monitoring host ins dmz over proxy

[scharft]

hi,

we monitored hosts in dmz network over a proxy hosts.
now we have the issue, i didn't work since we started install a new instance on a new server.
the ip-address of the new instance is in the nsclient.ini.
We have a proxy server that is configured as nrpe host in Free Variables.
During a network monitoring we saw tcp traffic over port 5666 to the host but the nsclient doesn't response.
We have installed nsclient 0.5.2.39-x64.

Any ideas or should we do this in a remote session?

Best Regards
thomas

[cdienger]

If the request is going through a proxy then nsclient.ini should have the IP address of the proxy and not the ip address of the new server.

[scharft]

it does.
Is there any additonal setting to set in the nslient.ini?

[cdienger]

Yes, make sure the proxy's IP address is in the "allowed hosts" list(https://docs.nsclient.org/reference/win ... owed-hosts) and then restart the service.

[scharft]

it is and the nsclient is on version 0.5.2.
Can you set up a remote session?

[cdienger]

Is there anything logged in the nsclient.log when the XI machine tries to connect?

Please PM me a copy of the log as well as a copy of nsclient.ini. I'd also like to see the exact check_nrpe command and arguments that are being run. What is returned if you try running the check_nrpe command from the command line of the XI machine?

[scharft]

i have send you both files. btw: the log file size is 420mb..

if i use check_nrpe, it shows me the description:

[nagios@atvienag001 ~]$ /usr/local/nagios/libexec/check_nrpe -H 10.0.1.19 -t 30 -c
NRPE Plugin for Nagios
Version: 3.2.1

Copyright (c) 2009-2017 Nagios Enterprises
1999-2008 Ethan Galstad ([email protected])

Last Modified: 2017-09-01

License: GPL v2 with exemptions (-l for more info)

SSL/TLS Available: OpenSSL 0.9.6 or higher required

Usage: check_nrpe -H <host> [-2] [-4] [-6] [-n] [-u] [-V] [-l] [-d <dhopt>]
[-P <size>] [-S <ssl version>] [-L <cipherlist>] [-C <clientcert>]
[-K <key>] [-A <ca-certificate>] [-s <logopts>] [-b <bindaddr>]
[-f <cfg-file>] [-p <port>] [-t <interval>:<state>] [-g <log-file>]
[-c <command>] [-E] [-a <arglist...>]

[cdienger]

The text file should compress nicely well below 420mb. I didn't receive it possibly due to the size. Please compress it at try sending it again.

Also try running the command without the "-c" option:

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H 10.0.1.19 -t 30

[scharft]

running the command without c result in:
[nagios@atvienag001 ~]$ /usr/local/nagios/libexec/check_nrpe -H 10.0.1.19 -t 30


the file i tried to upload is a zip file. Can you provide an ftp or other upload site?

When i create a ticket, can i schedule a remote session and work together ?

[cdienger]

Please open a ticket at https://support.nagios.com/tickets/, reference this post, and we will be able to assist further.