Page 2 of 2
Re: Too many NRPE Connection
Posted: Wed Mar 12, 2014 10:47 am
by dhinesh
Hi Slansing,
The check_interval is 5mins., so if the checks are being scheduled at the same., i should see mutilple connections made only every 5mins.
But here every minute the connections are made in high number.
Re: Too many NRPE Connection
Posted: Wed Mar 12, 2014 2:43 pm
by abrist
Are you using xinetd with nrpe? If so, you may need to increase the per source limit of xinetd.
From the NRPE troubleshooting doc:
http://assets.nagios.com/downloads/nagi ... utions.pdf
This cause is rare, but worth mentioning. If you use your remote host's nrpe server as a nrpe node proxy (sending all checks for the
network segment to a single nrpe enabled server behind a firewall), or if you are doing a large number of nrpe checks in relatively short
time period on one remote host, you may hit the maximum connection limit of nrpe. This is technically an xinetd setting and can be
uncapped by editing the file:
Add the following lines to the definition:
Code: Select all
per_source = UNLIMITED
instances = UNLIMITED
And then restart nrpe:
Re: Too many NRPE Connection
Posted: Thu Mar 13, 2014 9:22 am
by dhinesh
Hi Abrist,
NRPE is runs under inetd. It is an HP-UX server.
Below is inetd entry for NRPE.
nrpe stream tcp nowait nagios /opt/nrpe/bin/nrpe nrpe -i -c /opt/nrpe/etc/nrpe.cfg
Re: Too many NRPE Connection
Posted: Thu Mar 13, 2014 11:16 am
by abrist
Are the checks getting updated in the UI every minute? Or do they only update every 5minutes like configured? If they are indeed updating every minute on the details page, then there may be an issue with interval configuration or with inherited checks from a hostgroup/template/servicegroup/etc.
Re: Too many NRPE Connection
Posted: Mon Mar 17, 2014 7:42 am
by dhinesh
Hi Abrist,
The checks are updating every 5min in UI as defined in the check_interval.
Re: Too many NRPE Connection
Posted: Mon Mar 17, 2014 10:22 am
by slansing
Okay, so what that is basically saying is that either those connections are just 'ghost' connections of some sort, or that they are being held open on the remote host by something other than Nagios. We should see the checks being updated much more rapidly in the XI interface if they are actually running additional checks against that system and returning them. Are additional copies of the NRPE daemon actually running on the system?
Re: Too many NRPE Connection
Posted: Wed Mar 19, 2014 7:50 am
by dhinesh
Hi Slansing,
How can I check whether the additional copies of NRPE are running.
I see the NRPE is running under inetd. And 'ps -ef | grep nrpe' is also not showing any nrpe process.
Re: Too many NRPE Connection
Posted: Wed Mar 19, 2014 5:00 pm
by scottwilkerson
If it is running under inetd running
should show all processes. If it show nothing it is likely not running
you could run
Re: Too many NRPE Connection
Posted: Wed Mar 19, 2014 5:02 pm
by lmiltchev
If nrpe were running as a stand along daemon, you would see something like this:
Code: Select all
ps -ef | grep nrpe
nagios 1522 1 0 Feb24 ? 00:02:03 /usr/sbin/nrpe -c /etc/nagios/nrpe.cfg -d
BTW, have you tried restarting the inetd daemon?