<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:"Courier New";
mso-fareast-language:EN-AU;}
span.n
{mso-style-name:n;}
span.p
{mso-style-name:p;}
span.o
{mso-style-name:o;}
span.s
{mso-style-name:s;}
span.cm
{mso-style-name:cm;}
span.k
{mso-style-name:k;}
span.mi
{mso-style-name:mi;}
span.nb
{mso-style-name:nb;}
span.sc
{mso-style-name:sc;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-AU" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">From man hosts.cfg<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">GENERAL PER-HOST OPTIONS<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">multihomed<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""> Tell Xymon that data from the host can arrive from multiple IP-adresses.
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""> By default, Xymon will warn if it sees data for one host coming from different
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""> IP-adresses, because this usually indicates a mis-configuration of the hostname
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""> on at least one of the servers involved. Some hosts with multiple IP-adresses
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""> may use different IPâs for sending data to Xymon, however. This tag disables
<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""> the check of source IP when receiving data.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">In my testing, it appears the “multihomed” hosts.cfg tag is broken. i.e does not allow a client to report in if it comes from an alternate IP on that host.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">Looking at 4.3.18 code.<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">I see in lib/loadhosts.c:<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";mso-fareast-language:EN-AU">169 xmh_item_key[XMH_FLAG_MULTIHOMED] = "MULTIHOMED";<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">170 xmh_item_name[XMH_FLAG_MULTIHOMED] = "XMH_MULTIHOMED";<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">Is that looking for “MULTIHOMED” in CAPS, not “multihomed” lowercase?<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">Also, should line 170 have "XMH_FLAG_MULTIHOMED" rather than "XMH_MULTIHOMED"<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:5.0pt;margin-right:0cm;margin-bottom:5.0pt;margin-left:0cm;text-autospace:none">
<span style="font-size:10.0pt;font-family:"Courier New"">e.g.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">xmh_item_name[XMH_FLAG_MULTIHOMED] = "XMH_FLAG_MULTIHOMED";<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">similar items appear to be that way?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">“man 5 xymon-xmh” suggests the relevant xmh item should be:
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">XMH_FLAG_MULTIHOMED<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""> Value of the MULTIHOMED tag.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">Doing a xymondborad query against a host with “multihome” produces no result for that field:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">xymon localhost "xymondboard host=pf-parkingguide.pf.uq.edu.au fields=XMH_FLAG_MULTIHOMED"<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">This section in xymond.c from line 1520 seems to be the code doing a check that XMH_FLAG_MULTIHOMED is NULL:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">xymond/xymond.c<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<pre>1520 <span class="cm">/* </span><o:p></o:p></pre>
<pre><span class="cm"> * If we have an existing status, check if the sender has changed.</span><o:p></o:p></pre>
<pre><span class="cm"> * This could be an indication of a mis-configured host reporting with</span><o:p></o:p></pre>
<pre><span class="cm"> * the wrong hostname.</span><o:p></o:p></pre>
<pre><span class="cm"> */</span><o:p></o:p></pre>
<pre> <span class="k">if</span> <span class="p">(</span><span class="o">*</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span><span class="p">)</span> <span class="o">&&</span> <span class="p">(</span><span class="n">strcmp</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span><span class="p">,</span> <span class="n">sender</span><span class="p">)</span> <span class="o">!=</span> <span class="mi">0</span><span class="p">))</span> <span class="p">{</span><o:p></o:p></pre>
<pre> <span class="cm">/*</span><o:p></o:p></pre>
<pre><span class="cm"> * There are a few exceptions:</span><o:p></o:p></pre>
<pre><span class="cm"> * - if sender is "xymond", then this is an internal update, e.g. a status going purple.</span><o:p></o:p></pre>
<pre><span class="cm"> * - if the host has "pulldata" enabled, then the sender shows up as the host doing the</span><o:p></o:p></pre>
<pre><span class="cm"> * data collection, so it does not make sense to check it (thanks to Cade Robinson).</span><o:p></o:p></pre>
<pre><span class="cm"> * - some multi-homed hosts use a random IP for sending us data.</span><o:p></o:p></pre>
<pre><span class="cm"> */</span><o:p></o:p></pre>
