Content Match Monitoring

More statistics: connect time and download time (2005-01-31)

For all content match content match monitorings, WatchMouse measures the time it takes to connect to your host. For some content match content match monitorings, we measure the time it takes to download the file or page too. In the Reports section, you can now find two graphs that reflect these figures:

• Average connect time
• Average download time

More reports will be added in the near future.

Decide what's in Peter van Eijk's next column (2005-01-31)

Dr. Peter van Eijk is a Senior Management Consultant at a major international consultancy firm. He writes a monthly column on Monitoring Services. His latest column can be found here.

We would love to hear from you what topic his next column should cover. At the bottom of the column you can leave your opinion in a poll. Please let us know!

LB Icon selects WatchMouse for independent site content match content match monitoringing (2005-01-31)

LB Icon and WatchMouse signed a contract for the content match content match monitoringing of LB Icons? customers. Using the WatchMouse services, LB Icon expects to raise its service level even higher. See the press page for more information.

WatchMouse offers 'white label' pages for resellers (2005-01-31)

WatchMouse resellers can now use the WatchMouse white label pages at no extra charge. These pages without WatchMouse branding can be used to integrate into your own website, in order to offer content match content match monitoringing services to your customers. For more on the WatchMouse white label have a look at:

• WatchMouse Standard White-label User manual
• White label example site.

For more on the WatchMouse reseller program go to the reseller pages.

First checkpoint in China (2005-01-31)

In just weeks after our UK checkpoint went live, the WatchMouse network of content match content match monitoringing content match content match monitorings has been extended again, this time with a content match content match monitoringing content match content match monitoring at the datacenter of ONE-iAdvantage in Hong Kong, China, bringing the total number of checkpoints to 9.
The current network consists of checkpoints in:

• Florida, USA
• Texas, USA
• London, United Kingdom
• Sydney, Australia
• Nürnberg, Germany
• Orléans, France
• Amsterdam, The Netherlands (2 content match content match monitorings)
• Singapore
• Hong Kong, China

The new checkpoint will appear automatically in your logs. You can also set the new checkpoint as the primary checkpoint in your content match content match monitoringing settings.

The current status of the WatchMouse content match content match monitoringing network can be found on the 'About' tab of the WatchMouse site.

LB Icon chooses WatchMouse for independent website monitoring (2005-01-31)

Customer websites verified from the visitors' perspective

LB Icon and WatchMouse have signed a contract for the continuous monitoring of the websites and services of LB Icons' customers. Using the WatchMouse services, LB Icon expects to raise its service level even higher.

The Application Management & Hosting Services (AM&HS) group of LB Icon maintains the administration and management of servers and applications of a large number of (international) clients. This makes AM&HS responsible for the performance and availability of the websites and Internet applications.

Using the WatchMouse services, AM&HS will instantly be aware of upcoming and/or acute incidents related to the websites of its clients, and can, as a result, resolve problems in a short time frame.
The websites and their functionality are content match monitoringed for accessibility, speed and conformance from different locations around the world. Because the websites are content match monitoringed in the same way that visitors are experiencing them, incidents will be detected at an early stage. Also, using WatchMouse's objective periodical reports, it is possible to see if the performance is in accordance with the agreed service levels (SLAs).

Eveline Aendekerk, MD a.i.: "The door of a shop should never be jammed, websites and the functionality on those sites should simply be accessible and available. Our clients should be able to rely on this completely, so they can focus on their primary business processes, such as communication, interaction and sales.
We chose WatchMouse because of their expertise, and also because of the simplicity and user-friendliness of their system and services".

Stan P. van de Burgt, one of the founders of WatchMouse: "I find it a powerful gesture that LB Icon doesn't just monitor the websites of their clients, but that they selected an external party for this, and on top of that give their clients access to the results. Many companies where the website plays an essential role in business, don't have any awareness of this. They have no idea of the risks and the resulting damage, until the day comes that things actually go wrong"

About Lost Boys

For 11 years Lost Boys has been a major service provider in the area of (mobile) Internet. Lost Boys offers a combination of strategy, design, technical development, implementation, application management and hosting of Internet- and mobile solutions. The Amsterdam based corporation is part of the Lost Boys/IconMedialab Group and is listed on the Stockholm Stock Exchange and Euronext Amsterdam. Lost Boys operates with 600 employees in 7 countries, both in Europe and the United States.

