How to check traffic through WMI

jotando at free.fr jotando at free.fr
Wed Aug 3 11:43:15 CEST 2005
Previous message: How must I define this in checkcommands.cfg and services.cfg?
Next message: How to check traffic through WMI
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hi everyone and thank's TOny for last help.

I finaly used nrpe_nt client and manage my windows server 2003 by checking
plugins(some .exe but most .vbs).

I never heart about WMI before and I am thunderstrunck about what it's provide
use to do.
But I need to check traffic because of many saturation and don't find any plugin
made.
If you have a link to find plugins which resolve my problem or a course of any
language(like VB) knowing use WMI, please tell me.

Thank's in advance.
Johann


Quoting nagios-users-request at lists.sourceforge.net:

> Send Nagios-users mailing list submissions to
> 	nagios-users at lists.sourceforge.net
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	https://lists.sourceforge.net/lists/listinfo/nagios-users
> or, via email, send a message with subject or body 'help' to
> 	nagios-users-request at lists.sourceforge.net
>
> You can reach the person managing the list at
> 	nagios-users-admin at lists.sourceforge.net
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Nagios-users digest..."
>
>
> Today's Topics:
>
>    1. Re: NSClient : which version run in windows server 2003 (Anthony
> Montibello)
>    2. RE: Is there a testing or debugging mode for nagio
>        s? (Ralph.Grothe at itdz-berlin.de)
>    3. RE: Use of check_by_ssh (Ralph.Grothe at itdz-berlin.de)
>
> --__--__--
>
> Message: 1
> Date: Sat, 30 Jul 2005 07:11:02 -0400
> From: Anthony Montibello <amontibello at gmail.com>
> Reply-To: Anthony Montibello <amontibello at gmail.com>
> To: Nagios Users List <nagios-users at lists.sourceforge.net>
> Subject: Re: [Nagios-users] NSClient : which version run in windows server
> 2003
>
> HI Johann,
>
> There are many choices for monitoring Windows servers,=20
> If you can find a way to search this list you sill find several
> conversations on this within the past few months.
>
> There are advantages and disadvantages to each of the Windows Clients
> each can be downloaded from nagiosexchange :
> http://www.nagiosexchange.org/Windows.49.0.html
>
> but to summarize the options:
> 1) NSClinet is one of the older Stable clients (but it is no longer
> being maintained)
> 2) NRPE  - (I never used but many people seem to use this)
> 3)NC_Net (I wrote this as a drop in replacement and enhancement to NSClient=
> )
> 4) NSClient++ (this was also released this past year)
> 5) Setting up SNMP  =20
> 6) setting up check_by SSH??
>
> Good Luck
> Tony
>
> On 7/29/05, jotando at free.fr <jotando at free.fr> wrote:
> > Hi everyone.
> >=20
> > I'm started to use nagios for a month and have to supervise a windows ser=
> ver
> > 2003.
> > I want to use NSClient agent but I don't know which version it's preferab=
> le to
> > use.
> >=20
> > In the same order, do someone know how to configure the SNMP agent and th=
> is
> > server to check traffic informations.
> >=20
> > thank's in advance.
> >=20
> > Johann Otando
>
>
> --__--__--
>
> Message: 2
> From: Ralph.Grothe at itdz-berlin.de
> To: ladams at cloudmark.com, sloane at ku.edu
> Cc: nagios-users at lists.sourceforge.net
> Subject: RE: [Nagios-users] Is there a testing or debugging mode for nagio
> 	s?
> Date: Sat, 30 Jul 2005 16:18:03 +0200
>
> Hi Lori,
>
> thanks for reminding me.
>
> That was really naive of me to think that check_period could be
> the name of a plug-in.
>
> Of course now I remember that I defined a couple of time periods
> to be assigned as possible values for the check_period attribute
> in a service definition context.
> I think I only forgot about it because I (now for my initial
> testing) I just once defined a service template where a
> check_period for my usual working hours was set.
> And for all later added service definitions I haven't overriden
> this setting yet (of course in the end it will have to be 24x7)
>
> So thanks for reminding me, and forgive my stupidity.
>
> Btw, would you mind sharing your Perl script?
> I'm also into Perl and am curious about others' solutions.
>
> Rgds.
> Ralph
>
>
> -----Original Message-----
> From: Lori Adams [mailto:ladams at cloudmark.com]
