- observium - lists.observium.org

observium managment should be more professional
by John Brown 06 Apr '15

06 Apr '15

http://afmug.com/pipermail/af/2015-March/018914.html As a provider of internet connectivity (ergo a telco and a ISP) we use licensed microwave and unlicensed microwave technologies to feed our revenue generating customers. We also use fiber, and copper based technologies. microwave != wifi We are not alone in using a mix of technologies to deliver bits to customers. T-Mobile, ATT, Sprint, AllTel, Cellular One, Verizon, etc all use microwave (wireless) technologies to deliver bits. I, like others, have offered to write code, have asked for pointers on how to get started writing code, all appears to have fallen upon deaf ears. I've offered to PAY others to write code to support our kit, with features we need. No takers. As a PAID user, I'm quite shocked and disappointed in Adam's childish behaviour. Users of Observium should be concerned that their continued investment could be a loosing path as more people move AWAY from the product and go support other packages. On two lists that I saw the above URL, not less than 3 dozen people said they where removing observium and not renewing their annual subscriptions. I suspect that will become a trend. Cheers

9 16

Allowed memory size of 268435456 bytes exhausted during the pooling for one host
by dorje2007＠seznam.cz 05 Apr '15

05 Apr '15

Hi one host cannot finish the pooling procedure, even though i run it separateley: ./poller.php -h router_host_name -d ..... ..... including: includes/polling/cipsec-tunnels.inc.php after that a lot of messages of this kind: ..... cipSecTunStatus.3157 = active cipSecTunStatus.3158 = active cipSecTunStatus.3159 = active cipSecTunStatus.3160 = active ..... Then the pooling terminates with: SNMP_STATUS[TRUE] PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 256 bytes) in /opt/observium/includes/snmp.inc.php on line 654 Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 256 bytes) in /opt/observium/includes/snmp.inc.php on line 654 I increased the memory limit to 256 MB in the php.ini, however still does not work. It happens only with one host out of about 200 hosts. I have about 7000 ports in Observium. Platform is: CentOS release 6.6 php-5.3.3-40.el6_6.x86_64 httpd-2.2.15-39.el6.centos.x86_64 Observium CE 0.14.11.6000 Do you have any ideas ? many thanks Pet

5 9

Alerting Contacts
by Johnston, Tom 03 Apr '15

03 Apr '15

Hello, Does anyone know if it is possible at current status to have alerting sent to multiple users. Say I want only Cisco IOS devices to get alerts at an email and Windows devices to get alerts at a different email. Is that level of granularity built in at present or on the way at all? Right now my sys admin and I don’t need each others alerts… Thanks in advance.

4 4

Re: [Observium] Alerting Contacts
by ron＠rjr-services.com 03 Apr '15

03 Apr '15

I'm sure Adam or others will correct me if necessary, but I seem to recall the documentation saying you can do that by specifying <email address> as part of the SNMP contact value on the device, and whatever you put in config.php will cover those devices that don't have an email address specified in the device snmp contact value. I could be wrong, it's been several weeks since I last read that part of the documentation. Sent from my Verizon Wireless 4G LTE DROID "Johnston, Tom" <Tom.Johnston(a)edinaschools.org> wrote: -- This message has been scanned by E.F.A. Project and is believed to be clean.

3 2

Renewed subscription, what next?
by Gavin Henry 02 Apr '15

02 Apr '15

Hi, We've just renewed our subscription but not sure what to do next. Our svn up still works. Not sure how it's tied to the subscription. Thanks. -- Kind Regards, Gavin Henry.

2 4

MiB Ceragon on Observium
by Maciel Rodrigues 02 Apr '15

02 Apr '15

Guys, Do you know if there is same possibility of implementation of Ceragon MiB ?

