在windows里安装nrpe_nt

在win server 里使用nagios 的插件：nrpe_nt

首先需要安装nrpe_nt.0.8b-bin.zip

使用nrpe_nt_plugins.zip安装 ，这个插件包非常好，很强大

关于怎么配置nrpe.cfg

请参考石头大哥的文章： [url]http://www.itnms.net/discuz/viewthread.php?tid=414&extra=page%3D1[/url]

 

要用nrpe_nt_plugins.zip 里面的命令 必须配置nrpe.cfg 文件

 

command[nt_check_disk_d]=C:\gx-nrpe_nt\nagios\bin\diskspace_nrpe_nt.exe d: 70 90

 

必须要改成你放置这个插件的目录

 

Nagios server 端

在localhost 里配置命令：

 

check_nrpe!nt_check_disk_c

 

define service{

        use                      generic-service

        host_name                yyx

        service_description      check_disk_nrpent

        check_command            check_nrpe!nt_check_disk_c

}

 

其中nt_check_disk_c 为win server 端的命令。

 

配置完以后老是报错说找不到“nt_check_disk_c ”命令，百思不得其解。

 

突然想起每次在centos 里改完命令都要重启nagios 服务，于是在win server 里重启nrpe_nt 服务。果然问题迎刃而解。

 

重启nrpe_nt 命令：

net stop nrpe_nt

net start nrpe_nt

 

 

[url]http://trac.nakednuns.org/[/url] 这网站相信的介绍的NSClient++ 及它的各种组建的用法，非常好。看了受益匪浅!

 

本来准备用nrpe_nt 来解决这个问题的，看来这个网站才知道原来NSClient++ 同样博大精深。

 CheckFileSize 这条命令就可以做

不过首先看到这条命令的例子

 

CheckFileSize ShowAll MaxWarn= 1024M MaxCrit= 4096M File:WIN=c:\WINDOWS\*.*

WARNING: WIN: 2G (2325339822B)|WIN=2325339822;1073741824;4294967296

define command {

  command_name CheckFileSize

  command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckFileSize -a ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$ File:$ARG3$=$ARG4$

}

check_command CheckFileSize! 1024M ! 4096M !WIN!c:\WINDOWS\*.*

 

看完就觉得云里雾里了，“CheckFileSize ShowAll MaxWarn= 1024M MaxCrit= 4096M File:WIN=c:\WINDOWS\*.* ”这条命令能在 cmd 里运行么？

 

define command {
  command_name CheckFileSize
  command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckFileSize -a ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$ File:$ARG4$=$ARG5$
}

NSClient++ 明明用得是12489 端口，为什么这里监听的是nrpe 的5666 端口呢？

 

带着这些问题，开始了大海捞针似的google.com 之旅，终于找到了答案。

 

还是怪自己对NSClient 了解的不深啊。

 

原来命令是要先进入 nsclient /test 里来运行的。敲了命令果然有了返回值。

 

在nsclient 的配置问价Nsc.ini 里，就有nrpe 的端口。

 

配置文件如下：

 

[modules]

;# NSCLIENT++ MODULES

;# A list with DLLs to load at startup.

;   You will need to enable some of these for NSClient++ to work.

; ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !

; *                                                                *

; * N O T I C E ! ! ! - Y O U    H A V E    T O    E D I T    T H I S *

; *                                                                *

; ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! !

FileLogger.dll

CheckSystem.dll

CheckDisk.dll

NSClientListener.dll

NRPEListener.dll

SysTray.dll

CheckEventLog.dll

CheckHelpers.dll

;CheckWMI.dll

;

; RemoteConfiguration IS AN EXTREM EARLY IDEA SO DONT USE FOR PRODUCTION ENVIROMNEMTS!

;RemoteConfiguration.dll

; NSCA Agent is a new beta module use with care!

NSCAAgent.dll

; LUA script module used to write your own "check deamon" (sort of) early beta.

LUAScript.dll

; Script to check external scripts and/or internal aliases, early beta.

