old-wiki.siliconhill.cz - Příspěvky uživatele [cs]

Servery nms

2010-03-02T15:12:47Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

<pre># apt-get install nagios-plugins</pre>

<pre># vim /etc/crontab</pre>
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

<pre># vim /etc/zabbix/zabbix_agentd.conf</pre>
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

<pre># /etc/init.d/zabbix-agent restart</pre>

V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
* V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
* Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:09:15Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

<pre># apt-get install nagios-plugins</pre>

<pre># vim /etc/crontab</pre>
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

<pre># vim /etc/zabbix/zabbix_agentd.conf</pre>
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

<pre># /etc/init.d/zabbix-agent restart</pre>

V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
#* V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
#* Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:08:36Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

\# apt-get install nagios-plugins

\# vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

\# vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

\# /etc/init.d/zabbix-agent restart

V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
#* V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
#* Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:07:38Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

apt-get install nagios-plugins

vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

/etc/init.d/zabbix-agent restart

V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
#* V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
#* Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:05:14Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

# apt-get install nagios-plugins
# vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>
# vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>
# /etc/init.d/zabbix-agent restart
#V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
#* V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
#* Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:03:42Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

# apt-get install nagios-plugins

# vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

# vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

# /etc/init.d/zabbix-agent restart

#V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
## V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
## Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:02:48Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

# apt-get install nagios-plugins

# vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

# vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

# /etc/init.d/zabbix-agent restart

#V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
## V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
## Potom kliknut na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T15:02:13Z

Aleonov: /* Debian: Nastaveni kontroly aktualizacii */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

# apt-get install nagios-plugins

# vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

# vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

# /etc/init.d/zabbix-agent restart

#V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
## V menu: "configuration"/"hosts" a potom vybrat v pravo hore "Hosts" a "Hostgroup: $server".
## Pak kliknout na server a v ramceku "Linked templates" pridat template "Template_App_APT" a kliknut na "Save"!

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T14:59:25Z

Aleonov: /* Ruzne navody */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Debian: Nastaveni kontroly aktualizacii ==
Pouziva sa binarka "check_apt" z nagios-plugins baliku.

# apt-get install nagios-plugins

# vim /etc/crontab
<pre>
00 * * * * root /usr/bin/apt-get update
</pre>

# vim /etc/zabbix/zabbix_agentd.conf
<pre>
UserParameter=apt.status,/usr/lib/nagios/plugins/check_apt -n | awk '{ print substr($2,1,2) }'
</pre>

# /etc/init.d/zabbix-agent restart

#V zabbix webovom rozhrani treba nalinkovat template "Template_App_APT" k vasemu serveru:
## asdas

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-03-02T14:26:20Z

Aleonov: /* Informace o serveru nms.sh.cvut.cz */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Stable
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-02-16T16:52:05Z

Aleonov: /* Nastaveni snmpd serveru */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.127.234 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-02-16T16:51:05Z

Aleonov: /* Sprovozneni grafu pro network interface traffic = */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.0.0/16 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ==
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-02-16T16:31:07Z

Aleonov: /* Sprovozneni grafu pro network interface traffic = */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.0.0/16 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ===
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, prihlaste sa a vojdite do menu "Configuration/Host". Ak ucet nemate, kontaktujte spravcu na nms@sh.cvut.cz aby vam ucet vytvoril.
# V pravo potom zvolte "Items".
# Do kolonky "Host" vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-02-16T16:29:23Z

Aleonov: /* Sprovozneni grafu pro network interface traffic = */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.0.0/16 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ===
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
# Pokial mate vlasny ucet v zabbixe, vojdite do menu "Configuration/Host".
# V pravo pak zvolhe "Items".
# Do kolonky "Host" pak vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
# Kliknite na "filter"
# Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-02-16T16:27:49Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Traffic monitoring =
* Monitoring trafficu in/out jednotlivých switchů
* Monitoruje se pomocí SNMP dotazů jednou za 5 minut
* Monitorují se všechny blokové i patrové routery + centralní
* Software: cacti
* URL: https://nms.siliconhill.cz/cacti/graph_view.php

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
<pre>
Name Expression Severity
/etc/inetd.conf has been changed on server $server {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0 Warning
/etc/passwd has been changed on server $server {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0 Average
/etc/services has been changed on server $server {$server:vfs.file.cksum[/etc/services].diff(0)}>0 Average
/usr/bin/ssh has been changed on server $server {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0 Average
/usr/sbin/sshd has been changed on server $server {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0 Average
/vmlinuz has been changed on server $server {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0 Warning
Apache is not running on $server {$server:proc.num[httpd].last(0)}<1 Average
Configured max number of opened files is too low on $server {$server:kernel.maxfiles.last(0)}<512 Information
Configured max number of processes is too low on $server {$server:kernel.maxproc.last(0)}<256 Information
Email (SMTP) server is down on $server {$server:net.tcp.service[smtp].last(0)}=0 Average
FTP server is down on $server {$server:net.tcp.service[ftp].last(0)}=0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Information
Hostname was changed on $server {$server:system.hostname.diff(0)}>0 Information
IMAP server is down on $server {$server:net.tcp.service[imap].last(0)}=0 Average
Inetd is not running on $server {$server:proc.num[inetd].last(0)}<1 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 High
Low free disk space on $server volume / {$server:vfs.fs.size[/,pfree].last(0)}<10 High
Low free disk space on $server volume /home {$server:vfs.fs.size[/home,pfree].last(0)}<10 High
Low free disk space on $server volume /opt {$server:vfs.fs.size[/opt,pfree].last(0)}<10 High
Low free disk space on $server volume /tmp {$server:vfs.fs.size[/tmp,pfree].last(0)}<10 High
Low free disk space on $server volume /usr {$server:vfs.fs.size[/usr,pfree].last(0)}<10 High
Low free disk space on $server volume /var {$server:vfs.fs.size[/var,pfree].last(0)}<10 High
Low number of free inodes on $server volume / {$server:vfs.fs.inode[/,pfree].last(0)}<10 High
Low number of free inodes on $server volume /home {$server:vfs.fs.inode[/home,pfree].last(0)}<10 High
Low number of free inodes on $server volume /opt {$server:vfs.fs.inode[/opt,pfree].last(0)}<10 High
Low number of free inodes on $server volume /tmp {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10 High
Low number of free inodes on $server volume /usr {$server:vfs.fs.inode[/usr,pfree].last(0)}<10 High
Mysql is not running on $server {$server:proc.num[mysqld].last(0)}<1 Average
News (NNTP) server is down on $server {$server:net.tcp.service[nntp].last(0)}=0 Average
POP3 server is down on $server {$server:net.tcp.service[pop].last(0)}=0 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 High
SSH server is down on $server {$server:net.tcp.service[ssh].last(0)}=0 Average
Sshd is not running on $server {$server:proc.num[sshd].last(0)}<1 Average
Syslogd is not running on $server {$server:proc.num[syslogd].last(0)}<1 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 High
Too many processes running on $server {$server:proc.num[,,run].last(0)}>10 Average
Too may users connected on server $server {$server:system.users.num.last(0)}>50 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Average
WEB (HTTP) server is down on $server {$server:net.tcp.service[http].last(0)}=0 Average
Zabbix_agentd is not running on $server {$server:proc.num[zabbix_agentd].last(0)}<1 Average
Zabbix_server is not running on $server {$server:proc.num[zabbix_server].last(0)}<1 Average
$server has just been restarted {$server:system.uptime.last(0)}<600 Information
</pre>

