Downladed Here

Total Page:16

File Type:pdf, Size:1020Kb

Downladed Here BigSister 1 / 111 BigSister Configuring and installing BigSister BigSister 2 / 111 COLLABORATORS TITLE : REFERENCE : BigSister ACTION NAME DATE SIGNATURE WRITTEN BY Thomas Aeby, Didier October 28, 2009 Bringer, Joerg Fritsch, and Alexander Kerr REVISION HISTORY NUMBER DATE DESCRIPTION NAME 1.0 11 December 2000 Initial release. tom 1.01 March 2002 Docbook format dda 1.01 March 2002 When describing commands, I tried to write dda arguments like in any Programmation Book ie command { mandatory args } [ optional arguments ] Skins for CGI 1.5 August 2003 Done further work on the Docbook format. jf Introduced Big Sister logo. Introduced html chunks. Rewritten some parts in order to get them taylored to Big Sister rev. 0.98b3 and give the reader a better understanding. 1.5.1 August 2003 Corrected english wording, grammar and style ak 1.9 November 2005 Did some major improvements to reflect the ta current status of the project BigSister 3 / 111 Contents 1 License - The GNU General Public License1 1.1 Preamble . .1 1.2 TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION . .1 2 Installation 5 2.1 Prerequisites . .5 2.2 Big Sister Components . .5 2.3 Installing Big Sister . .7 2.3.1 Paths to files . .7 2.3.2 Installation from sources . .7 2.3.3 Installing Big Sister from the RPM-packages . .9 2.3.3.1 Fresh install . .9 2.3.3.2 Upgrading from previous versions . .9 2.3.4 Installing Big Sister on Debian . 10 2.3.4.1 Download vs. APT . 10 2.3.5 Installing Windows binary . 10 2.4 Post-installation tasks . 10 2.4.1 Configuring your webserver (Big Sister server only) . 10 2.4.2 Installing Perl modules . 11 2.4.3 Installing RRDTool . 11 2.5 Install Big Sister plugins . 12 3 Agent Configuration 13 3.1 First steps . 13 3.2 How to start the daemons at boot time . 13 3.3 Adding new hosts and services . 14 3.3.1 The uxmon-net file . 14 3.3.1.1 Multiple uxmon-net configuration files . 15 3.3.1.2 The uxmon-asroot configuration file(s) . 15 3.3.2 Network objects with simple names . 15 3.3.3 Network objects with alias names . 15 BigSister 4 / 111 3.3.4 Health checks . 16 3.3.4.1 Defining the scope of monitored systems: DESCR . 16 3.3.4.2 Common syntax . 17 3.3.4.3 Pointing the agent to your server . 17 3.3.4.4 Check frequencies . 18 3.3.4.5 Defaults . 19 3.3.5 Using self contained healthcheks: testers . 19 4 Server Configuration 20 4.1 Server security . 20 4.1.1 Server vulnerability and server access . 20 4.1.2 Server access: /etc/bigsister/permissions ........................... 20 4.1.3 Data integrity and authenticity . 21 4.1.4 Tunneling Big Sister tcp-connections through Secure Shell . 22 4.1.4.1 Agent to Server . 23 4.1.4.2 Server to Server . 23 4.2 Configure Alarming . 23 4.2.1 Rules . 23 4.2.2 Patterns - "when to do things" . 24 4.2.2.1 Simple rule . 24 4.2.2.2 Using wildcard in rules . 24 4.2.2.3 Using groups in rules . 25 4.2.2.4 Using criteria in rules . 25 4.2.3 Description - "what todo".......................................... 25 4.2.4 PAGER rules: influencing alarm delivery . 26 4.2.5 Definitions and their meaning . 26 4.3 Use and configure SLA/Availability management . 26 4.3.1 Setting it up Availability management . 28 4.3.1.1 Running the reporting tool . 29 4.3.1.2 The results . 30 4.3.1.3 Using savelogs/archivelogs and availability management . 30 4.4 Sending server commands . 30 4.4.1 Using the telnet client . 31 4.4.2 Using the bsadmin tool . 31 4.5 Configuring the Server and customizing the Display . 32 4.5.1 The main server configuration file: bb-display.cfg . 32 4.5.2 The options section . 32 4.5.3 The names and group section . 33 4.5.3.1 Defining and using groups . 33 BigSister 5 / 111 4.5.3.2 Automatically joined groups . 33 4.5.3.3 Deleting groups . 35 4.5.4 The Webpages section . 35 4.5.4.1 Skins . 37 4.5.4.2 Skins in CGI programs . 38 4.5.4.3 Frames . 38 4.5.5 Using imagemaps . 38 4.6 Deleting unused and stale network objects . 39 4.7 Attaching the Big Sister server to a database . 40 4.7.1 Enabling data logging in a database . 40 4.7.2 Data logging in MySQL database . 41 4.7.2.1 Prerequisits . 41 4.7.2.2 Creating the database and database user . 41 4.7.2.3 Configure Big Sister . ..
