[brashquido]

Mahesh wrote on Apr 24 2008, 05:15 AM:

MONyog is a dedicated and specialized web-server also makes it very secure.

You can install MONyog on your local machine and can access it remotely by giving IP of your machine, so that it is not accessbile over the internet.

Also MONyog is password protected –during install you can give password or you can set it from Tools– Preferences.

Thanks for the reply Mahesh, however I feel you are missing my point somewhat. I don't doubt that MonYog has been designed with a certain level of security in mind, however I think obtaining enterprise grade security (particularly in an Internet facing application) is such a truly massive task it can not be assured through the application alone. All the Internet facing servers I build for clients have a minimum of a 3 layered approach (network, server perimeter and internal) which I only consider as being adequate and still would not stop the most systematic/determined of hackers. I wonder (for example) what protection is build into Monyog for basics such as DoS and dictionary attacks? Also, did you realise that the Monyog password is transmitted in plain text?

Aside from this, there are also other situations where it is a major hassle having Monyog run its own web service. For instance today I was at a client site and got an SMS from another client asking if any of the changes I'd made (going from Monyog advisory) to the query cache had slowed the server down. I went to use the Internet to access my Monyog install at the site I was at, however their proxy only permitted standard port 80 and 443 for HTTP traffic which meant I could not access Monyog as my IIS environment are already bound to these ports.

[brashquido]

1. 😀

2. Thinking about it again I think this might be out of scope for a MySQL monitoring program. I have a situation where users on my server are using many different PHP scripts to connect to MySQL, however the connections are not always closed correctly when finished with. The end result here is that I have processes going in to SLEEP mode permanently because they aren't terminated which in turn is consuming connection resources and adding to my “terminated abruptly” counter as MySQL is having to forcefully close the connection when the timeout limit is reached. Perhaps you could look at creating a log that tracks what databases/queries are going into SLEEP mode, and then have a warning and critical level for the number of seconds spent in SLEEP mode? That way it would be a lot easier to track back dodgy code that aren't closing their connections.

3. Tables using TEXT or BLOBS are always placed on disk, correct? Simply log what tables are explicitly using these string types so the application defining this can be traced back. There might be other factors that also dictate if tables are created in memory or on disk that might need to be logged.

4. 😀

Obviously I'm seeing MonYog usage from the point of view of my particular needs. Not sure what the intended Monyog scenario is, but in my environment I am supporting a LOT of PHP code of which 99% is open source that I did not write. Because of the amount of code (10's of thousands of lines) one of the biggest advantages I am hoping MonYog will eventually be able to help deliver is a method in which to quickly and easily trace back where code is not utilising MySQL in an optimum way.

[brashquido]

Mahesh wrote on Apr 24 2008, 04:28 AM:

In processlist tab there is an option “Pause Auto-refresh” click on that and then click “Explain query” icon of the particular query.

Hi Mahesh,

That is the way I am doing it currently, however it relies on me to be actively monitoring the processlist, seeing the query I want to analyse and hitting the “Pause Auto-refresh” button all inside one second. This is not a workable solution, especially when you have upwards of 100 connections. I think I read in one of the other threads that the next version will include a slow query log analyser, which will to a degree will make this a moot point.

[brashquido]

peterlaursen wrote on Mar 25 2008, 04:38 PM:

In MONyog go to 'processlist' page to find the EXPLAIN option.

Is there anyway you can store the queries to use with the EXPLAIN option on at a later date? The process list is updated every second and by the time I see a SELECT statement to try the EXPLAIN option the screen is refreshed.

[brashquido]

Cheers guys, no onto the feature request forums 🙂 .

[brashquido]

Seems life is determined to be difficult this week 🙄 . I couldn't find my shareit reference, so I tried ordering again via PayPal but got the same “Unfortunately, the PayPal transaction for your order 1234567 has been delayed. We will inform you as soon as we have received your payment” message. Unfortunately PayPal is my only payment option otherwise I'd just use a credit card and be done with it. Anyway, I don't really have time to be chasing up a third party about this order so Peter I've PM'd my newest order in case it doesn't come through.

[brashquido]

Ok, please keep me posted Peter, and thanks for chasing this up. To think I used PayPal as I thought it would be the quickest and most hassle free way of getting my copy of Monyog :huh:

[brashquido]

That's weird. Never seen it do that before. Anyway, see how it looks in the morning.

[brashquido]

Ok, cheers for that. Is there some kind of issue with your payment gateway? I just purchased a single server license for Monyog via PayPal, however there was some delay in payment error. Not sure why this is as I have the funds in my account. Any idea how long this usually takes?

[brashquido]

PHP would certainly be the most portable of those platforms wouldn't it? Not sure if you guys are wanting to break into larger environments with MonYog at all, but I think having a web application that can be intergrated into existing infrastructure would definately help you here. I've worked in IT for over a decade, and the last 4 of that have been in some fairly big environments in their webhosting areas (banks, microprocessor manufacturers, etc) and I can tell you that you'll be fighting an uphill battle to get into these environments. Not because there is anything wrong with your product, but rather no internal IT team will take ownership or support of it when it operates outside their exiting infrastructure.

Then again, all big business I've worked for use Oracle or MSSQL, so probably not really an issue anyway 🙂 . Still, would be high on my wish list anyway as ultimately the fewer apps that are Internet facing the better. And that rule is regardless of size 😉 . I might have to revisit opening up a port for MonYog and just tie it down with some IPSEC policies. For your information too, IIS 6 is one of the most secure webservers out there at present, and last time I looked there had been only 2 SAN security issues with it in 4 years. Mind you, lets just not talk about any version prior to IIS 6 😉 .

P.S – What price will MonYog be? Will there be any cost advantages for early adopters 🙂 ?

[brashquido]

Ok, the missing DLL was msvcr71.dll. This is a 4 day old install of Windows 2003 Standard Server running SP2. I grabbed the missing DLL of the internet and it seems to be working fine now.

I can certainly understand why you included your own webserver, but on the same hand I would imagine anyone wanting to monitor the performance of their MySQL server is probably a little more tech savvy than your average bear. I could be wrong though 🙂 . For my server I only allow two open ports for web traffic, Port 80 and 443. This is to reduce my attack surface, and as IIS is bound to these ports I can't run MonYog on either of them. Another point is that I access the Internet through a proxy server a lot of the time which only allows port 80 and 443 as well.

Great news about the log parsing 🙂 ! Did you mean wait for Version 2 or RC2 😉 … just kidding…

Don't worry about this last one, I can't seem to replicate it now….

[brashquido]

AnandP wrote on Mar 23 2007, 07:26 PM:

Which version of MySQL (server as well as client) are you using?

Server version: 4.1.22-community-max-nt-log

MySQL client version: 3.23.49

[brashquido]

newmac wrote on Mar 23 2007, 01:44 PM:

Also, you should consider changing the architecture to have multiple levels of thresholds/warning between “Very Good” to “Disaster!”

That is a very good idea. Maybe a simple traffic light system with green = good, yellow = caution, red = critical?

[brashquido]

Seems others have seen this issue too;

http://www.vbulletin.com/forum/showthread.php?t=221979

[brashquido]

One more thing, any idea why my table_cache size value would be being displayed as 1007 when I've set it to 1024? It's not Monyog as when I do a “show variables like 'table_cache';” it returns 1007 as well. I've set the “open-files-limit=4096” which I understand I am ment to set if I increase the table_cache size. I'm wondering if this is something to do with Windows 2003 Server rather than MySQL;

http://dev.mysql.com/doc/refman/4.1/en/table-cache.html

[Author]

Posts