xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Address>

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by Box293 »

So lets remove NSClient++ from the testing for a minute.

Have a look at this link, there is a section for testing NSCA from the Nagios server itself. Lets check if this works.

http://sites.box293.com/nagios/guides/n ... core-4-0-x
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
phreedom68
Posts: 15
Joined: Thu Aug 20, 2015 1:38 pm

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by phreedom68 »

I will try that first thing in the morning when I get to the office. Thank you for hanging in there with me mate!
User avatar
hsmith
Agent Smith
Posts: 3539
Joined: Thu Jul 30, 2015 11:09 am
Location: 127.0.0.1
Contact:

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by hsmith »

phreedom68 wrote:I will try that first thing in the morning when I get to the office. Thank you for hanging in there with me mate!
Let us know what you come up with, thanks!
Former Nagios Employee.
me.
phreedom68
Posts: 15
Joined: Thu Aug 20, 2015 1:38 pm

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by phreedom68 »

For this test file (as noted in the doc)
localhost Test Result 1 This is test result with warning status
When I run it I get the following. The only thing I changed is the path to the send_nsca. The doc had as libexe where on my machine it's actually in /bin.
[root@ ~]# /usr/local/nagios/bin/send_nsca -H 127.0.0.1 -p 5667 -c /usr/local/nagios/etc/send_nsca.cfg < /tmp/nsca_test
Error: Server closed connection before init packet was received
Error: Could not read init packet from server

The following are in the syslog. These are new messages as I didn't see them yesterday.
Syslog
Aug 27 11:08:51 xinetd[20138]: Deactivating service nsca due to excessive incoming connections. Restarting in 10 seconds.
Aug 27 11:08:51 xinetd[20138]: FAIL: nsca connections per second from=::ffff:71.6.xxx.xxx
Aug 27 11:09:01 xinetd[20138]: Activating service nsca
Deactivating service nsca due to excessive incoming connections. Restarting in 10 seconds.

Aug 27 11:09:21 xinetd[11452]: Failed to contact identity server at ::ffff:71.6.xxx.xxx: timeout
Aug 27 11:09:21 xinetd[20138]: START: nsca pid=11455 from=::ffff:71.6.xxx.xxx
Aug 27 11:09:21 xinetd[11455]: FAIL: nsca address from=::ffff:71.6.xxxx.xxx
Aug 27 11:09:21 xinetd[20138]: EXIT: nsca status=0 pid=11455 duration=0(sec)
Aug 27 11:09:01 xinetd[20138]: Activating service nsca
Deactivating service nsca due to excessive incoming connections. Restarting in 10 seconds.

I just got clearance to reboot the machine at-will. So let me know if that helps. I'm also willing to reinstall if you think that would help.

Thanks again!
phreedom68
Posts: 15
Joined: Thu Aug 20, 2015 1:38 pm

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by phreedom68 »

Interesting news....I commented out "only_from" in "/etc/xinetd.d/nsca" and I got /one/ (there are two of them) windows host working and it is showing on the dashboard
# default: on
# description: NSCA (Nagios Service Check Acceptor)
service nsca
{
flags = REUSE
socket_type = stream
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nsca
server_args = -c /usr/local/nagios/etc/nsca.cfg --inetd
log_on_failure += USERID
disable = no
# only_from = <IP Address>
}


I'm not getting spammed in the logs with afromentioned failures.
I'm still having issues with the dashboard though. The following are now in the syslogs

