Next Previous Contents

8. Tools and Packages that compliment OpenNMS

This section describes some of the other packages that are available to compliment the OpenNMS system. This is where Debian's strengths become apparent.

8.1 OpenNMS Document Server

This is a straightforward procedure that first installs the documentation (stored in /usr/share/doc/opennms) and then installs and configures an Apache web server to allow access from any web browser enabled workstation. This documentation bundle does not include the HOWTOs, but does include Release Notes and developer documentation.

Install the OpenNMS Documentation

apt-get install opennms-doc

Install the Apache 1.3 web server

  1. Install the apache server
    apt-get install apache
    
     
    
  2. Modify the apache configuration to display the Debian doc directory.

    The configuration will have to be modified in order to allow access from a particular private subnet. If the local subnet is 192.168.45.0/255.255.255.0 then add it to the following section in /etc/apache/httpd.conf as follows.

Original httpd.conf

# Allow access to local system documentation from localhost.
# (Debian Policy assumes /usr/share/doc is "/doc/", at least from the localhost.)
Alias /doc/ /usr/share/doc/
                                                                             
<Location /doc>
  order deny,allow
  deny from all
  allow from 127.0.0.0/255.0.0.0
  Options Indexes FollowSymLinks MultiViews
</Location>

 

Modified httpd.conf

# Allow access to local system documentation from localhost.
# (Debian Policy assumes /usr/share/doc is "/doc/", at least from the localhost.)
Alias /doc/ /usr/share/doc/
                                                                                
<Location /doc>
  order deny,allow
  deny from all
  allow from 127.0.0.0/255.0.0.0 192.168.45.0/255.255.255.0
  Options Indexes FollowSymLinks MultiViews
</Location>


 

3. Restart the Apache server

/etc/init.d/apache restart

The documentation can be found at the URL http://<opennms_server_ip>/doc/. A forbidden message indicates an improper configuration. No response indicates that the web server is not functioning or blocked by a firewall. Make sure that the local hostname is setup in /etc/hosts with the proper IP address. Apache configuration normally involves modifying a number of other parameters in the httpd.conf. The configuration file is commented, and the reader is encouraged to learn more about customizing the Apache web server.

8.2 Network connectivity tools

Secure shell client and daemon

apt-get install ssh 

Administrators that run Windows on their desktop can use the freely available Putty SSH Client to connect to their OpenNMS server.

FTP server daemon

The proftpd package is secure and supports a variety of features for multi-user enterprise use.

apt-get install proftpd

8.3 Network diagnostic tools

Nmap security scanner

This tool allows probing devices for open ports (confirm OpenNMS probes) and identifies remote operating systems (using the -O switch). It is extremely configurable and has a full suite of port scanning options.

apt-get install nmap

tcpdump traffic analyzer

apt-get install tcpdump

mtr traceroute interface

apt-get install mtr-tiny

ntop traffic analyzer

This tool allows monitoring of network traffic flowing in and out of the OpenNMS server using a GUI web interface.

apt-get install ntop

8.4 Network security tools

iptables netfilter engine

These packages allows the creation of secure firewall and routing policies

apt-get install iptables iproute

portsentry port scanning blocker

apt-get install portsentry

chkrootkit root compromise checker

apt-get install chkrootkit

advanced intrusion detection engine

apt-get install aide

8.5 Database tools

phppgadmin

This is a nice GUI web interface to postgres databases. It can easily browse all the OpenNMS database tables.

apt-get install phppgadmin

8.6 System Resource Monitoring

Cacti

This tool allows monitoring of system resources with RRDtool. This tool allows someone to monitor system resources even when OpenNMS is not running, or when it is starting or stopping. It will require mysql-server to store its data by default, allowing someone to also stop and start PostgreSQL while still monitoring the system load.

apt-get install mysql-server
apt-get install cacti

8.7 Tools requiring an XServer

Tools here require some basic xlibraries to run, and require the remote user to have a local Xserver (Another box with an XServer running (i.e.Solaris or Linux desktop) or an XServer daemon (i.e.Exceed on Windows).

Mozilla web browser

apt-get install mozilla

MTR GUI traceroute

apt-get install mtr

Ethereal packet analyzer

apt-get install ethereal

Nessus security scanner

apt-get install nessus

Fwbuilder iptables GUI (like Checkpoint GUI)

apt-get install fwbuilder

mbrowse MIB browser

This tool is only available in the "http://packages.debian.org/cgi-bin/search_packages.pl?keywords=mbrowse=names=1=all=all" name="testing"> distribution

apt-get install mbrowse

8.8 Other tools

vim

This enhanced version of vi allows syntax highlighting of XML files with a simple :syn on command.

apt-get install vim


Next Previous Contents