4 4

Constant 'reboot' messages for all devices with no uptime counter
by Robert Williams 02 Apr '15

02 Apr '15

Hi, All of our devices which have no uptime counter (such as IP PDUs and temperature sensors for example) are constantly showing as having ‘rebooted’ every single time they are polled. The issue seems to have started on 27/03/15 at our 6AM SVN up – so whatever revision was released at that time. Since we have a very large number of these devices, the net result of this is a pretty useless eventlog ☺ Like this: [cid:image001.png@01D06CA4.83A8D2A0] …and so on… For each devices they have (always) shown this for Uptime: [cid:image002.png@01D06CA4.83A8D2A0] Since the devices do not have any uptime counters on them. Can I filter/disable/stop these events for these devices somehow? Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

dns_get_record or why PHP sucks
by Sir l33tname 01 Apr '15

01 Apr '15

Hey, I guess I have found a bug. In ./includes/common.inc.php on the function gethostbynamel6. The problem is this one: *query the A record:* var_dump(dns_get_record($host, DNS_A)); array(1) { [0]=> array(5) { ["host"]=> string(14) "host.name.tdl" ["class"]=> string(2) "IN" ["ttl"]=> int(0) ["type"]=> string(1) "A" ["ip"]=> string(12) "192.168.17.2" } } *query the AAAA record:* var_dump(dns_get_record($host, DNS_AAAA)); PHP Warning:dns_get_record():DNS Queryfailed infile.php on line 4 bool(false) *query both together* var_dump(dns_get_record($host, DNS_A + DNS_AAAA)); PHP Warning:dns_get_record():DNS Queryfailed infile.php on line 4 bool(false) As you can see if the DNS server doesn't have a AAAA record it fails, this cause for me the error that I couldn't add a new device to the observium. I build a prototype code which could be a solution for this problem but since I'm not a good php programmer I'm sure there is a smarter way for this. $A_record = dns_get_record($host, DNS_A); $AAAA_record = dns_get_record($host, DNS_AAAA); if($A_record != false && $AAAA_record != false) { $record = array_merge($A_record, $AAAA_record); } else if($A_record == false) { $record = $AAAA_record; } else if($AAAA_record == false) { $record = $A_record; } else { #show some error } Since I did all the research it should be fairly easy to fix this, so I hope someone will do it. If you need anything more to fix it please ask. A few things I noticed in the debugging process and totally unrelated to the problem: - the name gethostbyname6 is a bit confusing since it does both I would rename it to gethostbyname - same goes for $try_a I personally would pick a more descriptive name - "Could not resolve $host" in ./includes/functions.inc.php and ./includes/functions.inc_d.php, since It took me some time to figure out what this means I would add something like "Could not resolve $host with your DNS or your Hosts file" But all in all it's a nice code base for a php project, well done! For the case I'm wrong please tell me why. l33tname

2 2

Dell PDU not being identified
by Stephen Bateman 31 Mar '15

31 Mar '15

Has anyone had problems adding the Dell K5YYY PDU's for some reason I am getting no data from them other than serial and names. I have tried SNMP v1 & v2 without any results, so ideas would be appreciated.

1 0

Disk size via unix agent.
by Dudu 31 Mar '15

31 Mar '15

Hi All. I have a very large disk which i canot get correct size with snmpd even 5.7.3 Is there any way to populate the graph and database via the Unix Agent? Im able to view the information correctly via the agent df part. Many thanks David Sent from my Samsung Galaxy smartphone.