Recommended publications
  • Don't Make Me Think, Revisited
    Don’t Make Me Think, Revisited A Common Sense Approach to Web Usability Steve Krug Don’t Make Me Think, Revisited A Common Sense Approach to Web Usability Copyright © 2014 Steve Krug New Riders www.newriders.com To report errors, please send a note to [email protected] New Riders is an imprint of Peachpit, a division of Pearson Education. Editor: Elisabeth Bayle Project Editor: Nancy Davis Production Editor: Lisa Brazieal Copy Editor: Barbara Flanagan Interior Design and Composition: Romney Lange Illustrations by Mark Matcho and Mimi Heft Farnham fonts provided by The Font Bureau, Inc. (www.fontbureau.com) Notice of Rights All rights reserved. No part of this book may be reproduced or transmitted in any form by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of the publisher. For information on getting permission for reprints and excerpts, contact [email protected]. Notice of Liability The information in this book is distributed on an “As Is” basis, without warranty. While every precaution has been taken in the preparation of the book, neither the author nor Peachpit shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the instructions contained in this book or by the computer software and hardware products described in it. Trademarks It’s not rocket surgery™ is a trademark of Steve Krug. Many of the designations used by manufacturers and sellers to distinguish their products are claimed as trademarks. Where those designations appear in this book, and Peachpit was aware of a trademark claim, the designations appear as requested by the owner of the trademark.
    [Show full text]
  • JAPHETH C. CLEAVER San Diego, CA 92112-1534 Cell (858) 518-5555 • Home/Fax (619) 255-0916 [email protected]
    http://linkd.in/jcleaver JAPHETH C. CLEAVER San Diego, CA 92112-1534 Cell (858) 518-5555 • Home/Fax (619) 255-0916 [email protected] OBJECTIVE Seeking a varied and challenging system and operational engineering position requiring new and creative applications of technology to solve functional problems. GENERAL QUALIFICATIONS Can offer a diverse and eclectic background in Linux system administration, development, NOC management, consulting, site reliability engineering. Demonstrated proficiency in large scale Linux monitoring, operational engineering in a proactive manner, CI/build pipeline construction, mass RedHat deployments, high-availability Linux stack design, and NOC/SRE management in 24/7 service uptime environments. EXPERIENCE 8/2018-present Sr. Linux Engineer, Helix/TAOS LLC • Linux systems engineering and PostgreSQL performance tuning for DNA sequencing and processing laboratory in mixed EL6/7 and Windows Server environments • DNS re-architecture; monitoring using PRTG, SolarWinds, and SumoLogic endpoints • RedHat Enterprise Linux OS version uplift (5/6 to 7), lifecycle and core IT monitoring functions for on-site deployments 10/2016-6/2018 DevOps Linux Engineer, Awarepoint, Inc • Lifecycle design for all AWS-hosted Linux clusters, including stateless redeployment and persistent OS stacks, and internal Linux operations and development servers • Salt integration with Amazon EC2 systems deployment • Kafka deployment for internal messaging bus with Kubernetes • Primary engineering responsibility for forward-deployed Linux servers of medical RTLS data to best practices. (OS uplift, SELinux and security auditing, monitoring, lifecycle) • Architecture of CI build systems for 3-tier java stack deployments, reimplementing existing RPM design with best practices for RHEL 6 and Apache Tomcat/Spring deploy 1/2016-10/2016 Contract/Consulting • Senior Linux Engineer (WWT, Inc) with Intuit • Lead System Engineer (VACO), with FICO • Lead Linux System Administrator (Insight Global), with HD Supply 10/2015-12/2015 Senior Systems Engineer, Everyone Counts, Inc.
