Check ports - NRPE portaudit check - Revision history

Tykling at 12:46, 28 February 2010

2010-02-28T12:46:14Z

← Older revision		Revision as of 12:46, 28 February 2010
Line 18:		Line 18:
	}		}
	</pre>		</pre>

			I call the check <code>check_portaudit</code> to better remember what it is.

	I want all my FreeBSD servers to have their ports checked, so I added the hostgroup <code>freebsd-servers</code> to this check. The FreeBSD servers I monitor in this Nagios installation are all members of the hostgroup <code>freebsd-servers</code>.		I want all my FreeBSD servers to have their ports checked, so I added the hostgroup <code>freebsd-servers</code> to this check. The FreeBSD servers I monitor in this Nagios installation are all members of the hostgroup <code>freebsd-servers</code>.

Tykling: /* Configuring Nagios */

2010-02-28T12:45:59Z

Configuring Nagios

← Older revision		Revision as of 12:45, 28 February 2010
Line 15:		Line 15:
	hostgroup_name freebsd-servers		hostgroup_name freebsd-servers
	service_description nrpe_check_ports		service_description nrpe_check_ports
	check_command check_nrpe2!~~check_ports~~		check_command check_nrpe2!check_portaudit
	}		}
	</pre>		</pre>

Tykling at 01:25, 26 February 2010

2010-02-26T01:25:18Z

← Older revision		Revision as of 01:25, 26 February 2010
Line 34:		Line 34:
	Add the following line to <code>/usr/local/etc/nrpe.cfg</code>:		Add the following line to <code>/usr/local/etc/nrpe.cfg</code>:
	<pre>		<pre>
	command[~~check_ports~~]=/usr/local/libexec/nagios/~~check_portaudit~~		command[check_portaudit]=/usr/local/libexec/nagios/check_ports
	</pre>		</pre>

Tykling at 01:22, 26 February 2010

2010-02-26T01:22:43Z

← Older revision		Revision as of 01:22, 26 February 2010
Line 34:		Line 34:
	Add the following line to <code>/usr/local/etc/nrpe.cfg</code>:		Add the following line to <code>/usr/local/etc/nrpe.cfg</code>:
	<pre>		<pre>
	command[check_ports]=/usr/local/libexec/nagios/~~check_ports~~		command[check_ports]=/usr/local/libexec/nagios/check_portaudit
	</pre>		</pre>

			I call the check <code>check_portaudit</code> to better remember what it is.

	Remember to restart NRPE after changing the config:		Remember to restart NRPE after changing the config:

Tykling at 22:26, 17 January 2010

2010-01-17T22:26:11Z

← Older revision		Revision as of 22:26, 17 January 2010
Line 1:		Line 1:
	{{~~wrongtitle\|title=~~check_ports - NRPE portaudit check}}		{{DISPLAYTITLE:check_ports - NRPE portaudit check}}
	[[category:nagios]]		[[category:nagios]]
	[[category:Ports_Management]]		[[category:Ports_Management]]

Tykling at 19:26, 17 January 2010

2010-01-17T19:26:20Z

← Older revision		Revision as of 19:26, 17 January 2010
Line 9:		Line 9:
	</pre>		</pre>
	== Configuring Nagios ==		== Configuring Nagios ==
	Define a new service on the Nagios server, in ''/usr/local/etc/nagios/objects/services.cfg'':		Define a new service on the Nagios server, in <code>/usr/local/etc/nagios/objects/services.cfg</code>:
	<pre>		<pre>
	define service{		define service{
Line 19:		Line 19:
	</pre>		</pre>

	I want all my FreeBSD servers to have their ports checked, so I added the hostgroup ''freebsd-servers'' to this check. The FreeBSD servers I monitor in this Nagios installation are all members of the hostgroup ''freebsd-servers''.		I want all my FreeBSD servers to have their ports checked, so I added the hostgroup <code>freebsd-servers</code> to this check. The FreeBSD servers I monitor in this Nagios installation are all members of the hostgroup <code>freebsd-servers</code>.

