Monitor Web Server

New Service: Monitoring the epicenter (DNS) of your online brands (2008-01-24)

Your domain name directs customers to a website where you represent your brand and all that it stands for but are you managing and regularly monitoring the domain name service (DNS) which translates your domain name and brings your customers to you? DNS consistency monitoring can help ensure your business does not lose customers to a slow or faulty DNS.

It is useless to have paid for an expensive and fully redundant web site server (park), if the DNS servers fail to respond, respond incorrectly, or inconsistently. Your DNS must be consistent and correct. Monitoring for DNS consistency is particularly important if you have online services relying on one or more domain names (and that is almost always the case). It doesn't matter if your DNS servers are maintained in-house or outsourced, you need to know if they are doing what they are supposed to do. WatchMouse's DNS consistency monitoring (now available in closed beta) checks your DNS systems and provides rapid notification of any unexpected DNS behaviour.

The WatchMouse's 'domain' type rule allows you to monitor the consistency of the behaviour of your DNS servers. It queries for a specified domain, performs a number of checks to test the health of your DNS servers and monitors for any difference in behaviour of your name servers. (If you also need to check that a domain name resolves to the correct IP address(es), you can use the 'dns' type rule which will be offered as part of the WatchMouse DNS consistency monitoring).

This new service will be available to all WatchMouse customers with a performance monitoring subscription (Webmaster and higher) and can be configured on the Monitoring Settings page. To set-up DNS consistency monitoring, simply enter the domain name (advanced settings are available).

Fancy participating in our closed beta test?

• Contact us to request participation in the beta.
• Collect all the domain names that are important to your business.
• Go to the Monitoring Settings page.
• Add a 'new rule' and select 'domain' from the type menu, for each of the domains you wish to monitor.
• Specify the other settings you would like for other rule types, hit 'save', and you're done!
• The results of the domain name monitoring appear in your logs, reports, and graphs instantly.

Redesigned WatchMouse site and new product plans (2009-12-24)

We’re pleased to announce the redesign and launch of www.watchmouse.com. The new site is faster, more responsive and designed to be much more intuitive. Don't take our word for it though, try it yourself and let us know what you think!

The changes:

• Clean, task-oriented design
• Faster page loads
• Improved main console for a better overview of your monitors and better access to the monitoring details
• New "dashboards" featuring related, grouped information and tasks
• A new dashboard selector on every page after you log in, just below the search field

We’ve also introduced chat support. You can now chat directly on the site whenever the support team is online (normally 8 AM to 8 PM Central European Time or GMT+1).

Stay tuned for even more usability improvements and additional features coming up in Q1 of next year!

New Product Plans

You asked and we listened! We’ve received many requests for expanded plans, and also for a slimmed down plan for personal use. Additionally, the functional test (scripts) we introduced last year have become very popular, so we decided to add these tests in all professional packages.

The changes:

• We added functional tests to the Webmaster and Corporate plans, plus a one-minute monitor in the Corporate plan - all at the same price
• Two new professional plans have been added: the Enterprise Plan with 100 monitors (including 20 functional tests) and the Multi-Site Plan
• The Gold Plan that included 10-minute monitors only, has been discontinued, however current customers can still continue to use this package
• All Professional Plans now include complementary vulnerability scans to verify that your site and server is safe
• Lastly, we added the Personal Plan, a cost-effective plan for small sites, and we beefed up the free, Lite Plan so it now checks at 20-minute intervals

Full details can be found at: http://www.watchmouse.com/compare_plans.php

Take a look at the new WatchMouse website and give us your feedback. Bear in mind we’re still adding content and polishing the edges, but we'd be delighted to hear your thoughts and comments!

Happy holidays!

Stan P. van de Burgt

CEO

WatchMouse

P.S. You may find an occasional English word in the non-English sites. Please note that these will be replaced within the next few days.

Dutch e-commerce sites poorly prepared for Christmas rush (2004-12-14)

Only 20% achieve maximum availability

UTRECHT, 20041205 -- Many Dutch e-commerce sites have made only minimal preparations for the increased number of visitors in December. The congestion caused by Sinterklaas [traditional Dutch celebration on 5 December] meant that, on average, only one in six sites was continuously available. This was the conclusion of WatchMouse, a Dutch monitoring site, following a survey of 25 e-commerce sites. Even worse figures are expected during the weeks before Christmas. Excessive interest from customers can overload the server or have dramatic effect on response times.

During the past month, WatchMouse – at its own initiative – closely monitored 25 sites where consumers can shop online, such as Bol.com, Wehkamp, Free Record Shop, De Bijenkorf, ECI, Bart Smit, Dixons and Bruna. The survey shows that the 'up time' – the time during which the server is online – varied from 98% to 99.6%. "This may seem high, but a score of 98% means that a site is not available for half an hour per day. This makes 14 hours a month, or a week a year", says Mark Pors, one of the founders of WatchMouse.

The consequences of this are reflected not only in loss of income. Pors: "A website that is not available can cause stacks of work for a helpdesk and, at the end of the day, damage the brand’s image. The problem is that many website owners are unaware that sites are responding poorly, or not at all. If they were aware of this, taking action to intervene is simplicity itself: for example, by adding extra server capacity."