    [Show full text]
  • Offener Oldtimer Xymon
    05/2014 Monitoring mit Xymon Titelthema Offener Oldtimer Xymon 42 Unter dem Kürzel Bbgen kennen manch altgediente Unix-Freaks noch ein Big-Brother-Addon, dem 2002 der Xymon-Vorgänger namens Hobbit entsprang. Erst seit 2009 firmiert es unter seinem heutigen Namen. Obwohl ein echter Oldtimer, hat das Tool den Admins viel zu bieten. Thomas Eckert, Markus Feilner www.linux-magazin.de das Tool bereits mit, wobei die Skripte meist deutlich bessere und realistischere Ergebnisse liefern als etwa Bash-Skripte oder Kommandos wie Netstat. Die Da- ten der CPU-, RAM-, Festplatten- und Netzwerkauslastung sammelt der lokale Monitoring-Agent namens »xymon-cli- ent«. Für SNMP-Tests, Mail-Queues und andere lokale Abfragen stehen passende Erweiterungen parat. Wer eine größere Menge von Gästen überwachen will, aber nur die wichtigs- ten Informationen aus diesen benötigt, beispielsweise CPU, RAM und Netz- werkauslastung, möchte vielleicht auch ganz auf den oder die Agenten in den virtuellen Maschinen verzichten und sich © Roxana Gonzalez, 123RF Gonzalez, © Roxana die Daten direkt aus den Tools des Hyper- visors liefern lassen, etwa von der Lib- Autofans wissen: Alt muss kein Syno- und Konfiguration eines Xymon-Servers virt. Obwohl das bei vielen Monitoring- nym für hässlich oder gar Schrott sein. für die Überwachung des Testaufbaus aus Lösungen zum Standard gehört, scheint Das Agent-basierte Monitoring-System fünf Servern. Das sollte selten mehr als derlei bei Xymon nicht möglich, auch Xymon Systems and Network Monitor etwa 30 Minuten erfordern. wenn Entwickler wohl schon länger da- ([1], unter GPLv2) stammt teilweise aus Gleich bei der Gruppe der Netzwerktests ran arbeiten [3]. dem vorigen Jahrtausend [2], bringt aber zeigt sich die angenehme Seite von Xy- mit zentraler Konfiguration, flexiblen mon: Admins benötigen keine weitere Installation Netzwerktests und hervorragenden Er- Konfiguration auf den zu testenden weiterungsmöglichkeiten viele Features.
    [Show full text]
  • MONITORING TOOLS for LARGER SITES by Stephen Chan, Cary Whitney, Iwona Sakreja, and Shane Canon
    THE MAGAZINE OF USENIX & SAGE August 2001 • Volume 26 • Number 5 Special Focus Issue:Clustering inside: Guest Editor: Joseph L. Kaiser CLUSTERS MONITORING TOOLS FOR LARGER SITES by Stephen Chan, Cary Whitney, Iwona Sakreja, and Shane Canon & The Advanced Computing Systems Association & The System Administrators Guild monitoring tools for larger sites Introduction by Stephen Chan, One of the primary responsibilities of system administrators is to ensure that Chan PDSF lead. He has spent the last 10 LUSTERS systems are running and users don’t experience any service interruptions. As years working either as a system engineer C an environment becomes larger, with more services and more dependencies, of as a UNIX SA. it becomes increasingly difficult to track the state of your site. For small sites, Cary Whitney, or for sites with very specific requirements, administrators often create cus- Whitney has worked on PDSF at LBNL since 1999, and has played a key role in tom scripts or other monitoring tools to watch their environment and report PDSF's past and ongoing development. any problems. However, as sites become larger and more complex, or moni- Iwona Sakreja, toring policies become more stringent, it makes sense to look for existing Sakrejda started in PDSF User Services in June 2000). Prior to that worked for ten tools and build upon them. So long as the tool is stable and well matched for years at LBNL in the Nuclear Science Divi- your environment, this is an efficient approach. With the proliferation of the sion. and Shane Canon Internet and the burgeoning open source movement, there are more tools Canon is a system administrator at NERSC than ever before to monitor your site.
