NSCA Communication issues.

[sujitt]

I have a configuration for sending passive check results from a solaris box to centos based nagios xi system.
I followed all the docs I could get on hand to make it work. Interesting part is that send_nsca from solaris thinks that it has sent a datapacket successfully.
But I do not see anything on the Nagios XI server saying it received it.

This works fine when I send from local machine.

here are the example
/opt/csw/nagios/bin/send_nsca 10.2.2.100 -d , -c /etc/opt/csw/nagios/send_nsca.cfg < test2
1 data packet(s) sent to host successfully.

here are the configs
nsca.cfg
password set
encryption_method=2

xinetd.d/nsca

# description: NSCA (Nagios Service Check Acceptor)
service nsca
{
flags = REUSE
socket_type = stream
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nsca
server_args = -c /usr/local/nagios/etc/nsca.cfg --inetd
log_on_failure += USERID
disable = no
only_from = 10.1.30.130


here are the iptable info
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nsca
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nrpe

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destinat

[lmiltchev]

Do you see anything in Unconfigured Objects? Is "Enable Listener For Unconfigured Objects" check-box selected under Admin->Performance Settings->Subsystem? Did you look for clues in /var/log/messages?

[sujitt]

I see this message in the messages file. I made it with no encryption and setup simple password.
Oct 31 21:12:55 localhost nsca[4705]: Dropping packet with invalid CRC32 - possibly due to client using wrong password or crypto algorithm?

The only thing is I am seeing is when i use the same setup from local it works, This does not work when i send from solaris. Is there a difference in crypto algorithms across OS ?

[slansing]

What version of NSCA did you install on the solaris system? And what version of Nagios XI are you using?

[sujitt]

We are on Nagios XI Version : 2012R2.5
send_nsca on solaris change log says
NSCA Changelog
**************

2.9.1 - 01/27/2012

How can I know the nsca daemon version?

[yancy]

sujitt,

What Decryption are you using on the XI side?

Admin > Inbound Transfers > NSCA >Decyption Method.

What encryption are you using on Solaris?

-Yancy

[lmiltchev]

You can just run from the command line:

Code: Select all

/usr/local/nagios/bin/nsca

You should be able to see the version. Can you run the following command and show us the output?

Code: Select all

grep max_packet_age= /usr/local/nagios/etc/nsca.cfg

I would set the value to "0" (zero), so that no packages would be rejected based on their age, and restart the xinetd:

Code: Select all

service xinetd restart

[sujitt]

is the 2.9.1 nsca client backward compatible with nsca 2.7.2 ?

[abrist]

You cannot run a newer version of nsca as the sender (remote host). We would suggest using 2.7.2 on the remote hosts.

[sujitt]

are there instructions to upgrade the nsca version on Nagios XI to 2.9.1 ? or it is still not stable ?