I, Admin

My preferred Android applications

2009-07-04T16:13:00.003-03:00

I bought an HTC Magic a few weeks ago. One of the its coolest thing is the sheer number of apps in the Android Market. There are actually too many and finding the good ones requires lots of searching and testing. These are the ones I use the most so far:

- Wapedia, which greatly optimizes the wikipedia display for mobile devices.
- Pixelpipe, to upload media to Flickr easily.
- QuickDic German, by Thad Hughes (a googler, by the way)
- AnkiOnline. Not actually an app, but a mobile-friendly web site that is always synced with my desktop Anki database. I use it to study german vocabulary while commuting. Pretty cool.
- NewsRob, a Google Reader client (suggested by Cesar from Pinguis Moveis)

Soon I'll hopefully expand this list with an I app I wrote myself, but I've been very lazy lately, so who knows.

Sometimes I miss doing Linux end user support work

2009-06-14T19:46:00.005-03:00

Last October I set an Ubuntu desktop for Carla's family. We live very far away from them, so it was important that their system was resilient, otherwise it wouldn't last long. They are all beginners in this internet thing, so installing Windows for them would have been a bad idea.

And I was right. Things ran pretty smoothly, we talked via Skype very often, with no signs of virus or crashes. I even found this file in their system:

clica-aqui.exe (click-here.exe, in Portuguese)

After many months of usage everything was still working fine, until the computer stopped booting.

Helping them from the phone was a challenge. They had to read the error messages in English for me (and they don't understand this language), while we tried to fix GRUB. In the end I assumed the hard disk was just dead.

I asked my good friend Marcelo Lemos for help and he burned an ISO image of Ubuntu and sent them by mail. I live in Switzerland and it would take ages for the package to get there. The customs in Brazil are a black hole.

The CD got there after a couple days but, of course, since the worst case scenario always apply, the computer was not set to boot via CD-ROM, so we had to fix that - all by phone, while the girls spell each CMOS setup word for me.

Now the Ubuntu Live CD system was finally up, I logged in via a reverse SSH connection (I gave them commands via Gmail that they would run via terminal) and fixed the filesystem errors. But the kernel still showed too many I/O errors from that hard disk. The only safe thing to do was to backup their remaining personal files somewhere while the system is still up, then reinstall everything with a new hard disk.

I needed a safe place to send all their stuff but my amazing friends and former colleagues at RimuHosting do not offer the cheapest disk space plans, unfortunately. So I remembered that a RimuHosting customer once said great things about rsync.net (awesome name, by the way), and I gave them a try.

I ordered a one-year 4Gb quote with them and my account was setup in a few minutes, even before I send them the payment, which is really awesome. I got all login details by mail, and started rsync'ing everything right away. Pretty neat. So it turns out that rsync.net is a decent secure offsite backup service that I strongly recommend so far. They even have servers here in Zürich :-).

The rsync is still running inside a screen(1) session as I write this, and it's going to take a while to finish. I just hope the disk is not too damaged and that it copies the most important files. Otherwise how would they live without the clica-aqui.exe?

So much adrenaline! Only end-user support work gives me that. I miss that a little bit.

NOT!

Fixed my first bug in C++. PROFIT!

2009-06-09T21:22:00.004-03:00

I'm still trying to learn C++ by fixing bugs. Well, the bug I wanted to fix in Ekiga had already being solved upstream (should I be happy or sad?), but I had fun trying to debug it anyway.

Luckily I found another one to fix today. After 1h30m playing around with gdb and adding debug messages everywhere, I fixed a bug in Gnote where preferences were not being set unless you restarted the program.

The biggest challenge was to find out that all code was written already, it just wasn't working. I initially thought I'd have to write the callback methods myself, but then I saw references to "gconf...notify" in the code, which would normally be enough.

Reading the gconf API docs was sufficient for me to find the culprit. 2-liner patch submitted ;-).

Having fun while trying to learn C++

2009-06-08T21:16:00.004-03:00

I've been trying to learn C++ lately. I read a few chapters of a few books, but I got tired of just reading so now I am trying to fix bugs in free software out there.