== Windows servers ==
<pre>
Name Expression Severity
Apache is not running on $server {$server:proc_cnt[httpd].last(0)}<1 Average
c:\autoexec.bat has been changed on server $server {$server:vfs.file.cksum[c:\autoexec.bat].diff(0)}>0 Average
Host information was changed on $server {$server:system.uname.diff(0)}>0 Average
Lack of free memory on server $server {$server:vm.memory.size[free].last(0)}<10000 Average
Lack of free swap space on $server {$server:system.swap.size[,free].last(0)}<100000 Average
Low free disk space on $server volume c: {$server:vfs.fs.size[c:,free].last(0)}<10000 Average
Low free disk space on $server volume d: {$server:vfs.fs.size[d:,free].last(0)}<10000 Average
Processor load is too high on $server {$server:system.cpu.load[,avg1].last(0)}>5 Average
Server $server is unreachable {$server:status.last(0)}=2 Average
Too many processes on $server {$server:proc.num[].last(0)}>300 Average
Too many processes running on $server {$server:system[procrunning].last(0)}>10 Average
Version of zabbix_agent(d) was changed on $server {$server:agent.version.diff(0)}>0 Information
$server has just been restarted {$server:system.uptime.last(0)}<600 Average
</pre>

= Notifikace =
Notifikace jsou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přes GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>[NMS]: {TRIGGER.NAME}: {ITEM.LASTVALUE}

Body>{TRIGGER.NAME}: {ITEM.LASTVALUE}
Body>Date: {DATE} - {TIME}
Body>Ipaddress: {IPADDRESS}
Body>Severity: {TRIGGER.SEVERITY}
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==
* zabbix 1.8.1 - alarm and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru
* zenoss - syslog analyzer

== Hostované služby ==

* monitoring
* natdet

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin
[[DOPLNIT]] - NATdet admin

[[category:servery]]

= Ruzne navody =
Zabbix agenta je možné stáhnout na [http://www.zabbix.com/download.php www.zabbix.com]. Nebo ho je mozne nainstalovat z balicku dane distribuce. Verze agenta nesmi byt vetsi, nez je verze serveru!

== Nastaveni zabbix agenta ==

/etc/zabbix/zabbix_agentd.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Po nastavení těchto parametrů kontaktujte správce serveru NMS. Je nutné dodat také seznam služeb, které na serveru běží z důvodu monitoringu.

== Nastaveni snmpd serveru ==
/etc/snmp/snmpd.conf
<pre>
com2sec local localhost shred
com2sec local 147.32.0.0/16 shred

group MyROGroup v1 local
group MyROGroup v2c local
group MyROGroup usm local

view all included .1 80

access MyROGroup "" any noauth exact all none none

syslocation CS SiliconHill
syscontact Jaro Frolo <$server@sh.cvut.cz>
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

== Nastaveni serveru Dell a OpenManage==
Debian+snmp+dell OMSA

http://john.parnefjord.se/node/39/print

http://blog.brachium-system.net/archives/70-Debian-Dell-OMSA-SNMP.html

== Sprovozneni grafu pro network interface traffic ===
Defaultne je zbieranie dat pre interface zakazany, pretoze kazdy server ma interface pomenovany inak. Potrebujete teda najprv aktivovat prislusny "zberac dat" - item.
1) Pokial mate vlasny ucet v zabbixe, vojdite do menu "Configuration/Host".
2) V pravo pak zvolhe "Items".
3) Do kolonky "Host" pak vyberte kliknutim na select "Host group" v ktorej je vas server a zvolte ho.
4) Kliknite na "filter"
5) Zaskrtnite riadky, kde je nazov itemu "Interface traffic IN $interface", Interface traffic OUT $interface, zvolte dole v lavo "Activate selected" a potvrdte kliknutim na "Go"

Od tejto chvile sa zacnu nacitavat data o trafficu na prislusnom interfacu. V grafe by sa mali po par minutach objavit data.

Servery nms

2010-01-18T13:13:40Z

Aleonov: /* Nastaveni zabbix agenta */

NMS

2009-10-16T13:15:31Z

Aleonov:

Network Monitoring System

Řešitel: [[Leonov Alexander]], [[Římek Jakub]]

* Info o serveru: [[servery_nms|nms]]
* Web projektu: https://nms.sh.cvut.cz
* Systémové informace: https://nms.sh.cvut.cz/si/
* Dokumentace projektu: [[servery_nms|nms]]

NMS

2009-10-16T13:13:36Z

Aleonov:

Network Monitoring System

Řešitel: [[Leonov Alexander]], agent Smith

* Info o serveru: [[servery_nms|nms]]
* Web projektu: https://nms.sh.cvut.cz
* Systémové informace: https://nms.sh.cvut.cz/si/
* Dokumentace projektu: [[servery_nms|nms]]

NMS

2009-10-16T13:12:18Z

Aleonov:

Network Monitoring System

Řešitel: [[Leonov Alexander]], agent Smith

* Info o serveru: [[servery_nms|nms]]
* Web projektu: http://ftp.sh.cvut.cz/WEB/
* Systémové informace: http://ftp.sh.cvut.cz/WEB/si/
* Dokumentace projektu: http://ftp.sh.cvut.cz/WEB/docs/

[[Category: Projekty]]

Zakladne informacie:
* System: Debian 4.0
* Kernel: Linux ftp 2.6.24-etchnhalf.1-amd64
* CPU: 2x Intel(R) Xeon(TM) CPU 3.00GHz
* RAM: 7GB
* HDD: 6x 300GB SCSI
* ARRAY: 2x HP MSA60 8TB

Leonov Alexander

2009-10-16T13:10:13Z

Aleonov:

<protect show="text" users="Aleonov,Bigfox" groups="sysop">
--- BEGIN KEY: RSA,adc501ec,RIJNDAEL-256,CBC,32,32 ---
F3sT+f2EnG0A4Rt+iWDQKKJ8cE+YW7cyitXEoFpbunv2WjIfcYfcoR1MNDpWze7Xn22u0km5Is5U
INdTiY/NS2pzikL4OTFuQa/ZGNSkgu0G3nyDZH8C0Sn3p1rywSfQQBZtDFw4BdylBSHVZ34BbPrs
INDCo833oCIg3UwxeBA=
--- END KEY ---
YnsMQz9NIRebXP0SzDdRP0NRVa2qaRSFRbKT32rE/PIbp/yhm6uQYgYekHI2THv9Yf+NlQGm+jID
0mRFGSXhVIl0igZ+k+ZFa/uHISRiblaq50TEplGozg/FiN31dHOyFH8WMzDPo0sCxbIMdujCYawm
1rdrBIWBNTgj9KobGNxO6J7aUsCgk24EENJb8vysDJ4lAkmmOGwMamitNp//lGDMlT6AasMjtkIa
cCKhh+nrblq9Y28aEsZeMXW0kABdobd8GXChOCppih+oXh8e5Xa8R+LnbyskJk8miHe5OiJxt4ZT
7PpNS4RzXpZSRcTznnPwjk/doal2z6b0cPLtrAwBpc1Wed9XRDG9UO/uDHx1xVhD+LPT+RUtWLi8
FZa3tRcj/RuoQwVqYTV6T23h6wSaxNbu0U1R8xpGeNaRpZPVRP7oRnmyhMoq/3XAm36n4ikfEGtU
iBg7nqFwuXHzktJVWv7/AsC5HDxkRV8XIN+rg5sqS8zCmcBJmPL5qogVqX+OY63gXbojXLpLVu7T
eyYNuwa1JEtHdV63Pj5/JYJyUIrxmtsHasnuXvKOlzha52MgNQsDJFUHklcVT2llht6xxkKRgAOE
yBYm36+ibatRiANIpg51oAcb2pLsumoYb4KGxCorkwWMCY8Ml6kn/UrLbBZmZSZQZ5FwVLBCKUi0
eMmdss4yKu15/PoMkDs9PU8GkMMzmm4+rXsAH+a0FbOlPSh0dQr/Svo+lsvJjsUps7qRVcAY5RH8
35bQ55VzhhteSuyqeYHoOIV0KhzJ+pYIvNv+xLM7CMxav3EOr9CJhY09hmODTXh3DLOPD5d26QBf
/Vjmprww2pV6NvlGNhSTzbb1IM/fk+V/DRob35B1beEvlZEbNWY7gwJxStvNH054RFfxanohRzJU
CMOWOssolSdXCuoeP20kOxO1dl/Q2M8TMtuvMqe9A846I9MFqOfBqCvWARawQdtK3e944TBNYtiJ
Y3wlv+a0AQSWVBptI6qhu/7ATvrmoM+Rwdx02COZx+/YmuzPrhlKwXVfrywTM7IjjxDg5jDSpNIT
6wWLL41D9CMAjUB6afC3qWnm7k5Zql95qHE1iKd50rNI7RUCBblXZH5ftUM5TZGewto9iJQ+SqSA
k4b+7lU+JPhGvuZW2LOv8urVSK5g7EqX7R1BeMB23hjRfj58ssCqCWM4BnS0ZaepZ5hshDLjNN+i
SnDV6CAkHFBHfOOroMm0qoxE3S84ukBk0Fs20G8bH+fmqGcy8lzInhA+oYcvwLrCeeNhkNHrGA5o
T50+Q/qiAE9uC45UU0uwcmc7qOYt2kYJQiNv48Bhc/DPAl/hzA0RaP86vTC+i4PRy6RWzEXJ9fPF
PvFwQJ9t0jqwAXmRHjbVNkZzcSbCAnjoVXX2Ceo+YkxB+RqqsWkyehxqeWx3S1FmQgOyYxQgn5Mt
hsRyDLaTXLVBzObLQV/0zDXKEOlq5T9mO31sUnuBfJeH4OSjAXHIPxIooQ7XBtPo0t2BfXAxW/CG
PFgxJXOM16j+4zq+pF58W1Rb5ALiQcjcKw2pI31BG3J+jxyHYaJHqF4Uwgu1P/HaaCFNCt2hkPXY
piBgOiowwQEE0zU1BumHWXNbXovKPvHnepmCK5eUPZKmtM4f8k0KAlqiVXY8q9rZ9pWa1gE+ndmQ
x5lu+U/nK7qXE/nryiHDBp34brd4Z7reuA/KP9dJ9aRkWdrl1Zwne8CGjo+fOWMDm9A60JGYpgRS
+1kBkPx08gh3bt5JAyRGZdkZ7WKucUJ6iPt+qvNERvuF+SATZJGsHRQ4XHgFAB64PgmtBtVfGY4U
ht/O/8uzWlxctvxVUORmH9koWjlwVINWhgPhoF7eym5w6eOLHG2oO3vha1xfirV8mp2aLXy61GGD
Jm2M7HnOU4d/gE6PFVGJEgI5B58BTrP/R+EbBbu5T+Fapubs4cGcSt4PB3CvOjxKxGA2YgdmvZwb
r0q/dPh/QpB3HzcdR+Wfu1vwpJczyGl1C2RAWsjZlpDakZLjieP5boYW+qZ7bZeNKm7aYMK9JevR
Une6cYoU1Zvrid2gXSmol8ZRi+UmV2b8CS67bVOKrvch4Td2YQncYuZxagz8KlewE+qTHcyWtZlK
eIT0UjOLexG/IsLf2S9P+s1S22zGsjanjItojFeroh13lNj7eyfNYXVTQ63hCJkYHgMCgJBLBDkV
JeJxnTIyant8+HGp8PMWVxEbce+AJRSHCLj1s+pp+XMXh/NYaqGYVgi0ShZCBt/8nXfPZ6D0SXju
PaIiGXR9+BxRdiQXy62CjIad+n3YiGx68x7EHlFqth3SfpB2tsC73xA+zLCyTLq+GWZWSFaWFj89
xxNOgQfJ3QUkIZo1uexiZSmuYIvTjMrM+Q==

