NRDP working failure?

[junkertf]

Hello,

We ha some kind of strange situation on our UAT environment.

We testing an NRDP passive checks fron Windows client with jmeter and we found that the nrdp debug log shown only check_auth() state and no more. The jmeter send result in json format and the received size of the packet is a bit more than 10KB, and we experience that the nrdp_debug.log write only check_auth() lines and no one result shown up in our nagios environment.

If we send the same result with curl, then the size of the full request is arround 70 byte and the nrdp debug logs shows the suceess meaning:
check_auth() check_token() REQUEST and all nrdp checks has written
successfull log lines, and the results are com up in the nagios gui.

Where to search the solution, error and how?
The nagiosXi version is up-to-date 5.7.5

Thank you, best regards,

Ferenc

[junkertf]

Hello,

Is it a more complex failure or need more clarification?
Need some output to attach?

I need some help in these case.

Thank you, best regards,

Ferenc

[cdienger]

It sounds like the message is hitting a limit. Check the post_max_size(https://www.php.net/manual/en/ini.core. ... t-max-size) in /etc/php.ini. The default of 8MB should be good but perhaps it was set to something besides the default. You will always want to take a look at https://support.nagios.com/kb/article/n ... e-611.html and follow the step in there to increase some limits.

Is there anything logged in /var/log/httpd/error_log or /var/log/httpd/ssl_request_log when jmeter sends the 10KB message?

[junkertf]

Hello,

It is as you wrote

]# grep ^post_max_size /etc/php.ini
post_max_size = 8M

httpd access_log show response code 200 for the 10k sized packages only nrdp.log shows only the auth() lines and no more.

Thank you, best regards,

Ferenc

[cdienger]

I'd like to get a tcpdump taken on the XI machine. Run this with:

Code: Select all

yum -y install tcpdump
tcpdump -s 0 -i any -w output.pcap

Let this run just long enough to resend the 10KB message and use CTRL+C to stop it. Send me the output.pcap file that is created via a private message.

[junkertf]

Hello,

I had posted the asked tcpdump outputs and logs for you.

Best reagrds,

Ferenc

[cdienger]

Responded.