The first step was to install Ubuntu on the Macbook Pro that I use. Second step was to find useful software written in C++ that needs small bugs fixing.

First I tried to fix a bug in gnote, but I wasn't persistent enough and the lead developer fixed the bug himself after many days without any update from me. The lesson learned here is do not just propose a fix a go walkabout. Stick to it until the end.

Now I'm trying to fix an bug in Ekiga. Actually, I think the bug is in the libopal, but I'm not so sure. The symptom is a segmentation fault in SIPHandler::SendRequest() and it only crashes when I set an outbound SIP proxy. Maybe I'm setting an invalid proxy, but well, it shouldn't be crashing.

Let's see how far I'll go this time.

Being naïve about Python object identities, references and sizes.

2008-12-29T16:55:00.007-02:00

I'm ashamed of how naïve and ignorant I stand regarding Python stuff. At least this time, I've learned a great lesson about object identities, references and sizes. Hopefully you won't make the same mistake as I did.

Here's what I wanted to do: write an in-memory simplistic log keeper for my application, that would be used as a poor man's brute force protection. The details don't matter much. All this meant is I'd have to keep, say, all the last 10 authentication attempts for all users, for as long as needed, in memory.

I was then a bit worried about memory usage, so I got creative. I'm probably the electrician sysadmin that Tom referred. Sometimes the wires burst in flames when I get creative.

A normal (and sane) person would write something like this:


UserLog(object):
  def __init__(self, auth_result, auth_timestamp, client_ip):
    self.auth_result = auth_result
    self.auth_timestamp = auth_timestamp
    self.client_ip = client_ip

It's a simple class type object. It would be used this way:


lastlog = UserLog(True, 1231700497, '127.0.0.1')
print lastlog.client_ip

But then I looked at the object names, "client_ip", "auth_result", "auth_timestamp". And I thought: OMG, I'd have one UserLog object instance for each auth event, for each user. I don't want to waste so many precious bytes by keeping these object names in my structure!

So this stupid person had the following reasoning to try and save memory.

Instead of keeping a proper structured and clean "log" object with each log component with their names, I thought I should throw everything inside a list, and use the index numbers to reference to each member. For example:


user_logs['yves'] = [False, 1231700497, '10.0.0.33']

In order to add mnmemonics for this stupid structure, I'd use some constants that I could use to refer to the indexes. Eg:


AUTH_TIMESTAMP = 1

for log in user_logs['yves']:
    print log[AUTH_TIMESTAMP]

Although this hideous code is common for C programmers, it's a deadly sin for Python programmers. What kind of creature would NOT use a dictionary to store this data? That creature is me, Yves, and I ask for your forgiveness.

Of course I should have used a dictionary. A class type object would be even cleaner. So I rewrote that portion of the code.

The truth is the overhead for keeping 1 million instances of the string constant 'client_ip' is not as big as I thought, even when compared to keeping 1 million instances of the integer 2. Why is that?

It's simple. As we know, Python uses references for keeping its objects. We'd have 1 million references to "client_ip", yes, but they all point to exactly the same object: the string constant "client_id" is kept just once in memory, for all our instances.

It's easy to see this happening:

>>> a = 'gggggggggggggg'
>>> b = 'gggggggggggggg'
>>> c = 'xxxxxxxxxxxxxx'
>>> id(a)
154424848
>>> id(b)
154424848
>>> id(c)
154424888

Note how a and b refer to the same object id. One can even compare them by using 'is'.

>>> a is b
True

above

So although a and b are independent containers, they point to the same string constant, which is only saved once in memory. Interesting, hun? This is called common subexpression elimination and it's a well-known optimization technique for compilers.

Obviously, although we don't have to worry about repeated string constants for the keys in our multiple dictionaries, there's still a storage overhead of using a dictionary compared to using a list to keep objects, but this is also minimal.

Bottom-line: don't bother too much about creating your own "memory efficient" data structure instead of using a good and old dictionary (or similar, such as a class type). It's usually not worth trouble.

