Check pf - NRPE pf state count - Revision history

Tykling at 18:49, 10 March 2010

2010-03-10T18:49:26Z

← Older revision		Revision as of 18:49, 10 March 2010
Line 29:		Line 29:
	Install the port:		Install the port:
	<pre>		<pre>
	sudo portmaster /usr/ports/net-mgmt/nagios-~~geom~~/		sudo portmaster /usr/ports/net-mgmt/nagios-pf-plugin/
	</pre>		</pre>

Tykling at 22:25, 17 January 2010

2010-01-17T22:25:20Z

← Older revision		Revision as of 22:25, 17 January 2010
Line 1:		Line 1:
	~~{{wrongtitle\|title=check_pf - NRPE pf state count}}~~
	{{DISPLAYTITLE:check_pf - NRPE pf state count}}		{{DISPLAYTITLE:check_pf - NRPE pf state count}}
	[[category:nagios]]		[[category:nagios]]

Tykling at 22:25, 17 January 2010

2010-01-17T22:25:10Z

← Older revision		Revision as of 22:25, 17 January 2010
Line 1:		Line 1:
	{{wrongtitle\|title=check_pf - NRPE pf state count}}		{{wrongtitle\|title=check_pf - NRPE pf state count}}
			{{DISPLAYTITLE:check_pf - NRPE pf state count}}
	[[category:nagios]]		[[category:nagios]]
	[[category:pf]]		[[category:pf]]

Tykling at 22:21, 17 January 2010

2010-01-17T22:21:34Z

← Older revision		Revision as of 22:21, 17 January 2010
Line 1:		Line 1:
			{{wrongtitle\|title=check_pf - NRPE pf state count}}
			[[category:nagios]]
			[[category:pf]]
	You can check the number of states in the pf firewall using Nagios and NRPE using this port:		You can check the number of states in the pf firewall using Nagios and NRPE using this port:
	<pre>		<pre>

Tykling: Created page with 'You can check the number of states in the pf firewall using Nagios and NRPE using this port:

 $ cat /usr/ports/net-mgmt/nagios-pf-plugin/pkg-descr check_pf is a plugin inten…'

2010-01-17T22:20:11Z

Created page with 'You can check the number of states in the pf firewall using Nagios and NRPE using this port: <pre> $ cat /usr/ports/net-mgmt/nagios-pf-plugin/pkg-descr check_pf is a plugin inten…'

New page

You can check the number of states in the pf firewall using Nagios and NRPE using this port:
<pre>
$ cat /usr/ports/net-mgmt/nagios-pf-plugin/pkg-descr
check_pf is a plugin intended for use with the Nagios network
monitoring system. This plugin checks the status of PF, the OpenBSD
packet filter, and compares the current state count to given or default
thresholds, returning the result. It is written in C.

WWW: http://www.zampanosbits.com/check_pf/
</pre>

== Configuring Nagios ==
First I define a new service on the Nagios server, in <code>/usr/local/etc/nagios/objects/services.cfg</code>:
<pre>
define service{
use generic-service
hostgroup_name pf-servers
service_description pf-statecount
check_command check_nrpe2!check_pf
}
</pre>

I then add the hosts that I want to run this check on to the group pf-servers on the nagios server, which makes Nagios run the check <code>check_nrpe2!check_pf</code> on all members of the group.

== Install the plugin ==
Install the port:
<pre>
sudo portmaster /usr/ports/net-mgmt/nagios-geom/
</pre>

And change the permissions on /dev/pf as the pkg-message suggests:
<pre>
$ pkg_info -D -x nagios-pf-plugin
Information for nagios-pf-plugin-0.1:

Install notice:

check_pf has been installed to /usr/local/libexec/nagios/.

check_pf needs read permission to the pf(4) pseudo-device, i.e. /dev/pf.

Assuming check_pf will be run by user `nagios', the following will work:

# chmod 640 /dev/pf
# chgrp nagios /dev/pf

To make sure the change persists across reboots, add the following
to /etc/devfs.conf:

# nrpe2/nagios needs to be able to read statistics
own pf root:nagios
perm pf 0640

Please refer to the online documentation for additional information.

http://www.zampanosbits.com/check_pf/
</pre>

== Configuring NRPE ==
Add the following line to <code>/usr/local/etc/nrpe.cfg</code>:
<pre>
command[check_pf]=/usr/local/libexec/nagios/check_pf
</pre>

Remember to restart NRPE after changing the config:
<pre>
sudo /usr/local/etc/rc.d/nrpe2 restart
</pre>