Re: [Nagios-users] Announce: Check_Gentoo_Portage plugin
Hari Sekhon schrieb: > Matthias Kellermann wrote: >>> You can get the plugin from NagiosExchange here: >>> >>> http://www.nagiosexchange.org/Check_Plugins.21.0.html?&tx_netnagext_pi1[p_view]=1244 >>> >> >> >> >> Thanks Hari for this great plugin - just what I needed! :) >> >> Just tested it - works fine! >> I had to raise the DEFAULT_TIMEOUT to something like 30 on some older >> machines to get this to work. But on newer system 10 seconds are ok. >> >> Matthias > This is one good reason for the --timeout switch. I've just used that > switch to increase the running timeout to 30 seconds as well just to be > safe from timeouts. If you're referring to the DEFAULT_TIMEOUT in the > plugin, it's not really needed to change the code if you use the > --timeout switch when you run it (or embed that in the NRPE call or > whatever you use for remote checks), but it's completely your choice. You are right - the timeout switch is the better choice for changing the timeout. It's also more flexible to change it that way. So, next is to build an ebuild for that plugin, right? ;) Matthias - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Announce: Check_Gentoo_Portage plugin
> You can get the plugin from NagiosExchange here: > > http://www.nagiosexchange.org/Check_Plugins.21.0.html?&tx_netnagext_pi1[p_view]=1244 > Thanks Hari for this great plugin - just what I needed! :) Just tested it - works fine! I had to raise the DEFAULT_TIMEOUT to something like 30 on some older machines to get this to work. But on newer system 10 seconds are ok. Matthias - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Monitor Gentoo portage
Hari Sekhon schrieb: > Matthias Kellermann wrote: >> critical update: fixes a security hole (nagios state: critical) >> non-critical update: just a new version with new features etc. (nagios >> state: warning) >> >> Thanks for your help and if you need any help for this plugin don't >> hesitate to ask me. > Ok thanks. > > Just out of curiosity, why would you want to know if there are new > version of a package available? There may be so many packages on a > server, that there is always some update. Do you intend to continuously > update the system for things which have no benefit? It's kinda interesting to know which packages are new. > eg. on a relatively light server with 174 packages, the odds of a newer > version of some small irrelevent program having gotten an update for > some feature you don't even know about is quite high I think. > > Perhaps that kind of thing is better left for a switch option as I think > most people really wouldn't want to be bothered about that. You are right - a switch would be the best thing. For most people only the security flaws are interesting. > Do you, for example, update all packages on your gentoo servers all the > time? I would think that this would destabilize your server by > constantly changing things...? At the moment I don't have that much Gentoo machines out there. Most are running FreeBSD oder Debian, there aren't lots of updates. > What do you think? I think the switch is the best solution to get everyone happy :) Matthias - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Monitor Gentoo portage
Hari Sekhon schrieb: > Matthias Kellermann wrote: >> Hi list, >> >> does anyone know a Nagios plugin for monitoring Gentoo's portage for >> updates? A quick google search did not give any results > That sounds like a good idea and one that I am quite interested in since > I run a lot of gentoo servers. > > Could you please elaborate on what exactly you want this plugin to do, > perhaps I can write it... > > -h The plugin should check the output of "emerge -upD --newuse world" for updates. It's been a while since I've used Gentoo on a daily basis so I'm not sure if the output of the above command shows any difference between critical and non-critical updates. I wrote a similar plugin for FreeBSD where I use portaudit to see if there are any critical packages on the system. This way I can divide between critical packages and normal updates and give the right state back to Nagios (1 = non-critical, yellow / 2 = critical, red). Matthias - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Monitor Gentoo portage
Hi list, does anyone know a Nagios plugin for monitoring Gentoo's portage for updates? A quick google search did not give any results. Thanks. Matthias - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Plugin for monitoring FreeBSD for updates (like check_apt)?
Hi list, I've made some progress with a Nagios Plugin for the FreeBSD Ports. It's called check_ports for now and the first version can be found here: http://dl.adminlife.net/check_ports Please don't blame me for my coding style - I'm not a shell hacker ;) The plugin does the following: If you start it without a parameter it will check the host system for updates via pkg_version and security problems via portaudit (if it exists). If you start it with the name of a jail as parameter it will check the jail for updates and security problems. This is done via jexec so you need sudo installed if you call the Nagios plugin with an unprivileged user. Some problems still exist: - sometimes there is an plugin timeout in Nagios, because calling pkg_version can be time consuming - it is not the best idea to give an unprivileged superuser access to jexec without password The plugin works for me at the moment. Hope it will work for you, too. I would be happy if you have any suggestions or improvements. Matthias - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Plugin for monitoring FreeBSD for updates (like check_apt)?
