18

C
h
a
p
I
c
r
MonIIorIng WIndows Scrvcrs
You dou' a|wavs dca| w|| a |onoucucous sc:vc: |audscac cous|s|uu o |us
L|uux o: L|uux|Uu|x conuc:s. As |ouu as vou a:c |us nou|o:|uu u:c ucwo:|
sc:v|ccs. oc:a|uu svscns na|c uo d|c:cucc. bu | vou wau o uuc:v |oca|.
uou-ucwo:|-caau|c :csou:ccs. |a |s a d|c:cu nac: a|ouc|c:.
w|| Uu|x-uascd svscns suc| as Vac 0S /. vou cau uo:na||v usc |c oo|s dc-
sc:|ucd so a: l|oca| |uu|us. NRPL. NSCA. lu w|udows vou |avc o ud o|c: so|u-
|ous. !o sonc cxcu. |oca| |uu|us cau uc :uu aud|o: con||cd |u au cuv|:ouncu
cnu|a|uu Uu|x lo: cxan|c. Cvuw|u
1
. bccausc o |c d|c:cu |||oso||cs o
|c oc:a|uu svscn an|||cs. |c:c a:c ccu||a:||cs as wc||. cau:cs |u ouc oc:-
a|uu svscn |a a:c uo cona:au|c w|| auv||uu |u |c o|c: oc:a|uu svscn.
So a||ouu| |c w|udows Lvcu|ou u||s nuc| |c sanc u:osc as svs|ou |u Uu|x.
| |s uuc:|cd |u a con|cc|v d|c:cu wav. sccu :on a cc|u|ca| o|u o v|cw. hc:c
vou cauuo s|n|v con||c |c Uu|x |uu|u |u w|udows aud |cu usc |.
1
hllp:llwww.cvuwln.coml
252
18 MonIIorIng WIndows Scrvcrs
0uc nou|o:|uu a:oac| o: w|udows sc:vc:s |s o usc SNVP. o: w||c| V|c:oso
|uc|udcs a ua|vc |n|cncua|ou |a |us uccds o uc |usa||cd. S|ucc |c SNVP
uuc:v o a w|udows aucu docs uo d|c: |u :|uc||c :on |a o o|c: SNVP
aucus. wc :cc: vou o C|ac: 11. auc 177. !|c V|c:oso |n|cncua|ou.
|owcvc:. docs uo a|wavs wo:| :c||au|v w|c:c |c d|s|av o uu:csa:|cu|a:|v
CPU |oad aud |a:d d:|vc sacc|s coucc:ucd.
bu |oca| w|udows :csou:ccs cau a|so uc uuc:|cd | vou |usa|| a sc:v|cc ou |c w|u-
dows sc:vc: |a cau uc add:csscd ovc: |c ucwo:|. !|c sc:v|ccs |uc|udc |S|irrI
aud | |rI. A|c:ua|vc|v. |RPL |1. NRPL cau uc uscd. !||s ocus u |c cu|:c
wo:|d o w|udows sc:||uu. cvc:v w|udows sc:| |a uuc:|cs |oca| :csou:ccs cau
uc cxcudcd so |a | :ov|dcs a :cu:u va|uc aud a ouc-||uc cx ouu. |us as a
Nau|os |uu|u docs.
18.1 NSCllenl and NC Nel
!|c ac|aucs NSC||cu aud NC Nc |usa|| sc:v|ccs |u w|udows |a cau uc uuc:|cd
w|| |c |uu|u chcck_nl. NSC||cu |s o|dc:. no:c w|dc|v cscd. aud |u w|dcs:cad
usc. uu | |s uo |ouuc: uc|uu ac|vc|v dcvc|ocd. !|c |as cu::cu vc:s|ou |s :on
0couc: 2003, |c ac|auc cau uc dowu|oadcd :on |c Nau|os Lxc|auuc.
2
l a|so
:uus |u w|udows N!. w|udows 2000. w|udows /P aud w|udows 2003.
NSC||cu's succcsso:. NC Nc uv !ouv Vou|uc||o.
3
cau :c|acc NSC||cu ou |c
w|udows sc:vc: w||ou |c uccd o c|auuc auv||uu |u |c Nau|os couuu:a-
|ou. !||s ac|auc |s cu::cu|v uc|uu dcvc|ocd vc:v ac|vc|v. aud | |s uascd ou |c
.NL! :ancwo:|. so | :cuu|:cs a |cas w|udows 2000.
w|| |S|irrI++
4
uv V|c|c| Vcd|u |c:c |s vc auo|c: dcvc|oncu u:auc| |a
|s |ucudcd o :c|acc NSC||cu. aud u||nac|v NRPL N! as wc||. bu | docs |avc
|c d|sadvauauc |a | |s uo :uu-cona|u|c w|| NSC||cu o: NC Nc. !|c
:o|cc |s s||| |u a vc:v ca:|v sauc o dcvc|oncu. Lvcu |s au|o: docs uo cu:-
:cu|v :cconncudcd | uc|uu uscd |u a :oduc|ou cuv|:ouncu. w||c| |s w|v wc
s|a|| uo d|scuss | u:|c: |c:c.
18.1.1 lnslallallon
NSCllenl
lo: |c NSC||cu |usa||a|ou. vou uuac| |c a:c||vc nscllcnl_201.zlp. !||s c:cacs
suud|:cco:|cs uancd acco:d|uu o |c a:c||ccu:c. wln_h]4_8ln o: w|udows
2
hllp:llwww.nauloscxchanuc.orulwlndows.40.0.hlml
3
hllp:llwww.shallcrll.comlhC_hcl
4
hllp:llnscplus.sourccoruc.ncll
254
18.1 NSC|IcnI and NC NcI
N! aud wln_2k_XP_8ln o: w|udows 2000 aud ||u|c:. Cov |c coucus o |c
a:o:|ac o|dc: o |c d|:cco:v C:\Prourams\hSCllcnl aud |usa|| NSC||cu :on
|c:c as a sc:v|cc.
C.ProgramsNSClient> pNSClient.exe /install
C.ProgramsNSClient> net start nsclient
Ruuu|uu phSCllcnl.cxc llnslall |usa||s |c sc:v|cc. aud |c sw|c| lunlnslall :c-
novcs |c sc:v|cc aua|u. Us|uu |c sc:v|ccs nauaucncu vou s|ou|d na|c su:c
|a |c oc:a|uu svscn sa:s auona|ca||v.
NSC||cu |as wo a:ancc:s. porl aud password. w|| |c dcau|s porl 1248
aud password nonc. !|c va|ucs cau ou|v uc c|auucd lw|| rcucdll |u |c :cu|s:v
uudc: hKLY_L0CAL_MAChlhL\S0l]wAPL\hSCllcnl\Parms.
NC Nel
bco:c vou |usa|| |c nos cu::cu vc:s|ou :on hllp:llwww.shallcrll.comlhC_
hcl. | |s csscu|a| |a auv :cv|ous vc:s|ou |usa||cd |s :s uu|usa||cd. S|ucc
NC Nc uscs |c V|c:oso lusa||c:. vou do ||s |:ouu| |c sowa:c adn|u|s:a-
|ou u|||v. Lvcu au NSC||cu |a n|u| cx|s s|ou|d uc :cnovcd :s.
0ouu|c c||c||uu ou |c |c hC_hcl_sclup.msl |usa||s |c sc:v|cc. uu vou s|ou|d
c|cc| |u |c sc:v|cc nauaucncu |a | :ca||v |s :uuu|uu. aud w|c|c: o: uo
aulomallc |s cuc:cd as |c sa:|uu vc.
NC Nc |as |c sanc a:ancc:s as NSC||cu. w|| password aud porl. uu |csc
cau a|so uc scc|cd |u |c sc:v|ccs nauaucncu uudc: propcrllcs |u |c Slarl
paramclcrs ||uc.
port 4711 password password
18.1.2 1he chcck_nl plugln
w|cu |usa|||uu |c sauda:d Nau|os |uu|us. |c chcck_nl |uu|u |s auona|ca||v
|oadcd o |c |a:d d:|vc. l ou|v |as |c sanc :auuc o uuc|ous as NSC||cu.
|owcvc:. !o na|c usc o |c cxcus|ous o NC Nc. vou nus dowu|oad |c cx-
cudcd sou:cc codc l|c |c chcck_nl.c :on hllp:llwww.shallcrll.comlhC_hcl
aud con||c | vou:sc|.
!|c acua| ccc |a |c chcck_nl a:ancc:s |avc. dcsc:|ucd uc|ow. dccuds ou
|c connaud |a |s scc|cd w|| |c -v o|ou. aud w||c| vou cau :cad auou
|u no:c dca|| |u Scc|ou 18.1.3 ou auc 3S6.
255
18 MonIIorIng WIndows Scrvcrs
-h cJJrr:: | --hosl=cJJrr::
lP add:css o: |os uanc o |c |os ou w||c| |c NSC||cu|NC Nc |s |u-
sa||cd.
-v rurrcrJ | --varlablc=rurrcrJ
!|c connaud o uc cxccucd.
-p jurI | --porl=jurI
!||s dcucs au a|c:ua|vc o: o: NSC||cu|NC Nc. !|c dcau| |s !CP o:
1248.
-w irIrrr | --warnlnu=irIrrr
!||s dcucs a wa:u|uu ||n|. !||s o|ou |s uo ava||au|c o: a|| connauds.
-c irIrrr | --crlllcal=irIrrr
!|c c:||ca| ||n| o|ou |s a|so uo ava||au|c o: a|| connauds.
-l jcrcrrIrr
!||s |s uscd o: ass|uu a:ancc:s a|ouu. suc| as |c d:|vc o: |c |a:d d:|vc
c|cc| o: |c :occss uanc w|cu c|cc||uu :occsscs.
-d ujIiur
w|cu c|cc||uu sc:v|ccs o: :occsscs. vou cau scc|v scvc:a| sc:v|ccs o:
:occsscs s|nu|aucous|v. No:na||v chcck_nl |cu ou|v s|ows |c dccc-
|vc oucs l-d Sh0wlAlL. !o |avc a|| o |cn d|s|avcd vou nus scc|v
Sh0wALL as |c ujIiur.
-s jc::wurJ
A asswo:d o: au|cu|ca|ou |s ou|v :cuu|:cd | NC Nc o: NSC||cu sa:s
|c co::csoud|uu sc:v|cc w|| |c asswo:d a:ancc:.
-l IirruuI | --llmcoul=IirruuI
Ac: IirruuI sccouds |avc c|ascd. |c |uu|u auo:s |c cs aud :cu:us
|c CRl!lCAL sac. !|c dcau| |s 10 sccouds.
18.1.3 Commands whlch can be run wllh NSCllenl and
NC Nel
lo: |c connauds |u:oduccd |c:c. | na|cs uo d|c:cucc w|c|c: NSC||cu aud
NC Nc |s |usa||cd, |cv cau uc :uu w|| |c uuac|cd chcck_nl.
0uervlng lhe cllenl verslon
!|c vc:s|ou o |c |usa||cd NSC||cu o: NC Nc sc:v|cc |s :cu:ucd uv :uuu|uu |c
connaud
256
18.1 NSC|IcnI and NC NcI
check_nt -H address -v CLIFNTVFRSION
A|| o|c: a:uuncus a:c |uuo:cd.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v CLIENTVERSIoN
NC_Net 2.21 2/12/5
Connaud aud sc:v|cc dcu||ous a:c uo vc:v sccacu|a:. uu |c |ac: |s cx-
:cnc|v uscu| |u dcsc:|u|uu dccudcuc|cs.
define command
command_name check_nt_nsclient
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v CLIENTVERSIoN

