在windows里安装nrpe_nt

原创

二儿日生 2008-11-05 16:28:37 ©著作权

文章标签 职场 nagios 休闲 nrpe_nt 文章分类 运维

©著作权归作者所有：来自51CTO博客作者二儿日生的原创作品，请联系作者获取转载授权，否则将追究法律责任

在win server里使用nagios的插件：nrpe_nt

首先需要安装nrpe_nt.0.8b-bin.zip

使用nrpe_nt_plugins.zip安装，这个插件包非常好，很强大

关于怎么配置nrpe.cfg

请参考石头大哥的文章：[url]http://www.itnms.net/discuz/viewthread.php?tid=414&extra=page%3D1[/url]

要用nrpe_nt_plugins.zip里面的命令必须配置nrpe.cfg文件

command[nt_check_disk_d]=C:\gx-nrpe_nt\nagios\bin\diskspace_nrpe_nt.exe d: 70 90

必须要改成你放置这个插件的目录

Nagios server端

在localhost里配置命令：

check_nrpe!nt_check_disk_c

define service{

use generic-service

host_name yyx

service_description check_disk_nrpent

check_command check_nrpe!nt_check_disk_c

}

其中nt_check_disk_c为win server端的命令。

配置完以后老是报错说找不到“nt_check_disk_c”命令，百思不得其解。

突然想起每次在centos里改完命令都要重启nagios服务，于是在win server里重启nrpe_nt服务。果然问题迎刃而解。

重启nrpe_nt命令：

net stop nrpe_nt

net start nrpe_nt

[url]http://trac.nakednuns.org/[/url] 这网站相信的介绍的NSClient++ 及它的各种组建的用法，非常好。看了受益匪浅!

本来准备用nrpe_nt来解决这个问题的，看来这个网站才知道原来NSClient++同样博大精深。

CheckFileSize这条命令就可以做

不过首先看到这条命令的例子

CheckFileSize ShowAll MaxWarn=1024M MaxCrit=4096M File:WIN=c:\WINDOWS\*.*

WARNING: WIN: 2G (2325339822B)|WIN=2325339822;1073741824;4294967296

define command {

command_name CheckFileSize

command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckFileSize -a ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$ File:$ARG3$=$ARG4$

}

check_command CheckFileSize!1024M!4096M!WIN!c:\WINDOWS\*.*

看完就觉得云里雾里了，“CheckFileSize ShowAll MaxWarn=1024M MaxCrit=4096M File:WIN=c:\WINDOWS\*.*”这条命令能在cmd里运行么？

define command {
command_name CheckFileSize
command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckFileSize -a ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$ File:$ARG4$=$ARG5$
}

NSClient++明明用得是12489端口，为什么这里监听的是nrpe的5666端口呢？

带着这些问题，开始了大海捞针似的google.com之旅，终于找到了答案。

还是怪自己对NSClient了解的不深啊。

原来命令是要先进入 nsclient /test里来运行的。敲了命令果然有了返回值。

在nsclient的配置问价Nsc.ini 里，就有nrpe的端口。

配置文件如下：

[modules]

;# NSCLIENT++ MODULES

;# A list with DLLs to load at startup.

; You will need to enable some of these for NSClient++ to work.

; ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !

; * *

; * N O T I C E ! ! ! - Y O U H A V E T O E D I T T H I S *

; * *

; ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !

FileLogger.dll

CheckSystem.dll

CheckDisk.dll

NSClientListener.dll

NRPEListener.dll

SysTray.dll

CheckEventLog.dll

CheckHelpers.dll

;CheckWMI.dll

;

; RemoteConfiguration IS AN EXTREM EARLY IDEA SO DONT USE FOR PRODUCTION ENVIROMNEMTS!

;RemoteConfiguration.dll

; NSCA Agent is a new beta module use with care!

NSCAAgent.dll

; LUA script module used to write your own "check deamon" (sort of) early beta.

LUAScript.dll

; Script to check external scripts and/or internal aliases, early beta.

CheckExternalScripts.dll

; Check other hosts through NRPE extreme beta and probably a bit dangerous! :)

NRPEClient.dll

; Extreamly early beta of a task-schedule checker

CheckTaskSched.dll

[Settings]

;# OBFUSCATED PASSWORD

; This is the same as the password option but here you can store the password in an obfuscated manner.

; *NOTICE* obfuscation is *NOT* the same as encryption, someone with access to this file can still figure out the

; password. Its just a bit harder to do it at first glance.

;obfuscated_password=Jw0KAUUdXlAAUwASDAAB

;

;# PASSWORD

; This is the password (-s) that is required to access NSClient remotely. If you leave this blank everyone will be able to access the daemon remotly.

;password=secret-password

;

;# ALLOWED HOST ADDRESSES

; This is a comma-delimited list of IP address of hosts that are allowed to talk to the all daemons.

; If leave this blank anyone can access the deamon remotly (NSClient still requires a valid password).

