Re: [Nagios-users] Multiple NRPE Processes
Can you elaborate Matthew, why is it critical to run NRPE in daemon mode under Solaris? I'm just curious as to any issues that may result from not doing so. Cheers, Chris -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Multiple NRPE Processes
On Jan 21, 2010, at 12:18 AM, Litwin, Matthew wrote: In solaris it is critical that you run nrpe on solaris in daemon mode. That's a strong statement. Why? I don't recall hearing of problems running it out of inetd and doing so seems to be fairly common. Running it like this you should be able to kill it without a problem as it will maintain the pid. Make sure in nrpe.cfg that the nrpe user can write its pid where specified. If you look in syslog you should see details about how it starts. The OP's apparent 'problem' is not that he wants to kill child processes hanging out in the process table but rather socket connections that he sees using netstat that the OS is keeping in a TIME_WAIT state. These would be normal except for 'hanging around indefinitely'. Pending further developments from the OP, this would appear to be an OS TCP stack issue since NRPE is not involved in removing those. -- Marc -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Multiple NRPE Processes
Hi all, I have noticed that when I turn off monitoring on the client machine, all the other socket connections disappear and I'm only left with; nag...@pms # netstat -a | grep nrpe *.nrpe *.*0 0 49152 0 LISTEN As soon as I enable monitoring for the client, the socket connections that the OS is keeping in a TIME_WAIT state return. But like Marc advised, I'll take this up on another list since NRPE is not *directly* involved. Thanks all! -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Multiple NRPE Processes
In solaris it is critical that you run nrpe on solaris in daemon mode. You need to launch it with like so: /usr/local/nagios/bin/nrpe -c /usr/local/nagios/etc/nrpe.cfg -d Running it like this you should be able to kill it without a problem as it will maintain the pid. Make sure in nrpe.cfg that the nrpe user can write its pid where specified. If you look in syslog you should see details about how it starts. On Jan 19, 2010, at 8:41 AM, Marc Powell wrote: On Jan 19, 2010, at 9:22 AM, Juki wrote: How long are they sticking around? What OS are you using? I'm running Solaris 10. They are more less sticking around indefinitely. 60 seconds seems to be the default/recommended setting on Solaris but can be as high as 10 minutes if the OS thinks it needs to be (http://docs.sun.com/app/docs/doc/817-0404/chapter4-51?a=view). I wouldn't recommend tuning this unless you know exactly what you are doing and why; strangeness may result. Perhaps you've tuned it already and this is the resulting strangeness... You're going to have better luck understanding this by asking about it on a Solaris support list as what you're asking about is a general TCP stack question, not specific to Nagios. -- Marc -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null Thanks, Matthew Litwin mlit...@stubhub.com 415.222.8475 -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Multiple NRPE Processes
On Jan 19, 2010, at 1:37 AM, Juki wrote: nag...@pms # netstat -a | grep nrpe *.nrpe *.*0 0 49152 0 LISTEN pms.nrpe h1de4.n2 56147 5888 0 50540 0 TIME_WAIT pms.nrpe h1de4.n2 56148 5888 0 50540 0 TIME_WAIT pms.nrpe h1de4.n2 56149 5888 0 50540 0 TIME_WAIT I have tried to *kill* them (using kill command) but that doesn't seem to work because they just don't go away - weird right? :) I would like to kill all the pms.nrpe processes.. There's nothing to kill and these entries are appropriate... Welcome to the world of TCP and a greater understanding of how it all _really_ works. http://www.developerweb.net/forum/showthread.php?t=2941 How long are they sticking around? What OS are you using? -- Marc -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Multiple NRPE Processes
Hi Marc, 2010/1/19 Marc Powell m...@ena.com There's nothing to kill and these entries are appropriate... Welcome to the world of TCP and a greater understanding of how it all _really_ works. http://www.developerweb.net/forum/showthread.php?t=2941 I will have a look at this How long are they sticking around? What OS are you using? I'm running Solaris 10. They are more less sticking around indefinitely. -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
Re: [Nagios-users] Multiple NRPE Processes
On Jan 19, 2010, at 9:22 AM, Juki wrote: How long are they sticking around? What OS are you using? I'm running Solaris 10. They are more less sticking around indefinitely. 60 seconds seems to be the default/recommended setting on Solaris but can be as high as 10 minutes if the OS thinks it needs to be (http://docs.sun.com/app/docs/doc/817-0404/chapter4-51?a=view). I wouldn't recommend tuning this unless you know exactly what you are doing and why; strangeness may result. Perhaps you've tuned it already and this is the resulting strangeness... You're going to have better luck understanding this by asking about it on a Solaris support list as what you're asking about is a general TCP stack question, not specific to Nagios. -- Marc -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev ___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
[Nagios-users] Multiple NRPE Processes
Hi all, I'm running Solaris 10 on the client that is being monitored. However, when I run the command netstat -a | grep nrpe, I see multiple instances of the NRPE daemon running as shown below; nag...@pms # netstat -a | grep nrpe *.nrpe *.*0 0 49152 0 LISTEN pms.nrpe h1de4.n2 56147 5888 0 50540 0 TIME_WAIT pms.nrpe h1de4.n2 56148 5888 0 50540 0 TIME_WAIT pms.nrpe h1de4.n2 56149 5888 0 50540 0 TIME_WAIT I have tried to *kill* them (using kill command) but that doesn't seem to work because they just don't go away - weird right? :) I would like to kill all the pms.nrpe processes.. Anyone have another way of achieving this? Thanks, Juki -- Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev___ Nagios-users mailing list Nagios-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nagios-users ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null
