Server Monitoring

New: scheduled maintenance, work schedules, performance indicators (2006-11-28)

1. Set-up maintenance periods per rule

   In the monitoring settings page, in "expert mode", you can now:

   • Start and duration of the maintenance period
   • Optionally set the repeat period (daily, weekly, monthly)

   During the maintenance period, WatchMouse will continue monitoring your servers but errors are not included in downtime calculation, and alerts are not sent. In the performance chart and logs, the checks while in maintenance are marked as such (see legend). The maintenance periods will be made visible in the graphs too.

2. User defined performance limits

   You can now define on a per-rule basis the limits for good, poor, and bad performance next to the existing ('timeout'). These limits can be entered in the monitoring settings page, in "expert mode". These limits are used in the performance chart.

3. Work schedule options in your contacts

   You can now specify which days, and which hours people in you contact list are on duty:

   • When not on duty, no alerts will be sent to this contact person
   • This is also useful for group alerts, with non-overlapping schedules
   • A contact can now also be set to 'inactive' manually, just like the monitoring rules
   • Inactive contacts do are not included when computing the maximum number of contacts you can still use

   You can set the work schedule in your contacts page, after selecting one of your existing contacts or entering a new contact.

New functionality: monitor your VoIP registrar (2007-09-24)

WatchMouse introduces a new service: SIP monitoring.

SIP, short for Session Initiation Protocol, is used for call set-up in Voice over IP (VoIP) calls, but is also used to convey the availability of VoIP devices and the presence of their users.

SIP monitoring is useful if you rely on Internet Telephony and want to keep an eye on the availability and performance of your VoIP provider: Your VoIP devices contact the registrar on a regular basis, and it is therefore crucial that this registrar is always available. The WatchMouse SIP rule allows you to monitor the registrar servers from each of the WatchMouse monitoring stations worldwide.

The new SIP monitoring feature is available for all WatchMouse customers with a monitoring subscription (Gold and higher), and can be configured on the Monitoring Settings page.

To get started:

• Get hold of the registrar's domain or proxy address and port (default 5060) (you can find this information in the settings of your VoIP devices, or ask your provider).
• Go to the rule Monitoring Settings page.
• Add a new rule, and select 'sip' from the type menu.
• Enter the SIP domain or proxy name, choose all other settings like you would for other rule types, save, and you're done!
• The results of the SIP monitoring appear in your logs, reports, and graphs instantly.

New Service: Monitoring the epicenter (DNS) of your online brands (2008-01-24)

Your domain name directs customers to a website where you represent your brand and all that it stands for but are you managing and regularly monitoring the domain name service (DNS) which translates your domain name and brings your customers to you? DNS consistency monitoring can help ensure your business does not lose customers to a slow or faulty DNS.

It is useless to have paid for an expensive and fully redundant web site server (park), if the DNS servers fail to respond, respond incorrectly, or inconsistently. Your DNS must be consistent and correct. Monitoring for DNS consistency is particularly important if you have online services relying on one or more domain names (and that is almost always the case). It doesn't matter if your DNS servers are maintained in-house or outsourced, you need to know if they are doing what they are supposed to do. WatchMouse's DNS consistency monitoring (now available in closed beta) checks your DNS systems and provides rapid notification of any unexpected DNS behaviour.

The WatchMouse's 'domain' type rule allows you to monitor the consistency of the behaviour of your DNS servers. It queries for a specified domain, performs a number of checks to test the health of your DNS servers and monitors for any difference in behaviour of your name servers. (If you also need to check that a domain name resolves to the correct IP address(es), you can use the 'dns' type rule which will be offered as part of the WatchMouse DNS consistency monitoring).

This new service will be available to all WatchMouse customers with a performance monitoring subscription (Webmaster and higher) and can be configured on the Monitoring Settings page. To set-up DNS consistency monitoring, simply enter the domain name (advanced settings are available).

Fancy participating in our closed beta test?

• Contact us to request participation in the beta.
• Collect all the domain names that are important to your business.
• Go to the Monitoring Settings page.
• Add a 'new rule' and select 'domain' from the type menu, for each of the domains you wish to monitor.
• Specify the other settings you would like for other rule types, hit 'save', and you're done!
• The results of the domain name monitoring appear in your logs, reports, and graphs instantly.

Launching WatchMouse Laboratories: the tech playground for website monitoring (2009-10-08)

We just launched WatchMouse Laboratories (labs.watchmouse.com)

This blog is the experimental outlet of the WatchMouse engineering team. Here we will share our thoughts on website monitoring, publish experimental features, hand out beta-invites and ask for your opinion.

Our first post is "Investigating IPv6 Website Monitoring", explaining about our work to be ready for the IPv6 Internet. As you might know IP addresses are running out, and many efforts are being made to replace the current Internet Protocol (IPv4) with version 6, which allows for an almost unlimited number of IP addresses.

