<div dir="ltr">Excellent - enjoy Lex <div class="gmail_quote">On Tue, Sep 2, 2008 at 10:44 AM, J. Bakshi <<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="Ih2E3d">J. Bakshi wrote: > Alex Dehaini wrote: > >> You didn't get my question. When you use check_tcp to check your smtp >> and ftps services, does it work? >> >> > > Yes, this is a production server > </div>and check_tcp was also successful for smtp and ftp <div><div></div><div class="Wj3C7c"> > > >> Lex >> >> On Tue, Sep 2, 2008 at 10:31 AM, J. Bakshi <<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>> wrote: >> >> Alex Dehaini wrote: >> > So, check_tcp worked for smtp? but not for ftps? >> >> Exactly. >> >> 1> SMTPS is not working at all with check_smtp :-( >> >> 2> chekck_ftp is working without -S !!! but not with -S ; >> though it is not possible to loginto my ftpserver ( using lftp, >> filezilla) >> >> >> >> > >> > On Tue, Sep 2, 2008 at 10:15 AM, J. Bakshi >> <<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> >> > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>>> wrote: >> > >> > Alex Dehaini wrote: >> > > Use check_tcp or check_udp to see if you can connect to >> these ports >> > >> > Here is for ftp port >> > ~~~~~~~~~~~~~~~ >> > >> > ./check_tcp -H localhost -p 60021 >> > TCP OK - 0.003 second response time on port 60021 >> > |time=0.002922s;0.000000;0.000000;0.000000;10.000000 >> > >> > ./check_tcp -H localhost -p 60021 -S >> > CRITICAL - Cannot make SSL connection 15556:error:140770FC:SSL >> > routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:478: >> > >> > >> > Here is for smtps >> > ~~~~~~~~~~~~~~~ >> > >> > ./check_tcp -H localhost -p 465 >> > TCP OK - 0.001 second response time on port 465 >> > |time=0.000886s;0.000000;0.000000;0.000000;10.000000 >> > >> > ./check_tcp -H localhost -p 465 -S >> > TCP OK - 0.119 second response time on port 465 >> > |time=0.118984s;0.000000;0.000000;0.000000;10.000000 >> > >> > >> > thanks >> > > >> > > Lex >> > > >> > > On Tue, Sep 2, 2008 at 9:42 AM, J. Bakshi >> > <<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>> >> > > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> >> > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>>>> wrote: >> > > >> > > Alex Dehaini wrote: >> > > > Your smtp server and your ftp server, are they >> different from >> > > your pop >> > > > and imap server? >> > > > >> > > > Your imaps and pop3s are connected locally i.e. on the >> > nagios server >> > > > if I am correct? Your ftp and smtp are not. Is this >> correct? >> > > > >> > > >> > > Hi Alex, >> > > >> > > My ftp (vsftpd with ssl support), postfix, Cyrus all >> are in >> > the same >> > > server where nrpe is running. >> > > thanks >> > > >> > > >> > > >> > > >> > > >> > > > Lex >> > > > >> > > > On Tue, Sep 2, 2008 at 9:26 AM, J. Bakshi >> > > <<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>> >> > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>>> >> > > > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> >> > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>> >> > > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>> >> > <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a> >> <mailto:<a href="mailto:joydeep@infoservices.in">joydeep@infoservices.in</a>>>>>> wrote: >> > > > >> > > > Arno Lehmann wrote: >> > > > > Hello, >> > > > > >> > > > > please respond to the list. >> > > > > >> > > > > 02.09.2008 10:44, J. Bakshi wrote: >> > > > > >> > > > >> Arno Lehmann wrote: >> > > > >> >> > > > >>> Hi, >> > > > >>> >> > > > >>> 02.09.2008 09:37, J. Bakshi wrote: >> > > > >>> >> > > > >>>> Dear list, >> > > > >>>> >> > > > >>>> I have installed >> > > > >>>> >> > > > >>>> nagios-nrpe 2.0 >> > > > >>>> nagios-plugins 1.4 >> > > > >>>> nagios-plugins-extras 1.4 >> > > > >>>> >> > > > >>>> How can I check smtps, ldaps, pop3s, imaps >> with >> > nrpe ? >> > > > >>>> the default check_smtp ; check_imap etc can't >> > check the SSL >> > > > version of >> > > > >>>> the services. >> > > > >>>> >> > > > >>> Mine can; call them with -h for help and >> read the >> > output. I >> > > > usually >> > > > >>> use the -S swich plus, as needed, -p for the >> > target port. >> > > > >>> >> > > > >>> Example output: >> > > > >>> $ /usr/local/nagios3/libexec/check_imap -H >> > <a href="http://192.168.1.2" target="_blank">192.168.1.2</a> <<a href="http://192.168.1.2" target="_blank">http://192.168.1.2</a>> <<a href="http://192.168.1.2" target="_blank">http://192.168.1.2</a>> >> > > <<a href="http://192.168.1.2" target="_blank">http://192.168.1.2</a>> >> > > > <<a href="http://192.168.1.2" target="_blank">http://192.168.1.2</a>> -S -p 993 -D 12 >> > > > >>> OK - Certificate will expire on 04/27/2009 >> 21:13. >> > > > >>> IMAP OK - 0.060 second response time on port >> 993 [* OK >> > > IMAP4 Ready >> > > > >>> <a href="http://balrog.privat.lehleute.de" target="_blank">balrog.privat.lehleute.de</a> >> <<a href="http://balrog.privat.lehleute.de" target="_blank">http://balrog.privat.lehleute.de</a>> >> > <<a href="http://balrog.privat.lehleute.de" target="_blank">http://balrog.privat.lehleute.de</a>> >> > > <<a href="http://balrog.privat.lehleute.de" target="_blank">http://balrog.privat.lehleute.de</a>> >> > <<a href="http://balrog.privat.lehleute.de" target="_blank">http://balrog.privat.lehleute.de</a>> >> > > > 0001b1a4]|time=0.059891s;;;0.000000;10.000000 >> > > > >>> >> > > > >>> >> > > > >> Hi Arno, >> > > > >> >> > > > >> first of all thanks for your kind response. I >> have >> > also found >> > > > the "-S" >> > > > >> option but the story is different here and it is >> > > > >> negative :-( >> > > > >> >> > > > >> here is the nmap output which proves the >> required port >> > > are open >> > > > >> >> > > > > >> > > > > It does not actually prove the services are >> listening on >> > > localhost, >> > > > > and that access is not filtered, for example by >> > hosts files. >> > > > > >> > > > > >> > > > >> PORT STATE SERVICE >> > > > >> 25/tcp open smtp >> > > > >> 80/tcp open http >> > > > >> 143/tcp open imap >> > > > >> 389/tcp open ldap >> > > > >> 443/tcp open https >> > > > >> 465/tcp open smtps >> > > > >> 993/tcp open imaps >> > > > >> 995/tcp open pop3s >> > > > >> 1234/tcp open hotline >> > > > >> 2000/tcp open callbook >> > > > >> 3306/tcp open mysql >> > > > >> >> > > > >> more important I can use the SSL enabled >> services, like >> > > pop3s , >> > > > smtps etc... >> > > > >> >> > > > >> If I check with check_smtp I get the following >> > > > >> >> > > > >> /usr/lib/nagios/plugins/check_smtp -H >> localhost -p 465 >> > > -S -v >> > > > >> CRITICAL - Socket timeout after 10 seconds >> > > > >> >> > > > > >> > > > > Check with the ip address that is usually used >> - it's >> > > quite possible >> > > > > the service is not bound to localhost. >> > > > > >> > > > > >> > > > >> And here is the check fir ftp :-( >> > > > >> >> > > > >> /usr/lib/nagios/plugins/check_ftp -H >> localhost -p >> > 60021 >> > > -S -v >> > > > >> CRITICAL - Cannot make SSL connection >> > > 13948:error:140770FC:SSL >> > > > >> routines:SSL23_GET_SERVER_HELLO:unknown >> > > protocol:s23_clnt.c:478: >> > > > >> >> > > > >> Plese note I am practically using ftps, >> smtps, pop3s >> > > > >> >> > > > >> I have no clue really. >> > > > >> Hope you can enlighten me to point out my >> mistake. >> > > > >> >> > > > > >> > > > > Try what I suggested... that's what I'd do now. >> > > > > >> > > > > Arno >> > > > > >> > > > >> > > > Dear Arno and Alex, >> > > > >> > > > thanks a lot for your kind guidance. >> > > > >> > > > Arno, I have also checked with IP but no success. >> > > > >> > > > Here is some more feedback which you can find >> interesting >> > > > >> > > > #### IMAPS successful ########## >> > > > >> > > > /usr/lib/nagios/plugins/check_imap -H localhost >> -p 993 -S >> > > -w 5 -c >> > > > 8 -t 10 >> > > > IMAP OK - 0.099 second response time on port 993 >> [* OK >> > > Cyrus IMAP4 >> > > > v2.2.12 server ready] >> > > > |time=0.098621s;5.000000;8.000000;0.000000;10.000000 >> > > > >> > > > ######## POP3S successful ########## >> > > > /usr/lib/nagios/plugins/check_pop -H localhost >> -p 995 >> > -w 5 >> > > -c 8 >> > > > -t 10 -S >> > > > POP OK - 0.101 second response time on port 995 [+OK >> > > lvps87�230�8�228. >> > > > Cyrus POP3 v2.2.12 server ready >> > > > >> > > >> > >> <4156316096.1220347347@lvps87�230�8�<a href="http://228.dedicated.hosteurope.de" target="_blank">228.dedicated.hosteurope.de</a> >> <<a href="http://228.dedicated.hosteurope.de" target="_blank">http://228.dedicated.hosteurope.de</a>> >> > <<a href="http://228.dedicated.hosteurope.de" target="_blank">http://228.dedicated.hosteurope.de</a>> >> > > <<a href="http://228.dedicated.hosteurope.de" target="_blank">http://228.dedicated.hosteurope.de</a>> >> > > > <<a href="http://228.dedicated.hosteurope.de" target="_blank">http://228.dedicated.hosteurope.de</a>>>] >> > > > |time=0.101278s;5.000000;8.000000;0.000000;10.000000 >> > > > >> > > > ######## SMTPS failed but telnet successful >> ######### >> > > > >> > > > /usr/lib/nagios/plugins/check_smtp -H >> <replaced by my >> > > server IP> >> > > > -p >> > > > 465 -w 5 -c 8 -t 10 -S >> > > > CRITICAL - Socket timeout after 10 seconds >> > > > >> > > > telnet <a href="http://87.230.8.228" target="_blank">87.230.8.228</a> <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> >> <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> >> > <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> >> > > <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> 465 >> > > > Trying 87.230.8.228... >> > > > Connected to <a href="http://87.230.8.228" target="_blank">87.230.8.228</a> <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> >> <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> >> > <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>> >> > > <<a href="http://87.230.8.228" target="_blank">http://87.230.8.228</a>>. >> > > > Escape character is '^]'. >> > > > >> > > > quit >> > > > quit >> > > > Connection closed by foreign host. >> > > > >> > > > >> > > > ####### FTPS failed but successful by telnet >> > ###############33 >> > > > >> > > > /usr/lib/nagios/plugins/check_ftp -H <replaced >> by my >> > server >> > > IP> -p >> > > > 60021 -w 5 -c 8 -t 10 -S >> > > > CRITICAL - Cannot make SSL connection >> > 30050:error:140770FC:SSL >> > > > routines:SSL23_GET_SERVER_HELLO:unknown >> > protocol:s23_clnt.c:478: >> > > > >> > > > telnet localhost 60021 >> > > > Trying 127.0.0.1... >> > > > Connected to localhost. >> > > > Escape character is '^]'. >> > > > 220 *******This server is configured by >> Jatasankar******* >> > > > >> > > > 530 Please login with USER and PASS. >> > > > >> > > > 530 Please login with USER and PASS. >> > > > quit >> > > > 221 Goodbye. >> > > > Connection closed by foreign host. >> > > > >> > > > >> > > > Any clue ? >> > > > thanks >> > > > >> > > > >> > > > >> > > > >> > > > > >> > > > >> with many thanks >> > > > >> >> > > > >> >> > > > >>> Arno >> > > > >>> >> > > > >>> >> > > > >>>> thanks >> > > > >>>> >> > > > >>>> >> > > > >>>> >> > > > >> >> > > > > >> > > > > >> > > > >> > > > >> > > > -- >> > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> > > > Joydeep Bakshi, Linux System Admin >> > > > Kolkatainfoservices Pvt Ltd, >> > > > 23A Royd Street, Kolkata 700016, India >> > > > Work Phone 91 033 40014784 >> > > > <a href="http://infoservices.in/" target="_blank">http://infoservices.in/</a> >> > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> > > > >> > > > >> > > > >> > > > >> > > > -- >> > > > Alex Dehaini >> > > > Developer >> > > > Site - <a href="http://www.alexdehaini.com" target="_blank">www.alexdehaini.com</a> >> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> > <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> > > <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> > > > Email - <a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> >> > <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> >> > <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>>> >> > > <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>> >> > <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>>>> >> > > >> > > >> > > -- >> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> > > Joydeep Bakshi, Linux System Admin >> > > Kolkatainfoservices Pvt Ltd, >> > > 23A Royd Street, Kolkata 700016, India >> > > Work Phone 91 033 40014784 >> > > <a href="http://infoservices.in/" target="_blank">http://infoservices.in/</a> >> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> > > >> > > >> > > >> > > >> > > -- >> > > Alex Dehaini >> > > Developer >> > > Site - <a href="http://www.alexdehaini.com" target="_blank">www.alexdehaini.com</a> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> > <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> > > Email - <a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>> >> > <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>>> >> > >> > >> > -- >> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> > Joydeep Bakshi, Linux System Admin >> > Kolkatainfoservices Pvt Ltd, >> > 23A Royd Street, Kolkata 700016, India >> > Work Phone 91 033 40014784 >> > <a href="http://infoservices.in/" target="_blank">http://infoservices.in/</a> >> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> > >> > >> > >> > >> > -- >> > Alex Dehaini >> > Developer >> > Site - <a href="http://www.alexdehaini.com" target="_blank">www.alexdehaini.com</a> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> > Email - <a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> >> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>>> >> >> >> -- >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> Joydeep Bakshi, Linux System Admin >> Kolkatainfoservices Pvt Ltd, >> 23A Royd Street, Kolkata 700016, India >> Work Phone 91 033 40014784 >> <a href="http://infoservices.in/" target="_blank">http://infoservices.in/</a> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ >> >> >> >> >> -- >> Alex Dehaini >> Developer >> Site - <a href="http://www.alexdehaini.com" target="_blank">www.alexdehaini.com</a> <<a href="http://www.alexdehaini.com" target="_blank">http://www.alexdehaini.com</a>> >> Email - <a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> <mailto:<a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a>> >> > > > -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Joydeep Bakshi, Linux System Admin Kolkatainfoservices Pvt Ltd, 23A Royd Street, Kolkata 700016, India Work Phone 91 033 40014784 <a href="http://infoservices.in/" target="_blank">http://infoservices.in/</a> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ </div></div><div><div></div><div class="Wj3C7c">------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world <a href="http://moblin-contest.org/redirect.php?banner_id=100&url=/" target="_blank">http://moblin-contest.org/redirect.php?banner_id=100&url=/</a> _______________________________________________ Nagios-users mailing list <a href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a> <a href="https://lists.sourceforge.net/lists/listinfo/nagios-users" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagios-users</a> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null </div></div></blockquote></div> -- Alex Dehaini Developer Site - <a href="http://www.alexdehaini.com">www.alexdehaini.com</a> Email - <a href="mailto:alexdehaini@gmail.com">alexdehaini@gmail.com</a> </div>