CheckExternalScripts.dll

; Check other hosts through NRPE extreme beta and probably a bit dangerous! :)

NRPEClient.dll

; Extreamly early beta of a task-schedule checker

CheckTaskSched.dll

 

 

 

[Settings]

;# OBFUSCATED PASSWORD

;   This is the same as the password option but here you can store the password in an obfuscated manner.

;   *NOTICE* obfuscation is *NOT* the same as encryption, someone with access to this file can still figure out the

;   password. Its just a bit harder to do it at first glance.

;obfuscated_password=Jw0KAUUdXlAAUwASDAAB

;

;# PASSWORD

;   This is the password (-s) that is required to access NSClient remotely. If you leave this blank everyone will be able to access the daemon remotly.

;password=secret-password

;

;# ALLOWED HOST ADDRESSES

;   This is a comma-delimited list of IP address of hosts that are allowed to talk to the all daemons.

;   If leave this blank anyone can access the deamon remotly (NSClient still requires a valid password).

;   The syntax is host or ip/mask so 192.168.0.0/24 will allow anyone on that subnet access

allowed_hosts=192.168.2.211

;

;# USE THIS FILE

;   Use the INI file as opposed to the registry if this is 0 and the use_reg in the registry is set to 1

;   the registry will be used instead.

use_file=1

 

[log]

;# LOG DEBUG

;   Set to 1 if you want debug message printed in the log file (debug messages are always printed to stdout when run with -test)

;debug=1

;

;# LOG FILE

;   The file to print log statements to

;file=NSC.log

;

;# LOG DATE MASK

;   The format to for the date/time part of the log entry written to file.

;date_mask=%Y-%m-%d %H:%M:%S

 

 

[NSClient]

;# ALLOWED HOST ADDRESSES

;   This is a comma-delimited list of IP address of hosts that are allowed to talk to NSClient deamon.

;   If you leave this blank the global version will be used instead.

;allowed_hosts=

;

;# NSCLIENT PORT NUMBER

;   This is the port the NSClientListener.dll will listen to.

port=12489

;

;# BIND TO ADDRESS

;   Allows you to bind server to a specific local address. This has to be a dotted ip adress not a hostname.

;   Leaving this blank will bind to all avalible IP adresses.

;bind_to_address=

;

;# SOCKET TIMEOUT

;   Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out.

;socket_timeout=30

 

[NRPE]

;# NRPE PORT NUMBER

;   This is the port the NRPEListener.dll will listen to.

port=5666

;

;# COMMAND TIMEOUT

;   This specifies the maximum number of seconds that the NRPE daemon will allow plug-ins to finish executing before killing them off.

;command_timeout=60

;

;# COMMAND ARGUMENT PROCESSING

;   This option determines whether or not the NRPE daemon will allow clients to specify arguments to commands that are executed.

;allow_arguments=0

allow_arguments=1

;

;# COMMAND ALLOW NASTY META CHARS

;   This option determines whether or not the NRPE daemon will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.

;allow_nasty_meta_chars=0

allow_nasty_meta_chars=1

;

;# USE SSL SOCKET

;   This option controls if SSL should be used on the socket.

;use_ssl=1

;

;# BIND TO ADDRESS

;   Allows you to bind server to a specific local address. This has to be a dotted ip adress not a hostname.

;   Leaving this blank will bind to all avalible IP adresses.

; bind_to_address=

;

;# ALLOWED HOST ADDRESSES

;   This is a comma-delimited list of IP address of hosts that are allowed to talk to NRPE deamon.

;   If you leave this blank the global version will be used instead.

;allowed_hosts=

;

;# SCRIPT DIRECTORY

;   All files in this directory will become check commands.

;   *WARNING* This is undoubtedly dangerous so use with care!

;script_dir=scripts\

;

;# SOCKET TIMEOUT

;   Timeout when reading packets on incoming sockets. If the data has not arrived withint this time we will bail out.

;socket_timeout=30

 

[Check System]

;# CPU BUFFER SIZE

;   Can be anything ranging from 1s (for 1 second) to 10w for 10 weeks. Notice that a larger buffer will waste memory

;   so don't use a larger buffer then you need (ie. the longest check you do +1).