    [Show full text]
  • Proceedings of the 4Th Annual Linux Showcase & Conference, Atlanta
    USENIX Association Proceedings of the 4th Annual Linux Showcase & Conference, Atlanta Atlanta, Georgia, USA October 10 –14, 2000 THE ADVANCED COMPUTING SYSTEMS ASSOCIATION © 2000 by The USENIX Association All Rights Reserved For more information about the USENIX Association: Phone: 1 510 528 8649 FAX: 1 510 548 5738 Email: [email protected] WWW: http://www.usenix.org Rights to individual papers remain with the author or the author's employer. Permission is granted for noncommercial reproduction of the work for educational or research purposes. This copyright notice must be included in the reproduced paper. USENIX acknowledges all trademarks herein. Introducing Linux File Services into a Windows NT Network: A Pilot Program Richard R. Morgan Consultant − VistaRMS, Inc. Abstract This paper is a report on a pilot program to implement Linux and Samba as a file server in a telecommunications company of about 5,000 people. The intent of the pilot program was to demonstrate the feasibility and cost− effectiveness of using Linux servers in the enterprise, as well as to illustrate the seamless integration with Windows NT desktop clients that Samba can provide. We will review the computing environment, the reasons for certain choices in hardware and software, as well as the steps in the implementation process. Introduction Unix servers from Sun, Hewlett−Packard, and IBM. So, the use of a Unix (or ‘Unix−like’) solution was not Linux seems to be on everyone’s mind today. My a completely foreign idea, although these Unix servers workgroup is no different, except that unlike many of typically run large databases and applications.
    [Show full text]
  • Andrews Ku 0099M 16872 DA
    Evaluating the Proliferation and Pervasiveness of Leaking Sensitive Data in the Secure Shell Protocol and in Internet Protocol Camera Frameworks Ron Andrews B.S. Computer Science, University of Kansas, 2003 Submitted to the graduate degree program in Electrical Engineering and Computer Science Department and the Graduate Faculty of the University of Kansas in partial fulfillment of the requirements for the degree of Masters of Science in Computer Science. Chair: Alexandru G. Bardas Fengjun Li Bo Luo Date defended: Nov 18, 2019 The Dissertation Committee for Ron Andrews certifies that this is the approved version of the following dissertation : Evaluating the Proliferation and Pervasiveness of Leaking Sensitive Data in the Secure Shell Protocol and in Internet Protocol Camera Frameworks Chair: Alexandru G. Bardas Date approved: Nov 18, 2019 ii Abstract In George Orwell’s nineteen eighty-four: A novel, there is fear regarding what “Big Brother”, knows due to the fact that even thoughts could be “heard”. Though we are not quite to this point, it should concern us all in what data we are transferring, both intentionally and unintentionally, and whether or not that data is being “leaked”. In this work, we consider the evolving landscape of IoT devices and the threat posed by the pervasive botnets that have been forming over the last several years. We look at two specific cases in this work. One being the practical application of a botnet system actively executing a Man in the Middle Attack against SSH, and the other leveraging the same paradigm as a case of eavesdropping on Internet Protocol (IP) cameras.
    [Show full text]
  • A File Transfer Protocol Using Noise Protocol Framework
    Hermod: A File Transfer Protocol Using Noise Protocol Framework Markus Åkesson dat14mak Department of Electrical and Information Technology Lund University Supervisor: Paul Stankovski Wagner Daniel Jankovic Stefan Chevul Examiner: Thomas Johansson June 12, 2020 c 2020 Printed in Sweden Tryckeriet i E-huset, Lund Abstract Transferring files between computers and servers has been an area of interest since early days of the modern computer era. With the rise of distributed computing and data centres, the interest has only grown stronger. Todays solutions for trans- ferring files often rely on Secure File Transfer Protocol (SFTP) and Secure Shell Protocol (SSH) for doing so securely. Any vulnerabilities in the protocols would lead to a huge security gap to fill. The newly released Noise Protocol Framework provides a promising tool for designing a new secure file transfer protocol. The framework allows for the cre- ation of Diffie-Hellman based protocols that provides confidentiality, integrity and authentication. After a review of the security provided by SSH for SFTP, this thesis provides a proof-of-concept for a new secure file transfer protocol developed from the Noise Protocol Framework. In addition to the specification a reference implementation is provided to allow further testing and benchmarking. The proposed protocol, Hermod, eliminates the drawbacks in the configura- tion procedure of SSH and SFTP servers while still providing the same security properties. Hermod also comes with improved performance compared to SFTP, especially for smaller files. i ii Forewords I would like to express my gratitude towards Advenica AB for allowing me to pursue and complete this thesis. I would also like to thank my parents Stefan and Karin and my sister Johanna for their support.