http://www.lostboys.nl/
http://iconmedialab.com/

About WatchMouse

WatchMouse is a service of RoundZero. Since 2001, WatchMouse has been content match monitoringing Internet sites and e-commerce applications of major companies all over the world. The WatchMouse services are available in 8 languages and analysis is performed through its worldwide monitoring network at different locations and networks. WatchMouse has thousands of users in more than 70 countries.

http://www.watchmouse.com/

WatchMouse publishes first 'Site Availability Index' (2005-06-28)

Only 9 out of 25 funds listed on the Amsterdam stock exchange have sites with good availability

Of the websites of the 25 funds listed on the Amsterdam stock exchange (AEX), only nine display optimal availability. The availability of the other sites, including those of multinationals, ranges from poor to dramatically poor. Unilever has the best result of all websites, with an uptime of 99.995%. The site with the lowest availability is that of Wolters-Kluwer, with an uptime of 94.80%, which represents more than 37 hours of poor performance, or even unavailability, per month. This was the conclusion drawn from the first Site Availability Index created by WatchMouse, a company supplying monitoring services for websites and e-commerce applications world-wide.

An uptime of 99.9% is seen as the minimum acceptable level. This percentage is also often quoted in service level agreements (SLAs) with hosting providers. In order to determine the extent to which the sites of AEX funds achieve satisfactory uptime, WatchMouse monitored the sites for more than two months. Downtime was said to occur if a site was not available or did not respond within 8 seconds.

The Site Availability Index for AEX funds (www.watchmouse.com/bereikbaarheidsindex/2005/AEX.html) showed that only nine funds fulfilled the minimum required level of 99.9%. These were Unilever, Philips, AEGON, Numico, Akzo Nobel, ASML Holding, Kon. P&O Nedlloyd, Versatel and Buhrmann. Bringing up the rear were IT company(!) Getronics (96.87%), DSM (96.75%), and Wolters-Kluwer, which with a score of 94.80% is over a day and a half a month ‘off the air’.

The Site Availability Index for AEX funds is an initiative of Emerce and WatchMouse and will be repeated annually.

"Very surprised"

Mark Pors, chief technology officer at WatchMouse, stated that he was "very surprised" by the results. "With many sites, we found an uptime that is worse than that of many smaller companies. And this while AEX funds in particular should attach a great deal of priority to their corporate image. A maximum uptime is part of the 'brand performance'. Our theory is that, where there are a lot of people involved within an organisation, there are a lot of hands unplugging cables, so to speak. These companies have complex processes, a great many internal changes are made, and outsourcing of various activities means transparency is often at a premium. This is clearly the case with Getronics, for example. The uptime of the site at the weekend is 100%, but during the week, when people are working, this decreases dramatically."

Pors suspects that the popularity of the sites could also be a reason for poor availability. "Naturally, sites belonging to AEX funds get a lot more traffic than the smaller businesses. On the other hand, this is no excuse; if we look at large online brokers in the US, for example, all achieve an uptime in excess of 99.9%."

About WatchMouse

Companies can easily monitor their own internet sites using WatchMouse's monitoring service. WatchMouse has been monitoring internet sites and e-commerce applications for companies throughout the world since 2001. WatchMouse has thousands of customers in more than 70 countries. The services supplied by WatchMouse are available in eight languages, and analyses are performed from various locations and over numerous networks, using a world-wide monitoring network.

In June 2005, WatchMouse was selected by FEM Business as one of the 25 most promising, innovative companies in the Netherlands.

Further information can be found at: www.watchmouse.com.

Rapidly growing WatchMouse wins Deloitte’s Rising Star award (2005-09-23)

WatchMouse is one of the three winners of Deloitte’s Rising Star award. This award is presented annually to rapidly expanding technology companies less than five years old. WatchMouse has been active worldwide for three years in the area of site and server monitoring. With 16 monitoring stations throughout the world, WatchMouse monitors the availability of customers’ websites, immediately sounding the alarm in the event of problems.

