Page 1 of 2

NSCA Communication issues.

Posted: Thu Oct 31, 2013 10:43 am
by sujitt
I have a configuration for sending passive check results from a solaris box to centos based nagios xi system.
I followed all the docs I could get on hand to make it work. Interesting part is that send_nsca from solaris thinks that it has sent a datapacket successfully.
But I do not see anything on the Nagios XI server saying it received it.

This works fine when I send from local machine.

here are the example
/opt/csw/nagios/bin/send_nsca 10.2.2.100 -d , -c /etc/opt/csw/nagios/send_nsca.cfg < test2
1 data packet(s) sent to host successfully.

here are the configs
nsca.cfg
password set
encryption_method=2

xinetd.d/nsca

# description: NSCA (Nagios Service Check Acceptor)
service nsca
{
flags = REUSE
socket_type = stream
wait = no
user = nagios
group = nagios
server = /usr/local/nagios/bin/nsca
server_args = -c /usr/local/nagios/etc/nsca.cfg --inetd
log_on_failure += USERID
disable = no
only_from = 10.1.30.130


here are the iptable info
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nsca
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nrpe

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destinat

Re: NSCA Communication issues.

Posted: Thu Oct 31, 2013 3:05 pm
by lmiltchev
Do you see anything in Unconfigured Objects? Is "Enable Listener For Unconfigured Objects" check-box selected under Admin->Performance Settings->Subsystem? Did you look for clues in /var/log/messages?

Re: NSCA Communication issues.

Posted: Thu Oct 31, 2013 8:35 pm
by sujitt
I see this message in the messages file. I made it with no encryption and setup simple password.
Oct 31 21:12:55 localhost nsca[4705]: Dropping packet with invalid CRC32 - possibly due to client using wrong password or crypto algorithm?

The only thing is I am seeing is when i use the same setup from local it works, This does not work when i send from solaris. Is there a difference in crypto algorithms across OS ?

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 9:49 am
by slansing
What version of NSCA did you install on the solaris system? And what version of Nagios XI are you using?

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 10:31 am
by sujitt
We are on Nagios XI Version : 2012R2.5
send_nsca on solaris change log says
NSCA Changelog
**************

2.9.1 - 01/27/2012

How can I know the nsca daemon version?

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 1:18 pm
by yancy
sujitt,

What Decryption are you using on the XI side?

Admin > Inbound Transfers > NSCA >Decyption Method.

What encryption are you using on Solaris?

-Yancy

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 1:20 pm
by lmiltchev
You can just run from the command line:

Code: Select all

/usr/local/nagios/bin/nsca
You should be able to see the version. Can you run the following command and show us the output?

Code: Select all

grep max_packet_age= /usr/local/nagios/etc/nsca.cfg
I would set the value to "0" (zero), so that no packages would be rejected based on their age, and restart the xinetd:

Code: Select all

service xinetd restart

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 2:34 pm
by sujitt
is the 2.9.1 nsca client backward compatible with nsca 2.7.2 ?

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 3:21 pm
by abrist
You cannot run a newer version of nsca as the sender (remote host). We would suggest using 2.7.2 on the remote hosts.

Re: NSCA Communication issues.

Posted: Fri Nov 01, 2013 3:40 pm
by sujitt
are there instructions to upgrade the nsca version on Nagios XI to 2.9.1 ? or it is still not stable ?