Curiously, I noticed the common subexpression elimination does not always happen, and sometimes identical string constants are stored in different places in memory:


>>> a
'my string'
>>> b
'my string'
>>> a is b
False
>>> id(a)
154424808
>>> id(b)
154424928

Something to discuss in a later post, I guess.

Sharing the USB 3G serial network of a Mac OS X with a VirtualBox guest machine

2008-11-30T13:22:00.001-02:00

When configuring networking on VirtualBox for Mac OS X, I got stuck because it didn't give me the option to use the "Host Interface" option with my ppp0 connection. The ppp0 connection is my "dial-up" Internet connection using a 3G USB modem.

The solution is so obvious, that I'm surprised I couldn't think of it before finding this post on the VirtualBox forum: just use the (amazing) Internet sharing option of the Mac.

- First, configure VirtualBox to use "Host Interface", and pick the "Ethernet" device down below.
- Then, Boot your guest OS (for example, Debian Live, or HaikuOS) and use DHCP to configure the network.
- Finally, configure Internet sharing on the Mac OS X. Just share the "connection from: " .. "To computers using: Ethernet". Wait a few seconds, then force a reload of the DHCP configuration on the guest OS, and it's done!

Now, the trick is how to make the network work on HaikuOS :-).

Setting the default locale (language) in TurboGears

2007-07-26T01:02:00.000-03:00

The TurboGears documentation only mentions this en passant. It's easy to change the default locale (language) of your TG application.

In your project/controllers.py, in you can add:

def locale_pt():
return 'pt'

turbogears.config.update({'i18n.get_locale' : locale_pt})

I have this in the top namespace of my controllers.py file, not inside the Root class. I'm not sure if this is the prettiest way to make this work, but hey, it works for me. If you have any better suggestion, please leave a comment.

linux group passwords

2007-06-18T16:45:00.000-03:00

Group passwords is a sort of obscure feature most people don't use. It is safer *not* to have passwords set for groups.

By setting a password to a group, you allow an arbitrary users to be part of that group as long as they know the password. That generally doesn't make any sense unless you need to grant a shell user temporary access to a certain group. I don't even know if it works as advertised.

If you see this at webmin for example, you can safely ignore this option. For more information, see:

http://tldp.org/HOWTO/Shadow-Password-HOWTO-7.html

Suriproxy - Release soon

2005-09-08T19:15:00.000-03:00

"Release Soon, Release Often".

Com esse mantra na cabeça, estou disponibilizando o Suriproxy, uma ferramenta anti-spam e, principalmente, anti-phishing.

O suriproxy é um PROXY SMTPD para o Postfix, que filtra as mensagens
recebidas pelo daemon smtpd e repassa a outro daemon, seja um amavis ou outro
smtpd do postfix.

Ele faz consultas URIBL de DNS quando encontra algum link nas mensagens,
ele consulta se o domínio deste link está nas listas URIBL (inclusive na
uribl.cetico.com).

Veja o exemplo. Você recebe o e-mail com o seguinte texto:

<a href="http://www.blable.net">CLIQUE AQUI</a>

ou ainda

<a href="http://www.blable.net/virus-mal.scr">CLIQUE AQUI</a>

O Postfix pedirá que o Suriproxy verifique essa mensagem. Este, por sua vez,
irá consultar seus dominios URIBL (uribl.cetico.com e multi.surbl.org),
para ver se "blable.net" está em alguma dessas listas.

Caso esteja, antes mesmo de se terminar a conexão SMTP, o Postfix mostrará
uma mensagem de erro, informando que aquele e-mail não foi aceito. Isso
evita que mensagens sejam perdidas, mas por outro lado não gera BOUNCES ou
tráfego desnecessário para você.

A instalação pode ser um pouco complexa para usuários iniciantes, principalmente porque ainda não tive tempo de escrever uma documentação bem detalhada.

Além disso, em alguns casos, um bug ainda não resovido faz com que a ferramenta aja de forma inesperada, fechando conexões antes da hora, o que faz com que o servidor remoto tenha que enviar a mensagem novamente. Isso geralmente só acontece quando o host remoto envia mensagens lentamente.

