Ping Web Site

Monitor your transition to IPv6 with WatchMouse (2009-10-14)

You've heard it before, and it's being announced more frequently and louder: The number of available addresses on the Internet is running out, and we all should move to the new addressing scheme, IPv6, as soon as possible. The uptake has been rather slow in the past, but that seems to be changing now as companies, ISPs, and other organizations are taking their first steps on the road to the IPv6 world. For most of these companies, however, this is quite a big step, with many things to consider and many uncertainties.

External IPv6 monitoring

As of today, WatchMouse offers IPv6 monitoring for web sites and other external services of your company. The monitoring network will, just like visitors of your website that happen to be on an IPv6 connected network, connect to your site when an IPv6 record is available in the DNS of your domain.

Check your IPv6 connectivity right now? Just visit our Check Host tool or the Ping tool. And while you're at it, set up a rule in your account to monitor your site continuously from our world wide monitoring network.

Many changes

To fully enable IPv6 monitoring, we have upgraded several components of our infrastructure:

• Our worldwide monitoring infrastructure, including the monitoring software
• The backend systems, including our databases and the WatchMouse API (see a post on this on WatchMouse Labs).
• The configuration portal (settings), where you can now specify whether or not to monitor over IPv6, if possible.
• The free tools on our site: check host and ping.

By offering IPv6 standard in all packages (including the free package and the 30-day trial) and in the tools on our site, we hope to facilitate a smoother transition to IPv6 in your organization.

Is your company interested in IPv6? Then do keep an eye on our IPv6 posts on WatchMouse labs.

Easy issue updates to your team or customers (2007-10-10)

In the event of an issue with your site, wouldn't it be convenient to update your team or customers and let them know you are working on it, or send them a note that you solved the issue?
Other examples:

• Inform your customer that maintenance will start in 5 minutes, and then again when completed.
• Ping your team that you're working on an issue that WatchMouse signalled to all.
• Update management on what the status of an emergency issue is.

The WatchMouse Messaging tool lets you do exactly that: type a short message, select the group of contacts to send the message to, and click 'send'. The message will be sent to all contacts of the group, and can be sent over SMS, email, pagers, and instant message (MSN, ICQ, jabber). And in case of sms, you can even see who received it in the Message log (if supported by the respective GSM provider).

Tip: Do you find yourself typing certain texts all the time? Then just save it as a template so you can reuse it the next time. You can define as many contact groups as you like using the Contacts page.

US online stockbroker beats UK counterpart (2005-12-11)

WatchMouse report favourable on availability US stockbroker sites

UTRECHT, NL, 20051206 -- The websites of US online stockbrokers have an excellent availability record. This was one of the findings in a research by WatchMouse, a company providing monitoring services for websites and e-commerce applications worldwide. Of the 29 US websites that were covered by the research, 18 have an uptime percentage of 99.9% or better, and as many as 10 of these reached the perfect 100% mark.

This makes the US online brokers perform significantly better than their UK counterparts: at a similar research in the UK, just one out of 16 websites researched is available continuously, and five are listed at 99.9%. An uptime level of 99.9% is generally seen as the minimum acceptable level and is often quoted in service level agreements (SLAs) with hosting providers or in-house IT departments.

With a growing percentage of the stock market taking place on the Internet, it becomes ever more important to always be available, with the fastest possible response time. Mark Pors, CTO at WatchMouse claims: "Even more than shopping sites, stockbroker sites cannot afford to be unavailable- the stock business is an always-on business"

In order to determine the extent to which the online stockbrokers achieve satisfactory availability, WatchMouse monitored the websites during the official trading hours of the New York (NYSE) and London stock exchange respectively. During a period of two months, October through November, every five minutes, one of WatchMouse’s monitoring stations accessed the customer login page of the website, which was then expected to download within 8 seconds, without any errors.

The differences are remarkable: US brokers have- almost without exception- a very high availability. Ameritrade Plus, Bank One, Charles Schwab, Cititrade, Merrill Lynch, Morgan Stanley, Quick and Reilly, Tradingdirect, USAA, and Wellsfargo, were all continuously available throughout the research period. Another eight sites displayed a 99.9% uptime. Not one of the US brokers reported an uptime below the 99% mark. Still, AB Watley Direct, last on the list at 99.04%, adds up to a 1 hours and 20 minutes downtime per month during trading hours.

