[Xymon] delayred on conn

[Bakkies Gatvol]

Thanks to all

I tried again today and it seemed to work. The yellow was unexpected, but nice. Maybe trying something new late on Friday is just not worth it ....

at Tue Mar 22 10:55:23 EDT 2016

10.83.19.249 granite_ip_printer #DESCR:socket-9100 delayred=conn:9


Tue Mar 22 11:10:27 2016     red     0:04:17
Tue Mar 22 11:00:57 2016     yellow     0:09:30




> From: Paul.Root at CenturyLink.com
> To: Paul.Root at CenturyLink.com; john.thurston at alaska.gov; xymon at xymon.com
> Date: Fri, 18 Mar 2016 22:06:20 +0000
> Subject: Re: [Xymon] delayred on conn
> 
> Ok, this time it looks like it's working:
> 
> $ iptables -I INPUT 1 -p icmp -s 10.5.130.117 -j REJECT --reject-with icmp-host-prohibited
> $ date
> Fri Mar 18 16:52:57 CDT 2016
> 
> Then on the server:
> 
> Fri Mar 18 16:55:44 2016 yellow 0:01:11
> Fri Mar 18 16:47:12 2016 green 0:08:32
> 
> So I’m guessing it should change red at 17:01:57 or so.
> 
> 
> Yes, it did:
> 
> Fri Mar 18 17:04:45 2016 red 0:00:20
> Fri Mar 18 16:55:44 2016 yellow 0:09:01
> Fri Mar 18 16:47:12 2016 green 0:08:32
> 
> 
> However, it also meant that it paged out immediately, not waiting 5 minutes after it turned red from yellow.
> 
> 
> 
> -----Original Message-----
> From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of Root, Paul T
> Sent: Friday, March 18, 2016 4:52 PM
> To: 'John Thurston'; xymon at xymon.com
> Subject: Re: [Xymon] delayred on conn
> 
> It didn't work for me. Pretty weird though.
> 
> I started with this:
> 
> 10.5.136.247    wilee                   # ntp delayred=conn:9
> 
> Then, put in a rule in iptables to block pings. It went red immediately.
> 
> And paged after 5 minutes, as my alerts tells it.
> 
> Then the weird thing happened. It changed to yellow.
> 
> Hold on, I’m going to test again. I bet hosts.cfg hadn't been re-read yet. So it's probably an invalid test.
> 
> BTW, 4.3.21 on the server and client.
> 
> I'll reply again in 15 minutes or so.
> 
> 
> 
> 
> 
> -----Original Message-----
> From: Xymon [mailto:xymon-bounces at xymon.com] On Behalf Of John Thurston
> Sent: Friday, March 18, 2016 4:34 PM
> To: xymon at xymon.com
> Subject: Re: [Xymon] delayred on conn
> 
> On 3/18/2016 1:27 PM, John Thurston wrote:
> - snip -
> > Can anyone confirm that "delayred" is working for them with conn?
> 
> Ohhhh. I think I see something interesting.
> 
> In xymond.c, I see the following comment:
> >         /* Ignore any delays when we start with a purple status */
> 
> My test case was to change a noconn tag on a host to conn. Which meant I
> went from clear/no-state to red. I haven't read the rest of that code,
> but I suspect my test would be valid only if starting from a green state.
> 
> --
>     Do things because you should, not just because you can.
> 
> John Thurston    907-465-8591
> John.Thurston at alaska.gov
> Enterprise Technology Services
> Department of Administration
> State of Alaska
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
> This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
> This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately notify the sender by reply e-mail and destroy all copies of the communication and any attachments.
> _______________________________________________
> Xymon mailing list
> Xymon at xymon.com
> http://lists.xymon.com/mailman/listinfo/xymon
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20160322/2969e312/attachment.html>