Para pegar o Suriproxy, siga este link. Veja o README sobre instruções de instalação. Qualquer dúvida deixe um comentário aqui, que responderei assim que possível.

Muito obrigado a todos pelo interesse :-).

Release do Mozilla Calendar 0.3a1 está próxima

2005-09-06T10:38:00.000-03:00

Aparentemente, acompanhando o blog do Sipaq e o tracking bug da release 0.3a1, a nova versão pública está próxima.

Na versão atual, o Sunbird tem muitos bugs sérios, que atrapalham a integração com serviços WebDAV. No meu caso, o Mozilla Calendar é item estratégico no projeto de migração de uma plataforma Microsoft Exchange. Sem um sistema de calendário robusto, é impossível deixar de usar o combo "Exchange+Outlook".

O Wiki é outra fonte de informações sobre o projeto.

Como usar o Google Talk no seu cliente Jabber preferido para Windows

2005-08-24T00:25:00.000-03:00

English

O Google irá lançar o Google Talk amanhã, mas você já pode se conectar.

Basta usar um cliente Jabber completo, como o Gaim ou Exodus.

Download do Gaim

Download do Exodus

Os dados que voce precisa são:

Servidor: talk.google.com
Porta: 5222
Usuario: seugmail@gmail.com (com domínio)
Senha: sua senha do gmail

Boa sorte!! :-)

How to use Google Talk using your preferred Jabber Client for Windows

2005-08-24T00:17:00.000-03:00

Google will launch tomorrow its instant messaging service.

You can connect to it using any Jabber full client for Windows, like Gaim or Exodus (I could not make it work with Miranda, a great client).

You need to setup the following:

Server: talk.google.com
User: youremail@gmail.com (with the domain part)
password: yourpass
port 5222

Add me if you want :-) yves.junqueira@gmail.com

CACIC - Agente para Linux

2005-07-28T20:24:00.000-03:00

http://www.cetico.org/cacic/cacic-agente-linux-1.0rc1.tar.gz

Essa é a versão 1.0RC1 do agente para Linux. Acredito que ela está
praticamente pronta para ser disponibilizada publicamente - por isso é
o Release Candidate 1.

Algumas mudanças dessa pra última, são:

- Criado script de instalação "install.sh" (não serve para
atualização, apenas para a primeira instalação).

- Melhor consistência nas mensagens de saída e interatividade com o usuário.

- Melhor organização do código.

- Agente irá entender a configuração "MACs Inválidos".

- Agente irá entender quando uma determinada "etiqueta" da coleta de
patrimônio for desativada.

- Corrigidos outros bugs. (Ver bugzilla).

Sugestões de metas para a próxima versão:
(por favor, dêem palpite também)

- Atualização automática

- Coletar informações de placa de vídeo, etc

- Coletar informações de "compartilhamentos" Samba e NFS.

- Melhorar organização do código (argh).

Eu pessoalmente prefiriria, entretanto, começar a mexer no gerente.

Mais informações sobre o desenvolvimento em:

http://www.cetico.org/wiki

http://listas.cidades.gov.br/cgi-bin/mailman/listinfo/cacic-agente-linux

http://www.governoeletronico.gov.br/cacic

- Yves Junqueira

Delete print jobs in cups - cupsd

2005-06-15T20:49:00.000-03:00

To delete print jobs in cups in a Linux system you should use this command:

# lprm

Or, to cancel all jobs:

# lprm -

list print jobs in cups or cupsd

2005-06-15T20:48:00.000-03:00

To list print jobs in cups, issue:

# lpq -a

tdb(/var/cache/samba/printing.tdb): rec_free_read bad magic 0x0 at offset=21104

2005-06-15T20:47:00.000-03:00

[2005/06/15 20:33:36, 0] tdb/tdbutil.c:tdb_log(531) tdb(/var/cache/samba/printing.tdb): rec_free_read bad magic 0x0 at offset=21104

If you find something like this in your logs, and you can't print, just remove the file and restart samba.

Visit my sponsors if you find this information and their ads useful hehe.

Jun 8 14:57:50 rinetd[21939]: accept(0): Socket operation on non-socket

2005-06-08T15:03:00.000-03:00

For the record.