1 0

No ports added on D-Link DGS-1216T
by Thomas Novin 30 Mar '15

30 Mar '15

Hello Very new to Observium, installed it yesteday. Ran into problems on the first device I added, no ports are found on this switch. I am also using Cacti which I plan to replace and there all ports are discovered and graphing works fine. Here is an output from snmpwalk: http://paste.ubuntu.com/10708460/ Here is an output from poller in debug: http://paste.ubuntu.com/10708471/ And last output from discovery.. root@mistik:/opt/observium# ./discovery.php -h 3 Observium CE 0.14.11.6000 *Discovery* Current Revision : 6000 New Revision : 6350 dlink.xyz.lan 3 dlink Module [ os ] time: 0.0703s Ports : Module [ ports ] time: 24.0653s Port Stacks: Module [ ports-stack ] time: 6.0483s Processors : AGENT-GENERAL-MIB hrDevice: Module [ processors ] time: 12.0521s Memory : AGENT-GENERAL-MIB HOST-RESOURCES-MIB Module [ mempools ] time: 12.0383s IPv4 Addresses : Module [ ipv4-addresses ] time: 36.1278s IPv6 Addresses : Module [ ipv6-addresses ] time: 30.0945s Sensors: ENTITY-SENSOR-MIB Module [ sensors ] time: 42.1179s Storage : Module [ storage ] time: 6.0196s Inventory: Physical Inventory : hrDevice : Module [ inventory ] time: 24.1358s Discovery protocols: LLDP-MIB CISCO-CDP-MIB Module [ discovery-protocols ] time: 12.0836s OSPF Neighbours: Module [ ospf-autodiscovery ] time: 6.0253s ARP/NDP Tables : Module [ arp-table ] time: 18.0719s Module [ junose-atm-vp ] time: 0.0003s BGP Sessions: No BGP on host Module [ bgp-peers ] time: 0.015s VLANs: Q-BRIDGE-MIB Module [ vlans ] time: 6.0383s Module [ mac-accounting ] time: 0.0003s Module [ cisco-pw ] time: 0.0004s Module [ cisco-vrf ] time: 0.0005s Module [ cisco-sla ] time: 0.0004s Module [ vmware-vminfo ] time: 0.0003s Cisco Class-based QoS: QoS not configured. Module [ cisco-cbqos ] time: 6.0876s Module [ libvirt-vminfo ] time: 0.0005s Module [ toner ] time: 0.0005s UCD Disk IO : Module [ ucd-diskio ] time: 6.0147s Wifi: Module [ wifi ] time: 0.0005s Module [ graphs ] time: 0.0004s Discovered in 247.1 seconds MySQL: Cell[22/0s] Row[0/0s] Rows[49/0.01s] Column[0/0s] Update[1/0.01s] Insert[2/0.01s] Delete[0/0s] Anyone knows what to do to graph the ports on this switch? Rgds//Thomas

2 2

match port_id with rrd graphs
by Zhenhui Liang 30 Mar '15

30 Mar '15

Hi, I would like to do some rrdtool fetch against the raw rrd files observium generated to get some reports. But I couldn’t figure out how to match the portid or device_id from observium tables to get the correct path to match to the rrd files. Rrd files location seemed to be at ~observium/rrd/devicenames. But the rrd file name like port-123.rrd, 123 seems not to be the port_id in the ports table. Rather it’s device specific. Thank you very much for your help. —Zhenhui

4 5

Discovery on Nexus 3K removes all interfaces
by Markus Viitamäki 30 Mar '15

30 Mar '15

I am running 0.15.3.6350 and have noticed that some time ago all interfaces on my nexus 3k's gets marked deleted every time discovery runs. However the interfaces are not deleted.. :/ I have done debugging on the a discovery and the only problems I can find are these (I am not sure these are related at all): http://pastie.org/private/lmqwcfqdp2ujo2nx65pwew // Markus (suom1)