define service
host_name winsrv
service_description NSClient
check_command check_nt_nsclient
...

l NSC||cu|NC Nc a||s ou |c w|udows sc:vc:. Nau|os uo:na||v |uo:ns |c ad-

n|u|s:ao: o a|| sc:v|ccs w||c| |avc :csunau|v a||cd. !||s :ou|cn |s s|n||a: o
ouc w|| NRPL. w||c| |u |a casc was so|vcd |:ouu| |c dcu||ou o dccudcu-
c|cs lscc Scc|ou 12.6. auc 234. !||s |s a|so |c casc w|cu us|uu NSC||cu|NC Nc.
define servicedependencv
host_name winsrv
service_description NSClient
dependent_host_name winsrv
dependent_service_description Disks.Load.Memorv
notification_failure_criteria c.u
execution_failure_criteria n

w|| hSCllcnl as a nasc: sc:v|cc ou w||c| |c o|c: sc:v|ccs a:c dccudcu.

Nau|os docs uo :ouu|c |c adn|us w|| ncssaucs :on |csc o|c: sc:v|ccs. as
|ouu as hSCllcnl |s |u a CRl!lCAL o: UNKN0wN sac.
CPl load
how |cavv |c |oad |s ou |c :occsso: |s :cvca|cd uv |c connaud CPuL0Au.
check_nt -H address -v CPULOAD -l interval.warning limit.critical_limit
251
18 MonIIorIng WIndows Scrvcrs
l cxccs a :||c o a:ancc:s. sca:acd uv connas. cous|s|uu o |c |cuu|
o |c |nc |uc:va| |a |s o uc avc:aucd. |u n|uucs. aud |c wo |:cs|o|ds o:
|c wa:u|uu aud c:||ca| ||n|s |u c:ccu. So CPuL0Au. w|| 6,80,00. o:ns |c
avc:auc ovc: vc n|uucs aud |ssucs a wa:u|uu | |c va|uc dcc:n|ucd cxcccds 80
c:ccu. l |c:c |s ovc: 907 CPU |oad. |c connaud :cu:us CRl!lCAL.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v CPULoAD -l 5,5,9
CPU Load 1% 5 min average) | 5 min avg Load=1%:5:9::1
!|c ouu |c:c a|so coua|us add||oua| c:o:naucc daa ac: |c | s|uu. w||c|
Nau|os |uuo:cs |u |c wcu |uc:acc. l vou a:c |uc:cscd |u avc:auc va|ucs ovc:
scvc:a| |uc:va|s. vou |us add u:|c: :||c va|ucs o||ow|uu o |c :s ouc.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v CPULoAD
-l 5,8,9,15,7,8
CPU Load 1% 5 min average) 1% 15 min average) | 5 min avg Load=1
%:8:9::1 15 min avg Load=1%:7:8::1
lu ||s cxan|c CPuL0Au c|cc|s wo |uc:va|s. |c as vc n|uucs aud |c as
1S n|uucs. lu |c sccoud casc |c:c a:c dcv|a|uu ||n| va|ucs. !|c |uu|u a|wavs
:cu:us |c no:c c:||ca| va|uc, o: cxan|c. | :cu:us CRl!lCAL | ouc |uc:va|
|ssucs CRl!lCAL aud |c o|c: |us a wARNlNC.
!|c connaud aud sc:v|cc dcu||ous |c:co:c |oo| |||c ||s.
define command
command_name check_nt_cpuload
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v CPULoAD -l SARG1S

define service
host_name winsrv
service_description CPU Load
check_command check_nt_cpuload!5.8.9.15.7.8
...

