Nagios Support Forum

Code: Select all

root@nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 172.31.2.14: 

Code: Select all

# If you want to fill this file with all avalible options run the following command:
#   nscp settings --generate --add-defaults --load-all
# If you want to activate a module and bring in all its options use:
#   nscp settings --activate-module <MODULE NAME> --add-defaults
# For details run: nscp settings --help


; Undocumented section
[/modules]
NSClientServer = 1

; CheckDisk - CheckDisk can check various file and disk related things. The current version has commands to check Size of hard drives and directories.
CheckDisk = 1

; Event log Checker. - Check for errors and warnings in the event log. This is only supported through NRPE so if you plan to use only NSClient this wont help you at all.
CheckEventLog = 1

; Check External Scripts - A simple wrapper to run external scripts and batch files.
CheckExternalScripts = 1

; Helper function - Various helper function to extend other checks. This is also only supported through NRPE.
CheckHelpers = 1

; Check NSCP - Checkes the state of the agent
CheckNSCP = 1

; CheckSystem - Various system related checks, such as CPU load, process state, service state memory usage and PDH counters.
CheckSystem = 1

; CheckWMI - CheckWMI can check various file and disk related things. The current version has commands to check Size of hard drives and directories.
CheckWMI = 1

; NRPE server - A simple server that listens for incoming NRPE connection and handles them.
NRPEServer = 1


; Undocumented section
[/settings/default]

; ALLOWED HOSTS - A comaseparated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.
allowed hosts = 172.31.2.9,10.225.182.169,172.31.3.9


; Section for NRPE (NRPEServer.dll) (check_nrpe) protocol options.
[/settings/NRPE/server]
extended response = 0
allowed ciphers = ALL:!MD5:@STRENGTH
ssl options = no-sslv2,no-sslv3
use ssl = 1
; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
;use ssl = true

; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = true

; ALLOW INSECURE CHIPHERS and ENCRYPTION - Only enable this if you are using legacy check_nrpe client.
insecure = true

; DH KEY - 
dh = ${certificate-path}/nrpe_dh_512.pem


[/settings/NSClient/server]

; PERFORMANCE DATA - Send performance data back to nagios (set this to 0 to remove all performance data).  
performance data = true

; PORT NUMBER - Port to use for check_nt.  
port = 12489


[/settings/external scripts/scripts]
check_updates = cmd /c echo scripts\Check-Updates.ps1; exit $LastExitCode | powershell.exe -command -
check_ms_win_tasks = cmd /c echo scripts\check_ms_win_tasks.ps1 -H localhost -EF Microsoft; exit $LastExitCode | powershell.exe -command -


; A list of aliases available. An alias is an internal command that has been "wrapped" (to add arguments). Be careful so you don't create loops (ie check_loop=check_a, check_a=check_loop)
[/settings/external scripts/alias]

; alias_cpu - Alias for alias_cpu. To configure this item add a section called: /settings/external scripts/alias/alias_cpu
alias_cpu = checkCPU warn=80 crit=90 time=5m time=1m time=30s

; alias_cpu_ex - Alias for alias_cpu_ex. To configure this item add a section called: /settings/external scripts/alias/alias_cpu_ex
alias_cpu_ex = checkCPU warn=$ARG1$ crit=$ARG2$ time=5m time=1m time=30s

; alias_disk - Alias for alias_disk. To configure this item add a section called: /settings/external scripts/alias/alias_disk
alias_disk = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll FilterType=FIXED

; alias_disk_loose - Alias for alias_disk_loose. To configure this item add a section called: /settings/external scripts/alias/alias_disk_loose
alias_disk_loose = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll FilterType=FIXED ignore-unreadable

; alias_event_log - Alias for alias_event_log. To configure this item add a section called: /settings/external scripts/alias/alias_event_log
alias_event_log = CheckEventLog file=application file=system MaxWarn=1 MaxCrit=1 "filter=generated gt -2d AND severity NOT IN ('success', 'informational') AND source != 'SideBySide'" truncate=800 unique descriptions "syntax=%severity%: %source%: %message% (%count%)"

; alias_file_age - Alias for alias_file_age. To configure this item add a section called: /settings/external scripts/alias/alias_file_age
alias_file_age = checkFile2 filter=out "file=$ARG1$" filter-written=>1d MaxWarn=1 MaxCrit=1 "syntax=%filename% %write%"

; alias_file_size - Alias for alias_file_size. To configure this item add a section called: /settings/external scripts/alias/alias_file_size
alias_file_size = CheckFiles "filter=size > $ARG2$" "path=$ARG1$" MaxWarn=1 MaxCrit=1 "syntax=%filename% %size%" max-dir-depth=10

