Page 1 of 1

package loss monitor Windows 2008 r2

Posted: Thu Dec 27, 2012 7:35 am
by mr.fyrby
Hi,
I have a quite big environment that i monitoring with Nagios, everything is working fine except from monitoring Windows 2008 servers.
(i can monitor Windows 2003 servers and all other equipment without any problems)

very often do i get unknown or timeout messages so for troubleshooting had i only configured a ping check now.
i am using Check_icmp to ping my servers, but as you can see i got very often a really high package-loss for some reason.

Code: Select all

[2012-12-27 13:10:11] SERVICE ALERT: NYO45;Ping;OK;SOFT;2;OK - 10.7.12.45: rta 0.375ms, lost 0%
[2012-12-27 13:09:21] SERVICE ALERT: NYO45;Ping;CRITICAL;SOFT;1;CRITICAL - 10.7.12.45: rta 1.146ms, lost 80%
[2012-12-27 13:06:21] HOST ALERT: NYO45;UP;SOFT;2;OK - 10.7.12.45: rta 0.287ms, lost 0%
[2012-12-27 13:06:11] SERVICE ALERT: NYO45;Ping;OK;SOFT;2;OK - 10.7.12.45: rta 4.173ms, lost 0%
[2012-12-27 13:05:31] HOST ALERT: NYO45;DOWN;SOFT;1;CRITICAL - 10.7.12.45: rta nan, lost 100%
[2012-12-27 13:05:21] SERVICE ALERT: NYO45;Ping;CRITICAL;SOFT;1;CRITICAL - 10.7.12.45: rta 4.357ms, lost 80%
[2012-12-27 13:02:11] SERVICE ALERT: NYO45;Ping;OK;SOFT;2;OK - 10.7.12.45: rta 3.234ms, lost 0%
[2012-12-27 13:01:21] SERVICE ALERT: NYO45;Ping;CRITICAL;SOFT;1;CRITICAL - 10.7.12.45: rta 0.336ms, lost 60%
and i can't find out why this is only affecting my Windows 2008 servers.
they are virtuall machines running on VMware ESX 4.1 with latest updates & Vmware tools.
they have VMX3 nics attached, windows firewall & IPV6 is disabled.

Nagios server is running on Debian 6
Nagios Core Version 3.2.1

need some help to point me in right direction

Re: package loss monitor Windows 2008 r2

Posted: Thu Dec 27, 2012 10:13 am
by slansing
Can you show us what you have defined for the ping check thresholds? "Args."

Re: package loss monitor Windows 2008 r2

Posted: Thu Dec 27, 2012 10:42 am
by mr.fyrby
slansing wrote:Can you show us what you have defined for the ping check thresholds? "Args."

Code: Select all

define command{
        command_name check_icmp
        command_line $USER1$/check_icmp -H $HOSTADDRESS$ -w $ARG1$ -c $ARG2$
}

Code: Select all

define service{
        use                     server-service
        host_name               NYO45
        service_description     Ping
        check_command           check_icmp!100,10%!500,20%
}
had also tried check_ping same issue there.

i am able to ping my Win2008 from other windows servers without any loss.
so it has to be something with Debian i guess.

Re: package loss monitor Windows 2008 r2

Posted: Fri Dec 28, 2012 11:31 am
by slansing
If you ping them straight from your system, and not through a Nagios check are you still getting the same results? If so, it sounds like it is a system issue. Are the IP's with the high packet loss behind a different piece of hardware on your network?