    [Show full text]
  • Advanced Unix Maintenance Guide Outdated! the Contents of This Manual Are Not Relevant Anymore
    ]project-open[ V3.1 Advanced Unix Maintenance Guide Outdated! The contents of this manual are not relevant anymore. Please see the "PO-Unix-Simplified-Install- Guide" for Linux installation instructions. Frank Bergmann, V1.11, 2006-06-10 Outdated! The contents of this manual are not relevant anymore. Please see the "PO-Unix-Simplified-Install-Guide" for Linux installation instructions. INDEX 1 ABOUT THIS DOCUMENT.............................................................................. 4 1.1 VERSION ...............................................4 1.2 SCOPE .................................................4 1.3 AUDIENCE ..............................................4 1.4 VERSION HISTORY .........................................4 1.5 TODO’S................................................4 2 SYSTEM OVERVIEW ...................................................................................... 5 2.1 CONTEXT OVERVIEW ........................................5 2.2 OPERATION OVERVIEW ......................................6 2.3 ROLES AND RESPONSIBILITIES ................................7 3 BACKUP.......................................................................................................... 8 3.1 CONCEPT, TRADEOFFS AND DECISIONS...........................8 3.2 FULL BACKUP ............................................9 3.3 APPLICATION BACKUP ......................................9 3.4 DATABASE BACKUP .........................................9 4 FAILURE RECOVERY..................................................................................
    [Show full text]
  • Monitoring in IOT Enabled Devices
    Monitoring in IOT enabled devices Udit Gupta Information Networking Institute Carnegie Mellon University, Pittsburgh – Pennsylvania, USA [email protected] ABSTRACT: As network size continues to grow exponentially, there has been a proportionate increase in the number of nodes in the corresponding network. With the advent of Internet of things (IOT), it is assumed that many more devices will be connected to the existing network infrastructure. As a result, monitoring is expected to get more complex for administrators as networks tend to become more heterogeneous. Moreover, the addressing for IOTs would be more complex given the scale at which devices will be added to the network and hence monitoring is bound to become an uphill task due to management of larger range of addresses. This paper will throw light on what kind of monitoring mechanisms can be deployed in internet of things (IOTs) and their overall effectiveness. KEYWORDS Monitoring, Internet of Things (IOTs), Big Brother (BB), Zenoss, Nagios, Ntop, Multi Router Traffic Grapher (MRTG), Simple Network Management Protocol (SNMP), IPv6, Management Information base (MIB) 1. INTRODUCTION: Monitoring [3, 4, 5 and 6] of systems has always been of prime importance for organizations since the advent of internet in 1960’s. The abrupt increase in the number of devices ensured that manually monitoring every device connected to the network would become infeasible. As internet expanded to more number of devices which includes wireless devices, more robust monitoring systems were designed which were simple to use yet powerful enough to detect failures. As the wave of virtualization swept the technology world in early 2000’s, monitoring systems had to be evolved in order to monitor virtual machines.
