[Xymon] bad processing of client data on the server
Scot Kreienkamp
Scot.Kreienkamp at la-z-boy.com
Fri Jun 24 16:12:49 CEST 2016
A few weeks ago there was a thread on this list about xymon confusing the client reports by reporting results from one client on another client entirely. I had been watching strange things happen to my Xymon instance occasionally and just now caught the first irrefutable proof that was indeed happening in my environment. The ports test page for retv6034 contains the results from another server entirely, which can be proven by comparing the text of the ports page with the client data report. Xymon server has obviously gotten this wrong in processing somewhere as the client data brought back through the client data link at the bottom of the ports test page contains the correct data. The two servers are multiple hops away from both each other and the Xymon server, and the Xymon server load at the time was .1 and 96% idle CPU usage.
Here's a snippet from the ports test page from retv6034 at the time, which was reporting red due to missing ports that were being monitored on retv6034:
TCP 10.103.1.63:135 10.1.1.34:40773 ESTABLISHED
TCP 10.103.1.63:135 10.1.2.23:57996 ESTABLISHED
TCP 10.103.1.63:135 10.1.7.55:12679 ESTABLISHED
TCP 10.103.1.63:135 10.1.7.55:12722 ESTABLISHED
TCP 10.103.1.63:135 10.1.7.56:20008 ESTABLISHED
TCP 10.103.1.63:135 10.112.1.62:52119 ESTABLISHED
TCP 10.103.1.63:135 10.125.1.63:23527 ESTABLISHED
TCP 10.103.1.63:139 0.0.0.0:0 LISTENING
And here's the entire ports section from the client data report for retv6034. This is the correct data for what should have been on the page:
[ports]
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 127.0.0.1:8005 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:199 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:8009 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:60111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:35060 0.0.0.0:* LISTEN
tcp 0 0 10.170.1.114:53 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN
tcp 0 0 10.170.1.114:33972 10.1.1.200:1984 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:15971 FIN_WAIT2
tcp 0 0 10.170.1.114:8080 10.170.1.240:7519 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:63015 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:64431 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:32815 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:10363 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:54788 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:54629 ESTABLISHED
tcp 0 0 10.170.1.114:8080 10.170.1.242:25603 FIN_WAIT2
tcp 0 0 10.170.1.114:8080 10.170.1.240:52365 TIME_WAIT
tcp 0 0 10.170.1.114:44018 10.1.2.50:514 ESTABLISHED
tcp 0 0 10.170.1.114:8080 10.170.1.241:15201 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:10447 FIN_WAIT2
tcp 0 0 10.170.1.114:8080 10.170.1.241:1043 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:17144 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:13427 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:4912 TIME_WAIT
tcp 0 0 10.170.1.114:33974 10.1.1.200:1984 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:52295 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:18884 TIME_WAIT
tcp 0 0 10.170.1.114:913 10.170.1.220:2049 ESTABLISHED
tcp 0 0 10.170.1.114:58396 10.1.2.54:2003 ESTABLISHED
tcp 0 0 10.170.1.114:8080 10.1.1.200:50195 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:3119 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:54730 TIME_WAIT
tcp 0 0 10.170.1.114:33976 10.1.1.200:1984 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:10171 ESTABLISHED
tcp 0 0 10.170.1.114:8080 10.170.1.240:42249 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:6831 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:51631 TIME_WAIT
tcp 0 0 10.170.1.114:58394 10.1.2.54:2003 ESTABLISHED
tcp 0 0 10.170.1.114:8080 10.170.1.242:63087 TIME_WAIT
tcp 0 0 10.170.1.114:33978 10.1.1.200:1984 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:20554 FIN_WAIT2
tcp 0 0 10.170.1.114:49506 10.1.7.75:389 ESTABLISHED
tcp 0 0 10.170.1.114:8080 10.170.1.240:47234 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.242:47185 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.241:50056 TIME_WAIT
tcp 0 0 10.170.1.114:8080 10.170.1.240:26500 TIME_WAIT
tcp 0 0 :::111 :::* LISTEN
tcp 0 0 :::44688 :::* LISTEN
tcp 0 0 :::36886 :::* LISTEN
udp 0 0 0.0.0.0:993 0.0.0.0:*
udp 0 0 0.0.0.0:995 0.0.0.0:*
udp 0 0 0.0.0.0:878 0.0.0.0:*
udp 0 0 0.0.0.0:110 0.0.0.0:*
udp 0 0 0.0.0.0:111 0.0.0.0:*
udp 0 0 0.0.0.0:631 0.0.0.0:*
udp 0 0 10.170.1.114:123 0.0.0.0:*
udp 0 0 127.0.0.1:123 0.0.0.0:*
udp 0 0 0.0.0.0:123 0.0.0.0:*
udp 0 0 0.0.0.0:647 0.0.0.0:*
udp 0 0 0.0.0.0:143 0.0.0.0:*
udp 0 0 0.0.0.0:783 0.0.0.0:*
udp 0 0 127.0.0.1:921 0.0.0.0:*
udp 0 0 0.0.0.0:161 0.0.0.0:*
udp 0 0 10.170.1.114:53 0.0.0.0:*
udp 0 0 127.0.0.1:53 0.0.0.0:*
udp 0 0 0.0.0.0:40131 0.0.0.0:*
udp 0 0 0.0.0.0:52420 0.0.0.0:*
udp 0 0 0.0.0.0:847 0.0.0.0:*
udp 0 0 :::878 :::*
udp 0 0 :::111 :::*
udp 0 0 :::123 :::*
udp 0 0 :::35899 :::*
udp 0 0 :::35906 :::*
Scot Kreienkamp | Senior Systems Engineer | La-Z-Boy Corporate
One La-Z-Boy Drive | Monroe, Michigan 48162 | * 734-384-6403 | | * 7349151444 | * Scot.Kreienkamp at la-z-boy.com<mailto:%7BE-mail%7D>
www<http://www.la-z-boy.com/>.la-z-boy.com<http://www.la-z-boy.com/> | facebook.<https://www.facebook.com/lazboy>com<https://www.facebook.com/lazboy>/<https://www.facebook.com/lazboy>lazboy<http://facebook.com/lazboy> | twitter.com/lazboy<https://twitter.com/lazboy> | youtube.com/<https://www.youtube.com/user/lazboy>lazboy<https://www.youtube.com/user/lazboy>
[cid:lzbVertical_hres.jpg]
This message is intended only for the individual or entity to which it is addressed. It may contain privileged, confidential information which is exempt from disclosure under applicable laws. If you are not the intended recipient, you are strictly prohibited from disseminating or distributing this information (other than to the intended recipient) or copying this information. If you have received this communication in error, please notify us immediately by e-mail or by telephone at the above number. Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20160624/6ca3a228/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lzbVertical_hres.jpg
Type: image/jpeg
Size: 21288 bytes
Desc: lzbVertical_hres.jpg
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20160624/6ca3a228/attachment.jpg>
More information about the Xymon
mailing list