2 2

update errors database structure
by Patrick Marquetecken 29 Mar '15

29 Mar '15

Hi, It seems that I have some problems with my database structure Perhaps related to my alerts & evenlog problems. [2015/01/18 15:05:14 +0100] update.php(2459): ====== Schema update 137 -> 138 ============== [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `entPhysicalIndex_measured` varchar(16) COLLATE utf8_unicode_ci DEFAULT NULL AFTER `sensor_custom_limit`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'entPhysicalIndex_measured' [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `measured_class` VARCHAR( 32 ) NULL DEFAULT NULL AFTER `entPhysicalIndex_measured`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'measured_class' [2015/01/18 15:05:14 +0100] update.php(2459): Query: ALTER TABLE `sensors` ADD `measured_entity` VARCHAR( 32 ) NULL DEFAULT NULL AFTER `measured_class`; [2015/01/18 15:05:14 +0100] update.php(2459): Error: Duplicate column name 'measured_entity' [2015/03/23 14:23:56 +0100] discovery.php(31115): ====== Schema update 183 -> 184 ============== [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: ALTER TABLE `eventlog` CHANGE `reference` `entity_id` INT( 64 ) NULL DEFAULT NULL; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1366) Incorrect integer value: 'NULL' for column 'entity_id' at row 1 [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: ALTER TABLE `eventlog` ADD `severity` TINYINT NOT NULL DEFAULT '6' AFTER `entity_id`; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'entity_id' in 'eventlog' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` REGEXP '(above|under) threshold'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 5 WHERE `message` REGEXP ' [.(.]by (user|cron|console)'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 3 WHERE `message` LIKE 'Device status changed to%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE '%probably the device was replaced%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE 'OS changed%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `message` LIKE 'Device rebooted%'; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list' [2015/03/23 14:23:56 +0100] discovery.php(31115): Query: UPDATE `eventlog` SET `severity` = 4 WHERE `entity_type` IN ('bgp_peer', 'sensor') AND `message` REGEXP ' (Up|Down|Alarm): '; [2015/03/23 14:23:56 +0100] discovery.php(31115): Error: (1054) Unknown column 'severity' in 'field list'

2 5

snmp crash on nexus 7k when polling certain OID
by Steve Costaras 29 Mar '15

29 Mar '15

I'm running observium CE 0.14.11.6000. We just ran into an interesting problem on a Nexus 7K running 6.2(12) code. When observium polls the device, the snmp process crashes and reloads (this happens with every 5 minute poll). Managed to track it down to a specific OID that's causing it: 1.3.6.1.4.1.9.9.91.1.1.1.1.4.22809 It takes less than a second to reload the snmp process on the 7K; we're engaging cisco to see about a fix, but in the interim besides disabling the device, is there a specific way to block/not poll this particular OID? Older nexus code appears to not have this problem as. Steve

2 1

New user - I apologize in advance if I am asking stupid questions
by Rich Elwell 29 Mar '15

29 Mar '15

Greetings, I've recently installed observium and find that it is a great tool. Kudos for developing something so useful and easy to use. I do have a couple of questions. I desire to set the device_id for some of the devices to a specific value. This is not supported in the interface. It looks like I *should* be able to modify the code to allow me to do this, but before I do I wanted to check and see if there is already a way for me to accomplish this without having to modify the code. I also desire to be able to add devices programatically via an API call from an external system. I looked over the existing simple API (not extensively) but it didn't seem like that was possible. So basically I want to be able to do something like: http://myserver/api.php?mydetails&including&device_id and have it add the device while specifying the device_id. Is that possible? If not, I'm probably going to build it. Thanks, Rich -- Rich Elwell, MS, CISSP, GCIA, CCNA, CCNA Security /dev/null security ⋅ network *nix administration

3 5

ISSUES/BUg with regards to collect_table Implementation - Suggested Code Changes
by Mark Gibbons 29 Mar '15