Maln memorv usage

w|cu scc|v|uu |c ||n| va|ucs. |c connaud o: nou|o:|uu |c anouu o na|u
ncno:v uscd|u cou:as o CPuL0Au|s uascd ou |c svuax o 'uo:na|' Nau|os
|uu|us.
check_nt -H address -v MFMUSF -w integer -c integer
258
18.1 NSC|IcnI and NC NcI
MLMuSL :cu:us |c ncno:v usauc |u c:ccu. l s|ou|d uc :cncnuc:cd |a w|u-
dows :cc:s |c:c o |c sun o ncno:v aud swa |cs. |a |s. |c cu|:c ava||au|c
v|:ua| ncno:v. !|c connaud cxccs |c wa:u|uu aud c:||ca| ||n|s as c:ccu-
aucs. u|vcu w||ou a c:ccu s|uu.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v MEMUSE
-w 7 -c 9
Memorv usage. total.4221.21Mb - used. 257.4Mb 6%) - free. 474.27Mb 9
4%) | Memorv usage=257.4Mb:221.91:2898.18:.:4221.21
0u |c cxan|c |os. wlnsrv. ou|v s|x c:ccu o |c v|:ua| ncno:v |s uscd. !|c
ac |a |c |vs|ca| s|zc o |c na|u ncno:v |sc| l|c:c. 2S6 Vbvcs |s a|:cadv
cxcccdcd |s uo s|owu |u |c ouu.
l docs uo ucccssa:||v na|c scusc. |owcvc:. o :cuucs |c ncno:v usauc as |u
Uu|x. w|udows :cuu|a:|v swas :ou:an aud daa codc :on |c na|u ncno:v.
cvcu w|cu | s||| |as sa:c :csc:vcs. lu Uu|x. :ou:ans aud daa |aud |u |c swa
a:||ou ou|v | no:c sacc |s :cuu|:cd |au |s cu::cu|v :cc. lu ||s :cscc |c
|oad o |c cu|:c v|:ua| ncno:v |u w|udows |s |c no:c |no:au a:ancc:.
!|c connaud ncu|oucd auovc |s aua|u ac|cd |uo a connaud aud a sc:v|cc
ou|cc.
define command
command_name check_nt_memuse
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v MEMUSE
-w SARG1S -c SARG2S

define service
host_name winsrv
service_description MFM Usage
check_command check_nt_memuse!7!9
...

lard drlve capacllv

!|c |oad ou a |c svscn |s cscd uv uSLuulSKSPACL.
check_nt -H address -v USFDDISKSPACF -l drive letter -w integer -c integer
|u w|udows as||ou. |c |c svscn |s scc|cd as d:|vc |cc:s. |c ||n| va|ucs |u
c:ccu.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v USEDDISKSPACE
-l C -w 7 -c 8
259
18 MonIIorIng WIndows Scrvcrs
C. - total. 4. Gb - used. 2.6 Gb 52%) - free 1.94 Gb 48%) | C. Use
d Space=2.6Gb:2.8:2.2:.:4.
nagios0linux.nagios/libexecS echo s?

lu |c cxan|c. chcck_nl s|ou|d |ssuc a wa:u|uu | d:|vc C |s no:c |au 70 c:ccu

u||. aud a CRl!lCAL | |c |oad cxcccds 807. !|c cu::cu va|uc ||cs a S2 c:ccu.
so chcck_nl |c:co:c :cu:us au 0K. w||c| vou cau c|cc| w|| ccho S!.
!|c co::csoud|uu connaud aud sc:v|cc ou|ccs wou|d |oo| sonc||uu |||c ||s.
define command
command_name check_nt_disk
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v USEDDISKSPACE
-l SARG1S -w SARG2S -c SARG2S

define service
host_name winsrv
service_description Disk_C
check_command check_nt_disk!C!7!8
...

lpllme
how |ouu auo |c |as :cuoo was c:o:ncd |s :cvca|cd uv |c connaud uP]lML.
check_nt -H address -v UPTIMF
0cu|uu a wa:u|uu o: c:||ca| ||n| |s uo oss|u|c. w||c| |s w|v suc| a uuc:v |s
ou|v o: |uo:na|ou u:oscs l|c |uu|u :cu:us c||c: 0K. o: UNKN0wN | | |s
uscd w:ouu|v.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v UPTIME
Svstem Uptime - 17 davs) 9 hours) 54 minutes)
so |c |os wlnsrv |as a|:cadv uccu :uuu|uu o: 17 davs. !|c dcu||ou o |c
co::csoud|uu connaud aud sc:v|cc ou|ccs |s :|v|a|.
define command
command_name check_nt_uptime
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v UPTIME

26u
18.1 NSC|IcnI and NC NcI
define service
host_name winsrv
service_description UPTIMF
check_command check_nt_uptime
...

Slalus ol servlces
!|c cu::cu saus o w|udows sc:v|ccs cau uc c|cc|cd w|| SLPvlCLS]A]L.
check_nt -H address -v SFRVICFSTATF -d SHOWALL -l service1.service2....
!|c o|oua| -d Sh0wALL cusu:cs |a |c ouu cx ||ss a|| sc:v|ccs. l vou
|cavc ||s o|ou ou. |c |uu|u :ov|dcs |uo:na|ou ou|v ou |osc sc:v|ccs |a
a:c ruI :uuu|uu.
!o ud |c uanc o |c sc:v|cc dcsc:||ou o uc scc|cd o: NSC||cu ac: |c -l
o|ou |s uu|c a c|a||cuuc. l |s uo |c Ji:j|cy rcrr w||c| |s d|s|avcd uv |c
sc:v|ccs nauaucncu lc.u.. Poullnu and PAS. |a |s uc|uu souu|. uu |c :cu|s:v
cu:v |a co::csouds o ||s. Acco:d|uu|v vou sca:c| w|| |c Rcu|s:v cd|o:
rcucdll |u |c a:|a| :cc hKLY_L0CAL_MAChlhL\SYS]LM\CurrcnlConlrolScl\
Scrvlccs o: |c uodc w|| |c co::csoud|uu d|s|av uanc. l coua|us |c sc:v|cc
dcsc:||ou uc|uu souu|. w||c| |u |c casc o Poullnu and PAS |s sonc||uu |||c
PcmolcAcccss.
l vou usc NC Nc. vou |avc au cas|c: as|. |c sowa:c acccs uo| |c sc:v|cc
dcsc:||ou aud |c d|s|av uanc. |u w||c| uo d|s|uc|ou |s nadc ucwccu uc:
aud |owc: casc. !|c o||ow|uu wo cxan|cs usc |c d|s|av uanc.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v SERVICESTATE
-l "Routing and RAS"
Routing and RAS. Stopped
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v SERVICESTATE
-l "VNC Server"
All services are running
!|c sc:v|cc RuuIir crJ RAS |s cu::cu|v uo :uuu|uu. aud chcck_nl :cu:us |c
:cu:u va|uc 2 lCRl!lCAL. !|c ac |a |c vNC sc:vc: |s c:o:n|uu |s sc:v|ccs
co::cc|v |s ou|v :cvca|cd |ud|:cc|v w||ou -d Sh0wALL. ou |c o|c: |aud. !|c
|uu|u |c:c :cu:us 0 l0K as |c :cu:u va|uc. Scvc:a| sc:v|ccs cau uc |uc|udcd
|u a s|uu|c connaud. sca:acd uv a conna. !|c co::csoud|uu :cu:u va|uc |s
d|cacd uv |c 'wo:s casc.'
!|c nac||uu connaud aud sc:v|cc ou|ccs |oo| sonc||uu |||c ||s.
261
18 MonIIorIng WIndows Scrvcrs
define command
command_name check_nt_service
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v SERVICESTATE
-l SARG1S

define service
host_name winsrv
service_description Routing and RAS
check_command check_nt_service!Routing and RAS
...

