<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 26/02/13 19:47, Neil Simmonds wrote:<br>
</div>
<blockquote
cite="mid:1BF7D566CC4F514288455EF3C9B7CF830C32A693@EXSVIRTUAL.express.findel.co.uk"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 11 (filtered
medium)">
<o:smarttagtype
namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType">
<o:smarttagtype
namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName">
<o:smarttagtype
namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place">
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Bookman Old Style";
panose-1:2 5 6 4 5 5 5 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
<div class="Section1">
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">Hi all,<o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">I’ve got a strange problem that
I’m trying to
diagnose and would appreciate any help you can give.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">We have 2 new servers that have
recently been set up that
are Aix servers running the hobbit client. We have
62 other Aix server with the
same client running absolutely fine.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">The problem is that the client
data is getting cut off mid
stream. It’s always in the ps output. I’ve checked
the MAX settings
and there all ok, in fact we have other clients that
are sending data files
larger than these that are working fine. I’ve
checked the data on the
client and it’s complete but if I look in
/xymon/data/hostdata on the
server the data seems to be almost always getting
truncated to 69518 bytes. Occasionally
a full message (approx 93k) gets through.<o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">There are no messages regarding
truncated data in the server
logs and the only message I can find on the client
is the following,<o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">2013-02-26 08:41:21 Write error
while sending message to
bbd@xymonserver:1984<o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">2013-02-26 08:41:21 Whoops ! bb
failed to send message -
write error <o:p></o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial"><o:p> </o:p></span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span
style="font-size:10.0pt;
font-family:Arial">I’ve googled this extensively and
can’t find
anything that seems relevant to our problem. <o:p></o:p></span></font></p>
<br>
</div>
</o:smarttagtype></o:smarttagtype></o:smarttagtype></blockquote>
I get this from time to time, primarily when the xymon host has very
limited bandwidth. It seems to me that Xymon will accept whatever
data has been received prior to the connection being
broken/interrupted, and pretend it is complete (as opposed to
discarding it away).<br>
<br>
If this is happening frequently/all the time, I would suspect
firewall settings, and/or MTU issues (if it is packet size related).
Check that you are not blocking all ICMP, or that path MTU discovery
is working properly, check any firewall is not timing out or
blocking the connection for some reason, and that there is enough
bandwidth for the messages.<br>
<br>
Potentially, a tcpdump at both client and server could be
educational, possibly load these into wireshark for analysis.<br>
<br>
PS, I wonder when we will get compression, and/or encryption for the
status messages? Both would assist in making sure the complete
message arrives un-altered...<br>
<br>
Regards,<br>
Adam<br>
<br>
<pre class="moz-signature" cols="72">--
Adam Goryachev
Website Managers
<a class="moz-txt-link-abbreviated" href="http://www.websitemanagers.com.au">www.websitemanagers.com.au</a>
</pre>
</body>
</html>