<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{mso-style-name:msochpdefault;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:10.0pt;
font-family:"Times New Roman","serif";}
p.balloontext, li.balloontext, div.balloontext
{mso-style-name:balloontext;
margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.textodeglobocar
{mso-style-name:textodeglobocar;
font-family:"Tahoma","sans-serif";}
span.estilocorreo18
{mso-style-name:estilocorreo18;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.estilocorreo22
{mso-style-name:estilocorreo22;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.balloontextchar0
{mso-style-name:balloontextchar;
font-family:"Tahoma","sans-serif";}
span.estilocorreo25
{mso-style-name:estilocorreo25;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle27
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">The example tells me to have max=0 and nothing for min.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> Example: Check that ONLY ports 22, 80 and 443 are open for incoming connections:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"># PORT STATE=LISTEN LOCAL=%0.0.0.0[.:].* EXLOCAL=%[.:](22|80|443)$ MAX=0 "TEXT=Bad listeners"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Schapovalov, Sebastian [mailto:sebastian.schapovalov@telefonica.com]
<br>
<b>Sent:</b> Friday, March 07, 2014 11:32 AM<br>
<b>To:</b> Root, Paul T; 'Henrik Størner'; 'xymon@xymon.com'<br>
<b>Subject:</b> RE: [Xymon] Problems with an alarm<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi Paul, We have tried with “min=0 max=0” cause we need this alarm inform us when there are connections, because that servers are in the shutdown process (since
2 months ago) and don’t have to get to connect.</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Courier New";color:#1F497D"> PORT LOCAL=%10.20.70.157.* REMOTE=%10.20.32.184.1198* state=ESTABLISHED
</span><span style="font-size:11.0pt;font-family:"Courier New";color:red">min=0 max=0</span><span style="font-size:11.0pt;font-family:"Courier New";color:#1F497D"> color=red "TEXT=OPGE->Comandos SDP 1 : frontal datos1 vlzfesg16|10.20.70.157: -> vlzfedsdp1|10.20.32.184:1198*
"</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Courier New";color:#1F497D"> PORT LOCAL=%10.20.70.157.* REMOTE=%10.20.32.185.1198* state=ESTABLISHED min=0 max=0 color=red "TEXT=OPGE->Comandos SDP 1 : frontal datos2 vlzfesg16|10.20.70.157:
-> vlzfedsdp2|10.20.32.185:1198* "</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Courier New";color:#1F497D"> PORT LOCAL=%10.20.70.157.* REMOTE=%10.20.32.186.1198* state=ESTABLISHED min=0 max=0 color=red "TEXT=OPGE->Comandos SDP 1 : frontal datos3 vlzfesg16|10.20.70.157:
-> vlzfedsdp3|10.20.32.186:1198* "</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Root, Paul T [<a href="mailto:Paul.Root@CenturyLink.com">mailto:Paul.Root@CenturyLink.com</a>]
<br>
<b>Enviado el:</b> viernes, 07 de marzo de 2014 10:34 a.m.<br>
<b>Para:</b> Schapovalov, Sebastian; 'Henrik Størner'; 'xymon@xymon.com'<br>
<b>Asunto:</b> RE: [Xymon] Problems with an alarm</span><span lang="ES-AR"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Shouldn’t it be max=0?</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Xymon [<a href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>]
<b>On Behalf Of </b>Schapovalov, Sebastian<br>
<b>Sent:</b> Friday, March 07, 2014 7:22 AM<br>
<b>To:</b> Henrik Størner; <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Subject:</b> Re: [Xymon] Problems with an alarm</span><span lang="ES-AR"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"> <span lang="ES-AR"><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi Henrik, thanks for you quick answer.</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Analisys.cfg</span></b><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333;background:#F4F9DC">PORT LOCAL=%10.20.170.57.* REMOTE=%10.20.132.84.1198* state=ESTABLISHED min=0 color=red "TEXT=OPGE->Comandos SDP 1 : frontal datos1 fesg16|10.20.170.57:
-> fedsdp1|10.20.132.84:1198* "</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333;background:#F4F9DC"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333;background:#F4F9DC"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">hosts.cfg</span></b><span lang="ES-AR"><o:p></o:p></span></p>
<table class="MsoNormalTable" border="0" cellspacing="0" cellpadding="0" width="393" style="width:294.9pt">
<tbody>
<tr style="height:10.15pt">
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt;height:10.15pt">
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.4pt;margin-left:13.6pt;line-height:10.15pt">
<span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333">subpage VLZ_SDP1 <H5>Velez SDP1</H5></span><o:p></o:p></p>
</td>
</tr>
<tr style="height:10.15pt">
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt;height:10.15pt">
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.4pt;margin-left:13.6pt;line-height:10.15pt">
<span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333">group-compress <H5>SDP1 EG:</H5></span><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt"></td>
</tr>
<tr style="height:10.15pt">
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt;height:10.15pt">
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.4pt;margin-left:13.6pt;line-height:10.15pt">