Slalus ol processes
As w|| |c sc:v|ccs. PP0CS]A]L nou|o:s :uuu|uu :occsscs.
check_nt -H address -v PROCSTATF -d SHOWALL -l process1.process2....
!|c :occss uanc. w||c| a|nos a|wavs cuds |u .cxc. |s ucs dcc:n|ucd |u |c
:occss ||s o |c as| nauauc:, uc: aud |owc: casc a:c a|so |uuo:cd |c:c.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v PRoCSTATE
WinVNC.exe,winlogon.exe,notexist.exe
notexist.exe. not running
As w|| |c sc:v|ccs. vou cau a|so scc|v a ||s o scvc:a| :occsscs. sca:acd uv
connas. w||ou -d Sh0wALL. PP0CS]A]L s|ows ou|v |osc :occsscs |a a:c
uo :uuu|uu. |u ||s cxan|c. nolcxlsl.cxc.
!|c co::csoud|uu connaud aud sc:v|cc dcu||ous |oo| |||c ||s.
define command
command_name check_nt_process
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v PRoCSTATE
-d SHOWALL -l SARG1S

define service
host_name winsrv
service_description WinVNC
check_command check_nt_process!winvnc.exe
...

262
18.1 NSC|IcnI and NC NcI
^ge ol lles
l |s wo:| nou|o:|uu |c |nc s|ucc |c |as nod|ca|ou o c:||ca| |cs w||
llLLA0L. a:|cu|a:|v o: |ou |cs aud o|c: |cs |a c|auuc :cuu|a:|v.
check_nt -H address -v FILFAGF -l path -w integer -c
integer
!|c connaud uccds |c |cuanc ouc|c: w|| |s con|cc a|. aud uac|s|as|cs
nus uc douu|cd. as |u C:\\xvz.lou. !|c uu|s o: |:cs|o|d va|ucs a:c n|uucs. aud
| |cv a:c cxcccdcd. llLLA0L w||| |ssuc a wARNlNC o: CRl!lCAL. !|c |nc s|ucc |c
|as nod|ca|ou |s u|vcu uv |c connaud. uv dcau|. |u coc| sccouds lsccouds
s|ucc Jauua:v 1. 1970.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v FILEAGE
-l "C:test.log" -w 1 -c 2
1112158517
nagios0linux.nagios/libexecS echo s?
1
!|c saus cau aua|u uc c|cc|cd w|| ccho S!. hc:c as wc||. |c connaud aud
sc:v|cc dcu||ous do uo |o|d auv scc:cs.
define command
command_name check_nt_fileage
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v FILEAGE
-l SARG1S -w SARG2S -c SARG2S

define service
host_name winsrv
service_description Log file
check_command check_nt_fileage!C. xv.log!6!144
...

