<div dir="ltr"><div>What if we are receiving ghost reports from a server we no longer have access to? I have about ten servers that have been taken out of my access list that still have a BBWIN installation reporting to my central Xymon server. I know where they are coming from but I cannot stop the information coming from the host (in theory I could but then I have to ask some people across the world to go and uninstall something from their machines and this always takes a long time and it not always respected).<br>
<br></div>regards<br>Steve<br><div><div>
<div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Mar 12, 2014 at 5:56 AM, Adam Goryachev <span dir="ltr"><<a href="mailto:mailinglists@websitemanagers.com.au" target="_blank">mailinglists@websitemanagers.com.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div>
<div>On 12/03/14 15:04, Kris Springer wrote:<br>
</div>
<blockquote type="cite">
<div>
<p class="MsoNormal">I’ve got 6 ghost clients listed on my
server webpage. I have a clean hosts.cfg file that definitely
does not contain any of the names in the ghost list. The
ghost names are from many months ago when I first setup the
server. I’ve since change the names. I’ve attempted to clear
the ghosts using the following commands but it doesn’t clear
anything. Buzzard is one of the hostnames in question.<u></u><u></u></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">#cd
/usr/lib/xymon/server/bin</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">#xymon
127.0.0.1 “drop Buzzard”<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif""><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial","sans-serif"">Anyone
have a clue as to how to clear old ghosts and/or where to
find the pesky files that are causing it?</span></p>
</div>
</blockquote>
<br></div>
ghosts are there *because* you do not have them in your config file.
They are "generated" by clients reporting status with that name. You
should be able to determine where these reports are coming from
based on the names and/or source information on the ghost report. If
the client stops reporting, it will be removed from the ghost report
after 5 minutes (I assume this is actually the timeout value of the
status which is usually 5 minutes).<br>
<br>
Worst case, you can firewall port 1984 to block the incoming status
reports, or use tcpdump to determine where they are coming from.<br>
<br>
Hope this is useful/helpful.<br>
<br>
Regards,<br>
Adam<span><font color="#888888"><br>
<div>-- <br>
Adam Goryachev
Website Managers
<a href="http://www.websitemanagers.com.au" target="_blank">www.websitemanagers.com.au</a></div>
</font></span></div>
<br>_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com" target="_blank">Xymon@xymon.com</a><br>
<a href="http://lists.xymon.com/mailman/listinfo/xymon" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon</a><br>
<br></blockquote></div><br></div></div></div></div>