    [Show full text]
  • Big Brother Professional Edition Client 3.00 Unix/Linux Quickstart Guide
    Big Brother Professional Edition Client 3.00 Unix/Linux QuickStart Guide 11/25/2002 Big Brother Professional Edition Server – Unix QuickStart Guide TABLE OF CONTENTS 1. Big Brother PE Quick Reference Card ________________________________________1 2. Prerequisites _____________________________________________________________3 2.1 Download BBPE _____________________________________________________________ 3 2.2 Download and Install Apache __________________________________________________ 3 2.3 Configuration of apache_______________________________________________________ 4 3. BBPE Server Installation___________________________________________________5 3.1 Introduction_________________________________________________________________ 5 3.2 Administrator’s Overview of BBPE _____________________________________________ 5 3.2.1 System Requirements_______________________________________________________________ 6 3.2.2 Security Issues ____________________________________________________________________ 7 3.3 Installing BBPE______________________________________________________________ 8 3.4 Pre-Installation Steps _________________________________________________________ 8 3.4.1 Obtain root permissions ____________________________________________________________ 8 3.4.2 Creating the BB user _______________________________________________________________ 8 3.4.3 Copying the BBPE Archive__________________________________________________________ 8 3.5 The BBPE Directory Structure _________________________________________________ 9 3.6 BBPE Variable
    [Show full text]
  • Using Hobbit to Monitor Network Services
    Providing quality systems support since 1986 Using Hobbit to Monitor Network Services Rich Smrcina VM Assist, Inc February 29, 2008 Session #9283 Presentation Materials http://www.vmassist.com/rs_samples/hobbitmon_share110.zip 2 Copyright 2007, 2008 ± VM Assist, Inc. Agenda " Why monitor the network? " Hobbit Network Services Monitor " Architecture " Clients " Displays " Reports " Notification " Enable/Disable " Extensions " Using Hobbit with System z Operating Systems " Additional Hobbit Information 3 Copyright 2007, 2008 ± VM Assist, Inc. Why Monitor the Network? " Monitoring packages available " Operating Systems " z/VM, z/OS, z/VSE, Linux, Windows, Solaris, etc " Sub Systems and Open Source " CICS, Websphere, DB2, Oracle, MQ, MySQL, etc " Designed to monitor internals (tasks, jobs, file access, performance metrics) " Networks can get quite complex " Systems are very interconnected " We rely much more on varying types of systems " Functions on one system are dependent upon processes running on one or more other systems " Access to certain systems is dependent upon being able to connect to other systems 4 Copyright 2007, 2008 ± VM Assist, Inc. Why Monitor the Network? " Many machines perform ©business critical© functions " Network administrators need to know when these systems are down or running degraded " Service Level Management " Are you providing the level of service agreed to? " Is the requested level of service is being delivered? 5 Copyright 2007, 2008 ± VM Assist, Inc. The Hobbit Monitor " ©Hobbit is a tool for monitoring servers, applications and networks©1 " Written by Henrik Stoerner " Network Administrator for Computer Sciences Corporation in Copenhagen " Largest CSC data center in EMEA, top 5 globally " Hobbit is an application that performs ©tests© of network services on pre-determined hosts " TCP based connections " ftp ssh telnet smtp pop3 imap nntp rsync clamd oratns qmtp qmqp dns dig ntp rpc http ldap apache and more..
    [Show full text]
  • With Linux and Big Brother Watching Over Your Network, You Do Not Have to Look Over Your Shoulder (Or Your Budget)
    50-10-11 DATA COMMUNICATIONS MANAGEMENT WITH LINUX AND BIG BROTHER WATCHING OVER YOUR NETWORK, YOU DO NOT HAVE TO LOOK OVER YOUR SHOULDER (OR YOUR BUDGET) Daniel Carrere INSIDE Components of a Linux and Big Brother UNIX Network Monitor; Understanding Linux and Big Brother UNIX Network Monitoring; Economizing Without Sacrifice; Details of the Services That Can be Monitored; How Big Brother Monitors Linux’s Hardware Utilization; Big Brother: The User Interface; Automatically Notifying the System Administrator in the Event of a Problem via Pager, E-mail, or Both INTRODUCTION Many systems administrators in the networking world of today find them- selves attending to multiple systems. As such, these administrators want to automate monitoring and problem detection. To effectively monitor a system, one must consider many aspects, each of which are vital to sys- tem availability. The aspects that require a system monitor’s attention are the states of the services being provided (DNS, NNTP, FTP, SMTP, HTTP, and POP3), the states of the server’s hardware (disk space usage, CPU usage/utilization), and the states of core operating system aspects (essen- tial system processes). In addition, one also would like to be able to de- termine the system uptime, as well as any warning or status messages. PAYOFF IDEA Most importantly, one would like to Network administrators can combine the Linux be able to accomplish all of these operating system with the Big Brother UNIX net- tasks without repetition. One of the work monitor to view the status of their systems most effective ways to accomplish all without requiring specialized software to view the results.
    [Show full text]