</protect>

Leonov Alexander

2009-10-16T13:09:17Z

Aleonov:

<protect show="text" users="Aleonov,Bigfox" groups="sysop">
--- BEGIN KEY: RSA,adc501ec,RIJNDAEL-256,CBC,32,32 ---
r7RO/ZTfeupLeOOaBPIX/3xTsg5WFxZXIoEWktD62F1OVoI7eIyHcPc/XtEfdhf+GubeucXjE30N
HozclZjQZtbbNIWs9CIWbNjdqLbTYZH8Ga3ONVgJJbMLDptGxUSFMwkLL23vVxbAzakFFTdsGJC6
SYdg2HmUh7En7i8KfwM=
--- END KEY ---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=

</protect>

Leonov Alexander

2009-10-16T13:08:24Z

Aleonov:

<protect show="text" users="Aleonov,Bigfox" groups="sysop">
--- BEGIN KEY: RSA,adc501ec,RIJNDAEL-256,CBC,32,32 ---
9oJy0nDAAFftjtLpH9sQhigtI6bOSxVE4SN7dZY9KWIbEMOG2zeRIX4O3uVJ1kc3sVIjuSCtEHha
W90PIUT/vBDARmnjFx9cIMdNUXj85AbEF05gAvmgfRknVkWcDfdUqmCErp+VR8nb0G/lxyywrZ0l
ffOIWhDuntDWfkJfK4k=
--- END KEY ---
MqkpzFBJoztLaweQSYk5VQisdlJzksOg6m9YL7vOmvT1oNOXUw1ws1ZSPlo+RD5cKi9ObOCuqPXL
EEWX5fYZjh43Z0MxoGahUDHQh3/q5V53ySWvzb7bdlAYbDcI6gq1JTtZ6cvGMG8oQcyTuheBHVF5
CaSU30Gh5I57o+HTJ3DrcR/RhjB/j8VidKhKxERvPXNw6gmTqhQ7l4rquKg1pFSrGUZ4ne7Pyl/9
IyIPmBvf+1sPIID3owhsd+vqhN2LJ4B6nQwNRW7rbf8pul1kwnH+Wqg2nyslEVfVKKGpgkbFf1Ov
G5BouHWseyd7+V2/z23r7CWkERjuNf0PIbE5VVrSzKK0LWvhDIV/HcgzWsU5bs/TBZ6IkSLyqpTV
9eqBwb754bERZbVZC/mbjajEj6z2xwsmKY5g+SaXsq8p+enPvx56zmOPfzlhaI3Myg0XBPJhWZC2
asd1P+6JopboeMRHKuS7EPR1s+6SUXn0QddNl+8aJKQ5xGbeWmo59whqoOEdi43peK78AOw81UCR
kOvX84zdvi91sz0Ak4lzdyjtLUyyvsANkD4ht3z+gT8vwmwLgm4fSCDe6mfap5R163Vz298Rf8y8
S296DHfaUtOncA/p2klBqpiX5KDZq5G7ov5VAs8oFYH3KhKxyetIFsT04USRyCCLlELw5cetOeLe
iyi8V52+PUA0xwD8AWDbEvvJSM3evMnPk0VRKRTJ5b5RhGpuDFvSF3/Xw+l5ghzKWhL22NsprirR
gFwEDQXLkTDWSMgr5PumCHkHKJV8JOQlMeB2+1zlHYce/SQppBBzzFjiEEX3pB1ZU+fM8I2diciM
gwIQeWr1nDACt4a839O+BCWXEEyOVxvveSCe+cyuhDzQinfmJJXxn7Ffg6fwYlraSi8FlEOByH5E
mOmdu4siSdzaFSfwICShPd0GQZz1Rhcw9R/zq0IninkTYl5B3cYULm0KD9SdgHXq4ey8fw5Unn2X
KGn/Oti3T9nAdP7gx6HL0+BN5sFsHj28PAunc/Q5PyxElY8idk/4cLMCxwMkuSoM2wEJk1RatNFK
GKwwl4wNChZcI/EQumupWnfje8LbYMw95ypNU6f70pBfAqdSg0n1mK8PjcYIrRhZsN7XNpis3Qrf
mo5+r0CGEmah33JaDGUVtELa/+JcmXLr/Lj0HZ8RFtgAdRgYLKTi+RGoZavSq/8pUd9oCTeDchmY
LRMka16wJFZh/mb9MIc7hEgS9mZO8akBk8EVPC3TpNSLmYnQh7TJgw4DrFf43sDbjdN/oBbiLwlA
/dJ8z0lWnn9ijHO/YBsYdxBjvBsy48BZSBUnb9gpTLXI4GtCDZr/B/IubEzuWnLa5E/yF2hoXpTe
kaw0pIr88C0cjkreQUQVyztmFKWWz0hBESDUbU7DvFGJeUj5mWgMzNOJJz/8TtG3IQHJVd58tSCB
w/JrhWTSxfRAbeYYcXoCbbAT6dgsjUWIn6iMw4Q6+pNHfLn+1Z/Ot307E0eZH2n7RQBg9exlmVBd
/A5pkahGBuTWoFL/g5AyG15kXuCl4jZwFeMuX+H1T0jaw1EBDOi0A1svq8k5mgVZPe5XH1GRktTn
yezzEldes9GnloxEdz+SLzhofgs9ykNvoyxB8D1kOUHkkoJ9XswGIqXIXpIVZI/ynWYLvFRrAi29
9OD6Ba29IP03GlWW78oZXwMCMYgR6UMTUmaLHxZJio659yz0NGc5ZldPLHGF3aIbbof+BBwRYx+x
VVhnl1H/GEke9BMo2IQCdfyMa93V/KCA1CV9OJwrgApcEuA/075O/uf6PITxhZe3V0tdQZ4DNPWh
UcXCWTwEVZlxmf1y/ismXGMqurS9PXZva60r4QEBg2TiAnAvpF4DOlcPC6ATQoqZ311OXfk/VYs/
U5il9xjPC4Xl3U3/FI+hsdYW1mZRyFNzwL1Uu1m54Daq38bVYmJIQcmAk0mA3icn3/0Ur7h35pa/
l1Zcgy61ubGGdaB6WbqwvPYPyi3upKX1WbZNGZ/hRKpKEeJbkhNXhaRT20pISpe+f/1vy1arxtrG
d1yEfBIA7cVMCsLixV3BOJWPNUjWjyas2h7YI/ftlV12uCgXuNS75bxfx0no4BYRpQTVLpzO+4A1
+WA0XozzDtmvCIKIb2czfy9kiMctMBrYHr4Oqvup1474fllIBvPK+68hXM8yop1KSbw6rvzcBb7O
MsmPnimkX89WKv8dPFE2Nu81wEiKT0egQTief93EgYP/PstTV/jkFEhT70Qz7S2SgyWaIdA1AEwn
SLyV03Hr6RKkXPUCQvoLD5Avvgo4S9rxz6TpSKc/rmFVRBMUacFIz6hYGxSPHZhdGG8=