Code: Select all

Aug 27 13:38:28 emswebserver2 nsca[8035]: Attempting to write to nagios command pipe
Aug 27 13:38:28 emswebserver2 nsca[8035]: End of connection...
Aug 27 13:38:28 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Process_Hung;3;Failed to validate filter see log for details
Aug 27 13:38:28 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8035 duration=1(sec)
Aug 27 13:38:28 emswebserver2 nagios: Warning:  Passive check result was received for service 'Process_Hung' on host 'pos2000', but the host could not be found!
Aug 27 13:38:28 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Process_Hung;3;Failed to validate filter see log for details
Aug 27 13:38:28 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:28 emswebserver2 nsca[8036]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:28 emswebserver2 nsca[8036]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Process_Stopped', Return Code: '1', Output: 'WARNING: $ARG1$=stopped|'$ARG1$ state'=0;0;0'
Aug 27 13:38:28 emswebserver2 nsca[8036]: Attempting to write to nagios command pipe
Aug 27 13:38:28 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Process_Stopped;1;WARNING: $ARG1$=stopped|'$ARG1$ state'=0;0;0
Aug 27 13:38:28 emswebserver2 nagios: Warning:  Passive check result was received for service 'Process_Stopped' on host 'pos2000', but the host could not be found!
Aug 27 13:38:28 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Process_Stopped;1;WARNING: $ARG1$=stopped|'$ARG1$ state'=0;0;0
Aug 27 13:38:28 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:28 emswebserver2 nsca[8036]: End of connection...
Aug 27 13:38:28 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8036 duration=1(sec)
Aug 27 13:38:31 emswebserver2 xinetd[1482]: START: nsca pid=8037 from=::ffff:173.8.172.162
Aug 27 13:38:31 emswebserver2 nsca[8037]: Handling the connection...
Aug 27 13:38:32 emswebserver2 nsca[8037]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:32 emswebserver2 nsca[8037]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Sched_All', Return Code: '3', Output: 'Invalid command line: unrecognised option 'syntax=${title}: ${exit_code}'#012help#011#011#011#011#011#011Show help screen (this screen)#012help-pb#011#011#011#011#011#011Show help screen as a protocol buffer payload#012show-default#011#011#011#011#011Show default values for a given command#012help-short#011#011#011#011#011#011Show help screen (short format).#012debug#011#011#011#011#011#011Show debugging information in the log#012show-all#011#011#011#011#011#011Show debugging information in the log#012filter=enabled = 1#011#011#011#011#011Filter which marks interesting items.#012warning=exit_code != 0#011#011#011#011Filter which marks items which generates a '
Aug 27 13:38:32 emswebserver2 nsca[8037]: Attempting to write to nagios command pipe
Aug 27 13:38:32 emswebserver2 nsca[8037]: End of connection...
Aug 27 13:38:32 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Sched_All;3;Invalid command line: unrecognised option 'syntax=${title}: ${exit_code}'
Aug 27 13:38:32 emswebserver2 nagios: Warning:  Passive check result was received for service 'Sched_All' on host 'pos2000', but the host could not be found!
Aug 27 13:38:32 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Sched_All;3;Invalid command line: unrecognised option 'syntax=${title}: ${exit_code}'
Aug 27 13:38:32 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:32 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8037 duration=1(sec)
Aug 27 13:38:36 emswebserver2 xinetd[1482]: START: nsca pid=8038 from=::ffff:173.8.172.162
Aug 27 13:38:36 emswebserver2 nsca[8038]: Handling the connection...
Aug 27 13:38:36 emswebserver2 xinetd[1482]: START: nsca pid=8039 from=::ffff:173.8.172.162
Aug 27 13:38:36 emswebserver2 nsca[8039]: Handling the connection...
Aug 27 13:38:37 emswebserver2 nsca[8038]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:37 emswebserver2 nsca[8038]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Vol', Return Code: '0', Output: 'OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0'
Aug 27 13:38:37 emswebserver2 nsca[8038]: Attempting to write to nagios command pipe
