Setting up NRPE daemon - Revision history

Zcrayfish: Use pkg template

2023-08-13T05:42:10Z

Use pkg template

← Older revision		Revision as of 05:42, 13 August 2023
Line 1:		Line 1:
	Install daemon:		Install daemon:
	{{Cmd\|apk add nrpe && rc-update add nrpe default}}		{{Cmd\|apk add {{pkg\|nrpe}} && rc-update add nrpe default}}
	Set up config file to bind to local IP, only allow needed hosts to connect (in /etc/nrpe.cfg):		Set up config file to bind to local IP, only allow needed hosts to connect (in /etc/nrpe.cfg):
	server_address=10.14.8.3		server_address=10.14.8.3

Dubiousjim: Category:Networking

2012-03-23T19:51:55Z

Category:Networking

← Older revision		Revision as of 19:51, 23 March 2012
Line 60:		Line 60:

	[[Category:Monitoring]]		[[Category:Monitoring]]
			[[Category:Networking]]

Dubiousjim: Category:Monitoring

2012-03-21T15:50:16Z

Category:Monitoring

← Older revision		Revision as of 15:50, 21 March 2012
Line 58:		Line 58:

	echo $TUNNELSTATUS		echo $TUNNELSTATUS

			[[Category:Monitoring]]

Jbilyk: Added comments to opennhrp route script

2010-09-06T22:15:00Z

Added comments to opennhrp route script

← Older revision		Revision as of 22:15, 6 September 2010
Line 46:		Line 46:
	fi		fi

			# The 5 second wait is in case tunnel wasn't up, this will act as a keepalive when run often enough
	ping -c 1 -w 5 $1 > /dev/null		ping -c 1 -w 5 $1 > /dev/null

	HOSTOUTPUT="`host $1`"		HOSTOUTPUT="`host $1`"
			# The final awk will grep for a /16 network range
	HOSTNETWORK="`echo $HOSTOUTPUT \| awk -F ' ' '{print $NF}' \| awk -F '.' '{print $1"."$2}'`"		HOSTNETWORK="`echo $HOSTOUTPUT \| awk -F ' ' '{print $NF}' \| awk -F '.' '{print $1"."$2}'`"
	ROUTETONETWORK="`ip route \| grep $HOSTNETWORK'\.'`"		ROUTETONETWORK="`ip route \| grep $HOSTNETWORK'\.'`"
	NEXTHOP="`echo $ROUTETONETWORK \| awk -F ' ' '{print $3}'`"		NEXTHOP="`echo $ROUTETONETWORK \| awk -F ' ' '{print $3}'`"
			# This assumes that up/down is last entry on line which it was in testing
	TUNNELSTATUS="`/usr/sbin/opennhrpctl show \| grep -A 3 $NEXTHOP \| grep Flags \| awk -F ' ' '{print $NF}'`"		TUNNELSTATUS="`/usr/sbin/opennhrpctl show \| grep -A 3 $NEXTHOP \| grep Flags \| awk -F ' ' '{print $NF}'`"

	echo $TUNNELSTATUS		echo $TUNNELSTATUS

Ncopa: make opennhrp monitor script posix compat so it works without bash

2010-08-24T01:38:06Z

make opennhrp monitor script posix compat so it works without bash

← Older revision		Revision as of 01:38, 24 August 2010
Line 38:		Line 38:
	<br />		<br />
	Example of monitoring opennhrp connection: <br />		Example of monitoring opennhrp connection: <br />
	#!/bin/~~bash~~		#!/bin/sh
	# $1 is hostname to check		# $1 is hostname to check

	if [~~[ `echo~~ $1~~` == "~~" ]];		if [ -z "$1" ]; then
	~~then~~ echo "Hostname must be specified as argument" && exit 1;		echo "Hostname must be specified as argument"
			exit 1
	fi		fi

Ncopa: make check_routes.sh posix compat, fix one bug and make code more readable

