[Nagios-users] Check_snmp plugin. Is this part of the standard plugin distribution or is it extra?

2007-03-10 Thread Scott Frazer
I compiled Nagios 2.7 and the latest plugins from scratch on a very
barebones server.  I later discovered that it was barebones enough not to
have the openssl libs on it and so check_http's https functionality didn't
work.

I'm wondering if something similar happened with check_snmp, because I don't
have it in my libexec directory.

I suppose I could've used the debian universe version of Nagios, but it was
stuck back at 2.4 and gave me trouble during install anyway.

Scott


-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null


Re: [Nagios-users] Problem with check_http and a Cisco CSS 11501

2007-02-28 Thread Scott Frazer
More testing.  This is almost certainly not a Nagios issue.  I set up a trial 
version of the Paessler IP Check program against the same URLs and servers and 
it exhibits a similar behavior.

Looks like it's time to open a case with Cisco.



On 2/28/07 11:03 AM, "Scott Frazer" <[EMAIL PROTECTED]> wrote:


Ok, I've got a packet capture.

There are three hosts involved: Nagios, CSS and Webserver

In a normal session (one that succeeds) the sequence goes like this:

Nagios -> CSS [SYN]
CSS (impersonating Nagios) -> Webserver [SYN]
Webserver -> CSS (impersonating Nagios) [SYN, ACK]
CSS -> Nagios [SYN, ACK]
Nagios -> CSS [ACK]
CSS (impersonating Nagios) -> Webserver [ACK]
Nagios proceeds with HTTP GET and session continues normally.  The entire 
process takes about 0.05 seconds

When I'm seeing a failure the sequence of events looks like this:

Nagios -> CSS [SYN]
Webserver -> Nagios [SYN, ACK]
Nagios -> Webserver [RST, ACK]
... Pause 5 seconds ...
Webserver -> Nagios [SYN, ACK]
Nagios -> Webserver [RST, ACK]
Nagios -> CSS [SYN]
... Pause until 10 second timeout is reached ...

The CSS never seems to respond to the Nagios host, but the Webserver sends 
packets directly back to the Nagios host, apparently ignoring its default route 
(that points it to the CSS)

Interestingly, this problem seems to only occur if the nagios daemon is 
running.  I shut the daemon down to make the capture easier to read, and just 
ran the check_http command manually.  For awhile I would still get failures, 
but eventually the command would stop failing completely.





On 2/27/07 4:25 PM, "Hugo van der Kooij" <[EMAIL PROTECTED]> wrote:


I suggest you setup a packet capture and trace the specific sessions. It
should tell you exactly if the CSS is just becoming darn slow with replies
or it has to do something with your server.

...

I would not waste anytime on building a new server untill you know what is
going on based on the packet capture.

Depending on the exact CSS settings this may just be a CSS noting a DoS
condition.

Perhaps I need to fire up my old CSS and see what happens. (I actually
still have an ArrowPoint CSS ;-)

Hugo.



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Problem with check_http and a Cisco CSS 11501

2007-02-28 Thread Scott Frazer

Ok, I've got a packet capture.

There are three hosts involved: Nagios, CSS and Webserver

In a normal session (one that succeeds) the sequence goes like this:

Nagios -> CSS [SYN]
CSS (impersonating Nagios) -> Webserver [SYN]
Webserver -> CSS (impersonating Nagios) [SYN, ACK]
CSS -> Nagios [SYN, ACK]
Nagios -> CSS [ACK]
CSS (impersonating Nagios) -> Webserver [ACK]
Nagios proceeds with HTTP GET and session continues normally.  The entire 
process takes about 0.05 seconds

When I'm seeing a failure the sequence of events looks like this:

Nagios -> CSS [SYN]
Webserver -> Nagios [SYN, ACK]
Nagios -> Webserver [RST, ACK]
... Pause 5 seconds ...
Webserver -> Nagios [SYN, ACK]
Nagios -> Webserver [RST, ACK]
Nagios -> CSS [SYN]
... Pause until 10 second timeout is reached ...

The CSS never seems to respond to the Nagios host, but the Webserver sends 
packets directly back to the Nagios host, apparently ignoring its default route 
(that points it to the CSS)

Interestingly, this problem seems to only occur if the nagios daemon is 
running.  I shut the daemon down to make the capture easier to read, and just 
ran the check_http command manually.  For awhile I would still get failures, 
but eventually the command would stop failing completely.





On 2/27/07 4:25 PM, "Hugo van der Kooij" <[EMAIL PROTECTED]> wrote:


I suggest you setup a packet capture and trace the specific sessions. It
should tell you exactly if the CSS is just becoming darn slow with replies
or it has to do something with your server.

...

I would not waste anytime on building a new server untill you know what is
going on based on the packet capture.

Depending on the exact CSS settings this may just be a CSS noting a DoS
condition.

Perhaps I need to fire up my old CSS and see what happens. (I actually
still have an ArrowPoint CSS ;-)

Hugo.

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

Re: [Nagios-users] Problem with check_http and a Cisco CSS 11501

2007-02-27 Thread Scott Frazer
No change from a Fedora Core 6 installation.  I'm becoming increasingly sure 
it's a problem with the way the CSS is responding to the test.  I'll have to 
get a packet capture going...

On 2/27/07 4:25 PM, "Hugo van der Kooij" <[EMAIL PROTECTED]> wrote:

I suggest you setup a packet capture and trace the specific sessions. It
should tell you exactly if the CSS is just becoming darn slow with replies
or it has to do something with your server.

...

I would not waste anytime on building a new server untill you know what is
going on based on the packet capture.

Depending on the exact CSS settings this may just be a CSS noting a DoS
condition.

Perhaps I need to fire up my old CSS and see what happens. (I actually
still have an ArrowPoint CSS ;-)

Hugo.

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null

[Nagios-users] Problem with check_http and a Cisco CSS 11501

2007-02-27 Thread Scott Frazer
I'm having issues with check_http checking a hostname that's actually a
virtual ip address of a Cisco CSS 11501.  The check will succeed initially,
but eventually begin to fail, taking longer and longer to return, or
eventually timeout.

If I extend the timeout to a very high amount, the process usually returns a
200 message, but it can delay well over a minute to do so.

I've compiled Nagios 2.7 and the plugins version 1.4.6 on an Ubuntu 6.10
LAMP server without errors, and the interfaces all seem to work fine.  I've
got the system monitoring websites on both IIS and Apache servers (bypassing
the CSS) without any problems.

I've tried doing the install on two separate servers (one virtual, one
physical) and even tried going back to a previous version of the plugins.
My next step will probably be trying the install on a Fedora Core server and
seeing if that changes anything.  Is anyone else monitoring virtual IP
addresses on a Cisco load balancer? Can anyone give me advice on where to
look next?

Thanks,
Scott



-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
___
Nagios-users mailing list
Nagios-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting 
any issue. 
::: Messages without supporting info will risk being sent to /dev/null