CHECK_NRPE: Error - Could not complete SSL handshake

[yancy]

Sorry I misunderstood the post. My mistake.

If the bottleneck is on the windows side, is there any valuable messages in nrpe_nt.log that might help us identify the error.

[Mitchell]

Have you tried just adding the per_source=UNLIMITED to your nrpe.cfg file?

Yes, I have done that on Nagios XI Server. I thought that has something to do with the client side of NRPE. I have modified that anyway now. I have not seen any failure after that and will keep an eye on it.

Thanks
Ashish

[Mitchell]

Sorry I misunderstood the post. My mistake.

If the bottleneck is on the windows side, is there any valuable messages in nrpe_nt.log that might help us identify the error.

I am enabling the Log level to 7 and would see if I get more logs when the issue happens. What I see now is this. I see a corresponding event log entry as well.

2012-03-26 15:43:22; 5560; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:44:23; 4136; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:45:23; 4132; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:45:25; 1908; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:46:22; 5392; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:47:22; 1540; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:47:27; 5176; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:48:23; 6032; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:49:22; 804; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:49:35; 3648; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:50:23; 2272; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:51:23; 5740; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:51:34; 3456; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:52:22; 3012; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:53:23; 1964; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:53:37; 1332; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:54:23; 4704; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:55:23; 5712; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:55:39; 4444; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:56:24; 3092; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:57:22; 3100; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:57:42; 4496; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:58:23; 2988; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:59:23; 4728; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 15:59:46; 6004; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:00:23; 5868; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:01:23; 3080; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:01:49; 5144; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:02:23; 2776; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:03:22; 6060; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:03:51; 660; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:04:22; 4212; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:05:22; 3332; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:05:54; 2932; 4;Error: Could not complete SSL handshake. 1:5:0
2012-03-26 16:06:22; 3592; 4;Error: Could not complete SSL handshake. 1:5:0

It is interesting that all these errors are not necessarily a failure with monitor run. However, it is continuously logging.

Thanks
Ashish

[scottwilkerson]

Just to verify, in your nrpe.cfg do you have ?

Code: Select all

dont_blame_nrpe=1

[Mitchell]

Yes, that is enabled.

Thanks
Ashish Jain

[scottwilkerson]

Is it possible the machine with nrpe_nt is seeing the Nagios server as a different IP compared to the one you have allowed in the config?

[Mitchell]

I dont think so. the only IP the XI server has is in allowed list.
After increasing the log level, I have not seen the error yet to be able to post the error message in nrpe_nt logs.

[scottwilkerson]

What kind of load level does your Nagios XI server normally run under? Does this happen under times of high load?

[Mitchell]

the load (1 min) is generally remains under 1 and sometime goes up to 1.5
The issue generally appears few min past midnight (12 AM) and that time load goes up to 5 for few min and then returns back to normal.

[Mitchell]

I observed another thing, the CPU on NRPE_NT server goes high around midnight and stays same even if you bounce the NRPE_NT service. It automatically goes low after some days, I have not found the correlation yet.


Another issue is the monitoring engine event queue. How can I spread the events evenly over time? please see attached images.