</protect>

Leonov Alexander

2009-10-16T13:07:12Z

Aleonov:

<protect show="text" users="Aleonov,Bigfox" groups="sysop">
--- BEGIN KEY: RSA,adc501ec,RIJNDAEL-256,CBC,32,32 ---
fGjj+md4JxmCVzS+kviNKHF6ODiyQu2cnZKTdoRON/IaQyZY4AbOwvSnyG8S+rXVgtZOAtPyb3pL
Usn4iwIeSJyKfM5pSuLX/RvdWUmYa6RedtGfl0+Gtn1bNnTLzwy5/1YmEPBIS45v58Y7nxwvTD55
kZK/5gBBxPRVaNTEMCM=
--- END KEY ---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=

</protect>

Leonov Alexander

2009-10-16T13:06:01Z

Aleonov:

<protect show="text" users="Aleonov,Bigfox" groups="sysop">
--- BEGIN KEY: RSA,adc501ec,RIJNDAEL-256,CBC,32,32 ---
u1VuCFfetfpr6a+zqOju6Ge61PAWEOkiq0M2NQI4Cf3tH0oEM0BnWwyL71nWvR9fhyT76GlS7Zue
85MrEN6347g0jqBcui6XAQd5w0ntGIOuhD+TyFTk7VRQsz8R5wF0gsijY4IYqfPn08KlPh15ecZT
c+7j2XNgpU6amjIMP4g=
--- END KEY ---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</protect>