WatchMouse has concluded from its survey that only 20% of the sites have achieved optimum accessibility. Given the increasing trend in online purchases, gigantic sums are involved. In the first six months of 2004, online expenditure rose to € 775 million; a 35% increase. Each online shopper spent € 227 from January through June of this year (Blauw Research, September 2004).

December is also a top month for purchasing on the internet. Pors: "We saw response times and the number of error reports increase dramatically in the days leading up to Sinterklaas. This does not bode well for the even busier period before Christmas."

WatchMouse

Companies can easily monitor their internet sites themselves, thanks to WatchMouse’s monitoring service.

WatchMouse has been monitoring internet sites and e-commerce applications for companies across the globe since 2001. WatchMouse has thousands of users in more than 70 countries. WatchMouse services are available in seven languages, and analyses are carried out through the world-wide monitoring network from a range of locations and networks.

European e-commerce sites poorly prepared for Christmas rush (2004-12-24)

Comparison with US "role models" Amazon and Barnes & Noble

THE NETHERLANDS, 20041223 -- Many European e-commerce sites have made only minimal preparations for the increased number of visitors in December. The congestion caused by Christmas meant that, on average, only one in six web sites was continuously available. This was the conclusion of WatchMouse, a Dutch monitoring service provider, following a survey of over 50 European e-commerce sites. Excessive interest from customers can overload the server or have dramatic effect on response times.

During the past month, WatchMouse – at its own initiative – closely monitored over 50 web sites where consumers can shop online. The survey shows that the availability varied from 98% to 99.6%. "This may seem high, but a score of 98% means that a site is not available for half an hour per day. This makes 14 hours a month, or a week a year", says Mark Pors, one of the founders of WatchMouse.

As a comparison to the US market, two "role models of e-commerce" - amazon.com and barnesandnoble.com - were monitored during the same period. Amazon`s performance was similar to that of the average European web shop, whereas Barns & Noble outperformed most e-commerce sites with an uptime of 100%.

The consequences of downtime are reflected not only in loss of income. Pors: "A website that is not available can cause stacks of work for your helpdesk and, at the end of the day, damage your brand. The problem is that many website owners are unaware that sites are responding poorly, or not responding at all. If they were aware of this, taking action to intervene is simplicity itself: for example, by adding extra server capacity."

WatchMouse has concluded from its survey that more than 70% of the web sites have not achieved optimum accessibility. Given the increasing trend in online purchases, gigantic sums are involved: Online sales will increase by 44% to €13 billion ($17 billion) in Western Europe over the holidays period, compared to €10 billion ($13 billion) in the US (Forrester Research, November 2004).

December is a top month for purchasing on the internet. Pors: "We see response times and the number of error reports increase dramatically in the days leading up to Christmas."

About WatchMouse

Companies can easily monitor their internet sites themselves, thanks to WatchMouse’s monitoring service.

WatchMouse has been monitoring internet sites and e-commerce applications for companies across the globe since 2001. WatchMouse has thousands of customers in more than 70 countries. WatchMouse services are available in seven languages, and analyses are carried out through the world-wide monitoring network from a range of locations and networks.

Rapidly growing WatchMouse wins Deloitte’s Rising Star award (2005-09-23)

WatchMouse is one of the three winners of Deloitte’s Rising Star award. This award is presented annually to rapidly expanding technology companies less than five years old. WatchMouse has been active worldwide for three years in the area of site and server monitoring. With 16 monitoring stations throughout the world, WatchMouse monitors the availability of customers’ websites, immediately sounding the alarm in the event of problems.

The Rising Stars are presented as part of the Deloitte Technology Fast 50 ceremony, the fifty most rapidly expanding technology businesses. The Rising Stars have the potential to lead the Technology Fast 50 in the near future. Stan van de Burgt (42), Niels Eijsbroek (40) and Mark Pors (38) first came up with the idea for WatchMouse in 2001. The concept was as unique as it was clear: to monitor the availability of sites and servers by constantly simulating web traffic. If a site is not responding or an error is found, the customer is notified immediately by SMS, pager, IM or e-mail. From the moment the concept went 'live', in 2002, the pace has been frenetic: turnover doubled each year. Web sites are now monitored from sixteen monitoring stations worldwide 24 hours a day, seven days a week.

The WatchMouse application is entirely web-based: customers do not have to install software or hardware at their site, and the application excels in its self-service aspects while staying easy to use. This allows WatchMouse to operate with a small core of permanent employees, supplemented by external support. Prospective customers can specify their requirements in detail on the WatchMouse site. A range of starter packages is available, priced from € 17.50 per month up to € 450 per month. 400 paying customers in 40 countries worldwide now make use of WatchMouse’s services. These include hosting companies, government bodies, and companies such as LB Icon, Scania, Siemens, Orange, ING, GeoTrust, Citibank, and Postbank.

