Page 1 of 1

NRPE multiple PID

Posted: Mon Dec 30, 2013 12:17 am
by peter.romfeld.hk
Hi,

on only one of my nagios server i have a strange NRPE behavior. It shows multiple running PID (pid 27377 27372 27294). Even after restart it still shows multiple PID. After STOP/START its back to one PID

Any explanation? Should I be concerned about compromised server?

Cheers,
Peter

Re: NRPE multiple PID

Posted: Mon Dec 30, 2013 10:42 am
by slansing
Are you running a NRPE server, as well as client on the system? Are you checking anything on this server from another one via NRPE? When you kill the processes and restart the NRPE daemon how long does it take for you to see additional processes? When you see all three please run the following and share the output:

Code: Select all

ps -ef | grep nrpe

Re: NRPE multiple PID

Posted: Sun Jan 05, 2014 11:11 pm
by peter.romfeld.hk
Hi,

Yes I am also running nrpe. I have 2 Nagios servers which also check each other :D
I didnt got multiple PID's so far.

Thanks,
Peter

Re: NRPE multiple PID

Posted: Mon Jan 06, 2014 10:50 am
by slansing
Please run the above command and share the output when you see the suspected "3 pids."