- observium - lists.observium.org

inconsistent traffic windows -> freebsd
by evo 20 Jun '16

20 Jun '16

Hi, today I noticed something strange I can't explain at the moment. I am running a backup job (8TB) over a 1Gbit Interface, from Windows Server 2012 R2 -> HP switch -> Freebsd 10.2 The freebsd snmp interface reports the real Bits/s with an Avg In of 511.98M while the Windows Interface in charge reports an average of 32M out. If I take a look at the Task Manager within windows I'd also guess and Avg of 500Mbit/s. Also the Unicast Packets TX of Windows are very similiar to the Traffic RX at freebsd. I have attached two screenshots and would be very glad if someone could take a look. I have also added the relevant part of my weathermap, where I take the switch interfaces snmp to draw the links, and they look very alike to the windows interface, but not to the freebsd. Please help, I am starting to doubt my qualification. with kind regards, Valentin

1 0

Looping PTR request
by TAN Lists 20 Jun '16

20 Jun '16

Hey all, New to Observium and loving it so far. I've done some reading, but I can not find an answer to my issue. I would really appreciate some pointers here. After about 6 hours, i start seeing a looping PTR request: 23:14:37.602724 IP 192.168.155.13.39891 > 8.8.8.8.domain: 54851+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.604162 IP 192.168.155.13.53879 > 8.8.8.8.domain: 58763+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.605541 IP 192.168.155.13.52487 > 8.8.8.8.domain: 30717+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.606941 IP 192.168.155.13.34473 > 8.8.8.8.domain: 5645+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.608351 IP 192.168.155.13.45956 > 8.8.8.8.domain: 5585+ PTR? 30.151.168.192.in-addr.arpa. (45) 23:14:37.609741 IP 192.168.155.13.39834 > 8.8.8.8.domain: 4414+ PTR? 30.151.168.192.in-addr.arpa. (45) 23:14:37.611099 IP 192.168.155.13.35512 > 8.8.8.8.domain: 3031+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.612479 IP 192.168.155.13.49633 > 8.8.8.8.domain: 12185+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.613858 IP 192.168.155.13.59192 > 8.8.8.8.domain: 1926+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.615309 IP 192.168.155.13.51916 > 8.8.8.8.domain: 36203+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.616667 IP 192.168.155.13.49695 > 8.8.8.8.domain: 28584+ PTR? 30.151.168.192.in-addr.arpa. (45) 23:14:37.618245 IP 192.168.155.13.50620 > 8.8.8.8.domain: 13819+ PTR? 15.155.168.192.in-addr.arpa. (45) 23:14:37.619849 IP 192.168.155.13.42869 > 8.8.8.8.domain: 48052+ PTR? 15.155.168.192.in-addr.arpa. (45) Manual lookup: root@freshwater ~]host 192.168.155.15 Host 15.155.168.192.in-addr.arpa. not found: 3(NXDOMAIN) [root@freshwater ~]# host 192.168.155.15 8.8.8.8 Using domain server: Name: 8.8.8.8 Address: 8.8.8.8#53 Aliases: Host 15.155.168.192.in-addr.arpa. not found: 3(NXDOMAIN) [root@freshwater ~]# I'm not running PTR on these IPs and have turned off discovery (i think) (i dont need it) >From my config: $config['autodiscovery']['ip_nets'] = array("127.0.0.0/8"); $config['autodiscovery']['xdp'] = FALSE; $config['autodiscovery']['ospf'] = FALSE; $config['autodiscovery']['bgp'] = FALSE; $config['autodiscovery']['libvirt'] = FALSE; $config['autodiscovery']['snmpscan'] = FALSE; $config['enable_printers'] = 0; $config['enable_sla'] = 0; $config['enable_ports_junoseatmvp'] = 0; $config['enable_ports_adsl'] = 1; $config['ignore_mount_optical'] = 1; $config['poller_modules']['unix-agent'] = 1; It's running on: [root@freshwater observium]# httpd -v Server version: Apache/2.4.6 (CentOS) Server built: May 12 2016 10:27:23 [root@freshwater observium]# php -v PHP 5.4.16 (cli) (built: May 12 2016 13:45:17) Copyright (c) 1997-2013 The PHP Group Zend Engine v2.4.0, Copyright (c) 1998-2013 Zend Technologies [root@freshwater observium]# And a restart to apache does not kill this process. I can't seem to