Jun 8 14:57:50 rinetd[21939]: accept(0): Socket operation on non-socket

I had this syslog message filling my hard disk due to a configuration problem of rinetd.

I was setting it to list in a IP address which was not set to the network interfaces. I usually setup many IP's for external interfaces in a host. I had disabled a certain IP for some time (ip addr del ..) and rinetd got crazy.

Fix: check what IP it is trying to listen in.
# /etc/init.d/rinetd stop

# tail -f /var/log/syslog |less

in another screen:

# /etc/init.d/rinetd start

You will see:

Jun 8 14:57:48 rinetd[21939]: couldn't bind to address port (Cannot assign requested address)
Jun 8 14:57:48 rinetd[21939]: Starting redirections...

Then just go and remove that reference in rinetd.conf and you're done.

PF-Graph - Solução para análise de logs do Postfix

2005-06-07T11:40:00.000-03:00

Estou desenvolvendo uma ferramenta para análise de logs do Postfix. O PF-Graph, além de gerar relatórios com base em remetentes ou destinatários (incluíndo busca por domínios), cria gráficos coloridos sobre o status do serviço.

Veja abaixo algumas screenshots:

PF-Graph, mostrando o sumário de gráficos.

Resultado de busca

Entre os recursos do PF-Graph, incluem-se:

- Capacidade de auditar todas as mensagens recebidas e enviadas em um ou mais servidor de e-mail, em tempo real.

- Um daemon/agente rodando nos servidores de e-mail é responsável por coletar as informações em tempo real, e atualizar o banco de dados.

- Capacidade de mostrar total de bytes trafegados para um usuário, domínio ou qualquer termo de busca(exige Amavisd-new ou Suriproxy).

- Escrita em Perl, com integração nativa para MySQL, mas possível de se adaptar para outros bancos de dados, conforme a necessidade.

Assim que eu der uma "limpada" no código do PF-Graph, o mesmo será disponibilizado sob a licença GPL. Caso esteja interessado nessa ferramenta, deixe um comentário!

Até mais!

004 dk.eos.net.FtpError: Login incorrect.

2005-06-07T03:13:00.000-03:00

If you get this error in blogger, even if you are using blogspot.com, not FTP:

004 dk.eos.net.FtpError: Login incorrect.

You can fix it by cleaning your browser cache, or just using a different browser temporarily (ie <-> firefox).

How to crack Windows Terminal Services 3 month trial

2005-06-07T02:18:00.000-03:00

HOW TO RESET WINDOWS TERMINAL SERVICES 3 MONTH TRIAL
Warning: greyhat content.

Thanks to a Microsoft article, I've found out that it is very easy to extend your Windows Terminal Services 3-month trial or experience time. It's so easy that I'm sure many administrators have done this in their own systems, while waiting for their managers or financial staff to buy the definitive licenses (not being hypocrite here).

Following these instructions, you don't have to crack any program. You won't mess with your system. The magic is to only delete the licenses databases both in the server and the clients, and let windows re-create them for you.

----

Make sure you've installed "Terminal Services Licensing". By the way, this method only makes sense if you need to use Terminal Services in Application Mode, which is the one that requires licensing.

The idea is quite simple.

First, disconnect all users from the terminal. If you need to do this remotely, you can also disconnect yourself, and access the files remotely.

Go to %WINDIR%\system32\lserver

Notice the file TSLIC.edb. Rename it to tslic.old

In every client computer, remove the CAL TS registry keys, located at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing

Restart your server.

Finally, if you need more information about how to crack terminal services, go check at Microsoft's web site. See the "Cause 2" steps. :-)

Shouldn't MS improve the security for TS Licensing in the next versions of Windows (2003 with SP1 is also easy to "crack")?

PS> I am definitely against software piracy. I strongly believe that Microsoft should strength their anti-piracy policy. Only then they could theoretically lower their licensing prices. The biggest result, though, would be a huge increase of free software popularity. Only then we, FOSS proponents, would have the opportunity to prove our paradigm is superior (now I'm being hypocrite, I guess).

