CHECK_NRPE: Socket timeout after 20 seconds.

[kakaluru]

Hi srein find below out put

[root@BUGZILLABCK ~]# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5666
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5666

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

Everything is fine but i don't know the reasons to get CHECK_NRPE: Socket timeout after 20 seconds error

Whether this is any
1. Nagios server issue
2. Nagios client issue
3. Network issue
4. Other issue

[lmiltchev]

Did you run the following command on the Nagios server or on the client?

Code: Select all

iptables -L -n

Can you temporarily disable the iptables on both boxes for testing purposes and try your check again?

Also, did you add the "[NagiosServer]" to the "only_from" line for the "clarity" sake or you actually have this line in the "/etc/xinetd.d/nrpe"?

Code: Select all

only_from = 127.0.0.1 192.168.30.38[NagiosServer]

What is the output from running the following command on the nagios server?

Code: Select all

./check_nrpe -H <client ip>

[kakaluru]

Hi,

We have multiple client servers. So, We specified in client as

only_form=127.0.0.1 192.168.30.38.....Is there any mistake ????

Below is the client status on nagios server.

[root@nagiosserver]# nmap -p 5666 10.174.16.11(client ip)

Starting Nmap 5.51 ( http://nmap.org ) at 2014-10-01 09:30 IST
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
Nmap scan report for BUGZILLABCK (10.174.16.11)
Host is up (0.039s latency).
PORT STATE SERVICE
5666/tcp filtered nrpe

Nmap done: 1 IP address (1 host up) scanned in 0.54 seconds

[abrist]

Did you restart xinetd after specifying:

Code: Select all

only_form=127.0.0.1 192.168.30.38

?
Additionally, there is a typo in that line:

Code: Select all

only_form=127.0.0.1 192.168.30.38

Should be:

Code: Select all

only_from=127.0.0.1 192.168.30.38

[kakaluru]

Hi,

only_form its my mistake while typing but its perfect in conf file.

Can any one help to resolve my issue ????

[slansing]

Yes, we have been trying to assist you.

5666/tcp filtered nrpe

Looks like 5666 may not be open, nmap shows it as filtered rather than open. I'd check that as it could be the culprit.

[kakaluru]

Thanks slan

Let me know the necessary action to show the status as open for 5666/tcp

[tmcdonald]

That would be a configuration that needs to be made on the remote machine. Could the admin of the remote machine be contacted about opening port 5666 for connections?

[kakaluru]

Hi,

Kindly check earlier posts

1. No. 9 for nrpe status for 5666/tcp on remote machine .
2. No. 10 for iptables status for 5666/tcp on remote machine.

Let me know any modifications on nrpe conf file.

[lmiltchev]

Can you run the following commands on the client (remote box) and show us the output?

Code: Select all

ps axuw | grep nrpe
netstat -at | grep nrpe
sestatus