Page 1 of 1

[RESOLVED] NRPE2 (pfSense) problem

Posted: Sat Nov 18, 2017 6:10 am
by cezarq
OlĂ !

I have a Debian 9 server running the NRPE 3.0.1-3+deb9u1. I can monitor other machines just fine, but there is a issue to connect to pfSense box running the NRPE 2.3.2_2.
# /usr/local/nagios/libexec/check_nrpe -H 192.168.5.1
*** Error in `/usr/local/nagios/libexec/check_nrpe': corrupted size vs. prev_size: 0x005789f0 ***
======= Backtrace: =========
/lib/i386-linux-gnu/libc.so.6(+0x6737a)[0xb730037a]
/lib/i386-linux-gnu/libc.so.6(+0x6dfb7)[0xb7306fb7]
/lib/i386-linux-gnu/libc.so.6(+0x6f072)[0xb7308072]
/usr/lib/i386-linux-gnu/libcrypto.so.1.0.2(CRYPTO_free+0x33)[0xb74b2173]
/usr/lib/i386-linux-gnu/libcrypto.so.1.0.2(EVP_CIPHER_CTX_cleanup+0x54)[0xb75367c4]
/usr/lib/i386-linux-gnu/libssl.so.1.0.2(+0x37297)[0xb76a7297]
/usr/lib/i386-linux-gnu/libssl.so.1.0.2(SSL_free+0x126)[0xb76a84d6]
/usr/local/nagios/libexec/check_nrpe(+0x48c2)[0x4248c2]
/usr/local/nagios/libexec/check_nrpe(main+0x1fa)[0x421aca]
/lib/i386-linux-gnu/libc.so.6(__libc_start_main+0xf6)[0xb72b1276]
/usr/local/nagios/libexec/check_nrpe(+0x1b16)[0x421b16]
======= Memory map: ========
00420000-0042a000 r-xp 00000000 08:01 6297149 /usr/local/nagios/libexec/check_nrpe
0042a000-0042b000 r--p 00009000 08:01 6297149 /usr/local/nagios/libexec/check_nrpe
0042b000-0042c000 rw-p 0000a000 08:01 6297149 /usr/local/nagios/libexec/check_nrpe
0042c000-0042d000 rw-p 00000000 00:00 0
00559000-0059b000 rw-p 00000000 00:00 0 [heap]
b7100000-b7121000 rw-p 00000000 00:00 0
b7121000-b7200000 ---p 00000000 00:00 0
b725f000-b727b000 r-xp 00000000 08:01 5636100 /lib/i386-linux-gnu/libgcc_s.so.1
b727b000-b727c000 r--p 0001b000 08:01 5636100 /lib/i386-linux-gnu/libgcc_s.so.1
b727c000-b727d000 rw-p 0001c000 08:01 5636100 /lib/i386-linux-gnu/libgcc_s.so.1
b7292000-b7294000 rw-p 00000000 00:00 0
b7294000-b7297000 r-xp 00000000 08:01 5636107 /lib/i386-linux-gnu/libdl-2.24.so
b7297000-b7298000 r--p 00002000 08:01 5636107 /lib/i386-linux-gnu/libdl-2.24.so
b7298000-b7299000 rw-p 00003000 08:01 5636107 /lib/i386-linux-gnu/libdl-2.24.so
b7299000-b744a000 r-xp 00000000 08:01 5636104 /lib/i386-linux-gnu/libc-2.24.so
b744a000-b744b000 ---p 001b1000 08:01 5636104 /lib/i386-linux-gnu/libc-2.24.so
b744b000-b744d000 r--p 001b1000 08:01 5636104 /lib/i386-linux-gnu/libc-2.24.so
b744d000-b744e000 rw-p 001b3000 08:01 5636104 /lib/i386-linux-gnu/libc-2.24.so
b744e000-b7451000 rw-p 00000000 00:00 0
b7451000-b7467000 r-xp 00000000 08:01 5636110 /lib/i386-linux-gnu/libnsl-2.24.so
b7467000-b7468000 r--p 00016000 08:01 5636110 /lib/i386-linux-gnu/libnsl-2.24.so
b7468000-b7469000 rw-p 00017000 08:01 5636110 /lib/i386-linux-gnu/libnsl-2.24.so
b7469000-b746b000 rw-p 00000000 00:00 0
b746b000-b7653000 r-xp 00000000 08:01 5505460 /usr/lib/i386-linux-gnu/libcrypto.so.1.0.2
b7653000-b7654000 ---p 001e8000 08:01 5505460 /usr/lib/i386-linux-gnu/libcrypto.so.1.0.2
b7654000-b7664000 r--p 001e8000 08:01 5505460 /usr/lib/i386-linux-gnu/libcrypto.so.1.0.2
b7664000-b766d000 rw-p 001f8000 08:01 5505460 /usr/lib/i386-linux-gnu/libcrypto.so.1.0.2
b766d000-b7670000 rw-p 00000000 00:00 0
b7670000-b76d5000 r-xp 00000000 08:01 5508250 /usr/lib/i386-linux-gnu/libssl.so.1.0.2
b76d5000-b76d6000 ---p 00065000 08:01 5508250 /usr/lib/i386-linux-gnu/libssl.so.1.0.2
b76d6000-b76d8000 r--p 00065000 08:01 5508250 /usr/lib/i386-linux-gnu/libssl.so.1.0.2
b76d8000-b76dc000 rw-p 00067000 08:01 5508250 /usr/lib/i386-linux-gnu/libssl.so.1.0.2
b76f0000-b76f4000 rw-p 00000000 00:00 0
b76f4000-b76f6000 r--p 00000000 00:00 0 [vvar]
b76f6000-b76f8000 r-xp 00000000 00:00 0 [vdso]
b76f8000-b771b000 r-xp 00000000 08:01 5636099 /lib/i386-linux-gnu/ld-2.24.so
b771b000-b771c000 r--p 00022000 08:01 5636099 /lib/i386-linux-gnu/ld-2.24.so
b771c000-b771d000 rw-p 00023000 08:01 5636099 /lib/i386-linux-gnu/ld-2.24.so
bfa5f000-bfa80000 rw-p 00000000 00:00 0 [stack]
Abortado