; The syntax is host or ip/mask so 192.168.0.0/24 will allow anyone on that subnet access

allowed_hosts=192.168.2.211

;

;# USE THIS FILE

; Use the INI file as opposed to the registry if this is 0 and the use_reg in the registry is set to 1

; the registry will be used instead.

use_file=1

[log]

;# LOG DEBUG

; Set to 1 if you want debug message printed in the log file (debug messages are always printed to stdout when run with -test)

;debug=1

;

;# LOG FILE

; The file to print log statements to

;file=NSC.log

;

;# LOG DATE MASK

; The format to for the date/time part of the log entry written to file.

;date_mask=%Y-%m-%d %H:%M:%S

[NSClient]

;# ALLOWED HOST ADDRESSES

; This is a comma-delimited list of IP address of hosts that are allowed to talk to NSClient deamon.

; If you leave this blank the global version will be used instead.

;allowed_hosts=

;

;# NSCLIENT PORT NUMBER

; This is the port the NSClientListener.dll will listen to.

port=12489

;

;# BIND TO ADDRESS

; Allows you to bind server to a specific local address. This has to be a dotted ip adress not a hostname.

; Leaving this blank will bind to all avalible IP adresses.

;bind_to_address=

;

;# SOCKET TIMEOUT

; Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out.

;socket_timeout=30

[NRPE]

;# NRPE PORT NUMBER

; This is the port the NRPEListener.dll will listen to.

port=5666

;

;# COMMAND TIMEOUT

; This specifies the maximum number of seconds that the NRPE daemon will allow plug-ins to finish executing before killing them off.

;command_timeout=60

;

;# COMMAND ARGUMENT PROCESSING

; This option determines whether or not the NRPE daemon will allow clients to specify arguments to commands that are executed.

;allow_arguments=0

allow_arguments=1

;

;# COMMAND ALLOW NASTY META CHARS

; This option determines whether or not the NRPE daemon will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.

;allow_nasty_meta_chars=0

allow_nasty_meta_chars=1

;

;# USE SSL SOCKET

; This option controls if SSL should be used on the socket.

;use_ssl=1

;

;# BIND TO ADDRESS

; Allows you to bind server to a specific local address. This has to be a dotted ip adress not a hostname.

; Leaving this blank will bind to all avalible IP adresses.

; bind_to_address=

;

;# ALLOWED HOST ADDRESSES

; This is a comma-delimited list of IP address of hosts that are allowed to talk to NRPE deamon.

; If you leave this blank the global version will be used instead.

;allowed_hosts=

;

;# SCRIPT DIRECTORY

; All files in this directory will become check commands.

; *WARNING* This is undoubtedly dangerous so use with care!

;script_dir=scripts\

;

;# SOCKET TIMEOUT

; Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out.

;socket_timeout=30

[Check System]

;# CPU BUFFER SIZE

; Can be anything ranging from 1s (for 1 second) to 10w for 10 weeks. Notice that a larger buffer will waste memory

; so don't use a larger buffer then you need (ie. the longest check you do +1).

;CPUBufferSize=1h

;

;# CHECK RESOLUTION

; The resolution to check values (currently only CPU).

; The value is entered in 1/10:th of a second and the default is 10 (which means ones every second)

;CheckResolution=10

;

;# CHECK ALL SERVICES

; Configure how to check services when a CheckAll is performed.

; ...=started means services in that class *has* to be running.

; ...=stopped means services in that class has to be stopped.

; ...=ignored means services in this class will be ignored.

;check_all_services[SERVICE_BOOT_START]=ignored

;check_all_services[SERVICE_SYSTEM_START]=ignored

;check_all_services[SERVICE_AUTO_START]=started

;check_all_services[SERVICE_DEMAND_START]=ignored

;check_all_services[SERVICE_DISABLED]=stopped

[External Script]

;# COMMAND TIMEOUT

; This specifies the maximum number of seconds that the NRPE daemon will allow plug-ins to finish executing before killing them off.

;command_timeout=60

;

;# COMMAND ARGUMENT PROCESSING

; This option determines whether or not the NRPE daemon will allow clients to specify arguments to commands that are executed.

;allow_arguments=0

;

;# COMMAND ALLOW NASTY META CHARS

; This option determines whether or not the NRPE daemon will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.

;allow_nasty_meta_chars=0

;

;# COMMAND ALLOW NASTY META CHARS

; This option determines whether or not the NRPE daemon will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.

;script_dir=c:\my\script\dir

[External Scripts]

;check_es_long=scripts\long.bat

;check_es_ok=scripts\ok.bat

;check_es_nok=scripts\nok.bat

;check_vbs_sample=cscript.exe //T:30 //NoLogo scripts\check_vb.vbs

[External Alias]

;alias_cpu=checkCPU warn=80 crit=90 time=5m time=1m time=30s

;alias_disk=CheckDriveSize MinWarn=10% MinCrit=5% CheckAll FilterType=FIXED

;alias_service=checkServiceState CheckAll

;alias_mem=checkMem MaxWarn=80% MaxCrit=90% ShowAll type=physical

; [includes]

;# The order when used is "reversed" thus the last included file will be "first"

;# Included files can include other files (be carefull only do basic recursive checking)

;

; myotherfile.ini

; real.ini

[NSCA Agent]

;# CHECK INTERVALL (in seconds)

; How often we should run the checks and submit the results.