29 Mar '15

Hi (especially adam - can you take a read please) Background I have been working on integrating support for Ubiquiti wireless products so that wireless stats can be shown on the "wireless" graph page for these devices. I created routines to process the mibs in /include/polling/graphs using the original loop method to parse the mib to generate and populate the RRD's and everything is working absolutely fine. I will of course submit this work for inclusion once tested/verified fully. However, i read the README (you see people do read README's!!!!!!!!!!): "Please make sure you use the *new* format of graphing poller. Generate a $graph_defs array to be used in collect_table." And i thought I would have a go at the $table_def method. So I defined the MIB as per $tabledef and come across issues with multi indexed oids. In this instance from a MIB walk we have two oids as follows: ubntRadioRssi.1.1 ubntRadioRssi.1.2 So i put the following in table_def: 'ubntRadioRssi.1' => array('index' => '1', 'descr' => 'RSSI Chain 0', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_0'), 'ubntRadioRssi.1' => array('index' => '2', 'descr' => 'RSSI Chain 1', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_1'), But, of course, (knowing what i know now) this does not work because the array index is the same and you only get the last entry. So i thought try with a blank index specifying the full oid: 'ubntRadioRssi.1.1' => array('index' => '', 'descr' => 'RSSI Chain 0', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_0'), 'ubntRadioRssi.1.2' => array('index' => '', 'descr' => 'RSSI Chain 1', 'ds_type' => 'GAUGE', 'ds_name' => 'RadioRssi_1'), But this didn't work so I investgated. The issues surround the handling of the separation of oid and index in both collect table AND snmp_get_multi. Let me Deal with snmp_get_multi first. Snmp_get multi expects an array of full oid's - great. However it spits back an array of oids and index separated. Because you use explode to breakup the oid it will only ever return the first index after the first "." rather than the full index after the first "." I am talking about this code at approx Line 464 in /includes/snmp.inc.php foreach (explode("\n", $data) as $entry) { list($oid,$value) = explode("=", $entry, 2); $oid = trim($oid); $value = trim($value); list($oid, $index) = explode(".", $oid); if (!strstr($value, "at this OID") && isset($oid) && isset($index)) { $array[$index][$oid] = $value; } } This can be corrected if you change it to the following code. In this case the base oid is returned with the FULL index in the index. I can't see that this could/would break other stuff but your experience would know better!! : foreach (explode("\n", $data) as $entry) { list($oid,$value) = explode("=", $entry, 2); $oid = trim($oid); $value = trim($value); $dotpos = strpos($oid, '.'); if ($dotpos != FALSE) { $index = substr($oid, $dotpos+1); $oid = substr($oid, 0, $dotpos); } //list($oid, $index) = explode(".", $oid); if (!strstr($value, "at this OID") && isset($oid) && isset($index)) { $array[$index][$oid] = $value; } } So the next issue is index handling within collect_table and the temporary index of oids created to generate rrdupdate. Current code is at approx 898 in /includes/polling/functions.inc.php: $oids[] = $oid.'.'.$entry['index']; $oids_index[] = array('index' => $entry['index'], 'oid' => $oid); Again if this is changed to the following so that oid and index is re-split like the return from snmp_get_multi we have a working solution where you can specify the full oid as an index for the oid array in table_def with an oid index of '' (blank): if ($entry['index'] != '') { $fulloid = $oid.'.'.$entry['index']; } else { $fulloid = $oid; } $oids[] = $fulloid; $dotpos = strpos($fulloid, '.'); if ($dotpos != FALSE) { $splitindex = substr($fulloid, $dotpos+1); $splitoid = substr($fulloid, 0, $dotpos); } //$oids_index[] = array('index' => $entry['index'], 'oid' => $oid); $oids_index[] = array('index' => $splitindex, 'oid' => $splitoid); So this is a possible solution to the multiple index problem on an oid. By specifying the full oid with blank index. What do you think? Seems like a Win/Win to me but my experience of Observium php code and structure is < 1 week. At least this solution means we can use the table_def method for us but it would mean a lot of maintenance with svn updates. Hope this solution is of possible interest for inclusion. KR's Mark

1 1

FortiGate support
by Thomas Raabo - Zitcom A/S 27 Mar '15

27 Mar '15

At some point we had FortiGate support for session graphing and so on. Now its gone. Does somebody know why? Thomas

2 2

How best to engage the Professional Services team?
by Arthur Bommele (DataByte) 27 Mar '15

27 Mar '15

Dear concerned, How best to engage the Professional Services team? Specifically, regarding Feature Development. Kind regards, Arthur B.