The Rising Stars are presented as part of the Deloitte Technology Fast 50 ceremony, the fifty most rapidly expanding technology businesses. The Rising Stars have the potential to lead the Technology Fast 50 in the near future. Stan van de Burgt (42), Niels Eijsbroek (40) and Mark Pors (38) first came up with the idea for WatchMouse in 2001. The concept was as unique as it was clear: to monitor the availability of sites and servers by constantly simulating web traffic. If a site is not responding or an error is found, the customer is notified immediately by SMS, pager, IM or e-mail. From the moment the concept went 'live', in 2002, the pace has been frenetic: turnover doubled each year. Web sites are now monitored from sixteen monitoring stations worldwide 24 hours a day, seven days a week.

The WatchMouse application is entirely web-based: customers do not have to install software or hardware at their site, and the application excels in its self-service aspects while staying easy to use. This allows WatchMouse to operate with a small core of permanent employees, supplemented by external support. Prospective customers can specify their requirements in detail on the WatchMouse site. A range of starter packages is available, priced from € 17.50 per month up to € 450 per month. 400 paying customers in 40 countries worldwide now make use of WatchMouse’s services. These include hosting companies, government bodies, and companies such as LB Icon, Scania, Siemens, Orange, ING, GeoTrust, Citibank, and Postbank.

Self-service as a success factor

Mark Pors, Chief Technology Officer, says he was “pleasantly surprised by the award”. “I am very happy that the jury shares our vision of self-service and our market approach." Pors sees WatchMouse as “the right initiative at the right moment. Companies are increasingly looking to outsource non-core tasks. However, they want to be able to guide and control this themselves and from their own workplace. Web-based services make this possible." Stan van de Burgt, CEO, sees the simplicity of the WatchMouse site and the various languages in which it is available as the major success factors. "Monitoring websites was an idea that already existed in essence, but had not been worked out in this form. We are geared tightly to 'self service', whereby customers can set up everything themselves and retain total control. Which also means we are able to offer the service at a more attractive price than other players in the market.”

The Rising Star awards were presented on Thursday, 22 September.

WatchMouse

WatchMouse assesses your website and e-commerce applications just like your customers experience them. The content match monitorings are carried out from 16 monitoring stations worldwide, and recorded in regular reports. In the event of errors or availability problems, the right people within your organisation will be alerted.

www.watchmouse.com

Meerderheid e-commerce sites kan komende kerstdrukte niet aan (2009-05-14)

WatchMouse voorziet wachtende e-shoppers

UTRECHT 20051201 -- Nu de decemberinkopen weer in alle hevigheid zijn losgebarsten, blijken veel online shops regelmatig 'gesloten' te zijn. Dat concludeert WatchMouse in haar jaarlijkse bereikbaarheidsonderzoek van cadeausites. Het Nederlandse sitemonitoringbedrijf heeft net als vorig jaar een onderzoek gehouden onder webwinkels. Slechts drie sites in het onderzoek haalden de maximale 100%. Het merendeel haalt zelfs niet de score die door hosting providers wordt aangehouden als absoluut minimum.

Veel sites zijn maar matig voorbereid op grote aantallen bezoekers. Door de grote belangstelling raken servers regelmatig overbelast. Ook blijken reactietijden van sites dramatisch dalen. Het onderzoek dat WatchMouse in de weken voor Sinterklaas heeft gehouden, laat duidelijk zien dat sites problemen vertonen naarmate er meer bezoekers in de webwinkels verschijnen.

Om te controleren of e-commerce sites goed bereikbaar zijn, heeft WatchMouse de hele maand november controles uitgevoerd. De uptime bleek regelmatig onder de 99.9% te liggen, een grens die in veel service level agreements (SLAs) van hosting providers geldt als minimum. Dat percentage wordt maar door tien van de 25 sites gehaald. Neckermann, Bonaparte en eBay zijn de enigen met een score van 100%. Vorig jaar waren er nog zes sites die een maximale uptime haalden.

De bereikbaarheid van Kijkshop, Bart Smit, de Bijenkorf en Wehkamp blijkt verre van optimaal. De score van Wehkamp, 97.27%, betekent bijvoorbeeld dat deze site per dag meer dan een half uur slecht bereikbaar is.