18.1.4 ^dvanced luncllons ol NC Nel

NC Nc's :auuc o uuc|ous |s cxaud|uu cousau|v, ||s c|ac: dcsc:|ucs |c
oss|u||||cs |a uo ucvoud NSC||cu o: vc:s|ou 2.21. Vauv o |cn. cscc|a||v |c
LhuM uuc|ous. a:c ou|v su|au|c o: d|:cc usc |u Nau|os |u cxcc|oua| cascs.
bu |cv a:c vc:v uscu| | vou uccd o ud ou |c :cc|sc uanc o a sc:v|cc. a
:occss. o: a irJuw: PrrIurrcrrr uurIrr.
262
18 MonIIorIng WIndows Scrvcrs
!|c cxcus|ous :cuu|:c au u-o-dac chcck_nl |uu|u. w|osc sou:cc codc cous|ss
o a s|uu|c |c. chcck_nl.c. l |s co|cd o |c |a:d d:|vc du:|uu |c |usa||a|ou o
NC Nc. uu | cau a|so uc dowu|oadcd sca:ac|v :on hllp:llwww.shallcrll.coml
nc_ncl.
!|c sou:cc cau cu::cu|v uc con||cd w||ou :ou|cns ou|v |u conu|ua|ou w||
|c cu|:c Nau|os |uu|u ac|auc lscc Scc|ou 1.2. auc 30. !o do ||s. vou ovc:-
w:|c |c cx|s|uu |c chcck_nl.c |u |c suud|:cco:v pluulns w|| |c cxcudcd
vc:s|ou. !|c o|d chcck_nl u|ua:v nus uc dc|ccd, |cu vou :uu makc chcck_nl o
:ccon||c |c sou:cc |c. Ac:wa:ds vou cov |c u|ua:v o |c llbcxcc d|:cco:v
o Nau|os. a|ouu w|| |c o|c: |uu|us.
linux. # cp check_nt.c /usr/local/src/nagios-plugins-1.4/plugins
linux. # cd /usr/local/src/nagios-plugins-1.4/plugins
linux.nagios-plugins-1.4/plugins # rm check_nt
linux.nagios-plugins-1.4/plugins # make check_nt
linux.nagios-plugins-1.4/plugins # cp check_nt /usr/local/nagios/libexec/.
\lndows Perlormance Counler
!|:ouu| so-ca||cd Pc:o:naucc Couuc:s. w|udows :ov|dcs va|ucs o: cvc:v||uu
|u |c svscn |a cau uc cx:csscd |u uunuc:s. |a:d d:|vc usauc. CPU usauc.
uunuc: o |ou|us. uunuc: o c:n|ua| sc:vc: scss|ous. |c |oad ou |c ucwo:|
|uc:acc. aud nauv no:c ||uus.
check_nt -H address -v FNUMCOUNTFR -l category1.category2
l vou on| |c -l a:ancc:. LhuMC0uh]LP w||| d|s|av a ||s o a|| c:o:naucc
couuc: cacuo:|cs.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v ENUMCoUNTER
... Processor: ... Terminal services: .NFT CLR loading procedure: tot
al RAS services: Process: ...
0|c:w|sc. | s|ows a|| couuc:s |u |c cacuo:v scc|cd w|| -l. Scvc:a| cacuo:|cs
a:c sca:acd w|| connas. !|c ]crmlnal scrvlccs cacuo:v coua|us |:cc couuc:
ou|ccs |u a||.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v ENUMCoUNTER
-l Terminal services
Terminal Services. Total Sessions: Active Sessions: Inactive Sessions
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v ENUMCoUNTER
-l "Terminal Services","Process"
Terminal Services. Total Sessions: Active Sessions: Inactive Sessions -
Process. % Processor Time: % User Time: % Privileged Time: Virtual Bvtes
Peak: Virtual Bvtes: Page Faults/sec: Working Set Peak: Working Set: ...
264
18.1 NSC|IcnI and NC NcI
!|c :cc|sc ou|cc uanc |s |no:au o: |ac: usc. |u w||c| |c % s|uu las. o:
cxan|c. |u % Proccssor ]lmc |s a: o |c uanc. l |c couuc: o: cacuo:v
uanc coua|us saccs. vou nus :cncnuc: o |acc | w|||u uuoa|ou na:|s w|cu
o:nu|a|uu |c |c :cuucs.
!|c dcsc:||ou so:cd |u |c w|udows Pc:o:naucc Couuc: ou|ccs a:c s|owu. uv
|c wav. w|| |c connaud LhuMC0uh]LPuLSC.
Scvc:a| couuc: cacuo:|cs coua|u |usauccs. w||c| vou nus scc|v w|cu uuc:v-
|uu a couuc: ou|cc. lo: ||s :casou vou s|ou|d a|wavs c|cc| :s. us|uu |c lh-
S]AhCLS uuc|ou. w|c|c: |c cacuo:v vou wau wo:|s w|| |usauccs.
check_nt -H address -v INSTANCFS -l category1.category2
lo: |c c:n|ua| sc:v|ccs. ||s |s uo |c casc.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v INSTANCES
-l "Terminal Services"
Terminal Services.
!v|ca| cacuo:|cs w|| |usauccs a:c Proccssor o: Proccss.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v INSTANCES
-l "Process"
Process. svchost#6.svchost.Idle.explorer.services....
hc:c | ucconcs aa:cu w|a |s ncau uv |usauccs. w|udows v|cws cvc:v :uu-
u|uu :occss as au |usaucc |u |c Proccss Pc:o:naucc Couuc: cacuo:v. As cau
uc sccu ou auc 364. |c couuc: ou|cc l% Proccssor ]lmc. w||c| coua|us |c
c:ccuauc usc o :occsso: |nc. |s |u ||s cacuo:v. l cau uc uuc:|cd ou|v o: |u-
d|v|dua| |usauccs. suc| as o: |c cxplorcr :occss. o: o: a|| :occsscs ouc|c:
|cu vou scc|v _]olal |uscad o au |usaucc.
lu o:dc: o acccss a w|udows Pc:o:naucc Couuc:. |c:co:c. vou a|wavs uccd o
u|vc |c o||ow|uu dca||s.
categorycounter object
categoryinstance)counter object
!|c |usaucc |s scc|cd ou|v | |c cacuo:v |as |usauccs ava||au|c. !|c:c nus
uc uo sacc ucwccu |c cacuo:v uanc aud |c :s u:ac|c. !|c co::csoud-
|uu uuc:v connaud |s ca||cd C0uh]LP, |c |acc|o|dc: rcrr |s :c|accd uv |c
conu|ua|ou |us dcsc:|ucd.
check_nt -H address -v COUNTFR -l name.format description -w integer -c integer
265
18 MonIIorIng WIndows Scrvcrs
!||s uuc|ou as|s ac: |c w|udows Pc:o:naucc Couuc: ou|cc |a |s scc|cd
ac: |c -l o|ou w|| |s cxac uanc. !|c wa:u|uu aud c:||ca| ||n|s u|vcu as
|ucuc: va|ucs :cc: o |c s|zc ncasu:cd. | au ou|cc |s |uvo|vcd |a |as a c:-
ccuauc uu:c lc.u.. |c :occsso: |oad. |us |nau|uc a c:ccu s|uu addcd o |, |c
uunuc:s o :occsscs. scss|ous. cc.. a:c |us va|ucs |a a:c uo scc|cd |u uu|s.
!|c uunuc: o ac|vc scss|ous |s c|cc|cd w|| |c Acllvc Scsslons ou|cc. o: w||c|
|c:c a:c uo |usauccs.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v CoUNTER
-l "Terminal ServicesActive Sessions"
1
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v CoUNTER
-l "Process{Idle} Processor Time"
98
bccausc |c ldlc |usaucc a|wavs |oo|s a |c d|c:cucc ucwccu uscd aud sa:c
:occsso: |oad. so |a |c sun o |c wo |s a|wavs 100 c:ccu. uuc:v|uu |c
_]olal scudo-|usaucc |u |c sccoud cxan|c docs uo na|c nuc| scusc.
No:na||v C0uh]LP docs uo o:na |s ouu. !||s cau uc c|auucd uv o||ow|uu
|c ou|cc uanc w|| a dcsc:||ou |u |c prlnl o:na.
S
sca:acd :on | w|| a
conna.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v CoUNTER
-l "Process{Idle} Processor Time","Idle Process: .2f "
Idle Process Usage is. 54. % | Idle Process Usage is. %.2f %%=54.
%:.:.:
No ou|v docs ||s causc |c ouu o uc c|ca:c:. | a|so :cu:us add||oua| c:o:-
naucc daa.
!|c Nau|os connaud aud |c co::csoud|uu sc:v|cc dcu||ou |cu |oo| |||c ||s.
define command
command_name check_nt_counter
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v CoUNTER
-lSARGV1

define service
host_name winsrv
service_description Idle Time
check_command check_nt_counter!ProcessIdle)% Processor Time.Idle
2 Process. %.2f %%
...