Of course this will also have consequences on Website Monitoring of IPv6 enabled web sites and servers. WatchMouse is currently working to make this part of their standard offering, and some of our thoughts and findings are shared on our new labs blog.

Read more about IPv6 Website Monitoring on our labs site, and feel free to leave a comment!

Rapidly growing WatchMouse wins Deloitte’s Rising Star award (2005-09-23)

WatchMouse is one of the three winners of Deloitte’s Rising Star award. This award is presented annually to rapidly expanding technology companies less than five years old. WatchMouse has been active worldwide for three years in the area of site and server monitoring. With 16 monitoring stations throughout the world, WatchMouse monitors the availability of customers’ websites, immediately sounding the alarm in the event of problems.

The Rising Stars are presented as part of the Deloitte Technology Fast 50 ceremony, the fifty most rapidly expanding technology businesses. The Rising Stars have the potential to lead the Technology Fast 50 in the near future. Stan van de Burgt (42), Niels Eijsbroek (40) and Mark Pors (38) first came up with the idea for WatchMouse in 2001. The concept was as unique as it was clear: to monitor the availability of sites and servers by constantly simulating web traffic. If a site is not responding or an error is found, the customer is notified immediately by SMS, pager, IM or e-mail. From the moment the concept went 'live', in 2002, the pace has been frenetic: turnover doubled each year. Web sites are now monitored from sixteen monitoring stations worldwide 24 hours a day, seven days a week.

The WatchMouse application is entirely web-based: customers do not have to install software or hardware at their site, and the application excels in its self-service aspects while staying easy to use. This allows WatchMouse to operate with a small core of permanent employees, supplemented by external support. Prospective customers can specify their requirements in detail on the WatchMouse site. A range of starter packages is available, priced from € 17.50 per month up to € 450 per month. 400 paying customers in 40 countries worldwide now make use of WatchMouse’s services. These include hosting companies, government bodies, and companies such as LB Icon, Scania, Siemens, Orange, ING, GeoTrust, Citibank, and Postbank.

Self-service as a success factor

Mark Pors, Chief Technology Officer, says he was “pleasantly surprised by the award”. “I am very happy that the jury shares our vision of self-service and our market approach." Pors sees WatchMouse as “the right initiative at the right moment. Companies are increasingly looking to outsource non-core tasks. However, they want to be able to guide and control this themselves and from their own workplace. Web-based services make this possible." Stan van de Burgt, CEO, sees the simplicity of the WatchMouse site and the various languages in which it is available as the major success factors. "Monitoring websites was an idea that already existed in essence, but had not been worked out in this form. We are geared tightly to 'self service', whereby customers can set up everything themselves and retain total control. Which also means we are able to offer the service at a more attractive price than other players in the market.”

The Rising Star awards were presented on Thursday, 22 September.

WatchMouse

WatchMouse assesses your website and e-commerce applications just like your customers experience them. The checks are carried out from 16 monitoring stations worldwide, and recorded in regular reports. In the event of errors or availability problems, the right people within your organisation will be alerted.

www.watchmouse.com

Even website hosting companies have too little uptime (2007-02-05)

Leaseweb, Rackspace and WideXS score well

Utrecht, 5 February 2007 – Research carried out by WatchMouse, the Dutch site and server monitoring company, has revealed that many website hosting companies are not achieving optimum performance in terms of uptime. During the months November and December 2006, the company registered the average loading times and availability of the sites of eleven website hosting companies. Leaseweb, Rackspace and WideXS came out on top.

The three best-performing companies all had an average uptime of 99.99% or higher. A good score, says WatchMouse, although the company pointed out that, even when achieving this score, a site will still be unavailable for eight hours every year. The reasons for this downtime vary between sites, although problems with the name server (DNS) and excessive loading times dominate. The types of problem also differ from site to site, indicating that good choices – for example for DNS solutions – are essential.

Companies which scored 99.7% or less are at risk of losing clients annually owing to their site loading too slowly, or unavailability of the web page. Four of the eleven hosting companies scored below this limit and will therefore have to work on their availability. Nevertheless, the organisations tested generally performed better than the average bank website, for example.

"On the one hand, it is reassuring to see that website hosting companies recognise the importance of good availability. Nevertheless, there is room for improvement, particularly as it is precisely these companies that should be setting the pace", says Mark Pors, Chief Technology Officer at WatchMouse. "Customers looking for a web hosting company will not want to entrust the management of their site to a hosting company whose own site is unreliable. Optimum performance is therefore crucial, for these companies in particular."

The full results of the survey can be obtained from the WatchMouse site: www.watchmouse.com

Website performance is the key to customer satisfaction (2007-06-27)

How often have you typed in the Google URL and received a page that will not load? I am willing to bet that this is a rare occurrence. Despite its busy traffic, Google is a textbook example of a web site that has almost perfect performance and therefore serves a great number of satisfied customers. The market share of the search engine is a resounding confirmation of this. You are assisted quickly, so you come back sooner. Research conducted by JupiterResearch has revealed that visitors to a site only have 4 seconds of patience. If the site has not been loaded by that time, they leave. Error messages also prompt potential customers to go to the competition.