1 0

Help analysis
by Eliezer De Sousa Oliveira 27 Mar '15

27 Mar '15

hello everyone! how to tell the host that causes more traffic on my network? the Community observium, have an option to do this analysis? ass eliezer

2 3

Cronjobs in polling the devices
by Jerico M. Rubion 26 Mar '15

26 Mar '15

Hi there, I would like to inquire about the desired minimum cron jobs that are accepted in observium. I only have a Quad Core Intel(R) Xeon(R) CPU E5405 @ 2.00GHz CPU resources available currently managing 69 HOSTS/Devices. My current setting in /etc/cron.d/observium is */10 * * * * root /opt/observium/poller-wrapper.py 4 >> /dev/null 2>&1 */10 * * * * root /opt/observium/poller.php -h all >> /dev/null 2>&1 Can I comment out the 2nd line -> */10 * * * * root /opt/observium/poller.php -h all >> /dev/null 2>&1 ?? Best Regards, Jerico M. Rubion | 77GSI IT Services Group SEVEN SEVEN GLOBAL SERVICES INC. | 27th Floor, Orient Square Bldg., F. Ortigas Jr. Ortigas Center, Pasig City, Philippines 1605 Office: +632.915.7747 ext. 1911 | Mobile: +63.9175382740 | Duo: +632.9667501 The Information contained and all attachments to this email are for the named recipient(s) only. It contains legally privileged and confidential information intended solely for the use of the addressee. The addressee undertakes to use such information consistent with its privileged and confidential character, and by the receipt thereof appreciates that any use contrary thereto will subject him to sanctions provided for by law. If the reader of this message is not the intended recipient, please be notified that any reading, dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this transmittal in error, please notify the sender immediately.

2 1

Inquiry increased work load
by Jerico M. Rubion 25 Mar '15

25 Mar '15

Hi, Is there an automatic upgrade/patch that happened last March 24 2015 (1pm) EST Timezone? I'm getting an incremental increase of CPU load starting from the date and time I specified, I didn't change any settings in observium application even in the cronjobs. Output of: ps aux | sort -nrk 3 | head root 12585 8.5 0.0 4612 696 ? R 02:12 0:00 /usr/bin/snmpbulkwalk - xxx -OQUs -m CISCO-IPSEC-FLOW-MONITOR-MIB -M /opt/observium/mibs udp:xxxxxxx:161 cipSecGlobalStats root 12546 7.0 0.0 4748 1540 ? R 02:12 0:00 /usr/bin/snmpwalk -v1 -c -OQUs -m SNMPv2-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxxx:161 snmp root 12581 6.5 0.0 4880 1744 ? R 02:12 0:00 /usr/bin/snmpget -v1 -c -Otv -M /opt/observium/mibs udp:xxxxxx:161 sysUpTime.0 root 12579 6.0 0.0 4932 1828 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -r 0 -v2c -c -OqsX -m BRIDGE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxx:161 dot1dTpFdbEntry root 12573 6.0 0.0 0 0 ? R 02:12 0:00 [snmpbulkwalk] root 12571 6.0 0.0 5008 1888 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUn -M /opt/observium/mibs udp:xxxxx:161 .1.3.6.1.4.1.9.9.13.1 root 12569 6.0 0.0 4748 1668 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -r 0 -v2c -c -OqsX -m BRIDGE-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxxxx:161 dot1dTpFdbEntry root 12582 5.5 0.0 4924 1968 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m IF-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp udp:xxxxx:161 ifEntry root 12539 5.3 0.0 5016 1884 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m CISCO-VLAN-MEMBERSHIP-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/cis co udp:xxxxxx:161 vmVlan root 12557 5.0 0.0 5016 1872 ? R 02:12 0:00 /usr/bin/snmpbulkwalk -v2c -c -OQUs -m CISCO-VLAN-MEMBERSHIP-MIB -M /opt/observium/mibs/rfc:/opt/observium/mibs/net-snmp:/opt/observium/mibs/cis co udp:xxxxxx:161 vmVlan Note: xxxxx is used to replaced sensitive information Kindly see attached screenshot for the incremental increase of CPU load that happend last Match 24 1pm (EST Timezone) Best Regards, Jerico M. Rubion | 77GSI IT Services Group SEVEN SEVEN GLOBAL SERVICES INC. | 27th Floor, Orient Square Bldg., F. Ortigas Jr. Ortigas Center, Pasig City, Philippines 1605 Office: +632.915.7747 ext. 1911 | Mobile: +63.9175382740 | Duo: +632.9667501 The Information contained and all attachments to this email are for the named recipient(s) only. It contains legally privileged and confidential information intended solely for the use of the addressee. The addressee undertakes to use such information consistent with its privileged and confidential character, and by the receipt thereof appreciates that any use contrary thereto will subject him to sanctions provided for by law. If the reader of this message is not the intended recipient, please be notified that any reading, dissemination, distribution, copying or other use of this message or its attachments is strictly prohibited. If you have received this transmittal in error, please notify the sender immediately.