S
man 8 prlnl
266
18.1 NSC|IcnI and NC NcI
!|c wo uuc|ous C0uh]LP aud lhS]AhCLS a|so uc|ouu o |c NSC||cu :auuc o
uuc|ous. uu |cv a:c cx:cnc|v d|cu| o |aud|c |c:c. l vou wau o usc |cn.
vou a:c wc|| adv|scd o sw|c| o NC Nc.
llsllng processes and servlces
!o ud ou |c uancs o :occsscs. vou cau wo:| vou: wav |:ouu| |c !as|
Vauauc:o: |avc a ||s o a|| :uuu|uu :occsscs d|s|avcd w|| LhuMPP0CLSS.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v ENUMPRoCESS
Svstem Idle Process: Svstem: smss.exe: csrss.exe: winlogon.exe:
services.exe: lsass.exe: svchost.exe: svchost.exe: svchost.exe:
...
!|c cuu|va|cu connaud o: ||s|uu a|| |usa||cd sc:v|ccs |s LhuMSLPvlCL.
check_nt -H host -v FNUMSFRVICF -l typ.short
!|c o|oua| -l :cs:|cs |c ouu o scc|c cacuo:|cs lscc !au|c 18.1.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v ENUMSERVICE
-l manual,short
ALG: AppMgmt: BITS: COMSvsApp: dmadmin: FventSvstem: HTTPFilter:
LPDSVC: MSIServer: Netman: Nla: NtFrs: NtLmSsp: NtmsSvc: RasAuto:
...
w|| |c shorl o|ou. LhuMSLPvlCL d|s|avs |c sc:v|cc uancs as |cv a:c cu-
c:cd |u |c :cu|s:v, | vou |cavc ou |c |cvwo:d. | s|ows |c d|s|av uancs.
1cb|r 18.1.
|iriIir ujIiur: Iur
L|UMSLRV|L
]vpc 0cscrpIon
all a|| sc:v|ccs
runnlnu a|| cu::cu|v ac|vc sc:v|ccs
sloppcd a|| sc:v|ccs w||c| |avc uccu socd
aulomallc sc:v|ccs sa:|uu auona|ca||v
manual sc:v|ccs w||c| nus uc sa:cd nauua||v
dlsablcd d|sau|cd sc:v|ccs
261
18 MonIIorIng WIndows Scrvcrs
0uervlng lhe \lndows evenl log
w|| |c LvLh]L00 connaud. |c w|udows Lvcu Lou cau uc uuc:|cd.
check_nt -H address -v FVFNTLOG -w integer -c integer
-l eventlog.event type.interval.source filter.description filter.
idfilter
Us|uu | docs a|c sonc uc|uu uscd o. |owcvc:.
6
|c :s |:cc a:ancc:s o
o||ow -l sc|cc |c cvcus o uc a|cu |uo accouu uv vc aud uv |nc. !|c |acc-
|o|dc: rvrrI|u |s :c|accd w|| ouc o |c |:cc |ou a:cas appllcallon. sccurllv.
o: svslcm |a vou wau o |oo| a. l LvLh]L00 |s o |uc|udc a|| |:cc. vou |us
scc|v anv, uu vou cauuo c|oosc ou|v wo o |c |:cc a:cas.
lo: |c rvrrI Iyjr vou cau c|oosc :on crror. warnlnu. lnormallon. o: anv o:
a|| |:cc.
lu |acc o irIrrvc| vou scc|v a |nc |uc:va| |u n|uucs. 6 ||n|s |c sc|cc|ou
o cvcus w||c| occu::cd |u |c |as vc n|uucs. o: cxan|c, 1440 sauds o: a
w|o|c dav.
!|c |as |:cc a:ancc:s |u ccc wo:| as |c:s w|| w||c| scc|c :csu|s cau
uc dcc:n|ucd :on |c :csc|cc|ou |a a|| o:|u|uac :on a a:|cu|a: sou:cc
l|c :uurrr f|Irr |acc|o|dc:. |a coua|u a scc|c ac:u |u |c|: dcsc:||ous
lJr:rrijIiur f|Irr. o: |a |avc a scc|c cvcu l0 liJ-f|Irr.
Lac| o |csc |c:s cous|ss o wo a:s. |u |c :s au |ucuc: :cvca|s |ow nauv
sca:c| ac:us a:c o o||ow lo:nu|acd as :cuu|a: cx:css|ous |u acco:daucc w||
|c .NL!-Pcucxp c|ass. aud |cu |c acua| |c: cu:|cs a:c scc|cd. sca:acd
uv connas. l ouc o |c |c:s |s uo uscd. |s |acc|o|dc: |s :c|accd w|| a 0.
w||c| sca:c|cs o: cxac|v zc:o sca:c| ac:us. A sou:cc |c: w||c| ou|v |oo|s o:
hC_hcl cvcus wou|d uc ca||cd 1,hC_hcl, | vou wau o sca:c| o: hC_hcl aud
Pcrlb cvcus. | wou|d uc ca||cd 2,hC_hcl,Pcrlb.
-l anv,anv,6,0,0,0 cva|uacs a|| cu:|cs :on a|| cvcu :auucs :on |c |as vc n|u-
ucs. -l appllcallon,crror,1440,0,0,0 dcc:n|ucs a|| cvcus o |c vc crror. w||c|
occu::cd |u |c cvcu :auuc appllcallon w|||u |c |as 24 |ou:s. w|| -l ap-
pllcallon,crror,0,1,NC_NcI,0,0. |c |nc w|udow |s sc o 60 n|uucs aud |c:s
|c cvcu sou:cc us|uu |c s:|uu hC_hcl. l|ua||v -l appllcallon,anv,0,0,2,sIarI,
sIop,0 sca:c|cs |c cvcu dcsc:||ou o: wo |cvwo:ds. slarl aud slop.
w|| |c wa:u|uu aud c:||ca| ||n|s vou cau scc|v |ownauv nac||uu cu:|cs a:c
uccdcd uco:c |c |uu|u :cu:us a wARNlNC o: CRl!lCAL va|uc. l vou |cavc ou
|csc wo a:ancc:s. Nau|os s|ows 0K as |ouu as ru cvcus occu::cd, o|c:w|sc.
| s|ows CRl!lCAL.
6
Acco:d|uu o ||s owu conncus. au|o: !ouv Vou|uc||o waucd o c|auuc |c svuax o:
dcu|uu sc:v|ccs |u vc:s|ou 2.2S. bu u o aud |uc|ud|uu vc:s|ou 2.28. ||s :cso|u|ou |as uo
vc uccu |n|cncucd.
268
18.1 NSC|IcnI and NC NcI
!|c o||ow|uu cxan|c as|s |ow nauv ncssaucs |c:c wc:c w|||u |c |as 24
|ou:s |u |c appllcallons a:ca.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v EVENTLoG
-l "Application,any,144,,,"
9 Frrors with ID. 121:22:11:612:1111:262194:26:262194:26 LAST -
ID 262194:Not all data for the file DeviceLanmanRedirector were
saved. Possible causes are computer hardware or the network
connection. Please specifv a different file path.
!|c c::o: ncssauc d|s|avcd |c:c LAS] - luu 22104,hol all dala. . . uc|ouus o
|c |as cu:v ouud.
A connaud dcu||ou |a on|s dca||s o wa:u|uu aud c:||ca| ||n|s cou|d |oo|
|||c ||s.
define command
command_name check_nt_eventlog
command_line SUSFR1S/check_nt -H SHOSTADDRFSSS -v EVENTLoG
-l SARG1S

0u ||s uas|s a sc:v|cc cou|d uc dcucd |a. o: cxan|c. sca:c|cs o: c::o:s |u

a|| c|asscs |u |c Svslcm a:ca w||c| occu::cd |u |c as vc n|uucs. lw|cu
scc|v|uu |c |nc c:|od vou s|ou|d ucuc:a||v cusu:c |a | co::c|acs w|| |c
|nc c:|od |u normal_chcck_lnlcrval. !|c sc:v|cc cxan|ucs |c dcsc:||ous o
|c cu:|cs ouud o: |c cx dala loss. !|c sou:cc aud l0 |c:s a:c uo uscd |c:c.
define service
host_name winsrv
service_description Fventlog data loss
check_command check_nt_eventlog!Svstem.anv.5..1.data loss.
is_volatile 1
normal_check_interval 5
max_check_attempts 1
...

