[clue-tech] Re: check_by_ssh or check_nrpe

[David Rudder]

NRPE is definitely lower overhead for both the nagios server and the 
machine being checked. If you have thousands of remote checks, nrpe is 
the way to go. Also, I believe nrpe with nsca supports passive checks, 
where the machine being checked only reports problems. This further 
reduces load and network bandwidth.

For small sites, under 250 checks, I'd go with check_by_ssh. For huge 
sites, use nrpe. For sites in between you'll have to make up your mind 
based on available network bandwidth, load on machine-being-checked, 
availability of SSH keys, etc.

Also, I think nrpe is available for Windows, where SSH daemons for 
Windows have always been a little squirrely.

-Dave

clue-tech-request at cluedenver.org wrote:
> Message: 4
> Date: Mon, 30 Jun 2008 11:16:22 -0600
> From: "David L. Willson" <DLWillson at TheGeek.NU>
> Subject: [clue-tech] Nagios: check_by_ssh or check_nrpe
> To: CLUE tech <clue-tech at cluedenver.org>
> Message-ID: <20080630171218.M14690 at TheGeek.NU>
> Content-Type: text/plain;	charset=iso-8859-9
>
> Anyone here have strong feelings about which is the better default?  It begins to seem
> to me like check_by_ssh is the better default, because of the much greater difficulty in
> impersonating the monitoring host to the host running the plugin.
>
> -- David
>   
> Date: Mon, 30 Jun 2008 11:25:42 -0600
> From: "David L. Willson" <DLWillson at TheGeek.NU>
> Subject: Re: [clue-tech] Nagios: check_by_ssh or check_nrpe
> To: CLUE tech <clue-tech at cluedenver.org>
> Message-ID: <20080630172321.M97648 at TheGeek.NU>
> Content-Type: text/plain;	charset=iso-8859-9
>
> On Mon, 30 Jun 2008 11:16:22 -0600, David L. Willson wrote
>   
>> Anyone here have strong feelings about which is the better default?  It begins 
>> to seem to me like check_by_ssh is the better default, because of the much 
>> greater difficulty in impersonating the monitoring host to the host running 
>> the plugin.
>>     
>
> Let me be more direct:  Is there any good reason to continue to use NRPE?   (Assume no
> blatant mis-administration of ssh/sshd)
>
> -- David
>
>
>
> ------------------------------
>
> _______________________________________________
> clue-tech mailing list
> clue-tech at cluedenver.org
> http://www.cluedenver.org/mailman/listinfo/clue-tech
>
> End of clue-tech Digest, Vol 27, Issue 21
> *****************************************
>