De grootste stijger was Bonaparte (kleding) die van de 17e plaats in 2004 steeg naar een gedeelde eerste plaats. eBay bleef als enige twee jaar achtereen op 1. De grootste daler was ECI die van een gedeelde eerste plaats in 2005 naar de 23ste plaats zakte.

In het licht van de toenemende bestedingen online kan de economische schade voor een site groot zijn. In de eerste zes maanden van dit jaar is er online ruim een miljard euro besteed, concludeert de Thuiswinkel Markt Monitor 2005. De online bestedingen maken met 37% ten opzichte van dezelfde periode vorig jaar bovendien een snelle groei door.

Consument gewend aan snelheid

"In vergelijking met vorig jaar zijn effectieve maatregelen uitgebleven", zegt Mark Pors, CTO van WatchMouse. "Consumenten zijn gewend aan snelheid op internet. Moeten ze wachten op een site, dan blijken ze zeker voor decembercadeaus gemakkelijk naar een andere site te gaan. Veel bedrijven weten echter niet dat hun sites matig bereikbaar zijn.”

Opvallend zijn verder de sites die 100% halen. Pors: “Twee van de drie blijken in het buitenland gehost te worden. Waarschijnlijk is men in de VS (eBay) en Duitcontent match monitoringnd (Bonaparte) wel gewend de sites goed te dimensioneren”.

Vorig jaar bleek de kerstperiode overigens nog drukker dan de periode voor Sinterklaas. Om die reden zal WatchMouse ook in de weken voor kerst blijven monitoren. Vlak voor kerst verwacht WatchMouse met de resultaten te komen van die tweede testperiode.

Het onderzoek liep van 1 t/m 30 november 2005. Van 'downtime' is sprake als een site een foutmelding geeft of de HTML na acht seconden niet ontvangen is, en dit vanuit een tweede meetpunt bevestigd is. Het complete bereikbaarheidsonderzoek is te vinden op: http://www.watchmouse.com/availabilityindex/2005/eshops_NL.php

Over WatchMouse

Bedrijven kunnen eenvoudig hun websites controleren door gebruik te maken van de monitoringdienst van WatchMouse. WatchMouse controleert sinds 2002 Internetsites en e-commerce toepassingen van bedrijven over de hele wereld. WatchMouse heeft duizenden klanten in meer dan 70 landen. De dienst is beschikbaar in acht talen en de analyses worden uitgevoerd vanuit een groot aantal locaties in het wereldwijde WatchMouse monitoring netwerk. Eerder dit jaar werd WatchMouse uitgeroepen tot Rising Star in de Deloitte Fast 50. Deze award wordt jaarlijks toegekend aan snel groeiende technologiebedrijven die nog geen vijf jaar bestaan

WatchMouse develops monitoring widget for Apple users (download widget) (2005-10-21)

WatchMouse has developed a new widget for dashboard, aimed at Internet site monitoring.

NETHERLANDS, 2005-10-13. By means of the widget Apple users can get direct insight into the accessibility of their own Internet site. The widget can be downloaded for free from the Apple website. Last month, WatchMouse was voted a Deloitte Rising Star in the Netherlands, as part of the Fast 50 awards; the list of the 50 fastest growing technology companies.

In 2002, WatchMouse (www.watchmouse.com) introduced a new concept for Internet site monitoring. By means of ongoing simulations of Internet traffic the accessibility of sites and servers is content match monitoringed. If a site is not responding, an alert message is sent immediately through SMS, telephone, Instant Messenger or e-mail. The sites are content match monitoringed from sixteen monitoring stations worldwide. This is done 24 hours per day, seven days per week. The service is completely web based: customers don't have to install software, everything is 100% self-service, which keeps the costs low.

The three founders of WatchMouse, Niels Eijsbroek, Stan van de Burgt and Mark Pors are enormous Mac-fans with a total of fifteen Macs in their possession. The monitoring widget is quite unique: it is a combination of a desktop and a hosted application. When the widgets detects a problem with the site it is content match monitoringing, it alerts the user with a 'beep', followed by the launch of a web browser, which is directed to a web application on watchmouse.com. There the site is content match monitoringed from 16 different locations worldwide.

Every five minutes

Every five minutes the dashboard widget content match monitorings one or more sites from the users own computer. Also, the availability of the site during the last 72 hours is registered. A problem is followed by an alert, which is then verified by all WatchMouse control stations.