Lou |cs |avc |c c|a:acc:|s|c o o|u|uu ou a :ou|cn ou|v oucc uudc: cc:a|u
c|:cunsauccs. cvcu | |c :ou|cn cou|uucs. You nus |c:co:c cusu:c |a
Nau|os |nncd|ac|v na|cs a uo|ca|ou |c :s |nc |c cvcu occu:s. aud |cavcs
ou :ccacd css aud so sacs. !||s cau uc ac||cvcd w|| max_chcck_allcmpls
1. ||s |nncd|ac|v scs o a |a:d sac. aud uo|ca|ou |s u|vcu :|u| awav.
bu | |c |a:d sac :cna|us. ||s wou|d ncau |u :ac|cc |a ucw c::o:s n|u|
occu: |u |c ncau|nc l|c ucx cs ac: vc n|uucs uo |ouuc: :cco:ds |c o|d
sacs. w|||c |c sac |as uo c|auucd, |c adn|u wou|d ou|v uc |uo:ncd aua|u
269
18 MonIIorIng WIndows Scrvcrs
ac: |c nollcallon_lnlcrval |as cx|:cd. lo: suc| cascs. Nau|os |as ava||au|c
|c ls_volalllc a:ancc: lscc Scc|ou 14.S.2. auc 2S7. w|| w||c| |c svscn
:ov|dcs uo|ca|ou ou cvc:v s|uu|c c::o:.
0lsplavlng and manlpulallng lhe NC Nel conlgurallon
!|c LhuMC0hll0 uuc|ou d|s|avs |c cu::cu sc|uus o NC Nc |u a :cadau|c
o:n.
nagios0linux.nagios/libexecS ./check_nt -H winsrv -v ENUMCoNFIG
Date. 16.4.25 18.15.1:
Version. NC_Net 2.21 2/12/5:
NC_Net Config Path. c.Programsshatter itnc_netconfig:
Startup Config. c.Programsshatter itnc_netconfigstartup.cfg:
Debug Log. c.Programsshatter itnc_netconfigdeb.log:
...
Port. 1248:
Pass. None:
...
ualc s|ows |c cu::cu uuc:v dac. vcrslon |c NC Nc vc:s|ou uscd. hC_hcl
Conu Palh dcsc:|ucs |c a| o |c couuu:a|ou d|:cco:v. Slarlup Conu |c
couuu:a|ou |c uscd. ucbuu Lou scc|cs |c |ou |c coua|u|uu |c dcuuuu|uu
ouu. uu ou|v | |c MYuL8u0 lruc a:ancc: |s sc |u |c couuu:a|ou |c.
Porl :cvca|s |c o: ou w||c| NC Nc |s ||scu|uu. aud Pass s|ows w|c|c: a
asswo:d |as uccu uscd o: |c couucc|ou lhonc. uo asswo:d.
!|c:c |s a|so |c connaud C0hll0 o nau|u|ac |c couuu:a|ou o |c NC Nc
|usa||a|ou ovc: |c ucwo:|. lo: :casous o sccu:|v vou s|ou|d usc ||s o: cs
u:oscs ou|v. aud o|c:w|sc |cc |c uuc|ou sw|c|cd o. Acco:d|uu|v vou
s|ou|d |cc |c o||ow|uu dcau| sc |u |c couuu:a|ou |cslarlup.cu.
lock_passive_config true
lock_active_config true
!||s ncaus |a |c couuu:a|ou cauuo uc c|auucd :on |c ous|dc.
0lher luncllons
NC Nc's :auuc o uuc|ous |s u:ow|uu a|| |c |nc. aud o dcsc:|uc a|| |c uuc-
|ous |u dca|| wou|d uccd a sca:ac uoo|. wc'|| |us ncu|ou a cw uu|c uscu|
connauds.
lPLLulSKSPACL
!|c cuu|va|cu o uSLuulSKSPACL lauc 3S9 cxccs |c :cc |a:d d:|vc
caac|v l|uscad o |c uscd sacc |u c:ccu o: wa:u|uu aud c:||ca| ||n|s
21u
18.2 NRPF Ior WIndows: NRPF N1
wMl0uLPY
!||s uuc|ou cuau|cs |c S0L-caau|c wVl
7
daauasc o uc uuc:|cd. w||c|
coua|us |c .NL! couuu:a|ou daa.
wMlC0uh]LP
0u|ccs cona:au|c o |c w|udows c:o:naucc couuc:s a|so cx|s |u |c
wVl a:ca lou|v .NL!, |cv cau uc uuc:|cd w|| ||s.
Pass|vc C|cc|s
l:on vc:s|ou 2.0. NC Nc a|so suo:s ass|vc c|cc|s uascd ou |c NSCA
ncc|au|snlscc C|ac: 14. auc 247. A s|o: docuncua|ou cau uc ouud
|u |c |uc|udcd passlvc.cu |c.
Vo:c |uo:na|ou cau uc ouud |u |c |c rcadmc.hlml. |uc|udcd |u |c |usa||a|ou.
uu | cau a|so uc v|cwcd d|:cc|v a hllp:llwww.shallcrll.comlnc_nclllcslrcad-
mc.hlml.
18.2 NkPl lor \lndows. NkPl N1
w|| NRPL N! |c:c |s a vc:s|ou o |c Nau|os Rcnoc P|uu|u Lxccuo:. |u:oduccd
|u C|ac: 10. o:cd o: w|udows. ls as| |s o cxccuc |uu|us ou |c a:uc
svscn | a a:|cu|a: cs |s ou|v oss|u|c |oca||v aud uo su|au|c ucwo:| :ooco|
cx|ss o uuc:v |c :csou:cc coucc:ucd. As w|| |c Uu|x vc:s|ou. |c dcs|:cd |uu-
|us nus uc |usa||cd |oca||v ou |c a:uc svscn. aa: :on |c dacnou l|u ||s
casc. NRPL N! aud |c css nus uc cuc:cd |u a |oca| couuu:a|ou |c.
NRPL N! |s uascd ou NRPL vc:s|ou 2.0. !||s ncaus |a |c sanc chcck_nrpc
|uu|u cau uc uscd o: uuc:v|uu as |c ouc o: |c Uu|x NRPL.
0u |c luc:uc a sc:|cs o |uu|us cxccuau|c |u w|udows cau uc ouud w||c|
wo:| ouc|c: w|| NRPL N!. !|c :s |acc o |oo| |s aua|u !|c Nau|os Lxc|auuc.
w||c| |as a sca:ac suucacuo:v.
8
0u |c ouc |aud |csc :ou:ans a:c uascd
ou |c sanc sou:cc codc as |c|: Uu|x cuu|va|cus. aud wc:c |us con||cd o:
w|udows. !|c o:cd :ou:ans a|so |uc|udc sonc Pc:| sc:|s. w||c| :cuu|:c au
|usa||cd vc:s|ou o Pc:||u nos cascs |c sc:| |auuuauc w||| :s |avc o uc
|usa||cd.
NRPL N! cau a|so uc uscd o: o|c: u:oscs. oucc |usa||cd ou |c w|udows
sc:vc:. vou cau usc |c ncc|au|sno :uu o|c: sc:|s :cnoc|v. aa: :on Nau|os
|uu|us. l vou wau Nau|os o :csa: a sc:v|cc :cnoc|v |:ouu| |c Lvcu|aud|c:.
||s cau uc douc |us as cas||v w|| NRPL N!.
9
7
S|o: o: irJuw: McrcrrrrI |r:IrurrrIcIiur.
8
hllp:llwww.nauloscxchanuc.orulhPPL_Pluulns..0.hlml
9
!o cxccuc sc:|s :cnoc|v ou a w|udows sc:vc:. vou cau a|so usc |c w|udows vc:s|ou o |c
Sccu:c S|c||. a o|c |a |s oo |a:uc o uo |uo |u ||s uoo|.
211
18 MonIIorIng WIndows Scrvcrs
18.2.1 lnslallallon and conlgurallon
!|c cu::cu z| a:c||vc :on !|c Nau|os Lxc|auuc o: hllp:llwww.mlwl-dv.coml
nrpcnl |s uuac|cd o a su|au|c d|:cco:v. suc| as u:\Prourams\haulos\nrpc_nl.
D.ProgramsNagiosnrpe_nt> unip nrpe_nt..8-bin.ip
l coua|us a suud|:cco:v bln. |u w||c| a:c ouud |c dacnou hPPL_h].cxc. wo
0LLs o: us|uu SSL lllbcav82.dll aud sslcav82.dll. au cxan|c o a s|n|c |uu|u
