSTS environment variable is set.

-- 

Frédéric Mangeant

Steria EDC Sophia-Antipolis

--

Olivier Beau a écrit :

Hi Frédéric,

i tried that,
but i dont have a bbagent runnning on the host i removed from bb-hosts;
i was only doing network test with bbtest-net on this host

Olivier


Selon Frédéric Mangeant <user-b6ea1d850181@xymon.invalid>:

Olivier Beau a écrit :

Hi Frédéric,

i tried that,
but i dont have a bbagent runnning on the host i removed from bb-hosts;
i was only doing network test with bbtest-net on this host

You can use the "purplelog" option of bbgen :

--purplelog=FILENAME
              Generate a logfile of all purple status messages.

The content of this log is :

Stale (purple) logfiles as of Wed Jul 27 15:23:32 2005

ambre conn (unknown host)
ambre ftp (unknown host)


-- 

Frédéric Mangeant

Steria EDC Sophia-Antipolis

--
Olivier Beau

On Wed, Jul 27, 2005 at 02:19:54PM +0200, Olivier Beau wrote:

when i comment an entry in my bb-hosts file,
the host disappears from the display, which is normal.

i haven't done a "drop hostname" yet,
and , i don't see any "unknown host" in my log files..

this brings me to the question : if someone deletes hosts in the bb-hosts file,
how do i know which hosts to "drop" ?

Le 31 juil. 05 à 10:04, Henrik Stoerner a écrit :

On Wed, Jul 27, 2005 at 02:19:54PM +0200, Olivier Beau wrote:

when i comment an entry in my bb-hosts file,
the host disappears from the display, which is normal.

i haven't done a "drop hostname" yet,
and , i don't see any "unknown host" in my log files..

Hobbit does notice when you remove hosts from bb-hosts, and
will automatically forget about hosts that disappear from
bb-hosts. The "drop" command is only to clean up the files
stored on disk (history logs and RRD files).

this brings me to the question : if someone deletes hosts in the  
bb-hosts file,
how do i know which hosts to "drop" ?

I think it should be the other way around: When someone
deletes hosts from your bb-hosts file, they should know to
do a "drop" command also.

It doesn't do much harm if you don't do the "drop" command.
Hobbit will simply ignore hosts that are not in the bb-hosts
file, so they only take up a bit of space.

If you must know what "orphan" hosts you have lying around,
compare the list of hostnames from your bb-hosts file with the
directory names in ~hobbit/data/histlogs/


Henrik

ok, thank you for the explaination,  i have a better picture of this.
but, im still puzzled with with a certain scenario :
i have several bb-hosts files,
and once, one guy (who didnt know how to use vi) emptied the bb-hosts  
file without realizing..

that why i need of way to be alert of what hosts are disappearing  

Le 31 juil. 05 à 10:04, Henrik Stoerner a écrit :

On Wed, Jul 27, 2005 at 02:19:54PM +0200, Olivier Beau wrote:

when i comment an entry in my bb-hosts file,
the host disappears from the display, which is normal.

i haven't done a "drop hostname" yet,
and , i don't see any "unknown host" in my log files..

Hobbit does notice when you remove hosts from bb-hosts, and
will automatically forget about hosts that disappear from
bb-hosts. The "drop" command is only to clean up the files
stored on disk (history logs and RRD files).

this brings me to the question : if someone deletes hosts in the  
bb-hosts file,
how do i know which hosts to "drop" ?

I think it should be the other way around: When someone
deletes hosts from your bb-hosts file, they should know to
do a "drop" command also.

It doesn't do much harm if you don't do the "drop" command.
Hobbit will simply ignore hosts that are not in the bb-hosts
file, so they only take up a bit of space.

If you must know what "orphan" hosts you have lying around,
compare the list of hostnames from your bb-hosts file with the
directory names in ~hobbit/data/histlogs/


Henrik