Page 2 of 3

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Fri Feb 14, 2020 10:33 am
by lmiltchev
Are you using a proxy by chance?

Can you run the following command and show the output?

Code: Select all

curl -k 'https://192.168.203.117:5693/testconnect/?token=Token1234' -vvv
Also, post the ncpa.cfg file from the client machine on the forum.

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Wed Feb 19, 2020 2:25 am
by lgaddam
Please find below output as requested.

[root@nagiosp01 ~]# curl -k 'https://192.168.203.117:5693/testconnec ... =Token1234' -vvv
* About to connect() to 192.168.203.117 port 5693
* Trying 192.168.203.117... connected
* Connected to 192.168.203.117 (192.168.203.117) port 5693
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSLv2, Client hello (1):
Unknown SSL protocol error in connection to 192.168.203.117:5693
* Closing connection #0
curl: (35) Unknown SSL protocol error in connection to 192.168.203.117:5693
[root@nagiosp01 ~]#

And also attached ncpa.cfg file from remote machine.

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Wed Feb 19, 2020 3:31 am
by lgaddam
I also tried for another host..below is the output & also attached ncpa.cfg file.
Same error like how we got for earlier host. Is there anything need to configure from Nagios server ?
Please check and let us know how to do monitoring with ncpa.

[root@nagiosp01 ~]# curl -k 'https://192.168.173.98:5693/testconnect ... Token12345' -vvv
* About to connect() to 192.168.173.98 port 5693
* Trying 192.168.173.98... connected
* Connected to 192.168.173.98 (192.168.173.98) port 5693
* successfully set certificate verify locations:
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* SSLv2, Client hello (1):
Unknown SSL protocol error in connection to 192.168.173.98:5693
* Closing connection #0
curl: (35) Unknown SSL protocol error in connection to 192.168.173.98:5693
[root@nagiosp01 ~]# nmap 192.168.173.98 -p 5693

Starting Nmap 6.47 ( http://nmap.org ) at 2020-02-19 09:27 CET
Nmap scan report for gwiisd01.usr.corp.gamesa.es (192.168.173.98)
Host is up (0.0016s latency).
PORT STATE SERVICE
5693/tcp open unknown

Nmap done: 1 IP address (1 host up) scanned in 6.66 seconds
[root@nagiosp01 ~]#

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Wed Feb 19, 2020 11:03 am
by lmiltchev
What is the version of openssl that you are currently using on your Nagios XI server?

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Thu Feb 20, 2020 8:25 am
by lgaddam
Please find below output:

[root@nagiosp01 ~]# openssl version
OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008
[root@nagiosp01 ~]#

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Thu Feb 20, 2020 9:45 am
by lmiltchev
The latest version of NCPA (2.2.0) won't work on RHEL 5. This distro is not even listed under the downloads page here:

https://www.nagios.org/ncpa/#downloads

There may be a VERY old version of NCPA in the archives, that would work with RHEL 5 but I wouldn't recommend using it.

I would like to point out that your instance of Nagios XI is no longer supported as it is on RHEL 5. See the supported distributions in our official documentation here:

https://assets.nagios.com/downloads/nag ... -Linux.pdf

I believe the end of life for RHEL 5 was in March 2017... I would strongly encourage you to migrate your Nagios XI server to a supported distro, e.g. RHEL 7 as soon as you can.

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Mon Feb 24, 2020 2:08 am
by lgaddam
We are already planning to migrate to RHEL 7 shortly.


Please let me know is it possible to give monitoring solution to users with current Nagios setup which we have.
We need to update to user who are waiting for this from long time.

If we can provide a solution, please help us.

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Mon Feb 24, 2020 9:37 am
by lmiltchev
The newest version that supports RHEL 5 would be 2.0.6. You can try removing the NCPA version that you currently have installed, then install ver. 2.0.6.

Download links:

32-bit:
https://assets.nagios.com/downloads/ncp ... 5.i386.rpm

64-bit:
https://assets.nagios.com/downloads/ncp ... x86_64.rpm

The older versions of NCPA could be found here:
https://www.nagios.org/ncpa/archive.php

Here's our documentation on installing NCPA on Linux:
https://www.nagios.org/ncpa/getting-started.php#linux

Hope this helps.

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Fri Feb 28, 2020 7:16 am
by lgaddam
Im not trying to install NCPA in Linux.
RDP sessions monitoring on a Windows 2012 64 bit machine.

Can you help me with the package.

Re: HOw to monitor RDP sessions or login sessions in windows

Posted: Fri Feb 28, 2020 9:54 am
by lmiltchev
Im not trying to install NCPA in Linux.
RDP sessions monitoring on a Windows 2012 64 bit machine.
My bad. I included the Linux links by mistake. You can use the latest NCPA agent for Windows - it should work for Windows Server 2008+, provided you migrate from RHEL 5 to RHEL 7. I don't think NCPA is going to work unless you upgrade to a newer OS on your Nagios XI server.