;interval=5

;

;# ENCRYPTION METHOD

; This option determines the method by which the send_nsca client will encrypt the packets it sends

; to the nsca daemon. The encryption method you choose will be a balance between security and

; performance, as strong encryption methods consume more processor resources.

; You should evaluate your security needs when choosing an encryption method.

;

; Note: The encryption method you specify here must match the decryption method the nsca daemon uses

; (as specified in the nsca.cfg file)!!

; Values:

; 0 = None (Do NOT use this option)

; 1 = Simple XOR (No security, just obfuscation, but very fast)

; 2 = DES

; 3 = 3DES (Triple DES)

; 4 = CAST-128

; 6 = xTEA

; 8 = BLOWFISH

; 9 = TWOFISH

; 11 = RC2

; 14 = RIJNDAEL-128 (AES)

; 20 = SERPENT

;encryption_method=14

;

;# ENCRYPTION PASSWORD

; This is the password/passphrase that should be used to encrypt the sent packets.

;password=

;

;# BIND TO ADDRESS

; Allows you to bind server to a specific local address. This has to be a dotted ip adress not a hostname.

; Leaving this blank will bind to "one" local interface.

; -- not supported as of now --

;bind_to_address=

;

;# LOCAL HOST NAME

; The name of this host (if empty "computername" will be used.

;hostname=

;

;# NAGIOS SERVER ADDRESS

; The address to the nagios server to submit results to.

;nsca_host=192.168.0.1

;

;# NAGIOS SERVER PORT

; The port to the nagios server to submit results to.

;nsca_port=5667

;

;# CHECK COMMAND LIST

; The checks to run everytime we submit results back to nagios

; Any command(alias/key) starting with a host_ is sent as HOST_COMMAND others are sent as SERVICE_COMMANDS

; where the alias/key is used as service name.

;

[NSCA Commands]

;my_cpu_check=checkCPU warn=80 crit=90 time=20m time=10s time=4

;my_mem_check=checkMem MaxWarn=80% MaxCrit=90% ShowAll type=page

;my_svc_check=checkServiceState CheckAll exclude=wampmysqld exclude=MpfService

;host_check=check_ok

[NRPE Handlers]

;# COMMAND DEFINITIONS

;# Command definitions that this daemon will run.

;# Can be either NRPE syntax:

;command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10

;# Or simplified syntax:

;test=c:\test.bat foo $ARG1$ bar

;check_disk1=/usr/local/nagios/libexec/check_disk -w 5 -c 10

;# Or even loopback (inject) syntax (to run internal commands)

;# This is a way to run "NSClient" commands and other internal module commands such as check eventlog etc.

;check_cpu=inject checkCPU warn=80 crit=90 5 10 15

;check_eventlog=inject CheckEventLog Application warn.require.eventType=error warn.require.eventType=warning critical.require.eventType=error critical.exclude.eventType=info truncate=1024 descriptions

;check_disk_c=inject CheckFileSize ShowAll MaxWarn=1024M MaxCrit=4096M File:WIN=c:\ATI\*.*

;# But be careful:

; dont_check=inject dont_check This will "loop forever" so be careful with the inject command...

;# Check some escapings...

; check_escape=inject CheckFileSize ShowAll MaxWarn=1024M MaxCrit=4096M "File: foo \" WIN=c:\\WINDOWS\\*.*"

;# Some real world samples

;nrpe_cpu=inject checkCPU warn=80 crit=90 5 10 15

;nrpe_ok=scripts\ok.bat

;check_multi_line=scripts\multi_line.bat

;# The sample scripts

;check_long=scripts\long.bat

;check_ok=scripts\ok.bat

;check_nok=scripts\xlong.bat

;check_vbs=cscript.exe //T:30 //NoLogo scripts\check_vb.vbs

;# REMOTE NRPE PROXY COMMANDS

; A list of commands that check other hosts.

; Used by the NRPECLient module

[NRPE Client Handlers]

check_other=-H 192.168.0.1 -p 5666 -c remote_command -a arguments

只要开放nrpe的5666端口就好。

接着就是配置nagios server端了

首先定义命令

define command {
command_name CheckFileSize
command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckFileSize -a ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$ File:$ARG4$=$ARG5$
}

接着定义服务：

define service{

use generic-service

host_name yyx

service_description checkfilesize

check_command checkfilesize!1024M!4096M!WIN!c:\WINDOWS\*.*

}

其中c:\WINDOWS\*.*，表示C盘WINDOWS目录下的所有文件。

在Nagios server端输入 “check_nrpe –H 192.168.2.221 –c CheckFileSize –a ShowAll MaxWarn=1024M MaxCrit=2048M File:WIN= c:\WINDOWS\*.*”,系统报错：”CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.”