Aug 27 13:38:37 emswebserver2 nsca[8038]: End of connection...
Aug 27 13:38:37 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8038 duration=1(sec)
Aug 27 13:38:37 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:37 emswebserver2 nsca[8039]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:37 emswebserver2 nsca[8039]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'posmonitor', Return Code: '0', Output: 'OK OK: 7.1.1   POS-400000 4/28/2015  #015#012<br/>'
Aug 27 13:38:37 emswebserver2 nsca[8039]: Attempting to write to nagios command pipe
Aug 27 13:38:37 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;posmonitor;0;OK OK: 7.1.1   POS-400000 4/28/2015
Aug 27 13:38:37 emswebserver2 nagios: Warning:  Passive check result was received for service 'posmonitor' on host 'pos2000', but the host could not be found!
Aug 27 13:38:37 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;posmonitor;0;OK OK: 7.1.1   POS-400000 4/28/2015
Aug 27 13:38:37 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:37 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:37 emswebserver2 nsca[8039]: End of connection...
Aug 27 13:38:37 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8039 duration=1(sec)
Aug 27 13:38:38 emswebserver2 xinetd[1482]: START: nsca pid=8040 from=::ffff:173.8.172.162
Aug 27 13:38:38 emswebserver2 nsca[8040]: Handling the connection...
Aug 27 13:38:39 emswebserver2 nsca[8040]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:39 emswebserver2 nsca[8040]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Process', Return Code: '2', Output: 'CRITICAL: $ARG1$=stopped|'$ARG1$ state'=0;0;1'
Aug 27 13:38:39 emswebserver2 nsca[8040]: Attempting to write to nagios command pipe
Aug 27 13:38:39 emswebserver2 nsca[8040]: End of connection...
Aug 27 13:38:39 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Process;2;CRITICAL: $ARG1$=stopped|'$ARG1$ state'=0;0;1
Aug 27 13:38:39 emswebserver2 nagios: Warning:  Passive check result was received for service 'Process' on host 'pos2000', but the host could not be found!
Aug 27 13:38:39 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Process;2;CRITICAL: $ARG1$=stopped|'$ARG1$ state'=0;0;1
Aug 27 13:38:39 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:39 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8040 duration=1(sec)
Aug 27 13:38:43 emswebserver2 xinetd[1482]: START: nsca pid=8043 from=::ffff:173.8.172.162
Aug 27 13:38:43 emswebserver2 nsca[8043]: Handling the connection...
Aug 27 13:38:44 emswebserver2 nsca[8043]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:44 emswebserver2 nsca[8043]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'File_Age', Return Code: '3', Output: 'Invalid command line: unrecognised option 'max-dir-depth=10'#012help#011#011#011#011#011#011#011#011#011Show help screen (this screen)#012help-pb#011#011#011#011#011#011#011#011#011Show help screen as a protocol buffer payload#012show-default#011#011#011#011#011#011#011#011Show default values for a given command#012help-short#011#011#011#011#011#011#011#011Show help screen (short format).#012debug#011#011#011#011#011#011#011#011#011Show debugging information in the log#012show-all#011#011#011#011#011#011#011#011Show debugging information in the log#012filter=#011#011#011#011#011#011#011#011#011Filter which marks interesting items.#012warning=#011#011#011#011#011#011#011#011Filter which marks items which generates a warning state.'
Aug 27 13:38:44 emswebserver2 nsca[8043]: Attempting to write to nagios command pipe
Aug 27 13:38:44 emswebserver2 nsca[8043]: End of connection...
Aug 27 13:38:44 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;File_Age;3;Invalid command line: unrecognised option 'max-dir-depth=10'
Aug 27 13:38:44 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8043 duration=1(sec)
Aug 27 13:38:44 emswebserver2 nagios: Warning:  Passive check result was received for service 'File_Age' on host 'pos2000', but the host could not be found!
Aug 27 13:38:44 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;File_Age;3;Invalid command line: unrecognised option 'max-dir-depth=10'