1 0

Re: [Observium] howto control ports
by Tom Laermans 25 Mar '15

25 Mar '15

You typo'd your realname in your mail client setup ;) 'Ports' is quite a confusing word to use in this context indeed... Tom On Mar 24, 2015 8:38 PM, Adam Armstronf <adama(a)memetic.org> wrote: > > Well, that was totally not obvious! > > We don't actually do any "port" monitoring at all, the old services code is long since deprecated and probably broken. > > Adam. > > Sent with AquaMail for Android > http://www.aqua-mail.com > > On 24 March 2015 12:17:28 Frank Lahr <logman0u812(a)gmail.com> wrote: >> >> He wants to monitor an applications port(s), up/down and the data going going threw it. >> I was thinking about using Observium to monitor dicom/hl7 ports too, but have not looked into it yet. >> >> Frank >> >> On Tue, Mar 24, 2015 at 2:48 AM, Adam Armstrong <adama(a)memetic.org> wrote: >>> >>> I think you might be using the wrong words :) >>> >>> adam. >>>> >>>> On 24/03/2015 06:25:33, J.P.M.H. Geerets <j.p.geerets(a)amc.uva.nl> wrote: >>>> >>>> Hi folks, >>>> >>>> Bit new here. >>>> >>>> Have an observium (community edition) install in test environment. >>>> Is het possible to creat my own ports to test on? >>>> Want to test for example ports on a cloverleaf (communication) server to check orm messages etc. >>>> Also wanna check dicomports, mostly on 104. >>>> >>>> Any idea how to do this with observium? >>>> >>>> >>>> Met vriendelijke groet, >>>> >>>> Jean-Paul >>>> --- >>>> Jean-Paul Geerets - ICT Radiologie >>>> >>>> ________________________________ >>>> >>>> AMC Disclaimer : http://www.amc.nl/disclaimer >>>> >>>> ________________________________ >>>> _______________________________________________ >>>> observium mailing list >>>> observium(a)observium.org >>>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >>> >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >> >> -- >> Frank >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>

