Page 1 of 1

monitoring host ins dmz over proxy

Posted: Tue May 05, 2020 3:24 am
by scharft
hi,

we monitored hosts in dmz network over a proxy hosts.
now we have the issue, i didn't work since we started install a new instance on a new server.
the ip-address of the new instance is in the nsclient.ini.
We have a proxy server that is configured as nrpe host in Free Variables.
During a network monitoring we saw tcp traffic over port 5666 to the host but the nsclient doesn't response.
We have installed nsclient 0.5.2.39-x64.

Any ideas or should we do this in a remote session?

Best Regards
thomas

Re: monitoring host ins dmz over proxy

Posted: Tue May 05, 2020 2:41 pm
by cdienger
If the request is going through a proxy then nsclient.ini should have the IP address of the proxy and not the ip address of the new server.

Re: monitoring host ins dmz over proxy

Posted: Mon May 18, 2020 6:08 am
by scharft
it does.
Is there any additonal setting to set in the nslient.ini?

Re: monitoring host ins dmz over proxy

Posted: Mon May 18, 2020 3:36 pm
by cdienger
Yes, make sure the proxy's IP address is in the "allowed hosts" list(https://docs.nsclient.org/reference/win ... owed-hosts) and then restart the service.

Re: monitoring host ins dmz over proxy

Posted: Tue May 19, 2020 6:35 am
by scharft
it is and the nsclient is on version 0.5.2.
Can you set up a remote session?

Re: monitoring host ins dmz over proxy

Posted: Tue May 19, 2020 2:24 pm
by cdienger
Is there anything logged in the nsclient.log when the XI machine tries to connect?

Please PM me a copy of the log as well as a copy of nsclient.ini. I'd also like to see the exact check_nrpe command and arguments that are being run. What is returned if you try running the check_nrpe command from the command line of the XI machine?

Re: monitoring host ins dmz over proxy

Posted: Wed May 27, 2020 6:21 am
by scharft
i have send you both files. btw: the log file size is 420mb..

if i use check_nrpe, it shows me the description:

[nagios@atvienag001 ~]$ /usr/local/nagios/libexec/check_nrpe -H 10.0.1.19 -t 30 -c
NRPE Plugin for Nagios
Version: 3.2.1

Copyright (c) 2009-2017 Nagios Enterprises
1999-2008 Ethan Galstad ([email protected])

Last Modified: 2017-09-01

License: GPL v2 with exemptions (-l for more info)

SSL/TLS Available: OpenSSL 0.9.6 or higher required

Usage: check_nrpe -H <host> [-2] [-4] [-6] [-n] [-u] [-V] [-l] [-d <dhopt>]
[-P <size>] [-S <ssl version>] [-L <cipherlist>] [-C <clientcert>]
[-K <key>] [-A <ca-certificate>] [-s <logopts>] [-b <bindaddr>]
[-f <cfg-file>] [-p <port>] [-t <interval>:<state>] [-g <log-file>]
[-c <command>] [-E] [-a <arglist...>]

Re: monitoring host ins dmz over proxy

Posted: Wed May 27, 2020 3:49 pm
by cdienger
The text file should compress nicely well below 420mb. I didn't receive it possibly due to the size. Please compress it at try sending it again.

Also try running the command without the "-c" option:

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H 10.0.1.19 -t 30

Re: monitoring host ins dmz over proxy

Posted: Tue Jun 02, 2020 12:03 am
by scharft
running the command without c result in:
[nagios@atvienag001 ~]$ /usr/local/nagios/libexec/check_nrpe -H 10.0.1.19 -t 30


the file i tried to upload is a zip file. Can you provide an ftp or other upload site?

When i create a ticket, can i schedule a remote session and work together ?

Re: monitoring host ins dmz over proxy

Posted: Tue Jun 02, 2020 9:55 am
by cdienger
Please open a ticket at https://support.nagios.com/tickets/, reference this post, and we will be able to assist further.