WatchMouse has made the widget available free of charge "because we have become addicted to it, ever since we started using the first beta version of the widget", says CCO Niels Eijsbroek. "We give the widget away for free mainly for the fun part. And of course it's also important to bring site monitoring to the attention of our fellow Apple-users."

The free WatchMouse site monitoring widget can be downloaded from the Apple website:

http://www.apple.com/downloads/dashboard/networking_security/watchmousesitemonitor.html

About WatchMouse

Companies can easily monitor their own Internet sites using WatchMouse's monitoring service. WatchMouse has been monitoring Internet sites and e-commerce applications for companies throughout the world since 2002. WatchMouse has thousands of customers in more than 70 countries. The services supplied by WatchMouse are available in eight languages, and analysis are performed from various locations and over numerous networks, using a world-wide monitoring network.

Further information can be found at: www.watchmouse.com

I'm sending you this e-mail just to say how very impressed I am with your site and services. (2010-01-13)

I'm sending you this e-mail just to say how very impressed I am with your site and services. I found your site on Google and spent a long time comparing you to the other site content match monitoring services that are out there. Your site definitely was the most appealing of them all and consequently I signed up for the silver package today.

Simon Bland, ProWeb Design

I missed the back-up (2010-01-13)

Good to be back, we have all sorts of content match monitoring in place here but I still missed the back-up of knowing that your service will alert my mobile if something goes wrong.

Avi Talwar, Tiscali, UK NOC

We guarantee our customers 100% uptime. (2010-01-13)

We guarantee our customers 100% uptime. To fulfill this guarantee, we use several content match monitoring systems.
Based on our experiences we can say: WatchMouse is REALLY reliable!

Gerwin Scheeve, Lost Boys

Very impressive feature set and has a real commitment to client care (2010-01-13)

With many hundreds of business clients who expect and deserve over 99.99% uptime, in the instances where we do have service issues, WatchMouse alerts us promptly - every time. This allows us to minimize the impact of downtime and interruptions to our clients. WatchMouse isn't just another content match monitoring service, the team is dedicated to building on an already very impressive feature set and has a real commitment to client care

Michael Bloch, Business Operations Manager, ThinkHost, Inc.

WatchMouse Periodic Vulnerability Scanning has enabled us... (2010-01-13)

WatchMouse Periodic Vulnerability Scanning has enabled us to overcome the time consuming task of managing content match monitoring internally. The removal of all duplicate findings and neat presentation in the WatchMouse Customer Console further reduces the time Lectric Webservices has to spend on maintaining secure systems.

General Manager, LECTRIC Webservices

What do you want to check with a service such as Watchmouse? (2005-01-31)

As I explained in my previous column, you can use a monitoring service in a number of roles. Common to all these roles is the fact that you are keeping alive some services for the benefit of your customers, suppliers, employees or partners. These users are, in the end, all that counts.

What are the objects that you should be checking? Obviously, the least you want to do is check the service that is most visible to these users. This could be the webserver, or a POP or FTP server for example. You would start by setting up a rule to check the server and a URL. The frequency with which you can monitor (that is: the elapsed time between checks) is typically limited by the type of subcontent match monitoringion that you have. Only in specific cases would you not check as often as your subcontent match monitoringion allows.

Note that there is a difference between a CONNECT on port 80 rule and a HTTP rule. The first just connects to the port that the webserver is supposed to use. The HTTP rule also checks whether the webserver can produce a valid HTTP response, and whether the document can be found. You probably want the latter check.
Similar reasoning applies to POP and FTP checks. If you set up two different rules on the same host, this allows you to distinguish for example between a broken webserver and a host that is down. If you want even more content oriented checks, have a look at the so-called PLUG-IN rules. Additionally, you can set up checks to make sure that your users are actually using the services that you intend them to. The whole Internet depends heavily on the domain name system(DNS) functioning correctly. If it does not work properly your users may be directed to another site than you intended. This could be a configuration error, but it could also be a defamation hack. In either case, you want to know.
First of all you want to check whether the root servers of the Internet accurately find the DNS that is serving you. This can be checked with a DNSNS rule. What you are checking with this rule is whether the registrar's databases are correct. Second, you want to check if that DNS server (and its slaves) are serving up the proper IP address for the server. For this you can use the DNSA rule, and it will warn you if the DNS server is not working or serves up the wrong address. (Note that the hosting party can change that address at its discretion, as part of a renumbering operation for example.)