Servery nms

2009-03-01T14:12:30Z

Aleonov: /* Notifikace */

Servery nms

2009-03-01T12:56:08Z

Aleonov: /* Windows servers */

Servery nms

2009-03-01T12:55:18Z

Aleonov: /* Default triggers */

Servery nms

2009-03-01T12:45:47Z

Aleonov: /* Format email notifikace */

Servery nms

2009-03-01T12:45:24Z

Aleonov: /* Format SMS notifikace */

Servery nms

2009-03-01T12:43:36Z

Aleonov: /* Format email notifikace */

Servery nms

2009-03-01T12:40:23Z

Aleonov: /* Format email notifikace */

Servery nms

2009-03-01T12:39:58Z

Aleonov: /* Format SMS notifikace */

Servery nms

2009-03-01T01:09:18Z

Aleonov: /* Software */

Servery nms

2009-03-01T01:07:53Z

Aleonov: /* Linux servers */

Servery nms

2009-03-01T01:04:44Z

Aleonov: /* Linux servers */

Servery nms

2009-03-01T01:00:32Z

Aleonov: /* Linux servers */

Servery nms

2009-03-01T00:56:48Z

Aleonov: /* Linux servers */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
{| frame="VOID" rules="NONE" frame="VOID" rules="NONE"
| width="322" height="14" align="LEFT" | '''Name'''
| width="267" align="LEFT" | '''Expression'''
| width="67" align="LEFT" | '''Severity'''
|-
| height="14" align="LEFT" | /etc/inetd.conf has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0
| align="LEFT" | Warning
|-
| height="14" align="LEFT" | /etc/passwd has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /etc/services has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/etc/services].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /usr/bin/ssh has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /usr/sbin/sshd has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /vmlinuz has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0
| align="LEFT" | Warning
|-
| height="14" align="LEFT" | Apache is not running on $server
| align="LEFT" | {$server:proc.num[httpd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Configured max number of opened files is too low on $server
| align="LEFT" | {$server:kernel.maxfiles.last(0)}<512
| align="LEFT" | Information
|-
| height="14" align="LEFT" | Configured max number of processes is too low on $server
| align="LEFT" | {$server:kernel.maxproc.last(0)}<256
| align="LEFT" | Information
|-
| height="14" align="LEFT" | Email (SMTP) server is down on $server
| align="LEFT" | {$server:net.tcp.service[smtp].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | FTP server is down on $server
| align="LEFT" | {$server:net.tcp.service[ftp].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Host information was changed on $server
| align="LEFT" | {$server:system.uname.diff(0)}>0
| align="LEFT" | Information
|-
| height="14" align="LEFT" | Hostname was changed on $server
| align="LEFT" | {$server:system.hostname.diff(0)}>0
| align="LEFT" | Information
|-
| height="14" align="LEFT" | IMAP server is down on $server
| align="LEFT" | {$server:net.tcp.service[imap].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Inetd is not running on $server
| align="LEFT" | {$server:proc.num[inetd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Lack of free memory on server $server
| align="LEFT" | {$server:vm.memory.size[free].last(0)}<10000
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Lack of free swap space on $server
| align="LEFT" | {$server:system.swap.size[,free].last(0)}<100000
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /
| align="LEFT" | {$server:vfs.fs.size[/,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /home
| align="LEFT" | {$server:vfs.fs.size[/home,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /opt
| align="LEFT" | {$server:vfs.fs.size[/opt,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /tmp
| align="LEFT" | {$server:vfs.fs.size[/tmp,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /usr
| align="LEFT" | {$server:vfs.fs.size[/usr,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /var
| align="LEFT" | {$server:vfs.fs.size[/var,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /
| align="LEFT" | {$server:vfs.fs.inode[/,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /home
| align="LEFT" | {$server:vfs.fs.inode[/home,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /opt
| align="LEFT" | {$server:vfs.fs.inode[/opt,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /tmp
| align="LEFT" | {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /usr
| align="LEFT" | {$server:vfs.fs.inode[/usr,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Mysql is not running on $server
| align="LEFT" | {$server:proc.num[mysqld].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | News (NNTP) server is down on $server
| align="LEFT" | {$server:net.tcp.service[nntp].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | POP3 server is down on $server
| align="LEFT" | {$server:net.tcp.service[pop].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Processor load is too high on $server
| align="LEFT" | {$server:system.cpu.load[,avg1].last(0)}>5
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Server $server is unreachable
| align="LEFT" | {$server:status.last(0)}=2
| align="LEFT" | High
|-
| height="14" align="LEFT" | SSH server is down on $server
| align="LEFT" | {$server:net.tcp.service[ssh].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Sshd is not running on $server
| align="LEFT" | {$server:proc.num[sshd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Syslogd is not running on $server
| align="LEFT" | {$server:proc.num[syslogd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Too many processes on $server
| align="LEFT" | {$server:proc.num[].last(0)}>300
| align="LEFT" | High
|-
| height="14" align="LEFT" | Too many processes running on $server
| align="LEFT" | {$server:proc.num[,,run].last(0)}>10
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Too may users connected on server $server
| align="LEFT" | {$server:system.users.num.last(0)}>50
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Version of zabbix_agent(d) was changed on $server
| align="LEFT" | {$server:agent.version.diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | WEB (HTTP) server is down on $server
| align="LEFT" | {$server:net.tcp.service[http].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Zabbix_agentd is not running on $server
| align="LEFT" | {$server:proc.num[zabbix_agentd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Zabbix_server is not running on $server
| align="LEFT" | {$server:proc.num[zabbix_server].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | $server has just been restarted
| align="LEFT" | {$server:system.uptime.last(0)}<600
| align="LEFT" | Information
|}

= Notifikace =
Notifikace sou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přez GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>To: $HOSTALIAS@sh.cvut.cz
Head>From: nms@sh.cvut.cz
Head>Subject: $HOSTALIAS - $ALARMTYPE
Body>Notification Type: $NOTIFICATIONTYPE$
Body>Host: $HOSTALIAS$
Body>State: $HOSTSTATE$ for $HOSTDURATION$
Body>Alarmtype: $ALARMTYPE
Body>Address: $HOSTADDRESS$
Body>Info: $HOSTOUTPUT$
Body>Date/Time: $LONGDATETIME$
Body>ACK by: $HOSTACKAUTHOR$
Body>Comment: $HOSTACKCOMMENT$
Body>Severity: $SEVERITY
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>To: $ADMIN_NUMBER
Head>From: $NMS_NUMBER

Body>Host: $HOSTALIAS
Body>State: $HOSTSTATE$ for $HOSTDURATION$
Body>Date/Time: $LONGDATETIME$
Body>Alarmtype: $ALARMTYPE
Body>Severity: $SEVERITY
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==

* zabbix 1.4.2 - activity and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru

== Hostované služby ==

* monitoring serverů

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Ruzne navody =
== Nastaveni zabbix agenta ==
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

Servery nms

2009-03-01T00:55:26Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* performance a alarm monitoring serveru a sitovych prvku

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Komunikační protokoly vyuzivany k monitoringu =
* ICMP (ping)
* SNMP (161/UDP)
* SYSLOG (514/UDP)
* ZABBIX AGENT (10050/TCP)
* ZABBIX TRAP (10051/TCP)

= Alarm monitoring =
== Dostupnost sítovych zarizeni ==
* Monitorovaní stavu portů u jednotlivých propojů na páteři a blocích pomocí syslog správ nebo SNMP trapů
* Monitorování dostupnosti síťových prvkú pomocí ICMP pingu
* Seznam síťových prvků a monitorovaných interfaců:[xls]

== Dostupnost serverů ==
* Dostupnost serverů se ověřuje pomoci ICMP pingu.
* Seznam monitorovaných serverů: [xls]

== Dostupnost služeb ==
* Monitorování dostupnosti TCP/UDP služeb je zabezpečen pomocí požadavků na daný TCP/UDP port a kontrolou bežíciho procesu
* Seznam ověřovaných služeb: [xls]

= Performance monitoring =
* Zátež CPU (load)
* Vyuziti pameti
* Mereni teplot
* Chybovost sitovych interfacu
* Stav baterie APC