In the UK the results are far worse. Only Alliance-Leicester maintained the 100% availability, and five others are at 99.9% or up. Two of the 16 UK brokers were even tagged with a "poor availability". Stocktrade is difficult to reach almost two hours per month and Fasttrade a whopping five hours, both during trading hours.

Still, the online stockbrokers have a significantly higher uptime average than other sectors, such as e-shops, government, and news media. WatchMouse reports on these sectors on a regular basis with their 'availability index'.

Online trading trouble

Mark Pors, emphasises the importance of a high uptime for online stockbrokers: "With online securities transactions, the site should be very responsive. After hitting the 'confirm button', you should never have to question whether the order was placed correctly or not. Online brokers understand the importance of being online, and having a fast response time during trading hours."

A complete overview of the monitoring results of the WatchMouse Site Availability Index, listing the US and UK online brokers, can be found on http://www.watchmouse.com/availabilityindex/2005/uk-us-brokers.php

About WatchMouse

Companies can easily monitor their own Internet sites using WatchMouse's monitoring service. WatchMouse has been monitoring Internet sites and e-commerce applications for companies throughout the world since 2002. WatchMouse has thousands of customers in more than 70 countries. The services supplied by WatchMouse are available in eight languages, and analyses are performed from various locations and over numerous networks, using a world-wide monitoring network.

WatchMouse was voted a Deloitte Rising Star in the Netherlands, as part of the 2005 Fast 50 awards; the list of the 50 fastest growing technology companies.

Further information can be found at: www.watchmouse.com

WatchMouse understood our requirements and provided cost effective Load Testing (2010-01-13)

LECTRIC recently needed to improve the website capability and performance of one of our customers to meet their rapidly developing requirements. Load Testing was a critical component of this website development activity. These Load Tests were complex, especially as some of the user behaviour metrics were unknown. WatchMouse understood our requirements and provided cost effective Load Testing which added considerable value to our business.

General Manager, LECTRIC Webservices

What do you want to check with a service such as Watchmouse? (2005-01-31)

As I explained in my previous column, you can use a monitoring service in a number of roles. Common to all these roles is the fact that you are keeping alive some services for the benefit of your customers, suppliers, employees or partners. These users are, in the end, all that counts.

What are the objects that you should be checking? Obviously, the least you want to do is check the service that is most visible to these users. This could be the webserver, or a POP or FTP server for example. You would start by setting up a rule to check the server and a URL. The frequency with which you can monitor (that is: the elapsed time between checks) is typically limited by the type of subscription that you have. Only in specific cases would you not check as often as your subscription allows.

Note that there is a difference between a CONNECT on port 80 rule and a HTTP rule. The first just connects to the port that the webserver is supposed to use. The HTTP rule also checks whether the webserver can produce a valid HTTP response, and whether the document can be found. You probably want the latter check.
Similar reasoning applies to POP and FTP checks. If you set up two different rules on the same host, this allows you to distinguish for example between a broken webserver and a host that is down. If you want even more content oriented checks, have a look at the so-called PLUG-IN rules. Additionally, you can set up checks to make sure that your users are actually using the services that you intend them to. The whole Internet depends heavily on the domain name system(DNS) functioning correctly. If it does not work properly your users may be directed to another site than you intended. This could be a configuration error, but it could also be a defamation hack. In either case, you want to know.
First of all you want to check whether the root servers of the Internet accurately find the DNS that is serving you. This can be checked with a DNSNS rule. What you are checking with this rule is whether the registrar's databases are correct. Second, you want to check if that DNS server (and its slaves) are serving up the proper IP address for the server. For this you can use the DNSA rule, and it will warn you if the DNS server is not working or serves up the wrong address. (Note that the hosting party can change that address at its discretion, as part of a renumbering operation for example.)