	== Install the plugin ==		== Install the plugin ==
	Just install the port, easy as it gets. It installs ''/usr/ports/ports-mgmt/portaudit'' as a dependency, by the way:		Just install the port, easy as it gets. It installs <code>/usr/ports/ports-mgmt/[[portaudit]]</code> as a dependency, by the way:
	<pre>		<pre>
	sudo portmaster /usr/ports/net-mgmt/nagios-check_ports/		sudo portmaster /usr/ports/net-mgmt/nagios-check_ports/
Line 32:		Line 32:
	</pre>		</pre>
	== Configuring NRPE ==		== Configuring NRPE ==
	Add the following line to ''/usr/local/etc/nrpe.cfg'':		Add the following line to <code>/usr/local/etc/nrpe.cfg</code>:
	<pre>		<pre>
	command[check_ports]=/usr/local/libexec/nagios/check_ports		command[check_ports]=/usr/local/libexec/nagios/check_ports

Tykling at 19:17, 17 January 2010

2010-01-17T19:17:33Z

← Older revision		Revision as of 19:17, 17 January 2010
Line 8:		Line 8:
	installed packages with known security vulnerabilities.		installed packages with known security vulnerabilities.
	</pre>		</pre>


	== Configuring Nagios ==		== Configuring Nagios ==
	Define a new service on the Nagios server, in ''/usr/local/etc/nagios/objects/services.cfg'':		Define a new service on the Nagios server, in ''/usr/local/etc/nagios/objects/services.cfg'':
Line 33:		Line 31:
	sudo portaudit -F		sudo portaudit -F
	</pre>		</pre>


	== Configuring NRPE ==		== Configuring NRPE ==
	Add the following line to ''/usr/local/etc/nrpe.cfg'':		Add the following line to ''/usr/local/etc/nrpe.cfg'':

Tykling at 19:17, 17 January 2010

2010-01-17T19:17:18Z

← Older revision		Revision as of 19:17, 17 January 2010
Line 2:		Line 2:
	[[category:nagios]]		[[category:nagios]]
	[[category:Ports_Management]]		[[category:Ports_Management]]
	It is possible to monitor servers for outdated or vulnerable ports using Nagios and NRPE:		It is possible to monitor FreeBSD servers for outdated or vulnerable ports using Nagios and NRPE:
	<pre>		<pre>
	$ cat /usr/ports/net-mgmt/nagios-check_ports/pkg-descr		$ cat /usr/ports/net-mgmt/nagios-check_ports/pkg-descr

Tykling at 19:17, 17 January 2010

2010-01-17T19:17:01Z

← Older revision		Revision as of 19:17, 17 January 2010
Line 9:		Line 9:
	</pre>		</pre>

	~~Install the port:~~
	~~<pre>~~
	~~sudo portmaster /usr/ports/net-mgmt/nagios-check_ports/~~
	~~</pre>~~

	~~Add~~ the ~~following line to~~ ''/usr/local/etc/~~nrpe~~.cfg'':		== Configuring Nagios ==
			Define a new service on the Nagios server, in ''/usr/local/etc/nagios/objects/services.cfg'':
	<pre>		<pre>
	~~command[check_ports]=/usr/local/libexec/nagios/~~check_ports		define service{
			use generic-service
			hostgroup_name freebsd-servers
			service_description nrpe_check_ports
			check_command check_nrpe2!check_ports
			}
	</pre>		</pre>

			I want all my FreeBSD servers to have their ports checked, so I added the hostgroup ''freebsd-servers'' to this check. The FreeBSD servers I monitor in this Nagios installation are all members of the hostgroup ''freebsd-servers''.

	~~Remember to restart NRPE after changing~~ the ~~config~~:		== Install the plugin ==
			Just install the port, easy as it gets. It installs ''/usr/ports/ports-mgmt/portaudit'' as a dependency, by the way:
	<pre>		<pre>
	sudo /usr/~~local~~/~~etc~~/~~rc.d~~/~~nrpe2 restart~~		sudo portmaster /usr/ports/net-mgmt/nagios-check_ports/
	</pre>		</pre>

Line 30:		Line 34:
	</pre>		</pre>

	~~Define a service on~~ the ~~Nagios server, in~~ ''/usr/local/etc/~~nagios/objects/services~~.cfg'':
			== Configuring NRPE ==
			Add the following line to ''/usr/local/etc/nrpe.cfg'':
	<pre>		<pre>
	~~define service{~~		command[check_ports]=/usr/local/libexec/nagios/check_ports
	~~use generic-service~~
	~~hostgroup_name freebsd-servers~~
	~~service_description nrpe_check_ports~~
	~~check_command check_nrpe2!~~check_ports
	}
	</pre>		</pre>

	~~I want all my FreeBSD servers~~ to ~~have their ports checked, so I added~~ the ~~hostgroup ''freebsd-servers'' to this check~~.		Remember to restart NRPE after changing the config:
			<pre>
			sudo /usr/local/etc/rc.d/nrpe2 restart
			</pre>

Tykling: moved Check-ports - NRPE portaudit check to Check ports - NRPE portaudit check over redirect

2010-01-17T18:54:46Z

moved Check-ports - NRPE portaudit check to Check ports - NRPE portaudit check over redirect

← Older revision	Revision as of 18:54, 17 January 2010
(No difference)