Von: Michael Friedrich [mailto:[email protected]]
Gesendet: Donnerstag, 14. Juli 2011 08:38
An: [email protected]
Betreff: Re: [icinga-users] connection refused by host
Monz Roswitha wrote:
run a tcpdump 'host <your icinga host>' on the remote machine where nrpe
is running, and watch if the handshake is able to continue. probably add
'port 5668' if you don't want the ssh handshakes (or grep properly).
tcpdump shows that there is no traffic between the icinga-server and the
remote host, but when I run the check-command from commandline a
connection is established successfully.
i want to see that, not described. if there's internal data in the logs,
replace it accordingly and tell about it.
That happens when i force a service check in the icinga web:
icinga.log:
=========
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;CPU-Auslastung;1310
627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/home;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/opt;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/tmp;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/usr;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/var;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Free RAM;1310627336
[1310627373] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;ping;1310627336
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;CPU-Auslastung;1310
627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/home;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/opt;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/tmp;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/usr;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/var;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Free RAM;1310627394
[1310627395] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;ping;1310627394
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;CPU-Auslastung;1310
627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/home;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/opt;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/tmp;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/usr;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Filesystem
/var;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;Free RAM;1310627535
[1310627538] EXTERNAL COMMAND:
SCHEDULE_FORCED_SVC_CHECK;u2ru130.lksdom21.lks.local;ping;1310627535
tcpdump on the icinga-server:
===========================
u1ru185 /usr/local # tcpdump host u2ru130.lksdom21.lks.local
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
0 packets captured
4 packets received by filter
0 packets dropped by kernel
tcpdump on the remote-server:
===========================
u2ru130 / # tcpdump host u1ru185.lksdom21.lks.local
tcpdump: WARNING: eth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
0 packets captured
14 packets received by filter
0 packets dropped by kernel
That happens when i run a service check directly from the commandline:
tcpdump on the icinga-server:
===========================
u1ru185 /usr/local # tcpdump host u2ru130.lksdom21.lks.local
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
09:13:46.292394 ARP, Request who-has u2ru130.lksdom21.lks.local tell
u1ru185.lksdom21.lks.local, length 28
09:13:46.293220 ARP, Reply u2ru130.lksdom21.lks.local is-at
00:11:0a:5b:22:2c (oui Unknown), length 46
09:13:46.293234 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [S], seq 2092782395, win 5840,
options [mss 1460,sackOK,TS val 150126788 ecr 0,nop,wscale 7], length 0
09:13:46.293553 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [S.], seq 1625944831, ack
2092782396, win 5792, options [mss 1460,sackOK,TS val 775746095 ecr
150126788,nop,wscale 7], length 0
09:13:46.293597 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [.], ack 1, win 46, options
[nop,nop,TS val 150126790 ecr 775746095], length 0
09:13:46.294547 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [P.], seq 1:78, ack 1, win 46,
options [nop,nop,TS val 150126791 ecr 775746095], length 77
09:13:46.294882 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [.], ack 78, win 46, options
[nop,nop,TS val 775746096 ecr 150126791], length 0
09:13:46.300443 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [P.], seq 1:240, ack 78, win 46,
options [nop,nop,TS val 775746102 ecr 150126791], length 239
09:13:46.300549 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [.], ack 240, win 54, options
[nop,nop,TS val 150126797 ecr 775746102], length 0