Who should you notify of rule failures? Again, different roles have different information requirements. You want to notify the person who can fix things as soon as possible. Mail or SMS/text them directly, you do not want to be in the loop. You might set up an content match monitoring chain, which fires off after a certain amount of errors. Note: make sure that you send the message on a channel that is not affected by the outage: if your e-mail system does not work, delivering a message to that effect should not depend on that e-mail system.
The people in charge of overseeing somebody else's service levels should only get content match monitoring messages, if at all. Rather, they should get the weekly or monthly service reports.

Peter van Eijk is a management consultant specialized in management of network infrastructures. He can be reached via his contact page.

Why do you need a monitoring service such as Watchmouse? (2005-01-31)

There are a number of reasons for this, depending on your role in your organization, and what you want to achieve. Each of these roles leads to a different approach for using and setting up the service.

Most likely you are either responsible for keeping a service such as a website online, or you have contracted somebody else to do that for you. Additionally, you could be a consultant or technical architect who wants to get an insight in performance and uptime characteristics of various solutions and services.

If your role is to keep things running, you really want to be notified of problems as soon as possible, before your customers or supervisors notice. You want appropriate error messages and not too many false alarms. As you configure Watchmouse you probably want to have a quick alert by e-mail or SMS/text message when things don't work and have additional diagnostic information available. In this way, downtime can be kept to a minimum. It is not only the quality of the systems that counts, but also the speed with which you can fix problems.

Your role could also be in overseeing your service providers, whether they are internal or outsourced. In that case, you don't want to be interrupted by these messages, unless the situation becomes dramatic. Instead you would like to look at the weekly report, and see if your service providers are living up to their promises. On the Internet it is easy to get 99% uptime, and you should really be doing better than that. The services that regularly fail to make this grade need attention, to see if another approach to provisioning them works better.

If you are considering technical alternatives for the way you are setting up your e-business, you are most likely interested in typical failure modes. For example, we know from experience that most website problems are software problems, followed by sizing problems. Communications problems are fairly rare, and if they occur they take the form of peering problems: websites cannot be reached from specific networks, even if all networks are operational. One approach using Watchmouse reports is to check various aspects with different rules. Use one rule to download the homepage, another to check the DNS and a third to check connectivity to the hosting centre. In a next column I'll go into the details of this.

Peter van Eijk is a management consultant specialized in management of network infrastructures. He can be reached via his contact page.

Online shops, speed and downtime, getting the facts. (2009-12-07)

These days your website plays an important role in informing potential customers, converting them into customers who want to do business with you, and possibly also conducting the transactions with these customers. In other words: Your business relies ever more on the digital economy, and increasingly on the transactional part of it, the online shop.

These online shops should obviously provide satisfactory performance. Here, both the speed at which they serve pages and their uptime are important. If potential customers cannot reach the online shop, or the online shop is too slow, they are less likely to do business with you now, and in the future. Studies have revealed that half of the people who experience downtime on a website go to its competitor. A majority of online shoppers say performance and uptime influences their choice of online shop.

The amount of revenue that is lost when your website or online shop does not behave properly is hard to quantify. If your website is slow your customers may select a distribution channel that is more costly for you, or they may go to your competitor. Even worse, they may complain about your company to other potential customers. All of this boils down to lost revenue.

A good website is up for at least 99.9% of the time, even though this still represents more than 8 hours in a full year. In a recent survey we found that many websites do not even achieve 99% availability, which corresponds to more than 3 days of downtime a year. As regards speed, if a web page does not load in less than 4 seconds, people start to leave the site, sometimes forever.

How do you make your online shop an efficient experience for your customers? The site must be designed with a strong focus on the customer task. The technology must be no more complex than is relevant. People get annoyed by slow loading Flash intros and complex and slow Flash-based navigation. Take a look at the Google home page; it is one of the fastest websites in the world. On the other hand, you can still use a video clip of a product, if that is relevant to the customer at a particular point in the transaction. You can also use advanced Web 2.0 technology if it makes the user interface more resilient and user-friendly. To experience this, look at Google maps using a dial-up internet connection. It is a really complex user interface, but everything possible has been done to create a positive user experience.