= Severity =
* Information
* Warning
* Average
* High
* Disaster

= Default triggers =
== Linux servers ==
| width="322" height="14" align="LEFT" | '''Name'''
| width="267" align="LEFT" | '''Expression'''
| width="67" align="LEFT" | '''Severity'''
|-
| height="14" align="LEFT" | /etc/inetd.conf has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/etc/inetd.conf].diff(0)}>0
| align="LEFT" | Warning
|-
| height="14" align="LEFT" | /etc/passwd has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/etc/passwd].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /etc/services has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/etc/services].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /usr/bin/ssh has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/usr/bin/ssh].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /usr/sbin/sshd has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/usr/sbin/sshd].diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | /vmlinuz has been changed on server $server
| align="LEFT" | {$server:vfs.file.cksum[/vmlinuz].diff(0)}>0
| align="LEFT" | Warning
|-
| height="14" align="LEFT" | Apache is not running on $server
| align="LEFT" | {$server:proc.num[httpd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Configured max number of opened files is too low on $server
| align="LEFT" | {$server:kernel.maxfiles.last(0)}<512
| align="LEFT" | Information
|-
| height="14" align="LEFT" | Configured max number of processes is too low on $server
| align="LEFT" | {$server:kernel.maxproc.last(0)}<256
| align="LEFT" | Information
|-
| height="14" align="LEFT" | Email (SMTP) server is down on $server
| align="LEFT" | {$server:net.tcp.service[smtp].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | FTP server is down on $server
| align="LEFT" | {$server:net.tcp.service[ftp].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Host information was changed on $server
| align="LEFT" | {$server:system.uname.diff(0)}>0
| align="LEFT" | Information
|-
| height="14" align="LEFT" | Hostname was changed on $server
| align="LEFT" | {$server:system.hostname.diff(0)}>0
| align="LEFT" | Information
|-
| height="14" align="LEFT" | IMAP server is down on $server
| align="LEFT" | {$server:net.tcp.service[imap].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Inetd is not running on $server
| align="LEFT" | {$server:proc.num[inetd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Lack of free memory on server $server
| align="LEFT" | {$server:vm.memory.size[free].last(0)}<10000
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Lack of free swap space on $server
| align="LEFT" | {$server:system.swap.size[,free].last(0)}<100000
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /
| align="LEFT" | {$server:vfs.fs.size[/,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /home
| align="LEFT" | {$server:vfs.fs.size[/home,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /opt
| align="LEFT" | {$server:vfs.fs.size[/opt,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /tmp
| align="LEFT" | {$server:vfs.fs.size[/tmp,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /usr
| align="LEFT" | {$server:vfs.fs.size[/usr,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low free disk space on $server volume /var
| align="LEFT" | {$server:vfs.fs.size[/var,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /
| align="LEFT" | {$server:vfs.fs.inode[/,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /home
| align="LEFT" | {$server:vfs.fs.inode[/home,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /opt
| align="LEFT" | {$server:vfs.fs.inode[/opt,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /tmp
| align="LEFT" | {$server:vfs.fs.inode[/tmp,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Low number of free inodes on $server volume /usr
| align="LEFT" | {$server:vfs.fs.inode[/usr,pfree].last(0)}<10
| align="LEFT" | High
|-
| height="14" align="LEFT" | Mysql is not running on $server
| align="LEFT" | {$server:proc.num[mysqld].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | News (NNTP) server is down on $server
| align="LEFT" | {$server:net.tcp.service[nntp].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | POP3 server is down on $server
| align="LEFT" | {$server:net.tcp.service[pop].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Processor load is too high on $server
| align="LEFT" | {$server:system.cpu.load[,avg1].last(0)}>5
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Server $server is unreachable
| align="LEFT" | {$server:status.last(0)}=2
| align="LEFT" | High
|-
| height="14" align="LEFT" | SSH server is down on $server
| align="LEFT" | {$server:net.tcp.service[ssh].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Sshd is not running on $server
| align="LEFT" | {$server:proc.num[sshd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Syslogd is not running on $server
| align="LEFT" | {$server:proc.num[syslogd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Too many processes on $server
| align="LEFT" | {$server:proc.num[].last(0)}>300
| align="LEFT" | High
|-
| height="14" align="LEFT" | Too many processes running on $server
| align="LEFT" | {$server:proc.num[,,run].last(0)}>10
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Too may users connected on server $server
| align="LEFT" | {$server:system.users.num.last(0)}>50
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Version of zabbix_agent(d) was changed on $server
| align="LEFT" | {$server:agent.version.diff(0)}>0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | WEB (HTTP) server is down on $server
| align="LEFT" | {$server:net.tcp.service[http].last(0)}=0
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Zabbix_agentd is not running on $server
| align="LEFT" | {$server:proc.num[zabbix_agentd].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | Zabbix_server is not running on $server
| align="LEFT" | {$server:proc.num[zabbix_server].last(0)}<1
| align="LEFT" | Average
|-
| height="14" align="LEFT" | $server has just been restarted
| align="LEFT" | {$server:system.uptime.last(0)}<600
| align="LEFT" | Information
|

= Notifikace =
Notifikace sou rozesílane emailem pres smtp server service.sh.cvut.cz na adresu $server@sh.cvut.cz a přez GSM modul formou SMS (zatim neimplementovano).

== Format email notifikace ==
<pre>
Head>To: $HOSTALIAS@sh.cvut.cz
Head>From: nms@sh.cvut.cz
Head>Subject: $HOSTALIAS - $ALARMTYPE
Body>Notification Type: $NOTIFICATIONTYPE$
Body>Host: $HOSTALIAS$
Body>State: $HOSTSTATE$ for $HOSTDURATION$
Body>Alarmtype: $ALARMTYPE
Body>Address: $HOSTADDRESS$
Body>Info: $HOSTOUTPUT$
Body>Date/Time: $LONGDATETIME$
Body>ACK by: $HOSTACKAUTHOR$
Body>Comment: $HOSTACKCOMMENT$
Body>Severity: $SEVERITY
</pre>

== Format SMS notifikace ==
* Maximálně 160 znaků.
<pre>
Head>To: $ADMIN_NUMBER
Head>From: $NMS_NUMBER

Body>Host: $HOSTALIAS
Body>State: $HOSTSTATE$ for $HOSTDURATION$
Body>Date/Time: $LONGDATETIME$
Body>Alarmtype: $ALARMTYPE
Body>Severity: $SEVERITY
</pre>

= Informace o serveru nms.sh.cvut.cz =

* Operační systém : Debian Linux Lenny
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==

* zabbix 1.4.2 - activity and performance monitoring
* cacti 0.7.8c - monitoring sitoveho provozu na portech cisco routru

== Hostované služby ==

* monitoring serverů

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Ruzne navody =
== Nastaveni zabbix agenta ==
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

== Nastaveni cisco routru ==
Global settings:
<pre>
logging 147.32.127.234
snmp-server enable traps
snmp-server enable authentication
snmp-server enable linkdown linkup
snmp-server enable coldstart warmstart
snmp-server enable traps chassis
snmp-server enable traps module
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps cpu threshold
</pre>

Interface settings:
<pre>
logging event link-status
snmp trap link-status
</pre>

Servery nms

2009-03-01T00:53:40Z

Aleonov: /* Dostupnost sítovycg zarizeni */

Servery nms

2009-03-01T00:46:20Z

Aleonov:

Servery nms

2009-03-01T00:42:01Z

Aleonov: /* Performnce monitoring */

Servery nms

2009-03-01T00:41:39Z

Aleonov:

Servery nms

2009-03-01T00:32:22Z

Aleonov:

Servery nms

2009-03-01T00:27:30Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* monitoring aktivity jednotlivých serveru
* monitoring jednotlivých služeb na daných serveru
* performance monitoring serveru
* monitoring sítě a provozu na portech

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Informace o nms.sh.cvut.cz =

* Operační systém : Debian Linux
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==

* zabbix - activity and performance monitoring
* cacti - monitoring sitoveho provozu na portech cisco routru

== Hostované služby ==

* monitoring serverů

== Administrátorský (root) přístup na server ==

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Ruzne navody =
== Nastaveni zabbix agenta ==
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Servery nms

2009-03-01T00:26:04Z

Aleonov: /* Operacni systemy */

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* monitoring aktivity jednotlivých serveru
* monitoring jednotlivých služeb na daných serveru
* performance monitoring serveru
* monitoring sítě a provozu na portech

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
* Debian GNU Linux Lenny
* Debian GNU Linux 4.0 Etch
* Debian GNU Linux 3.1 Sarge
* FreeBSD 6.3
* Microsoft Windows Server 2003 Standart x64
* Microsoft Windows Server 2008

= Informace o nms.sh.cvut.cz =

* Operační systém : Debian Linux
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==

* zabbix - activity and performance monitoring
* cacti - monitoring sitoveho provozu na portech cisco routru

= Hostované služby =

* monitoring serverů

= Administrátorský (root) přístup na server =

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Nastaveni zabbix agenta =
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Servery nms

2009-03-01T00:24:56Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* monitoring aktivity jednotlivých serveru
* monitoring jednotlivých služeb na daných serveru
* performance monitoring serveru
* monitoring sítě a provozu na portech

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

= Monitorované platformy =
== Switche a routre ==
* Cisco Catalyst 6509
* Cisco 3750
* Cisco 2950
* Cisco 2960
* Cisco Air Ap 1242AG-E-K9

== Servery ==
* HP Proliant 145 G2
* HP Proliant DL380 G5
* Různe x86a x64 servery
* Dell ???

== Jina zarizeni ==
* KVM
* APC Symmetra LX 16kVA

== Operacni systemy ==
Debian GNU Linux Lenny
Debian GNU Linux 4.0 Etch
Debian GNU Linux 3.1 Sarge
FreeBSD 6.3
Microsoft Windows Server 2003 Standart x64
Microsoft Windows Server 2008

= Informace o nms.sh.cvut.cz =

* Operační systém : Debian Linux
* Hardware : Dell Power Edge
* Správce : [mailto:james@nightmare.sh.cvut.cz James]
* Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

== Software ==

* zabbix - activity and performance monitoring
* cacti - monitoring sitoveho provozu na portech cisco routru

= Hostované služby =

* monitoring serverů

= Administrátorský (root) přístup na server =

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Nastaveni zabbix agenta =
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Servery nms

2009-03-01T00:20:25Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
* monitoring aktivity jednotlivých serveru
* monitoring jednotlivých služeb na daných serveru
* performance monitoring serveru
* monitoring sítě a provozu na portech

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

== Monitorované platformy ==

; Operační systém : Debian Linux
; Hardware : Dell Power Edge
; Správce : [mailto:james@nightmare.sh.cvut.cz James]
; Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

= Software =

* zabbix - activity and performance monitoring
* cacti - monitoring sitoveho provozu na portech cisco routru

= Hostované služby =

* monitoring serverů

= Administrátorský (root) přístup na server =

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Nastaveni zabbix agenta =
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Servery nms

2009-03-01T00:15:54Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

== Cíle ==
- monitoring aktivity jednotlivých serveru 
- monitoring jednotlivých služeb na daných serveru 
- performance monitoring serveru 
- monitoring sítě a provozu na portech 

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

; Operační systém : Debian Linux
; Hardware : Dell Power Edge
; Správce : [mailto:james@nightmare.sh.cvut.cz James]
; Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

= Software =

* zabbix - activity and performance monitoring
* cacti - monitoring sitoveho provozu na portech cisco routru

= Hostované služby =

* monitoring serverů

= Administrátorský (root) přístup na server =

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Nastaveni zabbix agenta =
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Servery nms

2009-02-28T17:55:45Z

Aleonov:

= Obecné informace =
NMS je Network monitoring system. Hlavním cílem tohoto serveru je, monitorování dostupnosti a performance veškerého provozu na Strahově.

; Cíle:
- monitoring aktivity jednotlivých serveru 
- monitoring jednotlivých služeb na daných serveru 
- performance monitoring serveru 
- monitoring sítě a provozu na portech 

Cílem je prozkoumat, zda je dany spravovaný server aktivní, pokud aktivní je, je vše v pořádku, v opačném případě zašle systém e-mail správci, zástupci a technickému manažerovi. Systém dále zašle SMS správci a jeho zástupci o nekativitě PC.

; Operační systém : Debian Linux
; Hardware : Dell Power Edge
; Správce : [mailto:james@nightmare.sh.cvut.cz James]
; Zabbixadmin : [mailto:alexander@leonov.cz Netopier]

= Software =

* zabbix - activity and performance monitoring
* cacti - monitoring sitoveho provozu na portech cisco routru

= Hostované služby =

* monitoring serverů

= Administrátorský (root) přístup na server =

[[Římek Jakub]] - správce serveru
[[Leonov Alexander]] - zabbix admin

[[category:servery]]

= Nastaveni zabbix agenta =
/etc/zabbix/zabbix_agent.conf

<pre>
Server=147.32.127.234
Timeout=3
</pre>

/etc/zabbix/zabbix_agentd.conf
<pre>
Server=147.32.127.234
ServerPort=10051
Hostname=$hostname_serveru.sh.cvut.cz
ListenPort=10050
ListenIP=$ipadresa_serveru
StartAgents=5
Timeout=3
</pre>

Servery nms

2009-02-28T17:49:17Z

Aleonov: /* Administrátorský (root) přístup na server */

Servery nms

2009-02-28T17:48:43Z

Aleonov: /* Software */