Aug 27 13:38:44 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:44 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:45 emswebserver2 xinetd[1482]: START: nsca pid=8044 from=::ffff:173.8.172.162
Aug 27 13:38:45 emswebserver2 nsca[8044]: Handling the connection...
Aug 27 13:38:46 emswebserver2 nsca[8044]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:46 emswebserver2 nsca[8044]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'report', Return Code: '1', Output: 'No message'
Aug 27 13:38:46 emswebserver2 nsca[8044]: Attempting to write to nagios command pipe
Aug 27 13:38:46 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:46 emswebserver2 nsca[8044]: End of connection...
Aug 27 13:38:46 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8044 duration=1(sec)
Aug 27 13:38:49 emswebserver2 xinetd[1482]: START: nsca pid=8045 from=::ffff:173.8.172.162
Aug 27 13:38:49 emswebserver2 nsca[8045]: Handling the connection...
Aug 27 13:38:50 emswebserver2 nsca[8045]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:50 emswebserver2 nsca[8045]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'File_Size', Return Code: '3', Output: 'Invalid command line: unrecognised option 'max-dir-depth=10'#012help#011#011#011#011#011#011#011#011#011Show help screen (this screen)#012help-pb#011#011#011#011#011#011#011#011#011Show help screen as a protocol buffer payload#012show-default#011#011#011#011#011#011#011#011Show default values for a given command#012help-short#011#011#011#011#011#011#011#011Show help screen (short format).#012debug#011#011#011#011#011#011#011#011#011Show debugging information in the log#012show-all#011#011#011#011#011#011#011#011Show debugging information in the log#012filter=#011#011#011#011#011#011#011#011#011Filter which marks interesting items.#012warning=#011#011#011#011#011#011#011#011Filter which marks items which generates a warning state.'
Aug 27 13:38:50 emswebserver2 nsca[8045]: Attempting to write to nagios command pipe
Aug 27 13:38:50 emswebserver2 nsca[8045]: End of connection...
Aug 27 13:38:50 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;File_Size;3;Invalid command line: unrecognised option 'max-dir-depth=10'
Aug 27 13:38:50 emswebserver2 nagios: Warning:  Passive check result was received for service 'File_Size' on host 'pos2000', but the host could not be found!
Aug 27 13:38:50 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;File_Size;3;Invalid command line: unrecognised option 'max-dir-depth=10'
Aug 27 13:38:50 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:50 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8045 duration=1(sec)
Aug 27 13:38:50 emswebserver2 xinetd[1482]: START: nsca pid=8046 from=::ffff:173.8.172.162
Aug 27 13:38:50 emswebserver2 nsca[8046]: Handling the connection...
Aug 27 13:38:51 emswebserver2 nsca[8046]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:51 emswebserver2 nsca[8046]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Disk_Loose', Return Code: '0', Output: 'OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0'
Aug 27 13:38:51 emswebserver2 nsca[8046]: Attempting to write to nagios command pipe
Aug 27 13:38:51 emswebserver2 nsca[8046]: End of connection...
Aug 27 13:38:51 emswebserver2 nagios: External command error: Malformed command
Aug 27 13:38:51 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8046 duration=1(sec)
Aug 27 13:38:53 emswebserver2 xinetd[1482]: START: nsca pid=8047 from=::ffff:173.8.172.162
Aug 27 13:38:53 emswebserver2 nsca[8047]: Handling the connection...
Aug 27 13:38:54 emswebserver2 nsca[8047]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:54 emswebserver2 nsca[8047]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Sched_Long', Return Code: '3', Output: 'Failed to validate filter see log for details'
Aug 27 13:38:54 emswebserver2 nsca[8047]: Attempting to write to nagios command pipe
Aug 27 13:38:54 emswebserver2 nsca[8047]: End of connection...
Aug 27 13:38:54 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Sched_Long;3;Failed to validate filter see log for details
Aug 27 13:38:54 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8047 duration=1(sec)