Why do organisations still devote so little attention to the effective availability of their site? Performance is the key to satisfied customers. For many companies, their web site is the face of the organisation. Consumers and also business users of the Internet use the wealth of information on the web to compare purchasing options. It is of immeasurable importance that they are also actually able to find what they are looking for. If this is not possible at one company, competitors are straining at the leash to offer their services through a correctly functioning site.

Coming back to the praise that we had for Google, we see that the search engine has made significant investments in the availability of its web site. The page is run by several machines at various sites. If one crashes there are enough back-up servers that can take over the traffic flows to guarantee optimum performance. In addition, the search machine invests a great deal of time and money in the right hardware and people. Although the site has a difficult task – searching through an index of billions of documents – it is almost always available and loads fast.

The actual site is unspectacular in construction. This applies to the majority of sites with a high level of availability. Simple sites such as the news site NU.nl are almost always easy to access. Nevertheless, it is not only the layout of the site that determines how the web page performs. Too many photos, long symbols and frills make web sites slower to respond. The fact that the ‘back end’ of the site is not efficiently programmed also contributes to longer loading times. Frequent consultation of background databases is also detrimental to the speed of the page.

Where it often goes wrong is when different people are working on a site, thereby disturbing the links between the various elements. The different parts of the site will work correctly, but the site as a whole will fail to perform. This means long waiting times for people who want to use the services of a company.

Service providers at the upper end of the market are becoming increasingly aware of this. The contracts that they use frequently include a service level agreement (SLA) for the part for which they are responsible. Nevertheless, they regularly make mistakes due to the fact that the promised performance is not subsequently verified (by an independent party). Although it is now essentially part of the contract, there is insufficient actual verification. Ideally, web site performance should become a permanent component of a contract. In addition, clear internal agreements must be made on who has final responsibility for the efficient loading and availability of a site.

Regular testing is also essential for the facilitation of good availability. This will prevent a great deal of errors, keeping the site up and running at crucial times. The storm that blew over the Netherlands at the end of January was a good opportunity to see which sites were prepared for extreme loads and which were not. The site of the Dutch weather institute, KNMI, was almost unreachable, while some logical thought could have protected them from this eventuality. If you know that a major storm is heading towards the country you can be sure that people will search for information on the weather and roads on the Internet. Sites such as those of KLM and Schiphol were also unreachable, while the specially created site Crisis.nl, which had been kept as simple as possible, was able to serve a large number of people.

Including ‘stress tests’ in a SLA or conducting them regularly in-house is therefore to be recommended. Companies can easily take control by ensuring that their service provider executes this type of test or by putting their own site under pressure. This is the best method of checking whether your web site can handle a sudden increase in visitor numbers. It is also good to know whether the servers on which your site is running actually ensure that your page is always available and loads correctly. For companies, it is crucial to see when they are off air. This can save them a large amount of money every year and will also reduce the number of irritated visitors to the site. This is how you keep customers satisfied and keep the company running.

Mark Pors
Chief Technology Officer at WatchMouse

WatchMouse provides site performance monitoring and stress test services

IBM Tivoli Monitoring Express Universal Agent Multiple Heap Buffer Overflow Vulnerabilities (2007-07-06)

IBM Tivoli Monitoring Express Universal Agent is prone to multiple buffer-overflow vulnerabilities because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized memory buffer.

An attacker can exploit these issues to execute arbitrary code within the context of the vulnerable application. This may facilitate the compromise of affected servers. To leverage these issues, the attacker does not need to authenticate.

IBM Tivoli Monitoring Express 6.1 is affected.

WatchMouse: Recently added scans (2008-02-08)

The most recently added vulnerability checks and solutions for the WatchMouse Periodic Vulnerability Scan.

• 2008-02-07 - WinComLPD LPD Monitoring Server Authentication Bypass Vulnerability (High)
• 2008-02-07 - Adobe Reader < 8.1.2 (High)
• 2008-02-07 - WinComLPD LPD Monitoring Server Default Credentials (High)
• 2008-02-07 - HP Virtual Rooms WebHPVCInstall.HPVirtualRooms14 ActiveX Control Buffer Overflow Vulnerabilities (High)

Linksys WVC54GCA Wireless-G 'adm/file.cgi' Multiple Directory Traversal Vulnerabilities (2009-04-28)

Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera is prone to multiple directory-traversal vulnerabilities because the software fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings ('../') to download arbitrary files with the privileges of the server process. Information obtained may aid in further attacks.

Linksys WVC54GCA Wireless-G Internet Home Monitoring Camera firmware 1.00R22 and 1.00R24 are affected; other versions may also be vulnerable.

Ping from all our monitoring stations (2005-12-09)

You can now use our improved ping tool to ping your server from each of our monitoring stations.

In case ping requests are blocked by your firewall or server, you can use the host check tool alternatively.