HOw to monitor RDP sessions or login sessions in windows

[lmiltchev]

Are you using a proxy by chance?

Can you run the following command and show the output?

Code: Select all

curl -k 'https://192.168.203.117:5693/testconnect/?token=Token1234' -vvv

Also, post the ncpa.cfg file from the client machine on the forum.

[lgaddam]

Please find below output as requested.

[root@nagiosp01 ~]# curl -k 'https://192.168.203.117:5693/testconnec ... =Token1234' -vvv
* About to connect() to 192.168.203.117 port 5693
* Trying 192.168.203.117... connected
* Connected to 192.168.203.117 (192.168.203.117) port 5693
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSLv2, Client hello (1):
Unknown SSL protocol error in connection to 192.168.203.117:5693
* Closing connection #0
curl: (35) Unknown SSL protocol error in connection to 192.168.203.117:5693
[root@nagiosp01 ~]#

And also attached ncpa.cfg file from remote machine.

[lgaddam]

I also tried for another host..below is the output & also attached ncpa.cfg file.
Same error like how we got for earlier host. Is there anything need to configure from Nagios server ?
Please check and let us know how to do monitoring with ncpa.

[root@nagiosp01 ~]# curl -k 'https://192.168.173.98:5693/testconnect ... Token12345' -vvv
* About to connect() to 192.168.173.98 port 5693
* Trying 192.168.173.98... connected
* Connected to 192.168.173.98 (192.168.173.98) port 5693
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSLv2, Client hello (1):
Unknown SSL protocol error in connection to 192.168.173.98:5693
* Closing connection #0
curl: (35) Unknown SSL protocol error in connection to 192.168.173.98:5693
[root@nagiosp01 ~]# nmap 192.168.173.98 -p 5693

Starting Nmap 6.47 ( http://nmap.org ) at 2020-02-19 09:27 CET
Nmap scan report for gwiisd01.usr.corp.gamesa.es (192.168.173.98)
Host is up (0.0016s latency).
PORT STATE SERVICE
5693/tcp open unknown

Nmap done: 1 IP address (1 host up) scanned in 6.66 seconds
[root@nagiosp01 ~]#

[lmiltchev]

What is the version of openssl that you are currently using on your Nagios XI server?

[lgaddam]

Please find below output:

[root@nagiosp01 ~]# openssl version
OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
[root@nagiosp01 ~]#

[lmiltchev]

The latest version of NCPA (2.2.0) won't work on RHEL 5. This distro is not even listed under the downloads page here:

https://www.nagios.org/ncpa/#downloads

There may be a VERY old version of NCPA in the archives, that would work with RHEL 5 but I wouldn't recommend using it.

I would like to point out that your instance of Nagios XI is no longer supported as it is on RHEL 5. See the supported distributions in our official documentation here:

https://assets.nagios.com/downloads/nag ... -Linux.pdf

I believe the end of life for RHEL 5 was in March 2017... I would strongly encourage you to migrate your Nagios XI server to a supported distro, e.g. RHEL 7 as soon as you can.

[lgaddam]

We are already planning to migrate to RHEL 7 shortly.


Please let me know is it possible to give monitoring solution to users with current Nagios setup which we have.
We need to update to user who are waiting for this from long time.

If we can provide a solution, please help us.

[lmiltchev]

The newest version that supports RHEL 5 would be 2.0.6. You can try removing the NCPA version that you currently have installed, then install ver. 2.0.6.

Download links:

32-bit:
https://assets.nagios.com/downloads/ncp ... 5.i386.rpm

64-bit:
https://assets.nagios.com/downloads/ncp ... x86_64.rpm

The older versions of NCPA could be found here:
https://www.nagios.org/ncpa/archive.php

Here's our documentation on installing NCPA on Linux:
https://www.nagios.org/ncpa/getting-started.php#linux

Hope this helps.

[lgaddam]

Im not trying to install NCPA in Linux.
RDP sessions monitoring on a Windows 2012 64 bit machine.

Can you help me with the package.

[lmiltchev]

Im not trying to install NCPA in Linux.
RDP sessions monitoring on a Windows 2012 64 bit machine.

My bad. I included the Linux links by mistake. You can use the latest NCPA agent for Windows - it should work for Windows Server 2008+, provided you migrate from RHEL 5 to RHEL 7. I don't think NCPA is going to work unless you upgrade to a newer OS on your Nagios XI server.