Who should you notify of rule failures? Again, different roles have different information requirements. You want to notify the person who can fix things as soon as possible. Mail or SMS/text them directly, you do not want to be in the loop. You might set up an escalation chain, which fires off after a certain amount of errors. Note: make sure that you send the message on a channel that is not affected by the outage: if your e-mail system does not work, delivering a message to that effect should not depend on that e-mail system.
The people in charge of overseeing somebody else's service levels should only get escalation messages, if at all. Rather, they should get the weekly or monthly service reports.

Peter van Eijk is a management consultant specialized in management of network infrastructures. He can be reached via his contact page.

Why do you need a monitoring service such as Watchmouse? (2005-01-31)

There are a number of reasons for this, depending on your role in your organization, and what you want to achieve. Each of these roles leads to a different approach for using and setting up the service.

Most likely you are either responsible for keeping a service such as a website online, or you have contracted somebody else to do that for you. Additionally, you could be a consultant or technical architect who wants to get an insight in performance and uptime characteristics of various solutions and services.

If your role is to keep things running, you really want to be notified of problems as soon as possible, before your customers or supervisors notice. You want appropriate error messages and not too many false alarms. As you configure Watchmouse you probably want to have a quick alert by e-mail or SMS/text message when things don't work and have additional diagnostic information available. In this way, downtime can be kept to a minimum. It is not only the quality of the systems that counts, but also the speed with which you can fix problems.

Your role could also be in overseeing your service providers, whether they are internal or outsourced. In that case, you don't want to be interrupted by these messages, unless the situation becomes dramatic. Instead you would like to look at the weekly report, and see if your service providers are living up to their promises. On the Internet it is easy to get 99% uptime, and you should really be doing better than that. The services that regularly fail to make this grade need attention, to see if another approach to provisioning them works better.

If you are considering technical alternatives for the way you are setting up your e-business, you are most likely interested in typical failure modes. For example, we know from experience that most website problems are software problems, followed by sizing problems. Communications problems are fairly rare, and if they occur they take the form of peering problems: websites cannot be reached from specific networks, even if all networks are operational. One approach using Watchmouse reports is to check various aspects with different rules. Use one rule to download the homepage, another to check the DNS and a third to check connectivity to the hosting centre. In a next column I'll go into the details of this.

Peter van Eijk is a management consultant specialized in management of network infrastructures. He can be reached via his contact page.

Website performance is the key to customer satisfaction (2007-06-27)

How often have you typed in the Google URL and received a page that will not load? I am willing to bet that this is a rare occurrence. Despite its busy traffic, Google is a textbook example of a web site that has almost perfect performance and therefore serves a great number of satisfied customers. The market share of the search engine is a resounding confirmation of this. You are assisted quickly, so you come back sooner. Research conducted by JupiterResearch has revealed that visitors to a site only have 4 seconds of patience. If the site has not been loaded by that time, they leave. Error messages also prompt potential customers to go to the competition.

Why do organisations still devote so little attention to the effective availability of their site? Performance is the key to satisfied customers. For many companies, their web site is the face of the organisation. Consumers and also business users of the Internet use the wealth of information on the web to compare purchasing options. It is of immeasurable importance that they are also actually able to find what they are looking for. If this is not possible at one company, competitors are straining at the leash to offer their services through a correctly functioning site.

Coming back to the praise that we had for Google, we see that the search engine has made significant investments in the availability of its web site. The page is run by several machines at various sites. If one crashes there are enough back-up servers that can take over the traffic flows to guarantee optimum performance. In addition, the search machine invests a great deal of time and money in the right hardware and people. Although the site has a difficult task – searching through an index of billions of documents – it is almost always available and loads fast.

The actual site is unspectacular in construction. This applies to the majority of sites with a high level of availability. Simple sites such as the news site NU.nl are almost always easy to access. Nevertheless, it is not only the layout of the site that determines how the web page performs. Too many photos, long symbols and frills make web sites slower to respond. The fact that the ‘back end’ of the site is not efficiently programmed also contributes to longer loading times. Frequent consultation of background databases is also detrimental to the speed of the page.