; alias_mem - Alias for alias_mem. To configure this item add a section called: /settings/external scripts/alias/alias_mem
alias_mem = checkMem MaxWarn=80% MaxCrit=90% ShowAll=long type=physical type=virtual type=paged type=page

; alias_process - Alias for alias_process. To configure this item add a section called: /settings/external scripts/alias/alias_process
alias_process = checkProcState "$ARG1$=started"

; alias_process_count - Alias for alias_process_count. To configure this item add a section called: /settings/external scripts/alias/alias_process_count
alias_process_count = checkProcState MaxWarnCount=$ARG2$ MaxCritCount=$ARG3$ "$ARG1$=started"

; alias_process_hung - Alias for alias_process_hung. To configure this item add a section called: /settings/external scripts/alias/alias_process_hung
alias_process_hung = checkProcState MaxWarnCount=1 MaxCritCount=1 "$ARG1$=hung"

; alias_process_stopped - Alias for alias_process_stopped. To configure this item add a section called: /settings/external scripts/alias/alias_process_stopped
alias_process_stopped = checkProcState "$ARG1$=stopped"

; alias_sched_all - Alias for alias_sched_all. To configure this item add a section called: /settings/external scripts/alias/alias_sched_all
alias_sched_all = CheckTaskSched "filter=exit_code ne 0" "syntax=%title%: %exit_code%" warn=>0

; alias_sched_long - Alias for alias_sched_long. To configure this item add a section called: /settings/external scripts/alias/alias_sched_long
alias_sched_long = CheckTaskSched "filter=status = 'running' AND most_recent_run_time < -$ARG1$" "syntax=%title% (%most_recent_run_time%)" warn=>0

; alias_sched_task - Alias for alias_sched_task. To configure this item add a section called: /settings/external scripts/alias/alias_sched_task
alias_sched_task = CheckTaskSched "filter=title eq '$ARG1$' AND exit_code ne 0" "syntax=%title% (%most_recent_run_time%)" warn=>0

; alias_service - Alias for alias_service. To configure this item add a section called: /settings/external scripts/alias/alias_service
alias_service = checkServiceState CheckAll

; alias_service_ex - Alias for alias_service_ex. To configure this item add a section called: /settings/external scripts/alias/alias_service_ex
alias_service_ex = checkServiceState CheckAll "exclude=Net Driver HPZ12" "exclude=Pml Driver HPZ12" exclude=stisvc

; alias_up - Alias for alias_up. To configure this item add a section called: /settings/external scripts/alias/alias_up
alias_up = checkUpTime MinWarn=1d MinWarn=1h

; alias_updates - Alias for alias_updates. To configure this item add a section called: /settings/external scripts/alias/alias_updates
alias_updates = check_updates

; alias_volumes - Alias for alias_volumes. To configure this item add a section called: /settings/external scripts/alias/alias_volumes
alias_volumes = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll=volumes FilterType=FIXED

; alias_volumes_loose - Alias for alias_volumes_loose. To configure this item add a section called: /settings/external scripts/alias/alias_volumes_loose
alias_volumes_loose = CheckDriveSize MinWarn=10% MinCrit=5% CheckAll=volumes FilterType=FIXED ignore-unreadable

; default - Alias for default. To configure this item add a section called: /settings/external scripts/alias/default
default = 


; Script wrappings - A list of templates for defining script commands. Enter any command line here and they will be expanded by scripts placed under the wrapped scripts section. %SCRIPT% will be replaced by the actual script an %ARGS% will be replaced by any given arguments.
[/settings/external scripts/wrappings]

; Batch file - Command used for executing wrapped batch files
bat = scripts\\%SCRIPT% %ARGS%

; POWERSHELL WRAPPING - Command line used for executing wrapped ps1 (powershell) scripts
ps1 = cmd /c echo If (-Not (Test-Path "scripts\%SCRIPT%") ) { Write-Host "UNKNOWN: Script `"%SCRIPT%`" not found."; exit(3) }; scripts\%SCRIPT% $ARGS$; exit($lastexitcode) | powershell.exe /noprofile -command -

; Visual basic script - Command line used for wrapped vbs scripts
vbs = cscript.exe //T:30 //NoLogo scripts\\lib\\wrapper.vbs %SCRIPT% %ARGS%

Code: Select all

2020-05-13 14:51:49: error:c:\source\master\include\socket/connection.hpp:276: Failed to establish secure connection: sslv3 alert handshake failure: 1040

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -n
/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2
/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2 -n