Technology is also important; make sure that you have good service level agreements with all your technology providers. You also want to stress test the site, to see what happens if a lot of people start using it simultaneously. Finally, you should independently monitor the site. When it is time to talk to your hosting company, IT department or website maintainer, it is very helpful to have hard data that reports on the speed and uptime of your online shop.

Peter van Eijk

dr Peter van Eijk is an independent management consultant associated with WatchMouse, the site monitoring experts www.watchmouse.com. He is experienced in setup, management and audits of digital infrastructures. His blog is "Peter's Griddle".

Active Exploitation of Another Unpatched Vulnerability in Microsoft Word (2007-01-31)

US-CERT is aware of active exploitation of an unpatched vulnerability in Microsoft Word. According to Symantec, there are different documents that use this same exploit from multiple organizations. Each document has been specifically crafted for the targeted organization in both language and content. Details are limited at this point.

Until more information becomes available, US-CERT recommends the following actions to help mitigate the security risks:

• Do not open or save untrusted Word documents or attachments from unsolicited email messages.
• Disable automatic opening of Microsoft Office documents, as specified in the Office Document Open Confirmation Tool document.
• Do not rely on file name extensions as a way to securely filter against malicious files.

US-CERT will continue to content match monitoring this issue and provide additional information as it becomes available.

Vulnerability in PGP Desktop Service (2007-01-31)

US-CERT is aware of a memory corruption vulnerability in the PGP Desktop service. The PGP Desktop service fails to validate user-supplied data. By sending a specially crafted object to the PGP Desktop service, a remote, authenticated attacker may be able to execute arbitrary code with potentially elevated privileges on a vulnerable system.

More information about this vulnerability is located in the following:

• Vulnerability Note VU#102465 - PGP Desktop service fails to validate user supplied data

PGP states that upgrading to the latest version of PGP Desktop will address this vulnerability.

US-CERT will continue to content match monitoring this issue and provide additional information as it becomes available.

Public Exploit Code for Multiple Vulnerabilities in CA BrightStor ARCserve Backup (2007-02-01)

US-CERT is aware of public exploit code for multiple vulnerabilities in the Computer Associates BrightStor ARCserve Backup software product. The vulnerable process (Loginserver.exe) is susceptible to buffer overflows as the size of the data and the data received are improperly validated. By sending specially crafted data packets to ports 2200/tcp and 1900/tcp, a remote, unauthenticated attacker may be able to execute arbitrary code with SYSTEM level privileges or cause a denial of service.

More information about these vulnerabilities is located in the Vulnerability Notes database and the Computer Associates Security Notice.

US-CERT encourages users and administrators to take the following actions to help mitigate the security risks:

• Apply an update as specified in the Computer Associates Security Notice.
• Restrict access to ports 2200/tcp and 1900/tcp to trusted hosts only.

US-CERT will continue to content match monitoring this issue and provide additional information as it becomes available.

Unpatched Denial-of-Service Vulnerability in Microsoft Word (2007-02-13)

US-CERT is aware of reports of another unpatched vulnerability in Microsoft Word 2000. According to the McAfee Avert Labs Blog, Microsoft has acknowledged this issue and states that it is limited to a denial-of-service attack on Word 2000. Code execution is not possible. Information is limited at this time.

Until Microsoft issues a security fix, or more information becomes available, US-CERT recommends the following actions to help mitigate the security risks:

• Do not open or save untrusted Word documents or attachments from unsolicited email messages.
• Disable automatic opening of Microsoft Office documents, as specified in the Office Document Open Confirmation Tool document.
• Do not rely on file name extensions as a secure way to filter against malicious files.

US-CERT will continue to content match monitoring this issue and provide additional information as it becomes available.

Cisco Releases Security Advisories to Address Multiple Vulnerabilities in PIX, ASA, and FWSM (2007-02-17)

Cisco has released Security Advisory cisco-sa-20070214-pix to address multiple vulnerabilities in the PIX 500 Series Security Appliances and the ASA 5500 Series Adaptive Security Appliances. The vulnerabilities exist due to flaws in the way Cisco PIX and ASA appliances process malformed HTTP requests, SIP packets, and TCP-based packets. By sending specially crafted packets to a vulnerable appliance, an attacker may be able to cause a denial of service, escalate user privileges, or take complete control of the appliance.