sc:| llcsl.cmd. aud |c couuu:a|ou |c nrpc.cu.
!|c sc:v|cc |s |usa||cd :on ||s d|:cco:v w|| |c connaud nrpc_nl -l. ac:
w||c| | |us uccds o uc sa:cd. c||c: |u |c w|udows sc:v|ccs nauauc: o: :on
|c connaud ||uc.
D.ProgramsNagiosnrpe_ntbin> nrpe_nt -i
D.ProgramsNagiosnrpe_ntbin> net start nrpe_nt
!|c couuu:a|ou |c nrpc.cu |s ou|v s||u||v d|c:cu :on |c Uu|x vc:s|ou o
NRPL 2.0 lscc Scc|ou 10.3. auc 170. ou|v |c d|:cc|vc lncludc_dlr docs uo
uuc|ou |u NRPL N!.
!|c |c |u w|udows a|so |as |c c|ass|ca| Uu|x cx o:na. so c||c: vou :cuu|:c a
su|au|c cd|o: lnolcpad.cxc |s uo suc|cu o: vou nus cd| | |u L|uux aud cov
| ac:wa:ds o |c cs svscn.
S|ucc |c:c |s uo |uc dacnou |u w|udows. vou nus scc|v |c o: lsauda:d.
scrvcr_porl=6 aud |c |oss :on w||c| NRPL s|ou|d uc add:csscd lvou
s|ou|d ou|v cuc: |c Nau|os sc:vc: |c:c, o: cxan|c. allowcd_hosls=172.17.
120.2
10
|u nrpc.cu. !|c a:ancc:s nrpc_uscr aud nrpc_uroup |avc uo ncau|uu
|u w|udows. aud |c o|c: a:ancc:s co::csoud o |osc d|scusscd |u Scc|ou
10.3.
lu |c dcu||ou o cxccuau|c connauds l|c:c o: |c |uc|udcd cs |uu|u vou
nus :cncnuc: |c w|udows-v|ca| svuax w|| |a:d d:|vc |cc:s aud uac|-
s|as|cs.
command[check_cmd|=D.Programsnagiosnrpe_ntpluginstest.cmd
lu ||s cxan|c |c |uu|us a:c |u a sca:ac suud|:cco:v ca||cd pluulns. Ac:
c|auucs o |c couuu:a|ou |c vou s|ou|d a|wavs :csa: NRPL N!.
D.ProgramsNagiosnrpe_ntbin> net stop nrpe_nt
D.ProgramsNagiosnrpe_ntbin> net start nrpe_nt
10
!||s sccu:|v ncasu:c. |owcvc:. |s :cs:|ccd o a s|n|c cona:|sou o lP add:csscs.
212
18.2 NRPF Ior WIndows: NRPF N1
18.2.2 luncllon lesl
bco:c u|uu NRPL N! |uo sc:v|cc. vou s|ou|d c|cc| w|c|c: | |s uuc|ou|uu
co::cc|v. !o do ||s. :uu |c |uu|u chcck_nl ou |c Nau|os sc:vc: as |c usc:
naulos. w|| |us ouc |os scc|ca|ou aud uo o|c: a:ancc:s.
nagios0linux.nagios/libexecS ./check_nrpe -H winsrv
NRPF_NT v.8/2.
l |c sc:v|cc |as uccu co::cc|v |usa||cd aud couuu:cd. | w||| :c|v w|| a vc:s|ou
uunuc:. Auo|c: s|n|c cs |s c:o:ncd uv |c |uc|udcd lcsl.cmd |uu|u. l
:ov|dcs a s|o: cx aud cuds w|| |c :cu:u va|uc 1.
0echo off
echo hallo from cmd
exit 1
!|c connaud o uc cxccucd ldcucd |u |c :cv|ous scc|ou |s asscd o |c
|uu|u chcck_nl w|| |c -c o|ou.
nagios0linux.nagios/libexecS ./check_nrpe -H winsrv -c check_cmd
hallo from cmd
nagios0linux.nagios/libexecS echo s?
1
!|c :cu:u va|uc. dcc:n|ucd w|| ccho S!. nus uc 1 |u ||s casc. s|ucc |c sc:|
cx|s w|| au cxll 1.
18.2.3 1he Cvgwln pluglns
lu |c Chcck Pluulns wlndows
11
cacuo:v. Nau|os Lxc|auuc |uc|udcs |c Cvu-
wlnPluulns ac|auc o: dowu|oad|uu. l cous|ss o Nau|os sauda:d |uu|us. w||c|
|avc uccu con||cd o: w|udows w|| |c |c| o |c Cvuw|u !oo|s.
12
Aa: :on
|c cxccuau|c |uu|us l.cxc |c ac|auc a|so coua|us a|| |c ucccssa:v 0LLs. l
|s |c:co:c suc|cu o uuac| |c z| a:c||vc |uo a d|:cco:v.
D.Tmp> unip CygwinPlugins1-3-1.ip
D.Tmp> dir NagPlug
check_dummv.exe check_ssh.exe check_udp.exe cvgwin1.dll
check_http.exe check_tcp.exe cvgcrvpto-.9.7.dll negate.exe
check_smtp.exe check_time.exe cvgssl-.9.7.dll urlie.exe
11
hllp:llwww.nauloscxchanuc.orulwlndows.40.0.hlml.
12
!|csc a:c o:cd vc:s|ous o a |a:uc uunuc: o CNU oo|s. |uc|ud|uu con||c:s. ||u:a:|cs. aud
s|c||s. !|au|s o |c|: ocu ||ccusc la CPL dc:|va|vc |cv |avc ucconc au uuoc|a| sauda:d
o: |osc w|o w|s| o o: 0cu Sou:cc :ou:ans :on |c Uu|x wo:|d o w|udows.
212
18 MonIIorIng WIndows Scrvcrs
lo: |c sa|c o s|n||c|v. |us cov |c coucus o |c d|:cco:v |a |s c:cacd.
hauPluu. o |c |uu|u d|:cco:v o NRPL N!.
D.TmpNagPlug> copy * D:ProgramsNagiosnrpe_ntplugins
!|c |uu|u uuc|ous |u |c sanc wav as |u L|uux. !au|c 18.2 :cc:s o |c co::c-
soud|uu scc|ous |u ||s uoo|.
1cb|r 18.2.
ywir P|uir: Iur
|RPL |1
Plugn Pagc 0cscrpIon
chcck_dummv.cxc 1S4 !cs |uu|u
chcck_hllp.cxc 98 Rcac|au|||v o a wcu s|c
chcck_smlp.cxc 92 !cs|uu a na|| sc:vc:
chcck_ssh.cxc 108 SSh ava||au|||v
chcck_lcp.cxc 110 Ccuc:|c |uu|u
chcck_llmc.cxc 146 C|oc| |nc cona:|sou o wo |oss
chcck_udp.cxc 112 Ccuc:|c |uu|u
ncualc.cxc 1SS Ncuacs |c :cu:u va|uc o a |uu|u
urllzc.cxc 1S6 c:cacs a ||u| o |c |uu|u ouu |u |c
Nau|os wcu |uc:acc
As |u Uu|x. cac| o |c co::csoud|uu connaud dcu||ous |u |c couuu:a|ou
|c nrpc.cu nus uc w:|cu ou a s|uu|c ||uc.
command[check_web|=D.Programsnagiosnrpe_ntpluginscheck_http
-H www.swobspace.de
command[check_identd|=D.Programsnagiosnrpe_ntpluginscheck_tcp
-H linux1 -p 112
!|c :s ||uc c|cc|s w|c|c: a wcu sc:vc: |s :uuu|uu ou |c h!!P sauda:d o: 80
o |c |os www.swobspacc.dc. !|c sccoud ||uc css w|c|c: au ldcnld dacnou
l!CP o: 113 |s ac|vc ou |c |os llnux01.
18.2.4 Perl pluglns ln \lndows
Uuo:uuac|v |c Cvuw|u |uu|us do uo coua|u a chcck_plnu o: chcck_lcmp.
You cau usc |c Pc:| sc:| chcck_plnu.pl |uscad. w||c| |s ava||au|c o: dowu|oad
ou !|c Nau|os Lxc|auuc |u |c hclworklnu cacuo:v.
13
l uscs |c Pc:| nodu|c
hcl::Plnu o: |c ucwo:| couucc|ou. lu cou:as o chcck_lcp. chcck_plnu.pl
13
hllp:llwww.nauloscxchanuc.orulhclworklnu.68.0.hlml
214