2010-08-24T01:35:05Z

make check_routes.sh posix compat, fix one bug and make code more readable

← Older revision		Revision as of 01:35, 24 August 2010
Line 1:		Line 1:
	Install daemon:		Install daemon:
	apk add nrpe && rc-update add nrpe default		{{Cmd\|apk add nrpe && rc-update add nrpe default}}
	Set up config file to bind to local IP, only allow needed hosts to connect (in /etc/nrpe.cfg):		Set up config file to bind to local IP, only allow needed hosts to connect (in /etc/nrpe.cfg):
	server_address=10.14.8.3		server_address=10.14.8.3
Line 7:		Line 7:
	command[check_routes]=/usr/bin/check_routes.sh		command[check_routes]=/usr/bin/check_routes.sh
	Create the above script, and populate:		Create the above script, and populate:
	##!/bin/~~bash~~		#!/bin/sh
	##		#
			numroutes_ok=80
			numroutes_warn=15

	NUMROUTES=`ip route \| grep -n '' \| awk -F ':' '{print $1}' \| tail -n 1`		NUMROUTES=`ip route \| grep -n '' \| awk -F ':' '{print $1}' \| tail -n 1`
	if [[ $NUMROUTES ~~> 80 ]~~];		if [ -z "$NUMROUTES" ]; then
	~~then~~ echo "OK: ~~$NUMROUTES routes in~~ routing ~~table~~" && exit 0;		echo "WARNING: No routing information received"
	elif [[ $NUMROUTES ~~< 80 ]] && [[~~ $~~NUMROUTES > 15 ]~~];		exit 1
	~~then~~ echo "~~WARNING~~: $NUMROUTES routes in routing table" && exit 1;		elif [ $NUMROUTES -ge $numroutes_ok ]; then
	elif [[ $NUMROUTES ~~= "" ]~~];		echo "OK: $NUMROUTES routes in routing table"
	~~then~~ echo "WARNING: No routing ~~information received~~" && exit 1;		exit 0
	else echo "CRITICAL: $NUMROUTES routes in routing table" && exit 2;		elif [ $NUMROUTES -ge $numroutes_warn ]; then
			echo "WARNING: $NUMROUTES routes in routing table"
			exit 1
			else
			echo "CRITICAL: $NUMROUTES routes in routing table"
			exit 2
	fi		fi

	Restart NRPE.		Restart NRPE.
	Allow port 5666 (or whatever port you've specified for nrpe in /etc/nrpe.cfg) through Shorewall (in /etc/shorewall/rules) through to monitoring hosts.		Allow port 5666 (or whatever port you've specified for nrpe in /etc/nrpe.cfg) through Shorewall (in ''/etc/shorewall/rules'') through to monitoring hosts.
	On the monitoring host, run the following command to test, where 10.14.8.3 is the IP of the host to monitor:		On the monitoring host, run the following command to test, where 10.14.8.3 is the IP of the host to monitor:
	/usr/local/nagios/libexec/check_nrpe -H 10.14.8.3 -p 5666 -c check_routes		{{Cmd\|/usr/local/nagios/libexec/check_nrpe -H 10.14.8.3 -p 5666 -c check_routes}}
	You should get output like:		You should get output like:
	OK: 173 routes in routing table		OK: 173 routes in routing table

Jbilyk: clarified a few parts

2010-08-23T14:06:02Z

clarified a few parts

← Older revision		Revision as of 14:06, 23 August 2010
Line 1:		Line 1:
	Install daemon:		Install daemon:
	apk add nrpe		apk add nrpe && rc-update add nrpe default
	Set up config file to bind to local IP, only allow needed hosts to connect.		Set up config file to bind to local IP, only allow needed hosts to connect (in /etc/nrpe.cfg):
			server_address=10.14.8.3
			allowed_hosts=10.14.8.149,10.14.8.150
	Add a definition for a check command to /etc/nrpe.cfg, for example:		Add a definition for a check command to /etc/nrpe.cfg, for example:
	command[check_routes]=/usr/bin/check_routes.sh		command[check_routes]=/usr/bin/check_routes.sh
Line 17:		Line 19:
	fi		fi
	Restart NRPE.		Restart NRPE.
	Allow port 5666 through Shorewall (in /etc/shorewall/rules) through to monitoring hosts.		Allow port 5666 (or whatever port you've specified for nrpe in /etc/nrpe.cfg) through Shorewall (in /etc/shorewall/rules) through to monitoring hosts.
	On the monitoring host, run the following command to test:		On the monitoring host, run the following command to test, where 10.14.8.3 is the IP of the host to monitor:
	/usr/local/nagios/libexec/check_nrpe -H 10.14.8.3 -p 5666 -c check_routes		/usr/local/nagios/libexec/check_nrpe -H 10.14.8.3 -p 5666 -c check_routes
	You should get output like:		You should get output like:

Jbilyk: added example of opennhrp monitoring

2010-08-23T10:13:59Z

added example of opennhrp monitoring

← Older revision		Revision as of 10:13, 23 August 2010
Line 24:		Line 24:

	If you are having trouble, enable debugging in /etc/nrpe.cfg, and check /var/log/messages for errors. Most likely error(s) has to do with permissions of what you are trying to execute.		If you are having trouble, enable debugging in /etc/nrpe.cfg, and check /var/log/messages for errors. Most likely error(s) has to do with permissions of what you are trying to execute.

			<br />
			Example of monitoring opennhrp connection: <br />
			#!/bin/bash
			# $1 is hostname to check

			if [[ `echo $1` == "" ]];
			then echo "Hostname must be specified as argument" && exit 1;
			fi

			ping -c 1 -w 5 $1 > /dev/null

			HOSTOUTPUT="`host $1`"
			HOSTNETWORK="`echo $HOSTOUTPUT \| awk -F ' ' '{print $NF}' \| awk -F '.' '{print $1"."$2}'`"
			ROUTETONETWORK="`ip route \| grep $HOSTNETWORK'\.'`"
			NEXTHOP="`echo $ROUTETONETWORK \| awk -F ' ' '{print $3}'`"
			TUNNELSTATUS="`/usr/sbin/opennhrpctl show \| grep -A 3 $NEXTHOP \| grep Flags \| awk -F ' ' '{print $NF}'`"

			echo $TUNNELSTATUS

Jbilyk: Cleaned up

2010-08-12T23:14:35Z

Cleaned up

← Older revision		Revision as of 23:14, 12 August 2010
Line 7:		Line 7:
	##!/bin/bash		##!/bin/bash
	##		##
	~~## Script to check whether routes to branches are being received properly~~
	NUMROUTES=`ip route \| grep -n '' \| awk -F ':' '{print $1}' \| tail -n 1`		NUMROUTES=`ip route \| grep -n '' \| awk -F ':' '{print $1}' \| tail -n 1`
	if [[ $NUMROUTES > 80 ]];		if [[ $NUMROUTES > 80 ]];
Line 20:		Line 19:
	Allow port 5666 through Shorewall (in /etc/shorewall/rules) through to monitoring hosts.		Allow port 5666 through Shorewall (in /etc/shorewall/rules) through to monitoring hosts.
	On the monitoring host, run the following command to test:		On the monitoring host, run the following command to test:
	~~root#~~/usr/local/nagios/libexec/check_nrpe -H 10.14.8.3 -p 5666 -c check_routes		/usr/local/nagios/libexec/check_nrpe -H 10.14.8.3 -p 5666 -c check_routes
	You should get output like:		You should get output like:
	OK: 173 routes in routing table		OK: 173 routes in routing table

	If you are having trouble, enable debugging in /etc/nrpe.cfg, and check /var/log/messages for errors. Most likely error(s) has to do with permissions of what you are trying to execute.		If you are having trouble, enable debugging in /etc/nrpe.cfg, and check /var/log/messages for errors. Most likely error(s) has to do with permissions of what you are trying to execute.

Jbilyk: updated repo - nrpe is in main now

2010-08-12T23:14:00Z

updated repo - nrpe is in main now

← Older revision		Revision as of 23:14, 12 August 2010
Line 1:		Line 1:
	~~Source code: http://nagios.org/~~		Install daemon:

	~~To install, add the edge testing repository(for 1.9. If using 1.10, then main 1.10 repo has nrpe), then run~~:
	apk add nrpe		apk add nrpe
	Set up config file to bind to local IP, only allow needed hosts to connect ~~(in our case, our redundant Nagios servers)~~.		Set up config file to bind to local IP, only allow needed hosts to connect.
	Add a definition for a check command to /etc/nrpe.cfg, for example:		Add a definition for a check command to /etc/nrpe.cfg, for example:
	command[check_routes]=/usr/bin/check_routes.sh		command[check_routes]=/usr/bin/check_routes.sh