;CPUBufferSize=1h

;

;# CHECK RESOLUTION

;   The resolution to check values (currently only CPU).

;   The value is entered in 1/10:th of a second and the default is 10 (which means ones every second)

;CheckResolution=10

;

;# CHECK ALL SERVICES

;   Configure how to check services when a CheckAll is performed.

;   ...=started means services in that class *has* to be running.

;   ...=stopped means services in that class has to be stopped.

;   ...=ignored means services in this class will be ignored.

;check_all_services[SERVICE_BOOT_START]=ignored

;check_all_services[SERVICE_SYSTEM_START]=ignored

;check_all_services[SERVICE_AUTO_START]=started

;check_all_services[SERVICE_DEMAND_START]=ignored

;check_all_services[SERVICE_DISABLED]=stopped

 

[External Script]

;# COMMAND TIMEOUT

;   This specifies the maximum number of seconds that the NRPE daemon will allow plug-ins to finish executing before killing them off.

;command_timeout=60

;

;# COMMAND ARGUMENT PROCESSING

;   This option determines whether or not the NRPE daemon will allow clients to specify arguments to commands that are executed.

;allow_arguments=0

;

;# COMMAND ALLOW NASTY META CHARS

;   This option determines whether or not the NRPE daemon will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.

;allow_nasty_meta_chars=0

;

;# COMMAND ALLOW NASTY META CHARS

;   This option determines whether or not the NRPE daemon will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.

;script_dir=c:\my\script\dir

 

[External Scripts]

;check_es_long=scripts\long.bat

;check_es_ok=scripts\ok.bat

;check_es_nok=scripts\nok.bat

;check_vbs_sample=cscript.exe //T:30 //NoLogo scripts\check_vb.vbs

 

[External Alias]

;alias_cpu=checkCPU warn=80 crit=90 time= 5m time= 1m time=30s

;alias_disk=CheckDriveSize MinWarn=10% MinCrit=5% CheckAll FilterType=FIXED

;alias_service=checkServiceState CheckAll

;alias_mem=checkMem MaxWarn=80% MaxCrit=90% ShowAll type=physical

 

 

 

 

; [includes]

;# The order when used is "reversed" thus the last included file will be "first"

;# Included files can include other files (be carefull only do basic recursive checking)

;

; myotherfile.ini

; real.ini

 

 

[NSCA Agent]

;# CHECK INTERVALL (in seconds)

;    How often we should run the checks and submit the results.

;interval=5

;

;# ENCRYPTION METHOD

;    This option determines the method by which the send_nsca client will encrypt the packets it sends

;    to the nsca daemon. The encryption method you choose will be a balance between security and

;    performance, as strong encryption methods consume more processor resources.

;    You should evaluate your security needs when choosing an encryption method.

;

; Note: The encryption method you specify here must match the decryption method the nsca daemon uses

;        (as specified in the nsca.cfg file)!!

; Values:

;            0 = None            (Do NOT use this option)

;            1 = Simple XOR   (No security, just obfuscation, but very fast)

;    2 = DES

;    3 = 3DES (Triple DES)

;            4 = CAST-128

;            6 = xTEA

;            8 = BLOWFISH

;            9 = TWOFISH

;            11 = RC2

;            14 = RIJNDAEL-128 (AES)

;            20 = SERPENT

;encryption_method=14

;

;# ENCRYPTION PASSWORD

;   This is the password/passphrase that should be used to encrypt the sent packets.

;password=

;

;# BIND TO ADDRESS

;   Allows you to bind server to a specific local address. This has to be a dotted ip adress not a hostname.

;   Leaving this blank will bind to "one" local interface.

; -- not supported as of now --

;bind_to_address=

;

;# LOCAL HOST NAME

;   The name of this host (if empty "computername" will be used.

;hostname=

;

;# NAGIOS SERVER ADDRESS

;   The address to the nagios server to submit results to.

;nsca_host=192.168.0.1

;

;# NAGIOS SERVER PORT

;   The port to the nagios server to submit results to.