Self-service as a success factor

Mark Pors, Chief Technology Officer, says he was “pleasantly surprised by the award”. “I am very happy that the jury shares our vision of self-service and our market approach." Pors sees WatchMouse as “the right initiative at the right moment. Companies are increasingly looking to outsource non-core tasks. However, they want to be able to guide and control this themselves and from their own workplace. Web-based services make this possible." Stan van de Burgt, CEO, sees the simplicity of the WatchMouse site and the various languages in which it is available as the major success factors. "Monitoring websites was an idea that already existed in essence, but had not been worked out in this form. We are geared tightly to 'self service', whereby customers can set up everything themselves and retain total control. Which also means we are able to offer the service at a more attractive price than other players in the market.”

The Rising Star awards were presented on Thursday, 22 September.

WatchMouse

WatchMouse assesses your website and e-commerce applications just like your customers experience them. The checks are carried out from 16 monitoring stations worldwide, and recorded in regular reports. In the event of errors or availability problems, the right people within your organisation will be alerted.

www.watchmouse.com

What do you want to check with a service such as Watchmouse? (2005-01-31)

As I explained in my previous column, you can use a monitoring service in a number of roles. Common to all these roles is the fact that you are keeping alive some services for the benefit of your customers, suppliers, employees or partners. These users are, in the end, all that counts.

What are the objects that you should be checking? Obviously, the least you want to do is check the service that is most visible to these users. This could be the webserver, or a POP or FTP server for example. You would start by setting up a rule to check the server and a URL. The frequency with which you can monitor (that is: the elapsed time between checks) is typically limited by the type of subscription that you have. Only in specific cases would you not check as often as your subscription allows.

Note that there is a difference between a CONNECT on port 80 rule and a HTTP rule. The first just connects to the port that the webserver is supposed to use. The HTTP rule also checks whether the webserver can produce a valid HTTP response, and whether the document can be found. You probably want the latter check.
Similar reasoning applies to POP and FTP checks. If you set up two different rules on the same host, this allows you to distinguish for example between a broken webserver and a host that is down. If you want even more content oriented checks, have a look at the so-called PLUG-IN rules. Additionally, you can set up checks to make sure that your users are actually using the services that you intend them to. The whole Internet depends heavily on the domain name system(DNS) functioning correctly. If it does not work properly your users may be directed to another site than you intended. This could be a configuration error, but it could also be a defamation hack. In either case, you want to know.
First of all you want to check whether the root servers of the Internet accurately find the DNS that is serving you. This can be checked with a DNSNS rule. What you are checking with this rule is whether the registrar's databases are correct. Second, you want to check if that DNS server (and its slaves) are serving up the proper IP address for the server. For this you can use the DNSA rule, and it will warn you if the DNS server is not working or serves up the wrong address. (Note that the hosting party can change that address at its discretion, as part of a renumbering operation for example.)

Who should you notify of rule failures? Again, different roles have different information requirements. You want to notify the person who can fix things as soon as possible. Mail or SMS/text them directly, you do not want to be in the loop. You might set up an escalation chain, which fires off after a certain amount of errors. Note: make sure that you send the message on a channel that is not affected by the outage: if your e-mail system does not work, delivering a message to that effect should not depend on that e-mail system.
The people in charge of overseeing somebody else's service levels should only get escalation messages, if at all. Rather, they should get the weekly or monthly service reports.

Peter van Eijk is a management consultant specialized in management of network infrastructures. He can be reached via his contact page.

TimeTools NTP Time Server Syslog Monitor Remote Denial of Service Vulnerability (2009-01-17)

TimeTools NTP Time Server Syslog Monitor is prone to a denial-of-service vulnerability because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Apple Mac OS X Event Monitor Log Parsing Denial of Service Vulnerability (2009-11-11)

Apple Mac OS X is prone to a denial-of-service vulnerability that affects the Event Monitor component.

Attackers may exploit this issue to cause denial-of-service conditions in services that process the SSH server log data.

NOTE: This issue was previously covered in BID 36956 (Apple Mac OS X 2009-006 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.

This issue affects Mac OS X Server 10.5.8 and prior.

Ethereal SOCKS Dissector Format String Vulnerability (2009-07-12)

A format string vulnerability has been reported in some versions of the SOCKS dissector for Ethereal.

An attacker can exploit this vulnerability by connecting to a vulnerable SOCKS server and sending malicious format string specifiers to the SOCKS server. If Ethereal is being used as a security tool to monitor network packets, it is possible that sensitive memory may be corrupted.

This has been confirmed to result in a denial of service condition. Additionally, it may be possible to cause Ethereal to execute malicious attacker-supplied code.

Linux-based websites 'perform better' (2010-01-13)

Linux-based websites perform better than those hosted on Windows servers, according to research.

WatchMouse, a Dutch firm that monitors server performance, based its research on a survey of over 1,500 European websites. The company says that, although the websites it surveyed were more frequently based on Microsoft's IIS web server platform running Windows than on Apache running Linux, the latter option performed better in terms of both uptime and load time.

Timing information added for DNS rules (2005-12-09)

The rules of type 'dnsa' and 'dnsns' now also log timing information, which is presented in the 'Download time' graphs and the dtime field in the raw logs. This enables you to monitor the speed of the DNS server while resolving the DNS query.