NRPE multiple PID

[peter.romfeld.hk]

Hi,

on only one of my nagios server i have a strange NRPE behavior. It shows multiple running PID (pid 27377 27372 27294). Even after restart it still shows multiple PID. After STOP/START its back to one PID

Any explanation? Should I be concerned about compromised server?

Cheers,
Peter

[slansing]

Are you running a NRPE server, as well as client on the system? Are you checking anything on this server from another one via NRPE? When you kill the processes and restart the NRPE daemon how long does it take for you to see additional processes? When you see all three please run the following and share the output:

Code: Select all

ps -ef | grep nrpe

[peter.romfeld.hk]

Hi,

Yes I am also running nrpe. I have 2 Nagios servers which also check each other
I didnt got multiple PID's so far.

Thanks,
Peter

[slansing]

Please run the above command and share the output when you see the suspected "3 pids."