topic Re: Add a process to be monitored by cpwatchdog in Firewall and Security Management

Add a process to be monitored by cpwatchdog

Danilo_Lara — Tue, 13 Jun 2017 19:14:13 GMT

Hi,

Does anyone know how can I add a custom process or script to be monitored by cpwatchdog?

Thanks and regards!

Re: Add a process to be monitored by cpwatchdog

PhoneBoy — Tue, 13 Jun 2017 19:26:04 GMT

The command you use is cpwd_admin.

When you run the command with no arguments, you will get usage output that explains how to do it.

Below example is from R80.10, refer to the CLI Reference Guide for your specific version for additional information.

[Expert@R8010GW:0]# cpwd_admin

Usage:

cpwd_admin start -name <application name> [-ctx <name>] -path <executable path> -command <command line> [-env <inherit|env_var=value>]* [-slp_timeout <timeout>] [-retry_limit <limit|u>]

cpwd_admin stop -name <application name> [-ctx <name>] [-path <executable path> -command <command line> [-env <inherit|env_var=value>]*]

cpwd_admin del -name <application name> [-ctx <name>]

cpwd_admin detach -name <application name> [-ctx <name>]

cpwd_admin getpid -name <application name> [-ctx <name>]

cpwd_admin list [-full] [-ctx <name>]

cpwd_admin flist [-full] [-ctx <name>]

cpwd_admin monitor_list

cpwd_admin kill

cpwd_admin exist

cpwd_admin config -p

cpwd_admin config -a <value to add=data value=data...>

cpwd_admin config -d <values to delete from WD configuration>

cpwd_admin config -r

Examples:

- Start CPD

cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd"

- Start FWD

cpwd_admin start -name FWD -path "$FWDIR/bin/fwd" -command "fwd"

- Start FWM

cpwd_admin start -name FWM -path "$FWDIR/bin/fwm" -command "fwm"

- Start FG1

cpwd_admin start -name FGD50 -path "$FGDIR/bin/fgd50" -command "fgd50"

- Start SmartView Monitor

cpwd_admin start -name RTMD -path "$FWDIR/bin/rtmd" -command "rtmd"

- Start CPD without unlimited retries

cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd" -retry_limit u

- Stop CPD with command

cpwd_admin stop -name CPD -path "$CPDIR/bin/cpd_admin" -command "cpd_admin stop"

- Stop FWD with command

cpwd_admin stop -name FWD -path "$FWDIR/bin/fw" -command "fw kill fwd"

- Delete FWD from list

cpwd_admin del -name FWD

- Stop tracking the FWD process

cpwd_admin detach -name FWD

- Kill FWD brutally

cpwd_admin stop -name FWD

- Stop FWM with command

cpwd_admin stop -name FWM -path "$FWDIR/bin/fw" -command "fw kill fwm"

- Print pid of CPD to screen

cpwd_admin getpid -name CPD

- Print status of processes to screen

cpwd_admin list

- Print status of processes to file

cpwd_admin flist

- Config cpWatchDog parameters

For config commands use the usage of parameter=value

cpwd_admin config -p : print cpWatchDog parameters

cpwd_admin config -a : add cpWatchDog parameters

cpwd_admin config -d : delete cpWatchDog parameters

cpwd_admin config -r : restore default cpWatchDog parameters

- Stop cpWatchDog

cpwd_admin kill

- Check if cpWatchDog is running

cpwd_admin exist

- Start active monitoring on this machine

cpwd_admin start_monitor

- Stop active monitoring on this machine

cpwd_admin stop_monitor

Re: Add a process to be monitored by cpwatchdog

Danilo_Lara — Tue, 13 Jun 2017 19:54:27 GMT

Thanks for your prompt response, phoneboy. Do you know what is the configuration file to add the commands?So it will survive a reboot?

Re: Add a process to be monitored by cpwatchdog

PhoneBoy — Tue, 13 Jun 2017 20:27:05 GMT

As far as I know, cpwd_admin commands are persistent.

I'm not 100% sure where the configuration is stored, though.

Re: Add a process to be monitored by cpwatchdog

Danilo_Lara — Wed, 14 Jun 2017 12:09:09 GMT

Ok, I will test it and post here my findings.

Thanks!

Re: Add a process to be monitored by cpwatchdog

Danilo_Lara — Wed, 14 Jun 2017 12:41:28 GMT

The command is not persistent. To survive a reboot I added the cpwd_admin add command to /etc/rc.local and it worked fine.

Thanks!

Re: Add a process to be monitored by cpwatchdog

Danilo_Lara — Wed, 14 Jun 2017 12:56:43 GMT

I noticed that the process is started, however it is not being monitored, the column "MON" is showing as "N". How can I change to "Y" the "MON" column?

Thanks!

Re: Add a process to be monitored by cpwatchdog

PhoneBoy — Sat, 17 Jun 2017 20:56:23 GMT

Did you specify a number of retries?

For example, in the cpwd_admin help (which you can see by just typing cpwd_admin with no parameters), I see this one:

cpwd_admin start -name CPD -path "$CPDIR/bin/cpd" -command "cpd" -retry_limit u

Re: Add a process to be monitored by cpwatchdog

Danilo_Lara — Mon, 19 Jun 2017 14:17:00 GMT

I tried this option but it is still not being monitored. I tried killing the process and it haven't restarted it. The "MON" column is always set to "N".

Re: Add a process to be monitored by cpwatchdog

PhoneBoy — Mon, 19 Jun 2017 17:15:13 GMT

It's possible that cpwd is not meant to monitor arbitrary processes, I'll see if I can get the relevant party from R&D to comment.

In which case, I'll offer another solution that may work with the caveat that it's not supported

In Expert Mode (replace processname with binary name and /usr/bin with path binary is installed in):

dbset process:processname:path /usr/bin
dbset process:processname:runlevel 3
dbset process:processname t
dbset :save

Process Manager (pm) in the Gaia OS will monitor the relevant binary and (re)start it as needed.

Re: Add a process to be monitored by cpwatchdog

PhoneBoy — Thu, 22 Jun 2017 18:57:52 GMT

Just to clarify, cpwd has two different mechanisms for monitoring processes.

Only specific processes can leverage the "active" mechanism (i.e. the MON column).

Arbitrary processes like the one you're trying to monitor for won't leverage it, but cpwd should still notice if the process is killed and restart it.

Which is, by the way, similar to the Gaia workaround I provided above (except pm is monitoring it instead of cpwd).