Page 1 of 1

The remote service is running. NCPA returns it as unknown.

Posted: Tue Aug 18, 2020 1:21 pm
by Maxwellb99
Hi Nagios,

The remote service is running. NCPA returns it as unknown. I think this is related to the user? Is this a known thing? How would I go about troubleshooting this?

Thanks,
Max

NCPA Unknown

Posted: Tue Aug 18, 2020 2:24 pm
by Maxwellb99
Hi Nagios,

Not 100% sure if this is the space for this, but I'm sure you'll let me know.

My network Knowledge isn't great, my Linux knowledge isn't great either. I'm not really sure how I'm an admin. Ok, that aside.

I've got a host where previously we were getting check_NCPA results. I'll say "one day" (arbitrary day, not following patches or any changes as far as I know) it stopped working & check_tcp reveals port 5693 is connection refused. netstat doesn't show it listening on 5693. I uninstalled the agent & reinstalled it via yum including opening the firewall rules which says " Warning: ALREADY_ENABLED: '5693:tcp' already in 'public' "

5693 is still connection refused. What's the next step in troubleshooting this?

Thanks,
Max

Re: NCPA Unknown

Posted: Tue Aug 18, 2020 4:56 pm
by jbrunkow
The first thing I would do is make sure that the NCPA listener service is running on that machine. The command you need to use to check or start the service will vary based on what operating system you are using, but it usually has ncpa_listener in the name.

Code: Select all

systemctl restart ncpa_listener.service
Then you could probe that port with nmap to make sure that it is open and running said service.

Code: Select all

nmap -p 5693 <host IP>
If neither of those things are it, you could also have a look at the configuration file on the machine, just to make sure that the service was not assigned to another port or something. Oh, and be sure to double check that the community string is correct!

Code: Select all

/usr/local/ncpa/etc/ncpa.cfg
For more detailed instructions on how to setup NCPA, refer to the following documentation.
installing NCPA