Note: The Security Advisory also states that some of these vulnerabilities affect the Cisco Firewall Services Module (FWSM).

More information about these vulnerabilities is located in the following:

• Cisco Security Advisory cisco-sa-20070214-pix - Multiple Vulnerabilities in Cisco PIX and ASA Appliances
• Cisco Security Advisory cisco-sa-20070214-fwsm - Multiple Vulnerabilities in Firewall Services Module

US-CERT encourages administrators to apply the fixes and workarounds described in the following documents:

• Cisco Security Advisory cisco-sa-20070214-pix - Multiple Vulnerabilities in Cisco PIX and ASA Appliances
• Cisco Security Advisory cisco-sa-20070214-fwsm - Multiple Vulnerabilities in Firewall Services Module
• Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of Multiple Vulnerabilities in Cisco ASA/PIX/FWSM Firewalls

US-CERT will continue to content match monitoring this issue and provide additional information as it becomes available.

4 New APIs: Wine, Whois and Website Monitoring (2010-01-13)

WatchMouse API: The WatchMouse service checks the behavior and availability of websites. WatchMouse "allows site owners to optimize the internet experience of their customers. A content match monitoring network checks websites from 40 different locations in 25 countries around the globe."

New features: POSTing forms and Read limit (2005-03-28)

Today, we released the new monitoring software to our content match monitoringpoints. New features:

• Post form fields to a webserver (both in http and match rules)
• Limit the number of bytes read. Relevant for content match monitoringing very large pages or streams

The site will be updated within days. Look at the settings page after logging in.

Test phase Frankfurt content match monitoringpoint (2005-03-29)

As you may have noticed in your logs, we are slowly introducing a new monitoring station in Frankfurt, Germany. Not all protocols are serviced at this content match monitoringpoint yet..., and we use in about 5% of the content match monitorings.

Keep an I on this blog, and on the official news section of our site for the formal announcement!

Next stop: NY (2005-04-13)

This morning our new content match monitoringpoint in New York was activated. The content match monitoringpoint at the New York facility is directly connected via a 15 Gbit fiber optic SONET ring with direct connections to Sprint, Level3, AboveNet, Tiscalli and direct hub connections into the PAIX, AMSIX, and DECIX Internet Exchange points.

Ping from all our monitoring stations (2005-12-09)

You can now use our improved ping tool to ping your server from each of our monitoring stations.

In case ping requests are blocked by your firewall or server, you can use the host content match monitoring tool alternatively.

WatchMouse 1.4.26 API deployed (2008-02-24)

Today, a minor release of the WatchMouse 1.4 API was deployed on http://api.watchmouse.com/1.4/. The current version is now 1.4.26. The changes are backward compatible with the previous version.

Changes w.r.t. 1.4.25

• self-documenting calls, add ?doc after the call, no other parameters and the parameter specification is shown (try and click the URL above!)
• new parameter 'acct' (account) on all rule, contact, and folder calls so
  1. resellers and other accounts with sub accounts can login with their own credentials and then access the sub-account
  2. accounts with read access rights to other accounts can access these accounts (graphs, logs)
• alternative output formats for logs (Excell, tab delimited, CSV, streaming)
• new calls added:
  • info_cps - get information on content match monitoringpoints (monitoring stations)
  • info_ip - get information about a given host (or about caller)
  • info_country (beta) - get information about a given country
  • info_currency (beta) - get information about a given currency
  • fldr_add/mod/get/del - manipulate rule folders
  • rule_content match monitoring - content match monitoring a rule now
  • ch_add/mod/get/del - manipulate contacts
  • acct_new/add - calls to create additional accounts
• version in XML output (first enclosing tag)
• no IP content match monitoring on acct_whois call (used for auto login on WatchMouse site)
• use API password instead of account password if present (not supported on the WatchMouse site yet)
• full support for tags in rule_add/mod/get/del and rule_graph now
• support PNGs as error message for rule_graph so developper can always show a picture
• use ip geo information if applicable