[Nagios-users-br] check_snmp atras de NAT

2010-01-18 Thread Diego Ribeiro
Bom dia pessoal, estou com um problema faz alguns dias ja e isso está me
tirando o sono.

Tenho o seguinte cenário:

[NAGIOS]-- {INTERNET} -- [FIREWALL] -- [SERVIDOR]

Estou fazendo checagens SNMP no firewall e também no servidor, mas para
checar o servidor, no command
check_snmp eu especifico uma porta diferente da 161, devido esta ja estar
sendo utilizada para checar o firewall.

No firewall eu redirecionei a porta que estou utilizando no comando para o
servidor e dando uma olhada no tráfego(tcpdump),
consigo visualizar que o handshake esta ok, porém, os dados retornados são
do firewall e não do servidor.

E o mais estranho, se eu executar o comando via shell, ele retorna as
informações do servidor, somente o nagios que embaralha as informaçções

Alguem ja passou por isso?

Desde já valeu a ajuda
[]'s


-- 
   dieggo.rbo at gmail dot com
   FreeBSD-BR User: #1047
   Linux User:  #395884
   www.linkedin.com/in/diegodias
   Limeira - SP -  [o]
--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
-- 
Nagios-users-br@lists.sourceforge.net mailing list
https://lists.sourceforge.net/lists/listinfo/nagios-users-br
Wiki: http://nagios-br.sf.net/wiki


Re: [Nagios-users] Squid SARG Reports Monitoring

2010-01-18 Thread Matthew Jurgens

Several ways to do it. Some I can think of right now are

1) check the sarg web page has changed each day, you might even try and 
get tricky and check for the specific date
2) Create a script to run the sarg job each day and log a passive result 
to Nagios with the result


I personally like 2) since its closer to checking the actual source ie 
the sarg run, rather checking the web page that is created by sarg
Read about passive checks: 
http://nagios.sourceforge.net/docs/3_0/passivechecks.html


On 16/01/2010 2:19 AM, Harald Böhmecke wrote:

Hi,

I http://www.arvato-services.de/ need to monitor the Squid Reports 
that SARG creates. Basically, I need to know if new reports were 
created each day.


I have no idea where I should start... any ideas?

Regards,

Harald


--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev


___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue.
::: Messages without supporting info will risk being sent to /dev/null


--
Smartmon System Monitoring http://www.smartmon.com.au
www.smartmon.com.au
--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Checking 64bit host from 32bit server

2010-01-18 Thread Mr Gabriel
When I run

--#  ./check_nrpe -H 64.bit.host

I get back -- CHECK_NRPE: Error - Could not complete SSL handshake. When 
I do

--# ./check_nrpe -H 64.bit.host -n

I get -- CHECK_NRPE: Error receiving data from daemon.   I'm checking 
from a 32 bit host, I shouldn't be able to have both problems?

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Checking 64bit host from 32bit server SOLVED

2010-01-18 Thread Mr Gabriel
On 18/01/2010 09:53, Mr Gabriel wrote:
 When I run

 --#  ./check_nrpe -H 64.bit.host

 I get back -- CHECK_NRPE: Error - Could not complete SSL handshake. When
 I do

 --# ./check_nrpe -H 64.bit.host -n

 I get -- CHECK_NRPE: Error receiving data from daemon.   I'm checking
 from a 32 bit host, I shouldn't be able to have both problems?

 --
 Throughout its 18-year history, RSA Conference consistently attracts the
 world's best and brightest in the field, creating opportunities for Conference
 attendees to learn about information security's most important issues through
 interactions with peers, luminaries and emerging and established companies.
 http://p.sf.net/sfu/rsaconf-dev2dev
 ___
 Nagios-users mailing list
 Nagios-users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/nagios-users
 ::: Please include Nagios version, plugin version (-v) and OS when reporting 
 any issue.
 ::: Messages without supporting info will risk being sent to /dev/null

Okay, I found the problem, editing the wrong configuration file for NRPE 
on the clients! *my mistake*

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Warnings/errors with check_openmanage plugin

2010-01-18 Thread Trond Hasle Amundsen
Gianluca Varenni gianluca.vare...@gmail.com writes:

 I updated it to 6.2, now I get this
   OK |0:0:0 | Physical Disk 0:0 [250GB] on ctrl -1 is Online
   OK |0:0:1 | Physical Disk 0:1 [250GB] on ctrl -1 is Online

This is interesting. Controller number shouldn't be -1.

 INTERNAL ERROR: Use of uninitialized value in join or string at 
 ./check_openmanage line 1345.
 INTERNAL ERROR: Use of uninitialized value in join or string at 
 ./check_openmanage line 1345.

Ok, so the error persists with updated OMSA. To debug this further, I
need the output from:

  * On the monitored host:
  omreport storage controller
  omreport storage pdisk controller=0

  * On the Nagios server:
  snmpwalk -v2c -c community hostname 1.3.6.1.4.1.674.10893.1.20.130

Cheers,
-- 
Trond H. Amundsen t.h.amund...@usit.uio.no
Center for Information Technology Services, University of Oslo

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


[Nagios-users] check_hpjd issues

2010-01-18 Thread Mr Gabriel
I'm getting the following error for running

# ./check_hpjd -H printer1.domain.com -C public
Error in packet ()

SNMP is enabled, although I do recall seeing snmp protocol 1 being used 
by this particular printer. Would this cause a problem?