Brian A. Seklecki schrieb: > On Mon, 2007-11-12 at 16:42 +0100, Matthias Kellermann wrote: >> Hi list, >> >> anyone knows of a Nagios plugin to check the FreeBSD ports and base >> system for updates? I'm searching for something like check_apt for >> Debian/Ubuntu. > > All that you need to do is exec portaudit and trap the output. However, > mapping this into warn/crit status will get tricky. > > Most big shops have software release engineer processes that prevent > them from, as a NetBSD friend of mine calls it, "implementing massive > rolling in-place binary upgrades". > > In the hope that security will somehow be derived from that (Linux > credo, I suppose). I like the idea ether way. Let me know if you need > help testing/coding. > > ~BAS > > $ pkg_version -vL "=" > apache-2.2.4_2 < needs updating (port has 2.2.6_2) > apr-nothr-db4-1.0.1_1< needs updating (port has 1.2.8_2) > arj-3.10.22 < needs updating (port has 3.10.22_1) > autoconf-2.59_3 < needs updating (port has 2.61_2) > autoconf-wrapper-20070404< needs updating (port has 20071109) > > $ sudo portaudit > Affected package: perl-5.8.8 > Type of problem: perl -- regular expressions unicode data buffer > overflow. Reference: <http://www.FreeBSD.org/ ... > > Affected package: nagios-plugins-1.4.9,1 > Type of problem: nagios-plugins -- Long Location Header Buffer > Overflow Vulnerability. > > ~BAS Thanks for your answer Brian. I've found ports-mgmt/jailaudit in the Ports. Seems quite useful yet. I'll see how this tool can help on monitoring the installed ports for security holes. Monitoring the jails for updates should work with pkg_version -vL "=" I'll let you know if I've made something useful. Matthias - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Plugin for monitoring FreeBSD for updates (like check_apt)?
Michael W. Lucas schrieb: > On Mon, Nov 12, 2007 at 04:42:40PM +0100, Matthias Kellermann wrote: >> Hi list, >> >> anyone knows of a Nagios plugin to check the FreeBSD ports and base >> system for updates? I'm searching for something like check_apt for >> Debian/Ubuntu. >> >> One important thing is that I also want to monitor all the FreeBSD jails >> for updates, too. Any help/hint appreciated :) > > None exists today. > > It should be fairly simple to write a NRPE wrapper around portmaster, > however. > > I believe (but might be wrong) that net-snmp also has the ability to > read the FreeBSD package database; you could run a snmpwalk on the > target machine and compare that to a master package database. > > Good luck, and if you implement something be sure to let us know about it. Thanks for your answer Michael. I will see what I can do. If I have found/implemented something useful I will let you know. BTW: Looking forward for your new book coming out these days. Hope it will be released in Europe also on November 14th :) Matthias > ==ml - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Plugin for monitoring FreeBSD for updates (like check_apt)?
Hi list, anyone knows of a Nagios plugin to check the FreeBSD ports and base system for updates? I'm searching for something like check_apt for Debian/Ubuntu. One important thing is that I also want to monitor all the FreeBSD jails for updates, too. Any help/hint appreciated :) Matthias - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Issues with check_by_ssh
Hugo, thanks for your answer. Hugo van der Kooij schrieb: > On Wed, 8 Aug 2007, Matthias Kellermann wrote: > >> tonight I got lots of false-positive messages from Nagios. All these >> messages came from services checked with check_by_ssh. Strange thing is >> that SSH was running on all servers and there were no problems with the >> network connectivity. All other services on these servers had no errors. >> After 20 minutes or so check_by_ssh worked fine again. >> >> I've got no errors in the logs (i.e. auth.log) - whether on the Nagios >> server nor on the servers to be monitored. The only error I got from >> check_by_ssh is: >> >> Plugin timed out while executing system call > > Check for DNS issues. You may have had an issue with reverse DNS entries > resulting in the extra delay on each ssh connection. It is an educated > guess but it would explain the behaviour. I've checked this. All DNS server were available and working fine when that error occured. All other services with the same timeout (10s) had no errors at all. But maybe I can disable SSH's reverse DNS resolving "feature" to get rid of possible errors caused by DNS errors. Regards, Matthias - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Issues with check_by_ssh
Hello list, tonight I got lots of false-positive messages from Nagios. All these messages came from services checked with check_by_ssh. Strange thing is that SSH was running on all servers and there were no problems with the network connectivity. All other services on these servers had no errors. After 20 minutes or so check_by_ssh worked fine again. I've got no errors in the logs (i.e. auth.log) - whether on the Nagios server nor on the servers to be monitored. The only error I got from check_by_ssh is: Plugin timed out while executing system call While this is not very meaningful I'm trying to use check_by_ssh with a higher timeout. I also wonder about the following check_by_ssh option: -f tells ssh to fork rather than create a tty What does this option mean? Is it possible to log the exact output from check_by_ssh to a logfile? Did anyone have similar false-positives with check_by_ssh? Best regards, Matthias - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Restart Windows program with Nagios when check fails?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Nagios-list-users, we're using Nagios in conjunction with NSClient++ with some Windows machines. It all works really well. Is there any chance to restart a program (*.exe file, not a service) when the check_nt or check_nrpe Check with Nagios fails? Any plugins that can do that - any other Nagios-related tools for such a job? Thanks in advance. Best Regards, Matthias -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGOF96GKs4BfMPVaARAnFqAJ4laPG1meeJfOInTNZyvGXg5IjuhQCfdxfF JyYV0vLNQE2ZoGroamFZ064= =e89U -END PGP SIGNATURE- - This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