Aug 27 13:38:54 emswebserver2 nagios: Warning:  Passive check result was received for service 'Sched_Long' on host 'pos2000', but the host could not be found!
Aug 27 13:38:54 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Sched_Long;3;Failed to validate filter see log for details
Aug 27 13:38:54 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:56 emswebserver2 xinetd[1482]: START: nsca pid=8048 from=::ffff:173.8.172.162
Aug 27 13:38:56 emswebserver2 nsca[8048]: Handling the connection...
Aug 27 13:38:57 emswebserver2 nsca[8048]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:38:57 emswebserver2 nsca[8048]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Event_Log', Return Code: '2', Output: 'CRITICAL: 194/194 Application Userenv (Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.), Application Userenv (Windows cannot find the machine account, The clocks on the client and server machines are skewed. .), Application Userenv (Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that descr'
Aug 27 13:38:57 emswebserver2 nsca[8048]: Attempting to write to nagios command pipe
Aug 27 13:38:57 emswebserver2 nsca[8048]: End of connection...
Aug 27 13:38:57 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Event_Log;2;CRITICAL: 194/194 Application Userenv (Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.), Application Userenv (Windows cannot find the machine account, The clocks on the client and server machines are skewed. .), Application Userenv (Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that descr
Aug 27 13:38:57 emswebserver2 nagios: Warning:  Passive check result was received for service 'Event_Log' on host 'pos2000', but the host could not be found!
Aug 27 13:38:57 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Event_Log;2;CRITICAL: 194/194 Application Userenv (Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this.), Application Userenv (Windows cannot find the machine account, The clocks on the client and server machines are skewed. .), Application Userenv (Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that descr
Aug 27 13:38:57 emswebserver2 nagios: External command error: Command failed
Aug 27 13:38:57 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8048 duration=1(sec)
Aug 27 13:39:00 emswebserver2 xinetd[1482]: START: nsca pid=8049 from=::ffff:173.8.172.162
Aug 27 13:39:00 emswebserver2 nsca[8049]: Handling the connection...
Aug 27 13:39:01 emswebserver2 nsca[8049]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:01 emswebserver2 nsca[8049]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'service', Return Code: '2', Output: 'CRITICAL: clr_optimization_v4.0.30319_32=stopped (auto), gupdate=stopped (auto), Intel PDS=stopped (auto), SysmonLog=stopped (auto), delayed ()'
Aug 27 13:39:01 emswebserver2 nsca[8049]: Attempting to write to nagios command pipe
Aug 27 13:39:01 emswebserver2 nsca[8049]: End of connection...
Aug 27 13:39:01 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;service;2;CRITICAL: clr_optimization_v4.0.30319_32=stopped (auto), gupdate=stopped (auto), Intel PDS=stopped (auto), SysmonLog=stopped (auto), delayed ()
Aug 27 13:39:01 emswebserver2 nagios: Warning:  Passive check result was received for service 'service' on host 'pos2000', but the host could not be found!
Aug 27 13:39:01 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;service;2;CRITICAL: clr_optimization_v4.0.30319_32=stopped (auto), gupdate=stopped (auto), Intel PDS=stopped (auto), SysmonLog=stopped (auto), delayed ()
Aug 27 13:39:01 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:01 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8049 duration=1(sec)
Aug 27 13:39:04 emswebserver2 xinetd[1482]: START: nsca pid=8050 from=::ffff:173.8.172.162
Aug 27 13:39:04 emswebserver2 nsca[8050]: Handling the connection...
Aug 27 13:39:05 emswebserver2 nsca[8050]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:05 emswebserver2 nsca[8050]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'disk', Return Code: '0', Output: 'OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0'
Aug 27 13:39:05 emswebserver2 nsca[8050]: Attempting to write to nagios command pipe
Aug 27 13:39:05 emswebserver2 nsca[8050]: End of connection...
