WINDOWS CHECK_CENTREON_NRPE3 SOCKET TIMEOUT

Hello

Socket Timeout means there is a network issue, a firewall rule, something not ok in the config on the target host

nrpe (on linux) or nsclient(on windows) is a service that listen on the tcp port that you have setup in the config on the host. The default is 5666.

please check these points :

1 : make sure the daemon or service is running

2 : make sure on your host that the port is open and listening (netstat -an on windows, netstat -ntaupe on linux, look for a listening port on 5666)

3 : test from the poller “ telnet xxxx 5666 ” (or nc/netcat) to see if it connects to the host

(to be clear on the words : host = the server you want to monitor where you have installed the nrpe daemon, poller = the centreon serveur that has the check_nrpe command)

if all these point are ok, then it may be an issue in the config file.

netstat was to check is the tcp port 5666 was listening.

if you cant telnet 5666 then it’s probably a nsclient.ini problem indeed, did you follow the guide and setup your .ini correctly

here is the default “out of the box” section for nrpe in nsclient.ini

; Section for NRPE (NRPEServer.dll) (check_nrpe) protocol options.
[/settings/NRPE/server]

; COMMAND ARGUMENT PROCESSING - This option determines whether or not the we will allow clients to specify arguments to commands that are executed.
allow arguments = true

; COMMAND ALLOW NASTY META CHARS - This option determines whether or not the we will allow clients to specify nasty (as in |`&><'"\[]{}) characters in arguments.
allow nasty characters = true

; ALLOWED HOSTS - A coma separated list of allowed hosts. You can use netmasks (/ syntax) or * to create ranges.
allowed hosts = 0.0.0.0/0

; PORT NUMBER - Port to use for NRPE.
port = 5666

; Needed for long output, with check_centreon_nrpe
payload length = 8192

; EXTENDED RESPONSE - Send more then 1 return packet to allow response to go beyond payload size (requires modified client).
; extended response = true 

; ALLOW INSECURE CHIPHERS and ENCRYPTION - Only enable this if you are using legacy check_nrpe client.
insecure = true

; ENABLE SSL ENCRYPTION - This option controls if SSL should be enabled.
use ssl = true

make sure you have the payload 8192

change “allowed hosts = 0.0.0.0/0“ by your poller’s IP Adress : 

“allowed hosts = 192.168.x.y “ for example as explained in the documentation : Centreon NSClient++ | Centreon Documentation

then restart the service

mmmh, I personnaly uses nsclient restapi, because of historical and security reasons,

but if you don’t want to use ssl then : then put this in the ini

use ssl = false

and in the command line you need to pass “-n” or “--no-ssl”. --help tell you this :

 -n, --no-ssl                 Do no use SSL

in your case if “use ssl=false” and “-n” in the command line, then there is a network issue

I just tried on a server at home :

• use ssl=false

• no -n option 

=> I get a timeout like you

with -n option : instant reply OK.

(Even if this work, I would still suggest to fix your SSL issues and “use ssl=true”, for security sake.)

then you will need to add the “ -n” option in each host where you have ssl disabled (in the macro nrpe extra options) like this :