Nagios Support Forum

Changed the port number to 12489 for nsclient.OS checks like disk,load and cpu are working fine but physical memory checks are not working

Below is the output.

tmproot@usa0300lv846>./check_nrpe -H 13.118.27.40
CHECK_NRPE: Socket timeout after 10 seconds.

tmproot@usa0300lv846>./check_nrpe -H 13.118.27.40 -p 12489 -t 30 -c checkMem -a MaxWarn=80% MaxCrit=90% ShowAll=long type=physical
CHECK_NRPE: Error - Could not complete SSL handshake.
tmproot@usa0300lv846>./check_nrpe -H 13.118.27.40 -p 5666 -t 30 -c checkMem -a MaxWarn=80% MaxCrit=90% ShowAll=long type=physical
CHECK_NRPE: Socket timeout after 30 seconds.

tmproot@usa0300lv846>>./check_nrpe -H 13.118.27.40 -c CheckCounter -a "Counter:=\\PhysicalDisk(0 C:)\Avg. Disk sec/Transfer" ShowAll MaxWarn=80% MaxCrit=90%
sh: ./check_nrpe: Text file busy

Port 12489 is a check_nt port only, not a nrpe port. Port 5666 is for NRPE. You need to make sure that both ports are open on both the Nagios server, and the remote NSClient++ host. The errors you are getting are still indicative of a connection interruption between the two.

As for the last command, you need to kill or close the check_nrpe.sh file, it looks like you were editing the check plugin itself and suspended or locked it.

What is the output of the following command?

./check_nrpe -H 13.118.27.40

Open the NSC.ini file, and check this line, under the [NRPE] section:
to this: Save the file, and restart the nsclient++ service.

Try running the following command:

Can you run this on the host you are trying to check the memory on?

Start > Run > "cmd"
The response should be

C:\Users\cgraham>netstat -an | Find "5666"
TCP 0.0.0.0:5666 0.0.0.0:0 LISTENING
TCP [::]:5666 [::]:0 LISTENING

ravish78,

Did you check if port 5666 is accessible? Did you try modifying the NSC.in file, and running the following command:

Team,

Below is the output of the commands which you suggested.Port 12489 is not opened on nagios xi server only 5666 is functioning.Both porst are open at client end.

tmproot@usa0300lv886>telnet localhost 5666
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
^C
^CConnection closed by foreign host.

tmproot@usa0300lv886>telnet localhost 12489
Trying 127.0.0.1...
telnet: connect to address 127.0.0.1: Connection refused
tmproot@usa0300lv886>


tmproot@usa0300lv886>./check_nrpe -H 13.118.27.40
CHECK_NRPE: Socket timeout after 10 seconds.

tmproot@usa0300lv886>./check_nrpe -H 13.118.27.40 -p 5666 -t 30 -c checkMem -a MaxWarn=80% MaxCrit=90% ShowAll=long type=physical
CHECK_NRPE: Socket timeout after 30 seconds.

C:\>netstat -an | Find "5666"
TCP 0.0.0.0:5666 0.0.0.0:0 LISTENING

Can you telnet to port 5666 from the XI server to the remote host?

tmproot@usa0300lv846>telnet 13.118.27.40 5666
Trying 13.118.27.40...
Connected to briodev (13.118.27.40).
Escape character is '^]'.
^]

Please, post your latest NSC.ini and the nsclient.log files.

Did you restart the nsclinet++ after making the changes in the NSC.ini?

Snippet from nagios logs

2013-02-26 09:00:09: error:modules\NRPEListener\NRPEListener.cpp:422: Request contained arguments (not currently allowed, check the allow_arguments option).
2013-02-26 09:00:09: error:modules\NRPEListener\NRPEListener.cpp:320: Exception handling NRPE packet
2013-02-27 04:34:27: message:modules\NRPEListener\NRPEListener.cpp:370: Could not read a full NRPE packet from socket, only got: 65
2013-03-01 03:12:09: error:modules\CheckSystem\PDHCollector.cpp:215: Failed to query performance counters: \Processor(_total)\% Processor Time: PdhGetFormattedCounterValue failed: A counter with a negative denominator value was detected. (800007D6)
2013-03-03 23:08:14: error:modules\CheckSystem\PDHCollector.cpp:215: Failed to query performance counters: \Processor(_total)\% Processor Time: PdhGetFormattedCounterValue failed: A counter with a negative denominator value was detected. (800007D6)
2013-03-04 10:37:53: error:modules\NRPEListener\NRPEListener.cpp:290: Unauthorize access from: 127.0.0.1
2013-03-04 10:38:00: error:modules\NSClientListener\NSClientListener.cpp:314: Unauthorized access from: 127.0.0.1
2013-03-04 10:44:38: message:modules\NRPEListener\NRPEListener.cpp:370: Could not read a full NRPE packet from socket, only got: 65
2013-03-04 10:47:53: message:modules\FileLogger\FileLogger.cpp:86: Starting to log for: NSClient++ - 0.3.9.329 2011-09-02
2013-03-04 11:35:53: debug:CACHENSClient++.cpp:557: Attempting to start NSCLient++ - 0.3.9.329 2011-09-02
2013-03-04 11:35:53: message:CACHEmodules\FileLogger\FileLogger.cpp:87: Log path is: C:\NSClient++\\nsclient.log
2013-03-04 11:35:53: message:modules\NRPEListener\NRPEListener.cpp:370: Could not read a full NRPE packet from socket, only got: 65
2013-03-04 11:37:11: message:modules\NRPEListener\NRPEListener.cpp:370: Could not read a full NRPE packet from socket, only got: 65
2013-03-05 09:57:01: error:modules\NRPEListener\NRPEListener.cpp:377: Timeout reading NRPE-packet (increase socket_timeout), we only got: 0
2013-03-05 16:01:36: message:modules\FileLogger\FileLogger.cpp:86: Starting to log for: NSClient++ - 0.3.9.329 2011-09-02
2013-03-05 16:02:27: debug:CACHENSClient++.cpp:557: Attempting to start NSCLient++ - 0.3.9.329 2011-09-02
2013-03-05 16:02:27: message:CACHEmodules\FileLogger\FileLogger.cpp:87: Log path is: C:\NSClient++\\nsclient.log
2013-03-05 16:02:27: message:modules\NRPEListener\NRPEListener.cpp:370: Could not read a full NRPE packet from socket, only got: 65