<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
John Hamblin wrote:
<blockquote
cite="mid:D1776ABE3111FD4D8A59E050FBE92AB6142A1F@mainsrv.MotionIT.local"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
pre
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="Section1">
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">I’m trying
to configure monitoring for
windows servers so that I get alerts when ports such as 80 and 443 are
not
available. I understand that I have to set the servers to central mode
and have
done so on 1 client server for a test as below.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<pre><font face="Courier New" size="2"><span style="font-size: 10pt;"><!-- bbwin mode local or central --><o:p></o:p></span></font></pre>
<pre><font face="Courier New" size="2"><span style="font-size: 10pt;"><setting name="mode" value="central" /><o:p></o:p></span></font></pre>
<pre><font face="Courier New" size="2"><span style="font-size: 10pt;"><setting name="configclass" value="win32" /><o:p></o:p></span></font></pre>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">My
hobbit-client.cfg file has the
following:<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">HOST=xxxxx.co.uk<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">
PROC BBWin.exe 1<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">
PORT
"LOCAL=%(:80|:443)" state=LISTEN TEXT=http and https<o:p></o:p></span></font></p>
</div>
</blockquote>
First problem - Windows reports status LISTENING not LISTEN - so it
won't match on exact match. I use %LISTEN (more correct would be
%^LISTEN) to cover all eventualities.<br>
<br>
I have the following in my hobbit-clients.cfg<br>
<br>
CLASS=win32<br>
LOAD 80 90 # Load threholds are in %<br>
PORT LOCAL=%(\*|::|0.0.0.0):135 STATE=%LISTEN "TEXT=epmap
listener"<br>
PORT LOCAL=%(\*|::|0.0.0.0):3389 STATE=%LISTEN "TEXT=RDP
listener"<br>
PORT LOCAL=%[.:]3389 STATE=%ESTABLISHED MIN=0 TRACK=RDP
"TEXT=RDP connection"<br>
<br>
<blockquote
cite="mid:D1776ABE3111FD4D8A59E050FBE92AB6142A1F@mainsrv.MotionIT.local"
type="cite">
<div class="Section1">
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">Unfortunately
this is not working! I get
white entries on the main status page with <b><span
style="font-weight: bold;">“No
process to check” </span></b>for proc and just a “<b><span
style="font-weight: bold;">-</span></b>“ for ports. I am getting the
“Client Data” available for
proc with current date and time, but the status of the actual page is
reading
as last updated back in November when I first changed the bbwin mode.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">Any ideas
where I am going wrong? <o:p></o:p></span></font></p>
</div>
</blockquote>
Sounds like the client report isn't making it to the correct client
entry, or maybe not getting delivered at all. Check that it is not
reporting using a different hostname. Use the Reports->Ghost
Clients. Client names are case sensitive, so if the case doesn't match
it won't report under that machine.<br>
<blockquote
cite="mid:D1776ABE3111FD4D8A59E050FBE92AB6142A1F@mainsrv.MotionIT.local"
type="cite">
<div class="Section1">
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">(We have a
solaris server being monitored
from the same box and using the same config file and both proc and
ports are
working fine for this.)<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">Thanks,<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;">John<o:p></o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span
style="font-size: 10pt; font-family: Arial; color: navy;"><o:p> </o:p></span></font></p>
</div>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
David Baldwin - IT Unit
Australian Sports Commission <a class="moz-txt-link-abbreviated" href="http://www.ausport.gov.au">www.ausport.gov.au</a>
Tel 02 62147830 Fax 02 62141830 PO Box 176 Belconnen ACT 2616
<a class="moz-txt-link-abbreviated" href="mailto:david.baldwin@ausport.gov.au">david.baldwin@ausport.gov.au</a> Leverrier Street Bruce ACT 2617
</pre>
<br>
<hr>
Keep up to date with what's happening in Australian sport visit <a href="http://www.ausport.gov.au">www.ausport.gov.au</a>
<br><br>
<font size="-2" face="arial">This message is intended for the addressee named and may contain confidential and privileged information. If you are not the intended recipient please note that any form of distribution, copying or use of this communication or the information in it is strictly prohibited and may be unlawful. If you receive this message in error, please delete it and notify the sender.</font>
<hr>
</body>
</html>