Actually, assuming your syslogd can send to a pipe, and assuming
you can change the logging facility in tkined (I haven't tried it), you
could pipe the log info to a perl or awk filter to keep track of the
state of things you want to know about, and send the resulting state
transitions to the logs you want swatch to listen to.
I only use tkined when I'm troubleshooting things right now...don't have the
resources to leave it running all the time. Instead, I have a perl script
which tries to open TCP sockets to different services on different hosts, so
that it not only sees when a line is down, but tells me when various daemons
crash, etc.... If it knows something's already down, it won't page me about
it again until it comes back up.
In a previous message, bem@cmc.net wrote:
>
> I've gotten spoiled by using Scotty and tkined at work to monitor the state
> of my network: it is truly a nice piece of code. (And I guess I'm going to
> have to learn tcl now, too....)
>
> I would like to make it work with swatch, though, so that if a system or
> line goes down, I'll get paged by myself before customers call. My page
> program (which finds a free modem in our Portmaster's pool and uses it
> to dial a page) works fine: the only hitch is that an outage will a)
> quickly spam my log files and b) generate a million pieces of mail and
> c) make my pager go nuclear.
>
> Is there a way to make the 'unreachable' errors only show on rising or
> falling conditions?
>
--
David Carmean WB6YZM DC574 <dlc@silcom.com>
System/Network Administration, Silicon Beach Communications
Unsolicited commercial e-mail not accepted. Violators will be LARTed.