[clue-tech] Re: check_by_ssh or check_nrpe

[David L. Willson]

Thanks for the advice, Dave.

I've only got about 30 servers on that site, nowhere near 250, so I think check_by_ssh
will be the way I'll go.  I already have two rolled out NRPE, though, so... maybe I'll
just continue with that... waffle-waffle.

I decided on NSClient++ to receive the check_by_nt requests for Windows.  Not much
waffling there, everything else is dead on the vine.

On Mon, 30 Jun 2008 12:45:32 -0600, David Rudder wrote
> NRPE is definitely lower overhead for both the nagios server and the 
> machine being checked. If you have thousands of remote checks, nrpe is 
> the way to go. Also, I believe nrpe with nsca supports passive checks, 
> where the machine being checked only reports problems. This further 
> reduces load and network bandwidth.
> 
> For small sites, under 250 checks, I'd go with check_by_ssh. For huge 
> sites, use nrpe. For sites in between you'll have to make up your mind 
> based on available network bandwidth, load on machine-being-checked, 
> availability of SSH keys, etc.
> 
> Also, I think nrpe is available for Windows, where SSH daemons for 
> Windows have always been a little squirrely.
> 
> -Dave
> 
> clue-tech-request at cluedenver.org wrote:
> > Message: 4
> > Date: Mon, 30 Jun 2008 11:16:22 -0600
> > From: "David L. Willson" <DLWillson at TheGeek.NU>
> > Subject: [clue-tech] Nagios: check_by_ssh or check_nrpe
> > To: CLUE tech <clue-tech at cluedenver.org>
> > Message-ID: <20080630171218.M14690 at TheGeek.NU>
> > Content-Type: text/plain;	charset=iso-8859-9
> >
> > Anyone here have strong feelings about which is the better default?  It begins to seem
> > to me like check_by_ssh is the better default, because of the much greater difficulty in
> > impersonating the monitoring host to the host running the plugin.
> >
> > -- David
> >   
> > Date: Mon, 30 Jun 2008 11:25:42 -0600
> > From: "David L. Willson" <DLWillson at TheGeek.NU>
> > Subject: Re: [clue-tech] Nagios: check_by_ssh or check_nrpe
> > To: CLUE tech <clue-tech at cluedenver.org>
> > Message-ID: <20080630172321.M97648 at TheGeek.NU>
> > Content-Type: text/plain;	charset=iso-8859-9
> >
> > On Mon, 30 Jun 2008 11:16:22 -0600, David L. Willson wrote
> >   
> >> Anyone here have strong feelings about which is the better default?  It begins 
> >> to seem to me like check_by_ssh is the better default, because of the much 
> >> greater difficulty in impersonating the monitoring host to the host running 
> >> the plugin.
> >>     
> >
> > Let me be more direct:  Is there any good reason to continue to use NRPE?   (Assume no
> > blatant mis-administration of ssh/sshd)
> >
> > -- David
> >
> >
> >
> > ------------------------------
> >
> > _______________________________________________
> > clue-tech mailing list
> > clue-tech at cluedenver.org
> > http://www.cluedenver.org/mailman/listinfo/clue-tech
> >
> > End of clue-tech Digest, Vol 27, Issue 21
> > *****************************************
> >
> 
> _______________________________________________
> clue-tech mailing list
> clue-tech at cluedenver.org
> http://www.cluedenver.org/mailman/listinfo/clue-tech


-- David