New home: cetico.org

2005-06-07T02:01:00.000-03:00

Great. As GoDaddy's prices are so low, I've decided to pay for a web hosting (so cheap!) and host this blog there.

Unfortunately I've lost my old site's layout, so I'll have to start that from stratch. Argh. It's so painful to draw web sites. I'll see if Macromedia can give me hand (Fireworks, Dreamweaver, etc).

tail-nagios information and source code

2005-05-24T18:12:00.000-03:00

Hi.

Some fellows from nagios-users list have requested more information about my solution to integrate nagios 2.0 with mysql, so here it is.

Since nagios 2.0 doesn't have built-in support for mysql, we have to find another way to integrate this software with a custom interface that reads a database.

A way to do that is to use service performance data (service_perfdata).

You'll need to setup service_perfdata_file to a "log" of service perfomance data, and design a service_perfdata_file_template.

In my case, I used:

service_perfdata_file=/usr/local/nagios/var/service-perfdata
service_perfdata_file_template=[SERVICEPERFDATA]\t$TIMET$\t$HOSTNAME$\t$SERVICEDESC$\t$SERVICESTATE$\t
$SERVICEEXECUTIONTIME$\t$SERVICELATENCY$\t$SERVICEOUTPUT$
\t$SERVICEPERFDATA$\t$SERVICESTATETYPE$

(singe line)

Then, after restarting nagios, and if you don't forget to check permissions for that perdata file, nagios will start to append service check output to this file.

The next step is to read this file and update a database as we want.

In my case, I've designed a simple table that will list every server and service and their latest status combined in a "object" row.

> describe status;
+--------+--------------------------+------+-----+---------+-------+
Field Type Null Key Default Extra
+--------+--------------------------+------+-----+---------+-------+
objeto varchar(45) PRI
tipo varchar(45)
status varchar(45)
output varchar(255)
time int(16) unsigned YES NULL
hard int(1) unsigned zerofill 0
+--------+--------------------------+------+-----+---------+-------+

> select * from status limit 1;
+-----------------------+---------+--------+------------------------------------------------------+------------+------+
objeto tipo status output time hard
+-----------------------+---------+--------+------------------------------------------------------+------------+------+
adsl-router.LINK_ADSL servico OK HTTP OK HTTP/1.0 200 OK - 1.113 second response time 1116971094 1
+-----------------------+---------+--------+------------------------------------------------------+------------+------+

"objeto" means "object" and "tipo" means "type" (unused, actually).

The script to read the logs and update the database is:

---------------------------------------------------------------
#!/usr/bin/perl -w

# tail-nagios
# v. 0.001
# Yves Junqueira - yves.junqueira AT gmail.com
# License: GPL

use strict;

use DBI;
use File::Tail;

my $driver = "mysql";
my $user = "nagios";
my $password = "mypass";
my $database = "nagios";

my $oldlogs = 0;
my $verbose = 0;

my $name = '/usr/local/nagios/var/service-perfdata';
my $file = File::Tail->new(
name => $name,
interval => 3,
adjustafter => 5,
tail => -1
);

print "Tail Nagios\n";
my $dsn = "DBI:$driver:dbname=$database";

my $dbh =
DBI->connect( $dsn, $user, $password, { RaiseError => 1, AutoCommit => 1 } )
or die "could not connect $!";

my $sth =
$dbh->prepare(qq[select time, objeto from status order by time DESC LIMIT 1]);

$sth->execute();

my ( $lasttimestamp, $lastobjeto ) = $sth->fetchrow;