> Sent: Friday, July 29, 2005 6:42 PM
> To: Ralph.Grothe at itdz-berlin.de; sloane at ku.edu
> Cc: nagios-users at lists.sourceforge.net
> Subject: RE: [Nagios-users] Is there a testing or debugging mode
> for nagios?
>
>
> check_period is not a plugin.  Check_period is one of the options
> for service.cfg configurations.
> http://nagios.sourceforge.net/docs/1_0/xodtemplate.html#service
> check_period means that a service check will only be executed
> during the given timeframe.
>
> Values for check_period are (usually) stored in timeperiods.cfg.
> Example:
> define service {
>             host_name                    foo
>             service_description         bar
>             check_period                 24x7
> .
> .
> .
> }
>
>
> To reschedule from command line, you will have to submit an
> "external command" with various values to your nagios.cmd (set in
> nagios.cfg) file.
>
>  (see docs:
> http://nagios.sourceforge.net/docs/1_0/extcommands.html
>  or
> http://www.nagios.org/developerinfo/externalcommands/commandinfo.
> php?command_id=127)
>
> I have a perl script where I pass the server name and service
> name and it will reschedule the check for 3 seconds later.
> "external commands" are your friend.  You can end up scripting
> all of the commands.
>
> good luck.
>
> -Lori
>
>
> -----Original Message-----
> From: nagios-users-admin at lists.sourceforge.net
> [mailto:nagios-users-admin at lists.sourceforge.net] On Behalf Of
> Ralph.Grothe at itdz-berlin.de
> Sent: Thursday, July 28, 2005 9:59 PM
> To: sloane at ku.edu
> Cc: nagios-users at lists.sourceforge.net
> Subject: RE: [Nagios-users] Is there a testing or debugging mode
> for nagios?
>
> Hi Bob,
>
> what kind of plug-in is check_period?
>
> I cannot find it in my Nagios installation.
> nor in the tarballs of either Nagios or Nagios-plugins.
>
> Is it a kind of NoOp plug-in stub I would have to write?
>
> How can I re-schedule from the command line.
>
> My Nagios web interface (i.e. the CGIs) are still a bit broken
> (I could easily fix if I had root privileges on the webserver to
> edit httpd.conf)
> Anyway, I'm a bit shell-fixed and avoid GUIs whenever possible.
> I know with Nagios I probably would miss half the fun,
> but this seems cosmetic to me, and can be addressed later when
> the base system is at least working satisfactorily.
>
>
> > -----Original Message-----
> > From: Sloane, Robert Raymond [mailto:sloane at ku.edu]
> > Sent: Thursday, July 28, 2005 4:03 PM
> > To: Ralph.Grothe at itdz-berlin.de
> > Subject: RE: [Nagios-users] Is there a testing or debugging
> mode for
> > nagios?
> >
> >
> > Why not put a "check_period none" in the template, so that the
> checks
> > won't normally be scheduled, and then use the "Re-schedule the
> next
> > check of this service" link to schedule the check when you want
> it to
> > happen?  Once things are debugged, you can set the check_period
> in the
> > actual entry to whatever is appropriate.
> > --
> > Bob Sloane, University of Kansas Computer Center, Lawrence, KS,
> 66045
> > Email:sloane at ku.edu http://www.ku.edu/home/sloane
> Phone:(785)864-0444
> >
> >
> > > -----Original Message-----
> > > From: nagios-users-admin at lists.sourceforge.net
> > > [mailto:nagios-users-admin at lists.sourceforge.net] On Behalf
> > > Of Ralph.Grothe at itdz-berlin.de
> > > Sent: Thursday, July 28, 2005 7:55 AM
> > > To: nagios-users at lists.sourceforge.net
> > > Subject: [Nagios-users] Is there a testing or debugging mode
> > > for nagios?
> > >
> > >
> > > Hello,
> > >
> > > this morning I received the contempt of my fellow admins
> > > because nagios swamped their mailboxes over night. Well, it
> > > wasn't of course nagios' fault but mine because I defined a
> > > template service wherein I referenced a conact_groups that
> > > comprised all of us. When later adding new services I simply
> > > forgot to override this attribute with a contact group that
> > > contained only my mail account (until I've come to terms with
>
> > > configuring).
> > >
> > > That's why I desperately miss a means to run a nagios daemon
> > > that isn't scheduling the checks by itself but rather by
> > > manual invocation. I'd also wish to test out alerting and
> > > event handling myself by raising events (e.g. to see where in
>
> > > the end the notification is delivered to).
