Error: Request packet had invalid CRC32.

[alarig]

Hi,

I have several messages like this in my logs on the agent side:

Code: Select all

Mar 29 14:20:52 core01-arendal nrpe[7791]: Error: Request packet had invalid CRC32.
Mar 29 14:20:52 core01-arendal nrpe[7791]: Client request from 2a0e:f42:fffe:1::12 was invalid, bailing out...

But I have a response to my request:

Code: Select all

supp ~ # /usr/lib64/nagios/plugins/check_nrpe -H core01-arendal.no.swordarmor.fr -c check_users
USERS OK - 2 users currently logged in |users=2;5;10;0

Here is the complete log with SSL debug:

Code: Select all

Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Certificate File: /etc/ssl/nagios/client_certs/client_cert.pem
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Private Key File: /etc/ssl/nagios/client_certs/client_cert.key
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL CA Certificate File: /etc/ssl/nagios/demoCA/ca_cert.pem
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Cipher List: ALL:!MD5:@STRENGTH:@SECLEVEL=0
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Allow ADH: 0
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Client Certs: Don't Ask
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Log Options: 0xff
Mar 29 14:20:43 core01-arendal nrpe[7782]: SSL Version: TLSv1 And Above
Mar 29 14:20:43 core01-arendal nrpe[7783]: Starting up daemon
Mar 29 14:20:43 core01-arendal nrpe[7783]: Server listening on 0.0.0.0 port 5666.
Mar 29 14:20:43 core01-arendal nrpe[7783]: Server listening on :: port 5666.
Mar 29 14:20:43 core01-arendal nrpe[7783]: Listening for connections on port 5666
Mar 29 14:20:43 core01-arendal nrpe[7783]: Allowing connections from: 127.0.0.1,::1, 2001:67c:1740:9032::229, 193.200.42.229, 2001:4b98:dc2:43:216:3eff:fe87:1f09, 185.26.126.52, 2a0
e:f42:fffe:1::10, 2a0e:f42:fffe:1::12, 10.0.4.10, 10.0.4.12
Mar 29 14:20:52 core01-arendal nrpe[7791]: Connection from 2a0e:f42:fffe:1::12 port 24713
Mar 29 14:20:52 core01-arendal nrpe[7791]: Remote 2a0e:f42:fffe:1::12 - SSL Version: TLSv1.3
Mar 29 14:20:52 core01-arendal nrpe[7791]: Remote 2a0e:f42:fffe:1::12 - TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Mar 29 14:20:52 core01-arendal nrpe[7791]: SSL Not asking for client certification
Mar 29 14:20:52 core01-arendal nrpe[7791]: Error: Request packet had invalid CRC32.
Mar 29 14:20:52 core01-arendal nrpe[7791]: Client request from 2a0e:f42:fffe:1::12 was invalid, bailing out...
Mar 29 14:20:52 core01-arendal nrpe[7793]: Connection from 2a0e:f42:fffe:1::12 port 25225
Mar 29 14:20:52 core01-arendal nrpe[7793]: Remote 2a0e:f42:fffe:1::12 - SSL Version: TLSv1.3
Mar 29 14:20:52 core01-arendal nrpe[7793]: Remote 2a0e:f42:fffe:1::12 - TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Mar 29 14:20:52 core01-arendal nrpe[7793]: SSL Not asking for client certification

The agent configuration:

Code: Select all

log_facility=daemon
debug=0
pid_file=/run/nrpe.pid
server_port=5666
nrpe_user=nagios
nrpe_group=nagios
allowed_hosts=127.0.0.1,::1, 2001:67c:1740:9032::229, 193.200.42.229, 2001:4b98:dc2:43:216:3eff:fe87:1f09, 185.26.126.52, 2a0e:f42:fffe:1::10, 2a0e:f42:fffe:1::12, 10.0.4.10, 10.0.4
.12
allow_bash_command_substitution=0
command_timeout=60
connection_timeout=300
ssl_cacert_file=/etc/ssl/nagios/demoCA/ca_cert.pem
ssl_cert_file=/etc/ssl/nagios/client_certs/client_cert.pem
ssl_privatekey_file=/etc/ssl/nagios/client_certs/client_cert.key
ssl_logging=0xff
disable_syslog=0
command[check_users]=/usr/lib64/nagios/plugins/check_users -w 5 -c 10
command[check_load]=/usr/lib64/nagios/plugins/check_load -r -w 1.50,1.00,.50 -c 3.00,2.50,2.00
command[check_sda1]=/usr/lib64/nagios/plugins/check_disk -w 20% -c 10% -p /dev/sda1
command[check_root]=/usr/lib64/nagios/plugins/check_disk -w 20% -c 10% -p /dev/root
command[check_zombie_procs]=/usr/lib64/nagios/plugins/check_procs -w 5 -c 10 -s Z
command[check_total_procs]=/usr/lib64/nagios/plugins/check_procs -w 200 -c 300
command[check_procs]=/usr/lib64/nagios/plugins/check_procs
command[check_bird2_oneshot]=/usr/local/lib64/nagios/plugins/check_bird2_oneshot -s

I see many posts about the response having an invalid CRC, but I found nothing about the request.
The weirdest is that I have a valid output from check_nrpe.

I don’t really know where to look at…

Thanks!

[Box293]

Does the error get generated when you use -2 ?

Code: Select all

/usr/lib64/nagios/plugins/check_nrpe -2 -H core01-arendal.no.swordarmor.fr -c check_users