$lasttimestamp = 0;
$lastobjeto = 0;

my $count = 0;
my $nextok = 0;
my $lastcommit = 0;

my $sth2 = $dbh->prepare(
qq[
replace into status (objeto, tipo, status, output, time, hard) values
(?,?,?,?,?,?)]
);

while ( defined( $_ = $file->read ) ) {

#[SERVICEPERFDATA] 1111058462 roteador-cpd1 PING OK
# 4.008 0.135 PING OK - Packet loss = 0%, RTA = 1.32 ms
s/[\n\r]//g;

my (
$i, $time, $maquina, $servico, $status,
$checkduration, $latency, $output, $etc, $statetype
)
= split /\t/;

if ( ( $time < $lasttimestamp ) && ( $oldlogs != 1 ) ) { #print "."; } else { if ( ( $time > $lasttimestamp ) ( $oldlogs == 1 ) ) {

my $hard = ( $statetype eq "HARD" ) ? 1 : 0;

if ( $verbose >= 1 ) { print "Insert this!\n"; }
$sth2->execute( $maquina . "." . $servico,
'servico', $status, $output, $time, $hard )
or die "Argh $!";
}
}
}
if ( $verbose >= 1 ) { print "Finish. Will commit\n"; }
print "1\n";
$dbh->commit()
or print "oh no! $!\n"
; # I don't even need this since AutoCommit is on. But someday I can turn it on...
print "2\n";
$sth->finish() or print "sth finish booo $!\n";
print "3\n";
$sth2->finish() or print "sth2 finish aaaaaaaaaa $!\n";

print "4\n";
$dbh->disconnect();
print "end\n";

#1;

---------------------------------------------------------------

This script is not a daemon actually, but I run the following script in the crontab, that checks if it's running, and starts tail-nagios if necessary.

-------------------- tnagios-monitor.sh -----------------------
#!/bin/sh
pidof -x tail-nagios 2>&1 > /dev/null (echo "Starting tail-nagios" ; /usr/local/bin/tail-nagios &)

---------------------------------------------------------------

A desirable /etc/crontab follows:

*/5 * * * * root /usr/local/sbin/tnagios-monitor.sh

Well that's almost all you need.

Sorry if it's a mess, but it serves my needs.

If you need more information, or maybe is interested in the perl+apache user interface that shows services status, please let me know.

Sistema de monitoramento de serviços e servidores

2005-05-23T09:11:00.000-03:00

Monitorar o status de serviços e servidores de TI é uma tarefa complexa, mas bastante importante.

Para um administrador - pelo menos para mim - ser o último a saber que um serviço saiu do ar é extremamente constrangedor. Com essa preocupação, planejei um sistema de monitoramento de serviços que fosse confiável e flexível. O primeiro desafio, entretanto, seria adaptar a feia interface do Nagios a um sistema mais "visual" e intuitivo.

Uma interface mais simples, flexível e bonita. Se tudo corresse como planejado, no final do processo poderíamos até utilizar equipamentos de monitoramento, à vista de todos no prédio da administração da empresa. A idéia era dar maior transparência na adminstração de TI, porém sem deixar de lado os cuidados com a segurança de informações.

Utilizei a nova árvore 2.0, ainda beta, do nagios, para que o projeto pudesse acompanhar melhor as futuras versões desse software.

Para isso, foi necessário desenvolver um sistema de "conexão" do nagios 2.0 com o mysql, visto que não havia nada pronto nesse sentido, quando o projeto foi iniciado.

Um processo daemon é utilizado para monitorar as verificações do Nagios, e atualizar o banco de dados com as informações necessárias.

Além disso, há grande disponibilidade de plugins para monitoramento de serviços e servidores. Havia a opção inclusive de utilizar softwares que fizessem uma maior integração com os servidores Windows, inclusive via WMI, mas preferi não aumentar a complexidade da estrutura já existente.

Veja os resultados:

- Interface para o Nagios, utilizando ícones funcionais do MS Visual Studio. (utilizando em Full-screen, mas mostrando barras do IE apenas para contextualização)

- Ao fundo, monitores mostram o status de serviços essenciais de TI.

Good news - Batman Begins is from a decent director: Christopher Nolan

2005-01-26T06:33:00.000-02:00

Batman Begins, the next movie about Batman to be released soon, was directed by Christopher Nolan, the director of Memento, which was a really great movie, and Insomnia.

Although it can be better than those terrible prequels, we shouldn't not expect the quality of Tim Burton's now classics Batman and Batman Returns.

Argh

2005-01-26T06:30:00.000-02:00

Joel Schumacher is the worst movie director in hollywood.

Check his filmography at IMDB.