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -S TLSv1.2+

Code: Select all

CHECK_NRPE: Receive header underflow - only 0 bytes received (4 expected).
root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 172.31.2.14: 1
root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2 -n
CHECK_NRPE: Receive header underflow - only 0 bytes received (4 expected).
root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -S TLSv1.2+
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 172.31.2.14: 1
root@aws-nagios:~#

Code: Select all

/usr/local/nagios/libexec/check_nrpe -V

Code: Select all

; LOG SECTION - Configure log properties.
[/settings/log]

; DATEMASK - The size of the buffer to use when getting messages this affects the speed and maximum size of messages you can recieve.
date format = %Y-%m-%d %H:%M:%S

; LOG LEVEL - Log level to use. Available levels are error,warning,info,debug,trace
level = trace

; FILENAME - The file to write log data to. Set this to none to disable log to file.
file name = ${exe-path}/nsclient.log

Code: Select all

/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14
/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -n
/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2
/usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2 -n

Code: Select all

root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -V
NRPE Plugin for Nagios
Version: 3.2.1

Code: Select all

root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 172.31.2.14: 1
root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -n
CHECK_NRPE: Receive header underflow - only 0 bytes received (4 expected).
root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2
CHECK_NRPE: (ssl_err != 5) Error - Could not complete SSL handshake with 172.31.2.14: 1
root@aws-nagios:~# /usr/local/nagios/libexec/check_nrpe -H 172.31.2.14 -2 -n
CHECK_NRPE: Receive header underflow - only 0 bytes received (4 expected).