> > >
> > > Does nagios provide special utilities, or switches to support
>
> > > (high level) debugging that way?
> > >
> > > Regards
> > >
> > >
> > > -------------------------------------------------------
> > > SF.Net email is Sponsored by the Better Software Conference &
>
> > > EXPO September 19-22, 2005 * San Francisco, CA * Development
> > > Lifecycle Practices Agile & Plan-Driven Development *
> > > Managing Projects & Teams * Testing & QA Security * Process
> > > Improvement & Measurement * http://www.sqe.com/bsce5sf
> > > _______________________________________________
> > > Nagios-users mailing list
> > > Nagios-users at lists.sourceforge.net
> > > https://lists.sourceforge.net/lists/listinfo/nagios-users
> > > ::: Please include Nagios version, plugin version (-v) and OS
>
> > > when reporting any issue.
> > > ::: Messages without supporting info will risk being sent
> > to /dev/null
> > >
> >
>
>
> -------------------------------------------------------
> SF.Net email is Sponsored by the Better Software Conference &
> EXPO September
> 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
> Agile & Plan-Driven Development * Managing Projects & Teams *
> Testing & QA
> Security * Process Improvement & Measurement *
> http://www.sqe.com/bsce5sf
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS
> when reporting any issue.
> ::: Messages without supporting info will risk being sent to
> /dev/null
>
>
> --__--__--
>
> Message: 3
> From: Ralph.Grothe at itdz-berlin.de
> To: marc at ena.com, nagiosplug-help at lists.sourceforge.net,
> 	nagios-users at lists.sourceforge.net
> Subject: RE: [Nagios-users] Use of check_by_ssh
> Date: Sat, 30 Jul 2005 16:49:40 +0200
>
> Hi Marc,
>
> thanks for clarifying the meaning of check_by_ssh.
>
> Since I haven't installed any Nagios stuff (incl. Plugins) on the
> DMZ host yet I actually haven't thought of my little script as a
> Nagios plugin.
> Thus I didn't cling to plugin developer's guidelines.
> But you are right.
> I should rather use existing Nagios plugins for checking common
> services (like check_http) than trying to reinvent something that
> already stood proof of time.
> The only problem is, as the target box is a DMZ host, there are
> no development tools installed on (even no Perl, the CGIs are
> closed source binaries coming from third party company who
> developped the whole application.
> To add to the odds, this is the only HP-UX 10.20 box (still
> 32bit!) we host.
> Even if I found a compiler (e.g. gcc for this platform) I
> wouldn't be allowed to install it there for my build.
> On the other hand we have many 11.00 and 11i servers, and on some
> of them even C compilers.
> I'm not sure if I can build 10.20 32bit binaries of
> Nagios-plugins on one of them.
> Maybe if use the propper compiler flags.
> I will see first if my build of check_http for 11.00 will be
> executable on the 10.20 host (probably not, as you mentioned
> differing libs etc.).
> If that doesn't work I will see if I can build for a different
> target
> (sort of x-compile).
> If it all doesn't work I will simply extend my little shell
> script to conform to the developer's guidelines (viz. return
> codes, messages),
> and do my own parsing.
> Btw, I saw there is a utils.pm, that I "use"-d in my own Perl
> plugins, though it offers very little functionality.
> Is there something similar for Bourne shell compatible plugins,
> e.g. something you would source like ". $libexec_dir/utils.sh"?
>
> You see, because an SSH installation on every of our hosts was so
> obvious and natural to me, I totally missed the idea that
> check_by_ssh could just be an offering to those whose Nagios
> server lacks such.
>
>
> > -----Original Message-----
> > From: nagios-users-admin at lists.sourceforge.net
> > [mailto:nagios-users-admin at lists.sourceforge.net] On Behalf
> > Of Marc Powell
> > Sent: Friday, July 29, 2005 6:05 PM
> > To: nagiosplug-help at lists.sourceforge.net;
> > nagios-users at lists.sourceforge.net
> > Subject: RE: [Nagios-users] Use of check_by_ssh
> >
> >
> >
> >
> > > -----Original Message-----
> > > From: nagios-users-admin at lists.sourceforge.net
> [mailto:nagios-users-
> > > admin at lists.sourceforge.net] On Behalf Of
> > Ralph.Grothe at itdz-berlin.de
> > > Sent: Friday, July 29, 2005 7:14 AM