--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] check_hpjd issues

2010-01-18 Thread James Pratt


 -Original Message-
 From: Mr Gabriel [mailto:gabr...@impactteachers.com]
 Sent: Monday, January 18, 2010 8:09 AM
 To: nagios-users@lists.sourceforge.net
 Subject: [Nagios-users] check_hpjd issues
 
 I'm getting the following error for running
 
 # ./check_hpjd -H printer1.domain.com -C public
 Error in packet ()
 
 SNMP is enabled, although I do recall seeing snmp protocol 1 being
used
 by this particular printer. Would this cause a problem?
 

Hi - I'm not sure if that will be a problem but you can always
test/troubleshoot this further by using snmpwalk on the command line,
which may give you more information as to what the issue really is ...

http://www.google.com/search?q=snmpwalk+examples

hth 

regards,
Jamie


--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Warnings/errors with check_openmanage plugin

2010-01-18 Thread Gianluca Varenni
Here they are (embedded below)

Have a nice day
GV

--
From: Trond Hasle Amundsen t.h.amund...@usit.uio.no
Sent: Monday, January 18, 2010 2:48 AM
To: Gianluca Varenni gianluca.vare...@gmail.com
Cc: nagios-users@lists.sourceforge.net
Subject: Re: [Nagios-users] Warnings/errors with check_openmanage plugin

 Gianluca Varenni gianluca.vare...@gmail.com writes:

 I updated it to 6.2, now I get this
   OK |0:0:0 | Physical Disk 0:0 [250GB] on ctrl -1 is Online
   OK |0:0:1 | Physical Disk 0:1 [250GB] on ctrl -1 is Online

 This is interesting. Controller number shouldn't be -1.

 INTERNAL ERROR: Use of uninitialized value in join or string at
 ./check_openmanage line 1345.
 INTERNAL ERROR: Use of uninitialized value in join or string at
 ./check_openmanage line 1345.

 Ok, so the error persists with updated OMSA. To debug this further, I
 need the output from:

  * On the monitored host:
  omreport storage controller

 Controller  CERC SATA 1.5/6ch (Slot 2)

Controllers
ID: 0
Status: Non-Critical
Name  : CERC SATA 1.5/6ch
Slot ID   : PCI Slot 2
State : Degraded
Firmware Version  : 4.1-0 (Bld 7419)
Minimum Required Firmware Version : Not Applicable
Driver Version: 4.1.0.7010
Minimum Required Driver Version   : 4.1.1.7040
Storport Driver Version   : 5.2.3790.3959
Minimum Required Storport Driver Version  : 5.2.3790.4173
Number of Connectors  : 1
Rebuild Rate  : Not Applicable
BGI Rate  : Not Applicable
Check Consistency Rate: Not Applicable
Reconstruct Rate  : Not Applicable
Alarm State   : Enabled
Cluster Mode  : Not Applicable
SCSI Initiator ID : Not Applicable
Cache Memory Size : 64 MB
Patrol Read Mode  : Not Applicable
Patrol Read State : Not Applicable
Patrol Read Rate  : Not Applicable
Patrol Read Iterations: Not Applicable
Abort check consistency on error  : Not Applicable
Allow Revertible Hot Spare and Replace Member : Not Applicable
Auto replace member on predictive failure : Not Applicable
Load balance  : Not Applicable
Security Capable  : Not Applicable
Security Key Present  : Not Applicable
Redundant Path view   : Not Applicable



  omreport storage pdisk controller=0

List of Physical Disks on Controller CERC SATA 1.5/6ch (Slot 2)

Controller CERC SATA 1.5/6ch (Slot 2)
ID: 0:0
Status: Ok
Name  : Physical Disk 0:0
State : Online
Failure Predicted : No
Certified : Not Applicable
Encryption Capable: No
Secured   : Not Applicable
Progress  : Not Applicable
Bus Protocol  : SATA
Media : HDD
Capacity  : 232.80 GB (249965248512 bytes)
Used RAID Disk Space  : 232.80 GB (249965248512 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : Maxtor
Product ID: 7Y250M0
Revision  : YAR5
Serial No.: Y66FN7ME
Part Number   : Not Available
Negotiated Speed  : Not Available
Capable Speed : Not Available
Manufacture Day   : Not Available
Manufacture Week  : Not Available
Manufacture Year  : Not Available
SAS Address   : Not Available

ID: 0:1
Status: Ok
Name  : Physical Disk 0:1
State : Online
Failure Predicted : No
Certified : Not Applicable
Encryption Capable: No
Secured   : Not Applicable
Progress  : Not Applicable
Bus Protocol  : SATA
Media : HDD
Capacity  : 232.80 GB (249965248512 bytes)
Used RAID Disk Space  : 232.80 GB (249965248512 bytes)
Available RAID Disk Space : 0.00 GB (0 bytes)
Hot Spare : No
Vendor ID : Maxtor
Product ID: 7Y250M0
Revision  : YAR5
Serial No.: Y66FQLJE
Part Number   : Not Available
Negotiated Speed  : Not Available
Capable Speed : Not Available
Manufacture 

[Nagios-users] Multiple NRPE Processes

2010-01-18 Thread Juki
Hi all,

I'm running Solaris 10 on the client that is being monitored.  However, when
I run the command netstat -a | grep nrpe, I see multiple instances of the
NRPE daemon
running as shown below;


nag...@pms # netstat -a | grep nrpe
  *.nrpe   *.*0  0 49152  0 LISTEN
pms.nrpe h1de4.n2  56147  5888  0 50540  0 TIME_WAIT
pms.nrpe h1de4.n2  56148  5888  0 50540  0 TIME_WAIT
pms.nrpe h1de4.n2  56149  5888  0 50540  0 TIME_WAIT


I have tried to *kill* them (using kill command) but that doesn't seem to
work because they just don't go away - weird right? :) I would like to kill
all the pms.nrpe processes..

Anyone have another way of achieving this?


Thanks,
Juki
--
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null