<span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333">0.0.0.0 .default. # REPORTTIME=*:0600:2359 NOPROPRED:* NOPROPPURPLE:*</span><o:p></o:p></p>
</td>
</tr>
<tr>
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt"></td>
</tr>
<tr style="height:10.15pt">
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt;height:10.15pt">
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.4pt;margin-left:13.6pt;line-height:10.15pt">
<span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333">include /home/xymon/server/www/gestion/tmp/hosts.cfg_20140307_VLZ_SDP1_10</span><o:p></o:p></p>
</td>
</tr>
<tr style="height:10.15pt">
<td style="background:#F4F9DC;padding:3.4pt 0in 3.4pt 2.05pt;height:10.15pt">
<p class="MsoNormal" style="mso-margin-top-alt:0in;margin-right:0in;margin-bottom:3.4pt;margin-left:13.6pt;line-height:10.15pt">
<span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333">group-compress <H5>SDP1 BEsBDs:</H5></span><o:p></o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><span style="font-size:7.0pt;font-family:"Helvetica","sans-serif";color:#333333;background:#F4F9DC"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">All the others alarms run Ok.</span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><span lang="ES-AR"><o:p></o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">De:</span></b><span lang="ES" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Xymon [<a href="mailto:xymon-bounces@xymon.com">mailto:xymon-bounces@xymon.com</a>]
<b>En nombre de </b>Henrik Størner<br>
<b>Enviado el:</b> viernes, 07 de marzo de 2014 09:46 a.m.<br>
<b>Para:</b> <a href="mailto:xymon@xymon.com">xymon@xymon.com</a><br>
<b>Asunto:</b> Re: [Xymon] Problems with an alarm<br>
<b>Importancia:</b> Alta</span><span lang="ES-AR"><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
<p><span lang="ES-AR">Den 2014-03-07 12:47, Schapovalov, Sebastian skrev:<o:p></o:p></span></p>
<blockquote style="border:none;border-left:solid #1010FF 1.5pt;padding:0in 0in 0in 3.0pt;margin-left:3.4pt;margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span lang="ES-AR">Hi! I am Sebastian and I am working actually in Telefonica Argentina. I have a problem with XYMon settings. We have an alarm which shows the ports connections totality to a server. We´d need this alarm turns to red
when exists 1 or more connections, but it keeps in green.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-AR">Send you an example.. <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-AR"><img border="0" width="802" height="47" id="Imagen_x0020_1" src="cid:image001.png@01CF39FA.A937B000"><o:p></o:p></span></p>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
</div>
</blockquote>
<div>
<p class="MsoNormal"><span lang="ES-AR">Could you show us what your configuration is - the analysis.cfg and hosts.cfg settings ?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="ES-AR">Regards,<br>
Henrik<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="ES-AR"> <o:p></o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES-AR">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span lang="ES-AR" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><br>
Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la
lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.<br>
<br>
The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.<br>
<br>
Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a
leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição</span><span lang="ES-AR"><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="ES-AR"><o:p> </o:p></span></p>
<div class="MsoNormal" align="center" style="text-align:center"><span lang="ES-AR">
<hr size="2" width="100%" align="center">
</span></div>
<p class="MsoNormal"><span lang="ES-AR" style="font-size:7.5pt;font-family:"Arial","sans-serif";color:gray"><br>
Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, puede contener información privilegiada o confidencial y es para uso exclusivo de la persona o entidad de destino. Si no es usted. el destinatario indicado, queda notificado de que la
lectura, utilización, divulgación y/o copia sin autorización puede estar prohibida en virtud de la legislación vigente. Si ha recibido este mensaje por error, le rogamos que nos lo comunique inmediatamente por esta misma vía y proceda a su destrucción.<br>
<br>
The information contained in this transmission is privileged and confidential information intended only for the use of the individual or entity named above. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination,
distribution or copying of this communication is strictly prohibited. If you have received this transmission in error, do not read it. Please immediately reply to the sender that you have received this communication in error and then delete it.<br>
<br>
Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinatário, pode conter informação privilegiada ou confidencial e é para uso exclusivo da pessoa ou entidade de destino. Se não é vossa senhoria o destinatário indicado, fica notificado de que a
leitura, utilização, divulgação e/ou cópia sem autorização pode estar proibida em virtude da legislação vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e proceda a sua destruição</span><span lang="ES-AR"><o:p></o:p></span></p>
</div>
</body>
</html>