Aug 27 13:39:05 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;disk;0;OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0
Aug 27 13:39:05 emswebserver2 nagios: Warning:  Passive check result was received for service 'disk' on host 'pos2000', but the host could not be found!
Aug 27 13:39:05 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;disk;0;OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0
Aug 27 13:39:05 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:05 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8050 duration=1(sec)
Aug 27 13:39:10 emswebserver2 xinetd[1482]: START: nsca pid=8051 from=::ffff:173.8.172.162
Aug 27 13:39:10 emswebserver2 nsca[8051]: Handling the connection...
Aug 27 13:39:10 emswebserver2 xinetd[1482]: START: nsca pid=8052 from=::ffff:173.8.172.162
Aug 27 13:39:10 emswebserver2 nsca[8052]: Handling the connection...
Aug 27 13:39:11 emswebserver2 nsca[8051]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:11 emswebserver2 nsca[8051]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Up', Return Code: '1', Output: 'WARNING: uptime: 1d 21:14h, boot: 2015-Aug-25 21:25:07 (UTC)|'uptime'=162852s;172800;86400'
Aug 27 13:39:11 emswebserver2 nsca[8051]: Attempting to write to nagios command pipe
Aug 27 13:39:11 emswebserver2 xinetd[1482]: START: nsca pid=8053 from=::ffff:173.8.172.162
Aug 27 13:39:11 emswebserver2 nsca[8051]: End of connection...
Aug 27 13:39:11 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8051 duration=1(sec)
Aug 27 13:39:11 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Up;1;WARNING: uptime: 1d 21:14h, boot: 2015-Aug-25 21:25:07 (UTC)|'uptime'=162852s;172800;86400
Aug 27 13:39:11 emswebserver2 nagios: Warning:  Passive check result was received for service 'Up' on host 'pos2000', but the host could not be found!
Aug 27 13:39:11 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Up;1;WARNING: uptime: 1d 21:14h, boot: 2015-Aug-25 21:25:07 (UTC)|'uptime'=162852s;172800;86400
Aug 27 13:39:11 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:11 emswebserver2 nsca[8053]: Handling the connection...
Aug 27 13:39:11 emswebserver2 nsca[8052]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:11 emswebserver2 nsca[8052]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Volumes_Loose', Return Code: '0', Output: 'OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0'
Aug 27 13:39:11 emswebserver2 nsca[8052]: Attempting to write to nagios command pipe
Aug 27 13:39:11 emswebserver2 nsca[8052]: End of connection...
Aug 27 13:39:11 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8052 duration=1(sec)
Aug 27 13:39:11 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Volumes_Loose;0;OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0
Aug 27 13:39:11 emswebserver2 nagios: Warning:  Passive check result was received for service 'Volumes_Loose' on host 'pos2000', but the host could not be found!
Aug 27 13:39:11 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Volumes_Loose;0;OK All 3 drive(s) are ok|'C:\ used'=25.73685GB;102.12215;114.88742;0;127.65269 'C:\ used %'=20%;79;89;0;100 'D:\ used'=63.63972GB;84.13558;94.65253;0;105.16947 'D:\ used %'=60%;79;89;0;100 'E:\ used'=0B;0;0;0;0
Aug 27 13:39:11 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:12 emswebserver2 nsca[8053]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:12 emswebserver2 nsca[8053]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'mem', Return Code: '0', Output: 'OK: committed = 1.081GB, physical = 1.071GB|'committed'=1.08105GB;4.658;5.24025;0;5.8225 'committed %'=18%;80;90;0;100 'physical'=1.07104GB;3.19183;3.59081;0;3.98979 'physical %'=26%;79;89;0;100'
Aug 27 13:39:12 emswebserver2 nsca[8053]: Attempting to write to nagios command pipe
Aug 27 13:39:12 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;mem;0;OK: committed = 1.081GB, physical = 1.071GB|'committed'=1.08105GB;4.658;5.24025;0;5.8225 'committed %'=18%;80;90;0;100 'physical'=1.07104GB;3.19183;3.59081;0;3.98979 'physical %'=26%;79;89;0;100
Aug 27 13:39:12 emswebserver2 nagios: Warning:  Passive check result was received for service 'mem' on host 'pos2000', but the host could not be found!