09:13:46.302435 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [P.], seq 78:212, ack 240, win
54, options [nop,nop,TS val 150126799 ecr 775746102], length 134
09:13:46.303879 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [P.], seq 240:299, ack 212, win
54, options [nop,nop,TS val 775746105 ecr 150126799], length 59
09:13:46.305684 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [P.], seq 212:318, ack 299, win
54, options [nop,nop,TS val 150126802 ecr 775746105], length 106
09:13:46.311260 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [P.], seq 299:469, ack 318, win
54, options [nop,nop,TS val 775746112 ecr 150126802], length 170
09:13:46.311429 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: Flags [P.], seq 318:355, ack 469, win
63, options [nop,nop,TS val 150126808 ecr 775746112], length 37
09:13:46.311801 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [P.], seq 469:506, ack 355, win
54, options [nop,nop,TS val 775746113 ecr 150126808], length 37
09:13:46.311808 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: Flags [R.], seq 506, ack 355, win 54,
options [nop,nop,TS val 775746113 ecr 150126808], length 0
16 packets captured
24 packets received by filter
0 packets dropped by kernel
tcpdump on the remote-server:
===========================
u2ru130 / # tcpdump host u1ru185.lksdom21.lks.local
tcpdump: WARNING: eth0: no IPv4 address assigned
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
09:13:49.061077 arp who-has u2ru130.lksdom21.lks.local tell
u1ru185.lksdom21.lks.local
09:13:49.061528 arp reply u2ru130.lksdom21.lks.local is-at
00:11:0a:5b:22:2c (oui Unknown)
09:13:49.061337 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: S 2092782395:2092782395(0) win 5840
<mss 1460,sackOK,timestamp 150126788 0,nop,wscale 7>
09:13:49.061360 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: S 1625944831:1625944831(0) ack
2092782396 win 5792 <mss 1460,sackOK,timestamp 775746095
150126788,nop,wscale 7>
09:13:49.062284 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: . ack 1 win 46 <nop,nop,timestamp
150126790 775746095>
09:13:49.062685 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: P 1:78(77) ack 1 win 46
<nop,nop,timestamp 150126791 775746095>
09:13:49.062695 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: . ack 78 win 46 <nop,nop,timestamp
775746096 150126791>
09:13:49.068221 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: P 1:240(239) ack 78 win 46
<nop,nop,timestamp 775746102 150126791>
09:13:49.069274 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: . ack 240 win 54 <nop,nop,timestamp
150126797 775746102>
09:13:49.070572 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: P 78:212(134) ack 240 win 54
<nop,nop,timestamp 150126799 775746102>
09:13:49.071693 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: P 240:299(59) ack 212 win 54
<nop,nop,timestamp 775746105 150126799>
09:13:49.073866 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: P 212:318(106) ack 299 win 54
<nop,nop,timestamp 150126802 775746105>
09:13:49.079007 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: P 299:469(170) ack 318 win 54
<nop,nop,timestamp 775746112 150126802>
09:13:49.079607 IP u1ru185.lksdom21.lks.local.52181 >
u2ru130.lksdom21.lks.local.nrpe: P 318:355(37) ack 469 win 63
<nop,nop,timestamp 150126808 775746112>
09:13:49.079619 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: P 469:506(37) ack 355 win 54
<nop,nop,timestamp 775746113 150126808>
09:13:49.079649 IP u2ru130.lksdom21.lks.local.nrpe >
u1ru185.lksdom21.lks.local.52181: R 506:506(0) ack 355 win 54
<nop,nop,timestamp 775746113 150126808>
16 packets captured
30 packets received by filter
0 packets dropped by kernel
u2ru130 / # grep nrpe /var/log/messages
Jul 14 09:13:49 u2ru130 xinetd[11148]: START: nrpe pid=16923
from=192.168.102.185
Jul 14 09:13:49 u2ru130 nrpe[16923]: INFO: SSL/TLS initialized. All
network traffic will be encrypted.
Jul 14 09:13:49 u2ru130 xinetd[11148]: EXIT: nrpe status=0 pid=16923
duration=0(sec)
------------------------------------------------------------------------------
AppSumo Presents a FREE Video for the SourceForge Community by Eric
Ries, the creator of the Lean Startup Methodology on "Lean Startup
Secrets Revealed." This video shows you how to validate your ideas,
optimize your ideas and identify your business strategy.
http://p.sf.net/sfu/appsumosfdev2dev
_______________________________________________
icinga-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/icinga-users