find what is doing it, but the ONLY thing on this server is Observium and nothing else. It's possible it isnt, but it seems to be :( The only way to stop this is to restart the whole server for some reason ps auxf from when the loop is happening and after an apache restart root 6299 0.0 0.0 0 0 ? S 23:43 0:00 \_ [kworker/3:1] root 1 0.0 0.1 190528 5564 ? Ss Jun14 1:00 /usr/lib/systemd/systemd --switched-root --system --deserialize 21 root 436 0.0 0.1 36820 4856 ? Ss Jun14 8:01 /usr/lib/systemd/systemd-journald root 458 0.0 0.0 118480 1260 ? Ss Jun14 0:00 /usr/sbin/lvmetad -f root 475 0.0 0.0 44868 3464 ? Ss Jun14 0:00 /usr/lib/systemd/systemd-udevd root 541 0.0 0.0 116724 1632 ? S<sl Jun14 0:02 /sbin/auditd -n root 564 0.0 0.0 19312 1260 ? Ss Jun14 0:27 /usr/sbin/irqbalance --foreground root 566 0.0 0.1 249796 7616 ? Ss Jun14 7:00 /usr/bin/vmtoolsd root 572 0.0 0.1 391788 5588 ? Ssl Jun14 0:39 /usr/sbin/rsyslogd -n root 573 0.0 0.0 26400 1744 ? Ss Jun14 0:18 /usr/lib/systemd/systemd-logind dbus 574 0.0 0.0 26724 1828 ? Ss Jun14 0:36 /bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation chrony 576 0.0 0.0 115844 1900 ? S Jun14 0:02 /usr/sbin/chronyd root 582 0.0 0.0 203368 1240 ? Ssl Jun14 0:00 /usr/sbin/gssproxy -D root 592 0.0 0.2 434960 8368 ? Ssl Jun14 0:12 /usr/sbin/NetworkManager --no-daemon polkitd 607 0.0 0.3 527584 12132 ? Ssl Jun14 0:07 /usr/lib/polkit-1/polkitd --no-debug root 824 0.5 0.7 251120 27696 ? Rs Jun14 48:26 /usr/sbin/snmptrapd -Lsd -f root 825 0.0 0.0 82560 3616 ? Ss Jun14 0:00 /usr/sbin/sshd -D root 23255 0.0 0.1 143416 5544 ? Ss 21:39 0:00 \_ sshd: root@pts/0 root 23257 0.0 0.0 115384 2060 pts/0 Ss+ 21:39 0:00 | \_ -bash root 25194 0.0 0.1 143808 5928 ? Ss 23:08 0:00 \_ sshd: root@pts/1 root 25196 0.0 0.0 115384 2112 pts/1 Ss 23:08 0:00 \_ -bash root 8186 0.0 0.0 151168 1960 pts/1 R+ 23:46 0:00 \_ ps auxf root 829 0.0 0.0 29304 1004 ? Ss Jun14 0:00 /usr/sbin/xinetd -stayalive -pidfile /var/run/xinetd.pid root 831 0.0 0.2 222956 10612 ? Ss Jun14 4:36 /usr/sbin/snmpd -LS0-6d -f root 836 0.0 0.3 552452 15072 ? Ssl Jun14 0:00 /usr/sbin/libvirtd root 841 0.0 0.0 126332 1572 ? Ss Jun14 0:02 /usr/sbin/crond -n root 851 0.0 0.0 110036 852 tty1 Ss+ Jun14 0:00 /sbin/agetty --noclear tty1 linux mysql 1171 0.0 0.0 113256 1580 ? Ss Jun14 0:00 /bin/sh /usr/bin/mysqld_safe --basedir=/usr mysql 1600 0.4 5.9 1695560 232072 ? Sl Jun14 35:42 \_ /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --plugin-dir=/usr/lib64/mysql/plugin --log-error=/var/log/mariadb/mariadb.log --pid-file=/var/run/mariadb/ root 2159 0.0 0.0 91140 2164 ? Ss Jun14 0:02 /usr/libexec/postfix/master -w postfix 2161 0.0 0.1 91420 4132 ? S Jun14 0:00 \_ qmgr -l -t unix -u postfix 10160 0.0 0.1 91244 3924 ? S 22:30 0:00 \_ pickup -l -t unix -u root 29025 0.0 0.3 396460 15080 ? Ss 23:16 0:00 /usr/sbin/httpd -DFOREGROUND apache 29027 0.0 0.3 397296 12784 ? S 23:16 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29029 0.0 0.3 397556 12816 ? S 23:16 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29031 0.0 0.2 396596 8644 ? S 23:16 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29035 0.0 0.3 397296 12812 ? S 23:18 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29039 0.0 0.3 397556 12816 ? S 23:18 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 29041 0.0 0.3 397300 12872 ? S 23:18 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 351 0.0 0.2 396596 8644 ? S 23:28 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 2450 0.0 0.2 396596 8644 ? S 23:33 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 4385 0.0 0.2 396596 8644 ? S 23:39 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 6301 0.0 0.1 396596 7652 ? S 23:44 0:00 \_ /usr/sbin/httpd -DFOREGROUND [root@freshwater observium]# Any help appreciated Thanks!

2 1

Smokeping
by Andrew Colin 20 Jun '16

20 Jun '16

Hi Guys Since the last update smokeping no longer updates on the gui Is there an issue?