> > > To: nagiosplug-help at lists.sourceforge.net; nagios-
> > > users at lists.sourceforge.net
> > > Subject: [Nagios-users] Use of check_by_ssh
> > >
> > > Hi,
> > >
> > > I have a bastion host in a dmz that serves HTTP(S) to the
> > > internet.
> > >
> > > I must monitor the webserver by pulling a certain CGI URI and
> see
> > > if the Webserver returns a 200.
> > >
> > > Unfortunately I don't get another port (e.g. 5666/tcp for
> NRPE)
> > > opened by the firewall gang.
> > >
> > > I only have access from our LAN to the bastion host via SSH.
> > >
> > > Thus I wrote a short shell script that resides on the
> webserver
> > > and GETs the HEAD of this URI
> > > through wget (with -S, -C off, --spider).
> > > It's called check_dmz_www.sh
> > >
> > > So far this script isn't doing any parsing of the output from
> the
> > > GET.
> > > I thought to leave this part to a Nagios check_* plug-in.
> >
> > Your script would work and if you pursued that path I would
> > need to put
> > in the checking logic and *exit properly* as defined in the
> Developer
> > Guidelines at http://nagiosplug.sf.net. That being said, you're
> just
> > duplicating the functionality of the check_http plugin. Why
> don't you
> > just copy/compile that plugin on the DMZ host and use it to
> check your
> > web server using check_by_ssh (see below).
> >
> > >
> > > In the libexec dir I discovered check_by_ssh.
> > > Unfortunately, as most distributed plug-ins, the
> documentation is
> > > a bit too terse.
> > >
> > > From the --help screen I can't see the use of this plug-in,
> > > as it doesn't do anything more (i.e. return code parsing
> logic
> > > etc.) than vanilla ssh client does.
> > >
> > > E.g. I would call check_by_ssh from the Nagios server like
> this
> > >
> > >
> > > $ /opt/sw/nagios/libexec/check_by_ssh -1 -H $hostaddress -l
> www
> > > -i ~nagios/.ssh/id_rsa1_dmz_www -C
> > > /usr/local/sbin/check_dmz_www.sh
> > > Connecting to 127.0.0.1:80... connected.
> > > HTTP request sent, awaiting response...
> > >  1 HTTP/1.1 200 OK
> > >  2 Date: Fri, 29 Jul 2005 11:58:47 GMT
> > >  3 Server: Apache/1.3.22 (Unix) mod_ssl/2.8.5 OpenSSL/0.9.6b
> > >  4 Keep-Alive: timeout=25, max=100
> > >  5 Connection: Keep-Alive
> > >  6 Content-Type: text/html
> > > 200 OK
> > >
> > >
> > >
> > > But where's the point in using this plug-in?
> > > For that I could as well just call the ssh client.
> >
> > It's just a wrapper/proxy. The plugin will ssh to the specified
> host,
> > run the specified command and return it's output _and_ exit
> code to
> > nagios, just as if nagios had run the plugin on the remote host
> > directly. If you have the check_http plugin in /usr/local/sbin
> on the
> > remote host you could do something like the following --
> >
> > /opt/sw/nagios/libexec/check_by_ssh -1 -H $hostaddress -l www
> -i
> > ~nagios/.ssh/id_rsa1_dmz_www -C /usr/local/sbin/check_http -S
> -I
> > 127.0.0.1 -u http://your.host.com/health.cgi -e 200
> >
> > *NOTE* you can only _copy_ the plugin to the remote host IFF
> it's the
> > same arch/os/version and has all the required libraries (ldd
> > check_http).
> >
> >
> > --
> > Marc
> >
> >
> >
> > -------------------------------------------------------
> > SF.Net email is Sponsored by the Better Software Conference &
> > EXPO September
> > 19-22, 2005 * San Francisco, CA * Development Lifecycle
> Practices
> > Agile & Plan-Driven Development * Managing Projects & Teams *
> > Testing & QA
> > Security * Process Improvement & Measurement *
> > http://www.sqe.com/bsce5sf
> > _______________________________________________
> > Nagios-users mailing list
> > Nagios-users at lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/nagios-users
> > ::: Please include Nagios version, plugin version (-v) and OS
> > when reporting any issue.
> > ::: Messages without supporting info will risk being sent to
> /dev/null
> >
>
>
>
> --__--__--
>
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
>
>
> End of Nagios-users Digest
>




-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_idt77&alloc_id492&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null
Previous message: How must I define this in checkcommands.cfg and services.cfg?
Next message: How to check traffic through WMI
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the Users mailing list