Code: Select all

2020-05-17 14:29:09: debug:c:\source\master\service\NSClient++.cpp:219: On crash: restart: nscp
2020-05-17 14:29:09: debug:c:\source\master\service\NSClient++.cpp:231: Archiving crash dumps in: C:\Program Files\NSClient++/crash-dumps
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckDisk
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckEventLog
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckExternalScripts
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckHelpers
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckNSCP
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckSystem
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: CheckWMI
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: NRPEServer
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:150: Found: NSClientServer
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckDisk.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckEventLog.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckExternalScripts.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckHelpers.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckNSCP.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckSystem.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\CheckWMI.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\NRPEServer.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:306: Loading module C:\Program Files\NSClient++\modules\NSClientServer.dll ()
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckDisk
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckEventLog
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckExternalScripts
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckHelpers
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckNSCP
2020-05-17 14:29:09: debug:c:\source\master\modules\CheckNSCP\CheckNSCP.cpp:51: Crash folder is: C:\Program Files\NSClient++/crash-dumps
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckSystem
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: CheckWMI
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: NRPEServer
2020-05-17 14:29:09: debug:c:\source\master\modules\NRPEServer\NRPEServer.cpp:126: Allowed hosts definition: 172.31.2.9(255.255.255.255), 10.225.182.169(255.255.255.255), 172.31.3.9(255.255.255.255)
2020-05-17 14:29:09: debug:c:\source\master\modules\NRPEServer\NRPEServer.cpp:127: Server config: address: :5666, ssl enabled: none, no certificate, dh: C:\Program Files\NSClient++/security/nrpe_dh_512.pem, ciphers: ALL:!MD5:@STRENGTH, ca: C:\Program Files\NSClient++/security/ca.pem, options: no-sslv2,no-sslv3
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:111: Binding to: [::]:5666(ipv6)
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:214: Attempting to bind to: [::]:5666(ipv6)
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:107: Binding to: 0.0.0.0:5666(ipv4), reopen: true, reuse: true
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:214: Attempting to bind to: 0.0.0.0:5666(ipv4)
2020-05-17 14:29:09: debug:c:\source\master\service\plugin_manager.cpp:227: Loading plugin: NSClientServer
2020-05-17 14:29:09: debug:c:\source\master\modules\NSClientServer\NSClientServer.cpp:86: Allowed hosts definition: 172.31.2.9(255.255.255.255), 10.225.182.169(255.255.255.255), 172.31.3.9(255.255.255.255)
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:111: Binding to: [::]:12489(ipv6)
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:214: Attempting to bind to: [::]:12489(ipv6)
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:107: Binding to: 0.0.0.0:12489(ipv4), reopen: true, reuse: true
2020-05-17 14:29:09: debug:c:\source\master\include\socket/server.hpp:214: Attempting to bind to: 0.0.0.0:12489(ipv4)
2020-05-17 14:29:09: trace:c:\source\master\include\scheduler\simple_scheduler.cpp:76: starting all threads
2020-05-17 14:29:09: trace:c:\source\master\include\scheduler\simple_scheduler.cpp:79: Thread pool contains: 2
2020-05-17 14:29:09: debug:c:\source\master\service\NSClient++.cpp:317: NSClient++ - 0.5.2.35 2018-01-28 Started!
2020-05-17 14:29:09: debug:c:\source\master\service\NSClient++.cpp:441: Starting: DONE
2020-05-17 14:29:09: debug:c:\source\master\modules\CheckSystem\pdh_thread.cpp:169: Loading counter: disk_queue_length_0 C: = \\USE1C-MHBI-P01\PhysicalDisk(0 C:)\% Disk Time
2020-05-17 14:29:09: debug:c:\source\master\modules\CheckSystem\pdh_thread.cpp:169: Loading counter: disk_queue_length__Total = \\USE1C-MHBI-P01\PhysicalDisk(_Total)\% Disk Time
2020-05-17 14:29:11: debug:c:\source\master\include\check_nt/server/protocol.hpp:77: Accepting connection from: 172.31.2.9
2020-05-17 14:29:11: debug:c:\source\master\modules\NSClientServer\NSClientServer.cpp:302: Real command: check_process process=DocumentConverterService top-syntax=${list} detail-syntax=${exe}: ${legacy_state} empty-syntax=OK: All processes are running.
2020-05-17 14:29:40: debug:c:\source\master\include\nrpe/server/protocol.hpp:92: Accepting connection from: 10.225.182.169, count=1
2020-05-17 14:29:40: debug:c:\source\master\include\compat.cpp:67: Multiple boundries of the same kind is not supported
2020-05-17 14:29:40: debug:c:\source\master\include\compat.cpp:40: Created command: warn=uptime<=1d
2020-05-17 14:30:06: debug:c:\source\master\include\check_nt/server/protocol.hpp:77: Accepting connection from: 172.31.2.9
2020-05-17 14:30:06: debug:c:\source\master\modules\NSClientServer\NSClientServer.cpp:302: Real command: check_process process=DocumentConverterService top-syntax=${list} detail-syntax=${exe}: ${legacy_state} empty-syntax=OK: All processes are running.
2020-05-17 14:31:05: debug:c:\source\master\include\check_nt/server/protocol.hpp:77: Accepting connection from: 172.31.2.9
2020-05-17 14:31:05: debug:c:\source\master\modules\NSClientServer\NSClientServer.cpp:302: Real command: check_process process=DocumentConverterService top-syntax=${list} detail-syntax=${exe}: ${legacy_state} empty-syntax=OK: All processes are running.
2020-05-17 14:31:07: debug:c:\source\master\include\nrpe/server/protocol.hpp:92: Accepting connection from: 172.31.2.9, count=1
2020-05-17 14:31:07: error:c:\source\master\include\socket/connection.hpp:276: Failed to establish secure connection: sslv3 alert handshake failure: 1040
2020-05-17 14:31:07: debug:c:\source\master\include\nrpe/server/protocol.hpp:92: Accepting connection from: 172.31.2.9, count=1
2020-05-17 14:31:07: error:c:\source\master\include\socket/connection.hpp:273: Seems we other end is not using ssl: unknown protocol
2020-05-17 14:31:07: error:c:\source\master\include\socket/connection.hpp:274: Please review the ssl option as well as ssl options in settings.
2020-05-17 14:31:07: debug:c:\source\master\include\nrpe/server/protocol.hpp:92: Accepting connection from: 172.31.2.9, count=1
2020-05-17 14:31:07: error:c:\source\master\include\socket/connection.hpp:273: Seems we other end is not using ssl: unknown protocol
2020-05-17 14:31:07: error:c:\source\master\include\socket/connection.hpp:274: Please review the ssl option as well as ssl options in settings.
2020-05-17 14:31:07: debug:c:\source\master\include\nrpe/server/protocol.hpp:92: Accepting connection from: 172.31.2.9, count=1
2020-05-17 14:31:07: error:c:\source\master\include\socket/connection.hpp:276: Failed to establish secure connection: sslv3 alert handshake failure: 1040
2020-05-17 14:31:09: debug:c:\source\master\include\nrpe/server/protocol.hpp:92: Accepting connection from: 172.31.2.9, count=1
2020-05-17 14:31:09: error:c:\source\master\include\socket/connection.hpp:273: Seems we other end is not using ssl: unknown protocol
2020-05-17 14:31:09: error:c:\source\master\include\socket/connection.hpp:274: Please review the ssl option as well as ssl options in settings.
2020-05-17 14:32:03: debug:c:\source\master\include\check_nt/server/protocol.hpp:77: Accepting connection from: 172.31.2.9
2020-05-17 14:32:03: debug:c:\source\master\modules\NSClientServer\NSClientServer.cpp:302: Real command: check_process process=DocumentConverterService top-syntax=${list} detail-syntax=${exe}: ${legacy_state} empty-syntax=OK: All processes are running.