Any ideas?

Re: NRPE2 (pfSense) problem

Posted: Mon Nov 20, 2017 2:11 pm
by npolovenko
Hello, @cezarq. This looks more like an issue with NRPE itself. So this exact check_nrpe plugin works fine with other services, but whenever you add this particular IP as an argument -H 192.168.5.1 there is a long output of errors? What if you run ./check_nrpe with no arguments, would you get the same kind of error?
Would you consider upgrading check_nrpe on the Nagios Core side? Take a look here: https://support.nagios.com/kb/article.php?id=515 Scroll to the section where is says: Install check_nrpe Plugin Only. And you can find NRPE source files here: https://sourceforge.net/projects/nagios/files/nrpe-3.x/

PS: I'd highly recommend taking a look at the section that starts with "IF you wanted to install the plugin for testing purposes". Basically, you can keep the old check_nrpe plugin and have a new one installed separately. Until you figure out that the new version of plugin solves all your problems.

Re: NRPE2 (pfSense) problem

Posted: Mon Nov 20, 2017 7:26 pm
by cezarq
npolovenko wrote:Would you consider upgrading check_nrpe on the Nagios Core side? Take a look here: https://support.nagios.com/kb/article.php?id=515 Scroll to the section where is says: Install check_nrpe Plugin Only. And you can find NRPE source files here: https://sourceforge.net/projects/nagios/files/nrpe-3.x/

PS: I'd highly recommend taking a look at the section that starts with "IF you wanted to install the plugin for testing purposes". Basically, you can keep the old check_nrpe plugin and have a new one installed separately. Until you figure out that the new version of plugin solves all your problems.
You are a fuc*** genius!!! Thank you so much... Mark as resolved, pls!