Where it often goes wrong is when different people are working on a site, thereby disturbing the links between the various elements. The different parts of the site will work correctly, but the site as a whole will fail to perform. This means long waiting times for people who want to use the services of a company.

Service providers at the upper end of the market are becoming increasingly aware of this. The contracts that they use frequently include a service level agreement (SLA) for the part for which they are responsible. Nevertheless, they regularly make mistakes due to the fact that the promised performance is not subsequently verified (by an independent party). Although it is now essentially part of the contract, there is insufficient actual verification. Ideally, web site performance should become a permanent component of a contract. In addition, clear internal agreements must be made on who has final responsibility for the efficient loading and availability of a site.

Regular testing is also essential for the facilitation of good availability. This will prevent a great deal of errors, keeping the site up and running at crucial times. The storm that blew over the Netherlands at the end of January was a good opportunity to see which sites were prepared for extreme loads and which were not. The site of the Dutch weather institute, KNMI, was almost unreachable, while some logical thought could have protected them from this eventuality. If you know that a major storm is heading towards the country you can be sure that people will search for information on the weather and roads on the Internet. Sites such as those of KLM and Schiphol were also unreachable, while the specially created site Crisis.nl, which had been kept as simple as possible, was able to serve a large number of people.

Including ‘stress tests’ in a SLA or conducting them regularly in-house is therefore to be recommended. Companies can easily take control by ensuring that their service provider executes this type of test or by putting their own site under pressure. This is the best method of checking whether your web site can handle a sudden increase in visitor numbers. It is also good to know whether the servers on which your site is running actually ensure that your page is always available and loads correctly. For companies, it is crucial to see when they are off air. This can save them a large amount of money every year and will also reduce the number of irritated visitors to the site. This is how you keep customers satisfied and keep the company running.

Mark Pors
Chief Technology Officer at WatchMouse

WatchMouse provides site performance monitoring and stress test services

Fraudulent Microsoft Update Web Site (2008-02-06)

US-CERT is aware of a fraudulent Microsoft Update web site. This web site contains an "Urgent Install" button that, when clicked, attempts to download and install malicious software on a user's system. The file that attempts to download is not signed by Microsoft and is called "WindowsUpdateAgent30-x86-x64.exe". Of further interest, this web site is using fast flux DNS for its web hosting.

US-CERT urges users and administrators to take the following preventative measures to mitigate the security risks:

• Install anti-virus software, and keep its virus signature files up-to-date.
• Do not follow unsolicited web links received in email messages.
• Verify the web site by manually typing the URL when attempting to connect to web sites recommended in an email.
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.

Email Attack Targeting Microsoft's April Security Bulletin Release Cycle (2008-04-07)

US-CERT has seen reports of an email attack targeting Microsoft's April Security Bulletin release cycle. This attack arrives via email messages with the subject line "Critical Patch Released: Microsoft Security Bulletin MS08-64738." These email messages contain a link to a fraudulent Microsoft Update web site that hosts malicious code or contains an attachment that is embedded with malicious code. Users who follow the link or open the attachment may become infected with a Trojan.

US-CERT encourages users to do the following to help mitigate the risks:

• Install anti-virus software and keep its virus signature files up to date.
• Do not follow unsolicited web links received in email messages.
• Verify web sites recommended in email by manually typing their URLs. Do not link directly to web sites recommended in an email.
  
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.
• Follow the guidance provided in the Recognize and avoid fraudulent e-mail to Microsoft customers document from Microsoft.

Federal Deposit Insurance Corporation Warns Public of Fraudulent Email (2009-10-28)

The Federal Deposit Insurance Corporation (FDIC) has released information warning the public about fraudulent email messages purporting to come from the FDIC. These email messages provides a link to a fraudulent FDIC website. Users are then instructed to download their "personal FDIC Insurance File."

More information regarding these messages can be found in the Federal Deposit Insurance Corporation's Consumer Alerts website.

Users are encouraged to take the following measures to protect themselves from this type of phishing scam:

• Do not follow unsolicited web links received in email messages.
• Verify the website by manually typing the URL when attempting to connect to web sites recommended in an email.
• Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.