Recommended Posts

Update:

A ConfigSource, for use with LM Config, to monitor and alert on changes of route from the collector to any of a list of destinations. This is now combined a single ConfigSource that will run for both Windows and Linux collectors:

v1.0.0: RLG279

If you really want to have a different ConfigSource per OS, the original two OS-specific ConfigSources are at: EK4HEG (Windows v1.5.0); HCPCXA (Linux v1.2.0).

To use, you'll need to add a property 'traceroute.list' to the Windows or Linux collector device* you want to use to check the route from, with the value being a comma separated list of destinations, e.g. '8.8.8.8,www.logicmonitor.com'

*You can modify the AppliesTo such that this datasource could apply to any device, however it will always be the collector running the script and doing the traceroute / tracert.

The ConfigSource will run the trace and print a summary of the results in a way that can easily be alerted on (if you really want to) in the event of a route change, plus a full dump of the route information including hop timings for information, in a way that is excluded from alerting.

59a9696e19a30_ScreenShot2017-09-01at13_00_06.png.622c676a8500d247d11489fd473c5135.png

Credit to @Jake Cohen for the basis of the script these are built from. :)

Edited by Antony Hawkins
OS-agnostic version built.

Share this post


Link to post
Share on other sites

Curious, have you thought about a datasource to calculate hop latency for each hop? We've had requests like that in the past and there's other tools like Ping plotter that do something similar to this. It's an interesting metric to know about if the latency is being caused by some hop down the line. 

Share this post


Link to post
Share on other sites

Hi Tom,

It has occurred as a possibility, yes. I believe it may already have been done. The problem is reliability - each hop would be an instance of the DataSource, which means if a route changes at all a hop may disappear (no data) or not be recorded until Active Discovery next runs. For routes that change frequently (particularly if they change in response to a routing problem) the returned data would not be particularly useful or reliable as a means of generating actionable alerts.

As a diagnosis tool (rather than a pro-active alerter) the ConfigSource will allow a 'collect now' action, so for troubleshooting you can quickly and simply get a capture of the current route and hop times.

Share this post


Link to post
Share on other sites
503 : This LogicModule is currently undergoing security review. It will be available for import only after our engineers have validated the scripted elements.
 
:(

Share this post


Link to post
Share on other sites
18 hours ago, Rob said:
503 : This LogicModule is currently undergoing security review. It will be available for import only after our engineers have validated the scripted elements.
 
:(

 

Hey @Rob , the modules are now available for importing.

Enjoy

Share this post


Link to post
Share on other sites

New, OS-agnostic version (basically, it's a merge of both of the above, that runs the relevant Linux- or Windows-specific commands dependent on the collector operating system).

This is now the only one you need...

v1.0.0: RLG279

:)

Share this post


Link to post
Share on other sites

Hello,

When trying to download this from the LogicMonitor Exchange, I get the following error,

This LogicModule is currently undergoing security review. It will be available for import only after our engineers have validated the scripted elements.

is there any update on when this will be available?

Share this post


Link to post
Share on other sites

Thanks!  I tested it right away and it works great.  I gave it a test associating the traceroute with the device rather than collector and that works also.

My use case is I will have routers I am monitoring over the internet, I have a VPN so it is all private hops for traceroute.  I will apply this config to the device, with the traceroute.list property being it's own displayname.  This way I will get alerts on route changes that are already associated with the device so I can get alerts and notify people appropriately.  I tested this and it seems to work.  Next I'll be finding how to omit certain hops in our datacenter that won't indicate a true routing change.

Share this post


Link to post
Share on other sites

@Jono it should be possible within the proc.eachLine{} section to exclude hops that match a pattern, for example if they end '.mydatacenter.com', or you can add exceptions in the 'RouteHasChanged' diff check.

Share this post


Link to post
Share on other sites

I wonder if anyone has accomplished what I'm looking for with this.  I'd like to have a known good traceroute, then have it poll every 5 minutes, then alert if outside the known good traceroute and resolve when it's back inline with known good traceroute.
The changes would be, allow us to poll config source more frequently than 1 hour.  Then set a "golden config" to compare against.

Share this post


Link to post
Share on other sites

Hi Jono,

Briefly and off the top of my head, one way to accomplish this could be as follows:

1. Set a device property to list the steps of the known good route, e.g. "10.0.0.1, 10.0.0.55, edgerouter.mynetwork.local, isp.whatever.com"

2. Have a scripted DataSource (not ConfigSource) that ran the traceroute script every five minutes.

The DataSource would be able to pull in the known good route from the device property and compare the listed steps to the result of the traceroute and either confirm the two lists were a match, or not, outputting a suitable 1/0 code which could then be alerted on. Alternatively, it might output 0 if all steps matched vs the step number of the first mis-match.

Clearly you'd have to do some clever parsing if the steps might vary within a domain, e.g. if *.whatever.com were acceptable at step 4 in the above.

Not necessarily pretty, but probably achievable.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now