2 4

uptime issue ?
by Medve István 20 Jun '16

20 Jun '16

Hi, we are using 0.16.5.7901 (Stable) and have got some wrong alert of rebooting devices after 1 year, 132 days, 2h, 23m Actually they didn't reboot but uptime graphs restarted. Can be a kind of counter overflow ? Affected devices are some brocade san switches and juniper isg1000 Regards, imedve

3 3

Group ports based on subnet...?
by Henrik Cednert (Filmlance) 19 Jun '16

19 Jun '16

Hello Trying/wanting to create a group for ports based on what subnet they're on. Is this possible...? Think I've tried most approached but haven't managed so far. When looking at details on ports for a device this is pretty much already done at the right most column next to mac adress. So doesn't seem that far fetched? =) Cheers and thanks -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ]

1 0

VRF(BGP) / Arista
by John Klasa 17 Jun '16

17 Jun '16

Hi, any timeframe when this can be included in Observium if at all? Since Observium doesn't support Arista VRF and we are running all our BGP peers in VRFs BGP polling doesn't work obviously. Regards -John

3 3

SVN broken
by Serghei Golipad 16 Jun '16

16 Jun '16

Guys, Is SVN broken again? svn: E000110: Unable to connect to a repository at URL 'http://svn.observium.org/svn/observium/trunk' svn: E000110: Error running context: Connection timed out Cheers PLEASE CONSIDER THE ENVIRONMENT BEFORE PRINTING THIS EMAIL. CDW Limited is a Company registered in England and Wales. This email is sent for and on behalf of CDW Finance Holdings Limited. CDW Finance Holdings Limited is the UK holding company for CDW Limited trading as CDW. The registered office for CDW Finance Holdings Limited (Company Number 05872067) and its UK group undertakings is 10 Fleet Place, London, EC4M 7RB. VAT Registration 902 1949 39. Confidentiality: This e-mail contains proprietary information, some or all of which may be confidential and/or legally privileged. It is for the intended recipient only. If an addressing or transmission error has misdirected this e-mail, please notify the author by replying to this e-mail and then delete the original. If you are not the intended recipient you may not use, disclose, distribute, copy, print or rely on any information contained in this e-mail. You must not inform any other person other than CDW or the sender of its existence. For more information about CDW please visit www.uk.cdw.com

2 1

Netapp Interface Speed.
by Zafar Pravaiz 16 Jun '16

16 Jun '16

HI, I monitoring a my NetApp storage. Recently I have noticed that observium show 10G connected Interface as 1.41 Gbps speed and non connected as 10 Mbps. I have checked on switch side its correctly show 10G connected. Any hint what could be the reason for this? Thanks Zafar Pravaiz IT Senior Network Engineer Information Technology Department Tel +971 6 515 2164 Fax +971 6 515 2112 American University of Sharjah PO Box 26666, Sharjah United Arab Emirates http://www.aus.edu <http://www.aus.edu/> zpravaiz(a)aus.edu <mailto:youremail@aus.edu>

2 1

WatchGuard Device Discovery
by Duncan Mossop 16 Jun '16

16 Jun '16

Good Morning, I’ve recently added a WatchGuard M200 into Observium which discovers all the correct interfaces/counters but shows the device ultimately as generic / unknown. Is this a WatchGuard issue in regards to what is exposed by SNMP or is it something that might appear in an Observium update? We’re on 16.5.7872. Thanks, Duncan Mossop • Operations Manager, SystemHOST Ltd ________________________________ dmossop(a)systemhost.co.uk [cid:imaged755ff.PNG@690e2bcf.4b98904c] 01524 737414 systemhost.co.uk<http://www.systemhost.co.uk> [Twitter]<https://twitter.com/systemhost> Follow us on Twitter ________________________________ SystemHOST Ltd Registered office: Holmere Hall, Yealand Conyers, Carnforth, Lancs, LA5 9SN Registered in England No.05028996 VAT No. 927386490 This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. By opening this email or its attachments, you accept liability for any damage that may be caused to your computer hardware, software or data. ________________________________

1 0

Re: [Observium] Group based on description?
by Moerman, Maarten 15 Jun '16

15 Jun '16

You can use: Hostname, os, type, sysName, sysDescr, sysContact, Location, hardware & serial as an attribute for this. See the documentation for the attribute syntax on alerting, which works for groups as well. Maarten -- Maarten Moerman | Mgr, Network Engineering | eBay Classifieds | +31-655122247 | mmoerman(a)ebay.com<mailto:mmoerman@ebay.com> From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Fredrik Winäs <Fredrik.Winas(a)cgit.se<mailto:Fredrik.Winas@cgit.se>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Tuesday, June 14, 2016 at 3:46 PM To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Group based on description? I would like to make a device group based on the description of the device, the one that i set it observium. [cid:image001.png@01D1C653.E533AF90] Can this be done? Med Vänlig Hälsning Fredrik Winäs tel +46 31 762 02 43 fredrik.winas(a)cgit.se<mailto:fredrik.winas@cgit.se> www.cgit.se<http://www.cgit.se/> CGit AB Taljegårdsgatan 11C SE-431 53 Mölndal

5 8