3 2

Re: [Observium] (no subject)
by Adam Armstrong 25 Mar '15

25 Mar '15

Either SNMP timeout, SNMP stack bug or vendor bug. Adam. On 25 Mar 2015 02:06, Zach Underwood <zunder1990(a)gmail.com> wrote: > > I get the same thing about the interfaces nulling on some of my HP 1910 switches. > > On Mar 24, 2015 10:02 PM, "Christopher Pole" <chris(a)apexn.com.au> wrote: >> >> Poor choice of terms on my part regarding discovery, let me try again. >> >> Every now and then Observium will go through and mark every interface attribute on this device as NULL and then shortly thereafter re-learn the attributes, for example: >> >> Time: 2015-03-25 00:56:26 >> Port: lag2 >> Message: Interface changed: [ifName] LAG2 -> NULL; [ifAlias] Trunk: sw01 -> NULL; [ifAdminStatus] up -> NULL; [ifOperStatus] up -> NULL; [ifMtu] 9216 -> NULL; [ifSpeed] 2000000000 -> NULL; [ifHighSpeed] 2000 -> NULL; [ifType] ieee8023adLag -> NULL; [ifPhysAddress] 001bed9fa841 -> NULL; [ifPromiscuousMode] true -> NULL; [ifConnectorPresent] false -> NULL >> >> At this point the alert triggers for this interface, as anything over 0bps is triggers the >85% util alarm. >> >> Shortly thereafter observium relearns the interface attributes: >> >> Time: 2015-03-25 01:00:16 >> Port: lag2 >> Message: Interface changed: [ifName] -> LAG2; [ifAlias] -> Trunk: sw01; [ifAdminStatus] -> up; [ifOperStatus] -> up; [ifMtu] -> 9216; [ifSpeed] -> 2000000000; [ifHighSpeed] -> 2000; [ifType] -> ieee8023adLag; [ifPhysAddress] -> 001bed9fa841; [ifPromiscuousMode] -> true; [ifConnectorPresent] -> false >> >> At this point the alert sends a recovery message. >> >> The nullification and re-learning of interface attributes happens periodically but with no fixed schedule. Is this possibly something that can be caused by a bulk-walk failure part way through? Or an SNMP timeout? >> >> Thanks, >> >> Chris >> >> >> On Wed, Mar 25, 2015 at 10:41 AM, Adam Armstrong <adama(a)memetic.org> wrote: >>> >>> Nothing gets rediscovered at any frequency other than the frequency with which you run discovery.php. >>> >>> Almost everything collected by the poller is collected by snmpbulkwalk. >>> >>> It's possible that bulkwalk is failing part way through for this device causing the ifHighSpeed to be set to zero (or set to the value of ifSpeed, which will be just as useless on ports >1Gb) >>> >>> adam. >>>> >>>> On 24/03/2015 22:16:43, Christopher Pole <chris(a)apexn.com.au> wrote: >>>> >>>> Hi folks, >>>> >>>> we have an alert that triggers when certain ports hit >85% utilisation being triggered by a single device on a regular basis as it seems to get rewalked quite often, which briefly sets the speed of the monitored ports to 0 which then triggers the alert as any utilisation over 0 is >85% :). >>>> >>>> The device is a Brocade CES, but it is the only one in our fleet that suffers from this rediscover > trigger alert issue. Though the others also seem to rediscover more often than is necessary. >>>> >>>> Any thoughts on how I might figure out what is going on so I can fix it? >>>> >>>> Thanks, >>>> Chris >>>> _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >>> >>> _______________________________________________ >>> observium mailing list >>> observium(a)observium.org >>> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>> >> >> >> _______________________________________________ >> observium mailing list >> observium(a)observium.org >> http://postman.memetic.org/cgi-bin/mailman/listinfo/observium >>

1 0

(no subject)
by Christopher Pole 25 Mar '15

25 Mar '15

Hi folks, we have an alert that triggers when certain ports hit >85% utilisation being triggered by a single device on a regular basis as it seems to get rewalked quite often, which briefly sets the speed of the monitored ports to 0 which then triggers the alert as any utilisation over 0 is >85% :). The device is a Brocade CES, but it is the only one in our fleet that suffers from this rediscover > trigger alert issue. Though the others also seem to rediscover more often than is necessary. Any thoughts on how I might figure out what is going on so I can fix it? Thanks, Chris

3 3