;nsca_port=5667

;

 

;# CHECK COMMAND LIST

;   The checks to run everytime we submit results back to nagios

;   Any command(alias/key) starting with a host_ is sent as HOST_COMMAND others are sent as SERVICE_COMMANDS

;   where the alias/key is used as service name.

;

[NSCA Commands]

;my_cpu_check=checkCPU warn=80 crit=90 time= 20m time=10s time=4

;my_mem_check=checkMem MaxWarn=80% MaxCrit=90% ShowAll type=page

;my_svc_check=checkServiceState CheckAll exclude=wampmysqld exclude=MpfService

;host_check=check_ok

 

[NRPE Handlers]

;# COMMAND DEFINITIONS

;# Command definitions that this daemon will run.

;# Can be either NRPE syntax:

;command[check_users]=/usr/local/nagios/libexec/check_users -w 5 -c 10

;# Or simplified syntax:

;test=c:\test.bat foo $ARG1$ bar

;check_disk1=/usr/local/nagios/libexec/check_disk -w 5 -c 10

;# Or even loopback (inject) syntax (to run internal commands)

;# This is a way to run "NSClient" commands and other internal module commands such as check eventlog etc.

;check_cpu=inject checkCPU warn=80 crit=90 5 10 15

;check_eventlog=inject CheckEventLog Application warn.require.eventType=error warn.require.eventType=warning critical.require.eventType=error critical.exclude.eventType=info truncate=1024 descriptions

;check_disk_c=inject CheckFileSize ShowAll MaxWarn= 1024M MaxCrit= 4096M File:WIN=c:\ATI\*.*

;# But be careful:

; dont_check=inject dont_check This will "loop forever" so be careful with the inject command...

;# Check some escapings...

; check_escape=inject CheckFileSize ShowAll MaxWarn= 1024M MaxCrit= 4096M "File: foo \" WIN=c:\\WINDOWS\\*.*"

;# Some real world samples

;nrpe_cpu=inject checkCPU warn=80 crit=90 5 10 15

;nrpe_ok=scripts\ok.bat

;check_multi_line=scripts\multi_line.bat

;#

;# The sample scripts

;#

;check_long=scripts\long.bat

;check_ok=scripts\ok.bat

;check_nok=scripts\xlong.bat

;check_vbs=cscript.exe //T:30 //NoLogo scripts\check_vb.vbs

 

;# REMOTE NRPE PROXY COMMANDS

;   A list of commands that check other hosts.

;   Used by the NRPECLient module

[NRPE Client Handlers]

check_other=-H 192.168.0.1 -p 5666 -c remote_command -a arguments

 

只要开放 nrpe 的 5666 端口就好。

 

接着就是配置 nagios server 端了

 

首先定义命令

define command {
  command_name CheckFileSize
  command_line check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckFileSize -a ShowAll MaxWarn=$ARG1$ MaxCrit=$ARG2$ File:$ARG4$=$ARG5$
}

接着定义服务：

define service{

        use                     generic-service

        host_name               yyx

        service_description     checkfilesize

        check_command           checkfilesize! 1024M ! 4096M !WIN!c:\WINDOWS\*.*

}

其中 c:\WINDOWS\*.* ，表示 C 盘 WINDOWS 目录下的所有文件。

 

在 Nagios server 端输入 “check_nrpe �CH 192.168.2.221 �Cc CheckFileSize �Ca ShowAll MaxWarn= 1024M MaxCrit= 2048M File:WIN= c:\WINDOWS\*.*”, 系统报错： ”CHECK_NRPE: Received 0 bytes from daemon. Check the remote server logs for error messages.”

 

当时就觉得奇怪怎么会监听不到数据呢？去 win server 端查看， 5666 端口是开的，也正在监听。经过反复查找，原来 nrpe_nt 插件正在运行，是它的 5666 端口在监听，而不是 NSClient++ 的端口在监听。停掉 nrpe_nt 服务，问题解决！

Ok ！一切大功告成！用这两种方法，基本上所有的监控 win server 的问题都能解决了。