Aug 27 13:39:12 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;mem;0;OK: committed = 1.081GB, physical = 1.071GB|'committed'=1.08105GB;4.658;5.24025;0;5.8225 'committed %'=18%;80;90;0;100 'physical'=1.07104GB;3.19183;3.59081;0;3.98979 'physical %'=26%;79;89;0;100
Aug 27 13:39:12 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:12 emswebserver2 nsca[8053]: End of connection...
Aug 27 13:39:12 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8053 duration=1(sec)
Aug 27 13:39:13 emswebserver2 xinetd[1482]: START: nsca pid=8054 from=::ffff:173.8.172.162
Aug 27 13:39:13 emswebserver2 nsca[8054]: Handling the connection...
Aug 27 13:39:14 emswebserver2 nsca[8054]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:14 emswebserver2 nsca[8054]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Process_Count', Return Code: '3', Output: 'Failed to validate filter see log for details'
Aug 27 13:39:14 emswebserver2 nsca[8054]: Attempting to write to nagios command pipe
Aug 27 13:39:14 emswebserver2 nsca[8054]: End of connection...
Aug 27 13:39:14 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Process_Count;3;Failed to validate filter see log for details
Aug 27 13:39:14 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8054 duration=1(sec)
Aug 27 13:39:14 emswebserver2 nagios: Warning:  Passive check result was received for service 'Process_Count' on host 'pos2000', but the host could not be found!
Aug 27 13:39:14 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Process_Count;3;Failed to validate filter see log for details
Aug 27 13:39:14 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:14 emswebserver2 xinetd[1482]: START: nsca pid=8106 from=::ffff:173.8.172.162
Aug 27 13:39:14 emswebserver2 nsca[8106]: Handling the connection...
Aug 27 13:39:14 emswebserver2 xinetd[1482]: START: nsca pid=8107 from=::ffff:173.8.172.162
Aug 27 13:39:14 emswebserver2 nsca[8107]: Handling the connection...
Aug 27 13:39:15 emswebserver2 nsca[8106]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:15 emswebserver2 nsca[8106]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'Sched_Task', Return Code: '1', Output: ': No tasks found'
Aug 27 13:39:15 emswebserver2 nsca[8106]: Attempting to write to nagios command pipe
Aug 27 13:39:15 emswebserver2 nsca[8106]: End of connection...
Aug 27 13:39:15 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;Sched_Task;1;: No tasks found
Aug 27 13:39:15 emswebserver2 nagios: Warning:  Passive check result was received for service 'Sched_Task' on host 'pos2000', but the host could not be found!
Aug 27 13:39:15 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;Sched_Task;1;: No tasks found
Aug 27 13:39:15 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:15 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8106 duration=1(sec)
Aug 27 13:39:15 emswebserver2 nsca[8107]: Time difference in packet: 0 seconds for host pos2000
Aug 27 13:39:15 emswebserver2 nsca[8107]: SERVICE CHECK -> Host Name: 'pos2000', Service Description: 'ServiceEx', Return Code: '2', Output: 'CRITICAL: clr_optimization_v4.0.30319_32=stopped (auto), gupdate=stopped (auto), Intel PDS=stopped (auto), SysmonLog=stopped (auto), delayed ()'
Aug 27 13:39:15 emswebserver2 nsca[8107]: Attempting to write to nagios command pipe
Aug 27 13:39:15 emswebserver2 nsca[8107]: End of connection...
Aug 27 13:39:15 emswebserver2 nagios: EXTERNAL COMMAND: PROCESS_SERVICE_CHECK_RESULT;pos2000;ServiceEx;2;CRITICAL: clr_optimization_v4.0.30319_32=stopped (auto), gupdate=stopped (auto), Intel PDS=stopped (auto), SysmonLog=stopped (auto), delayed ()
Aug 27 13:39:15 emswebserver2 nagios: Warning:  Passive check result was received for service 'ServiceEx' on host 'pos2000', but the host could not be found!
Aug 27 13:39:15 emswebserver2 nagios: Error: External command failed -> PROCESS_SERVICE_CHECK_RESULT;pos2000;ServiceEx;2;CRITICAL: clr_optimization_v4.0.30319_32=stopped (auto), gupdate=stopped (auto), Intel PDS=stopped (auto), SysmonLog=stopped (auto), delayed ()
Aug 27 13:39:15 emswebserver2 nagios: External command error: Command failed
Aug 27 13:39:15 emswebserver2 xinetd[1482]: EXIT: nsca status=0 pid=8107 duration=1(sec)

