Service Check Timed Out Error

[Kaplan, Andrew H.]

I configured the ip tables on both the nagios server and the nrpe client to
allow all inbound and outbound traffic. Additionally, I made sure the
/etc/services file on both systems had port 5666 open to tcp and udp traffic. 

I was able to telnet to port 5666 on the nrpe client, but I was still getting a
connection refused for the same port on the server. 

I verified also, that the network speed, ie: half vs. full duplex, was the same
for both systems. The speed here is 100 half duplex no autonegotiation. 

I repeatedly ran the check_nrpe command manually and did get output back every
time. Why am I able to run the command manually, but not automatically? 

-----Original Message-----
From: Andy Shellam (Mailing Lists) [mailto:andy.shellam-lists at mailnetwork.co.uk]

Sent: Friday, December 29, 2006 4:09 AM
To: Kaplan, Andrew H.
Cc: Nagios Users mailinglist
Subject: Re: [Nagios-users] Service Check Timed Out Error

Hi Andrew,

It depends on your firewall configuration on the Nagios server - but 
yes, the Nagios server will an outbound rule to allow traffic to 
destination port 5666 on your nrpe client, and also an inbound rule to 
allow traffic from source port 5666 on your nrpe client.

Your client will need an inbound rule allowing traffic to destination 
port 5666 from the Nagios server, and an outbound rule allowing traffic 
from source port 5666 to the Nagios server.

This is good for iptables anyway, FreeBSD's ipfilter is slightly 
different but the principle's the same.

Regards,

Andy

Kaplan, Andrew H. wrote:
> I ran the telnet <hostname> 5666 command on the nrpe client system and it did
> connect
> without a problem. I did the same on the nagios server, and it timed out. Do I
> need to
> have port 5666 open on the nagios server as well as on the client system?
>
> -----Original Message-----
> From: Andy Shellam (Mailing Lists)
[mailto:andy.shellam-lists at mailnetwork.co.uk]
> Sent: Thu 12/28/2006 5:25 PM
> To: Kaplan, Andrew H.; Nagios Users mailinglist
> Subject: Re: [Nagios-users] Service Check Timed Out Error
>  
> It seems something is stopping your NRPE client from answering to the 
> server.
>
> Try "telnet <nrpe_client_server> 5666" and see if it connects or times out.
> If it times out, check firewalls/SELinux etc.
>
> Andy.
>
>
> Kaplan, Andrew H. wrote:
>   
>> I am running Nagios 2.6 on a Fedora Core 5 system, and am trying to 
>> monitor a remote host also running Fedora Core 5 with NRPE 2.5.2. I have
>>
>> configured nrpe to use SSL. The commands.cfg file on the Nagios server 
>> has an entry for check_nrpe, and I have included the option -t 60 in the
>>
>> definition. The client system has a command_timeout setting of 60 as well.
>>
>> Whenever I try either automatically or manually monitor the remote 
>> client, I get a Service Check Timed Out Error message. The messages
>>
>> and nagios.log files on the server both indicate a socket timeout 
>> occurred. What do I need to do to correct this? Thanks.
>>
>> THE INFORMATION TRANSMITTED IN THIS ELECTRONIC COMMUNICATION IS 
>> INTENDED ONLY FOR THE PERSON OR ENTITY TO WHOM IT IS ADDRESSED AND MAY 
>> CONTAIN CONFIDENTIAL AND/OR PRIVILEGED MATERIAL. ANY REVIEW, 
>> RETRANSMISSION, DISSEMINATION OR OTHER USE OF OR TAKING OF ANY ACTION 
>> IN RELIANCE UPON, THIS INFORMATION BY PERSONS OR ENTITIES OTHER THAN 
>> THE INTENDED RECIPIENT IS PROHIBITED. IF YOU RECEIVED THIS INFORMATION 
>> IN ERROR, PLEASE CONTACT THE SENDER AND THE PRIVACY OFFICER, AND 
>> PROPERLY DISPOSE OF THIS INFORMATION. 
>> ------------------------------------------------------------------------
>>
>> -------------------------------------------------------------------------
>> Take Surveys. Earn Cash. Influence the Future of IT
>> Join SourceForge.net's Techsay panel and you'll get the chance to share your
>> opinions on IT & business topics through brief surveys - and earn cash
>> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
>>
>> !DSPAM:37,459434a931944790858665!
>>   
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> Nagios-users mailing list
>> Nagios-users at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nagios-users
>> ::: Please include Nagios version, plugin version (-v) and OS when reporting
>>     
> any issue. 
>   
>> ::: Messages without supporting info will risk being sent to /dev/null
>>
>> !DSPAM:37,459434a931944790858665!
>>   
>>     
>
>
>   


-- 
Andy Shellam
NetServe Support Team

the Mail Network
"an alternative in a standardised world"

p: +44 (0) 121 288 0832/0839
m: +44 (0) 7818 000834





THE INFORMATION TRANSMITTED IN THIS ELECTRONIC COMMUNICATION IS INTENDED ONLY FOR THE PERSON OR ENTITY TO WHOM IT IS ADDRESSED AND MAY CONTAIN CONFIDENTIAL AND/OR PRIVILEGED MATERIAL.  ANY REVIEW, RETRANSMISSION, DISSEMINATION OR OTHER USE OF OR TAKING OF ANY ACTION IN RELIANCE UPON, THIS INFORMATION BY PERSONS OR ENTITIES OTHER THAN THE INTENDED RECIPIENT IS PROHIBITED.  IF YOU RECEIVED THIS INFORMATION IN ERROR, PLEASE CONTACT THE SENDER AND THE PRIVACY OFFICER, AND PROPERLY DISPOSE OF THIS INFORMATION.



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null