<pre> <span class="k">if</span> <span class="p">(</span> <span class="p">(</span><span class="n">strcmp</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span><span class="p">,</span> <span class="s">"xymond"</span><span class="p">)</span> <span class="o">!=</span> <span class="mi">0</span><span class="p">)</span> <span class="o">&&</span> <span class="p">(</span><span class="n">strcmp</span><span class="p">(</span><span class="n">sender</span><span class="p">,</span> <span class="s">"xymond"</span><span class="p">)</span> <span class="o">!=</span> <span class="mi">0</span><span class="p">)</span> <span class="o">&&</span> <span class="p">(</span><span class="n">strcmp</span><span class="p">(</span><span class="n">sender</span><span class="p">,</span> <span class="s">"0.0.0.0"</span><span class="p">)</span> <span class="o">!=</span> <span class="mi">0</span><span class="p">))</span> <span class="p">{</span><o:p></o:p></pre>
<pre> <span class="k">if</span> <span class="p">((</span><span class="n">xmh_item</span><span class="p">(</span><span class="n">hinfo</span><span class="p">,</span> <span class="n">XMH_FLAG_PULLDATA</span><span class="p">)</span> <span class="o">==</span> <span class="nb">NULL</span><span class="p">)</span> <span class="o">&&</span> <span class="p">(</span><span class="n">xmh_item</span><span class="p">(</span><span class="n">hinfo</span><span class="p">,</span> <span class="n">XMH_FLAG_MULTIHOMED</span><span class="p">)</span> <span class="o">==</span> <span class="nb">NULL</span><span class="p">))</span> <span class="p">{</span><o:p></o:p></pre>
<pre> <span class="n">log_multisrc</span><span class="p">(</span><span class="n">log</span><span class="p">,</span> <span class="n">sender</span><span class="p">);</span><o:p></o:p></pre>
<pre> <span class="p">}</span><o:p></o:p></pre>
<pre> <span class="p">}</span><o:p></o:p></pre>
<pre> <span class="p">}</span><o:p></o:p></pre>
<pre> <span class="n">strncpy</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span><span class="p">,</span> <span class="n">sender</span><span class="p">,</span> <span class="k">sizeof</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span><span class="p">)</span><span class="o">-</span><span class="mi">1</span><span class="p">);</span><o:p></o:p></pre>
<pre> <span class="o">*</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span> <span class="o">+</span> <span class="k">sizeof</span><span class="p">(</span><span class="n">log</span><span class="o">-></span><span class="n">sender</span><span class="p">)</span> <span class="o">-</span> <span class="mi">1</span><span class="p">)</span> <span class="o">=</span> <span class="sc">'\0'</span><span class="p">;</span><o:p></o:p></pre>
<pre> <span class="p">}</span><o:p></o:p></pre>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">Any ideas on this one? Currently I have to add multihomed hosts to “--status-senders” otherwise.<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Cheers,<o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;mso-fareast-language:EN-AU">Gavin Stone-Tolcher, IT Support Officer, Network Operations and Incident Response<span style="color:red"><o:p></o:p></span></span></b></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">Information Technology Services<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">The University of Queensland<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">Level 4, Prentice Building, St Lucia 4072<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">T: +61 7 334 66645, M: +61 401 140 838<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">E:
<span style="color:red"><a href="mailto:g.stone-tolcher@its.uq.edu.au"><span style="color:blue">g.stone-tolcher@its.uq.edu.au</span></a>
</span>W: <a href="http://www.its.uq.edu.au"><span style="color:blue">www.its.uq.edu.au</span></a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">ITS: Service. Team. Accountability. Results.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;mso-fareast-language:EN-AU">IMPORTANT:</span></b><span style="font-size:10.0pt;mso-fareast-language:EN-AU"> This email and any attachments are intended solely for the addressee(s), contain copyright material
and are confidential. We do not waive any legal privilege or rights in respect of copyright or confidentiality. Except as intended addressees are otherwise permitted, you do not have permission to use, disclose, reproduce or communicate any part of this email
or its attachments. Statements, opinions and information not related to the official business of The University of Queensland are neither given nor endorsed by us. By using this email (including accessing any attachments or links) you agree we are not liable
for any loss or damage of any kind arising in connection with any electronic defect, virus or other malicious code we did not intentionally include.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">Please consider the environment before printing this email.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;mso-fareast-language:EN-AU">CRICOS Code 00025B<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>