This is from windows.cfg
define host{
use windows-server ; Inherit default values from a template
host_name pos2000qa ; The name we're giving to this host
alias pos2000 ; A longer name associated with the host
address pos2000 ; IP address of the host
;check_interval 1
active_checks_enabled 0 ; Active host checks are enabled
passive_checks_enabled 1 ; Passive host checks are enabled/accepted
}
In the dashboard pos2000 is all grayed out (no data). Can you think of a reason that it's not showin up on the dashboard?
jdalrymple
Skynet Drone
Posts: 2620
Joined: Wed Feb 11, 2015 1:56 pm

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by jdalrymple »

The business with the ::ffff<ipv4> stuff weirds me out on new EL boxes. Just to verify that's not somehow the issue can you comment out the only_from line in /etc/inetd.d/nsca, restart inetd and see if that helps?

Just a troubleshooting/process of elimination step.
User avatar
Box293
Too Basu
Posts: 5126
Joined: Sun Feb 07, 2010 10:55 pm
Location: Deniliquin, Australia
Contact:

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by Box293 »

phreedom68 wrote:

Code: Select all

[/settings/NSCA/client]
hostname = auto
phreedom68 wrote:Aug 27 13:38:28 emswebserver2 nagios: Warning: Passive check result was received for service 'Process_Hung' on host 'pos2000', but the host could not be found!
phreedom68 wrote:

Code: Select all

host_name pos2000qa ; The name we're giving to this host
alias pos2000 ; A longer name associated with the host
I think your problem is that your Windows host is called pos2000 and that is the name NSClient++ sends ... however the host_name in nagios is pos2000qa. While you have the alias as pos2000 I don't believe that works. Either change your host_name directive in Nagios OR in your nsclient.ini file change auto to pos2000qa.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
phreedom68
Posts: 15
Joined: Thu Aug 20, 2015 1:38 pm

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by phreedom68 »

First off, thank you everyone for your kind support. Everything is now working. The key was commenting out the "only_from" var in the config file as noted above. I don't know what's that for and why it is on a lot of installation guide but in my case, not being there (commenting it out) is what making it work. Please note that the nagios server is on the cloud server. Not sure if that has anything to do with it.

Again, thanks all. Now that i have a working nagios with NSCA, you'll probably see more of me here asking about things that I couldn't find the answers on google.
User avatar
hsmith
Agent Smith
Posts: 3539
Joined: Thu Jul 30, 2015 11:09 am
Location: 127.0.0.1
Contact:

Re: xinetd[1994]: START: nsca pid=2518 from=::ffff <IP Addre

Post by hsmith »

phreedom68 wrote:First off, thank you everyone for your kind support. Everything is now working. The key was commenting out the "only_from" var in the config file as noted above. I don't know what's that for and why it is on a lot of installation guide but in my case, not being there (commenting it out) is what making it work. Please note that the nagios server is on the cloud server. Not sure if that has anything to do with it.

Again, thanks all. Now that i have a working nagios with NSCA, you'll probably see more of me here asking about things that I couldn't find the answers on google.
I'm going to go ahead and mark this on resolved if everything is working all right for you. Thanks for providing the solution that worked for you!
Former Nagios Employee.
me.
Locked