False positive? (CRITICAL - Time to live exceeded)

Jason Byrns jason-sourceforge at microlnk.net
Fri Oct 28 17:29:29 CEST 2005


 > You can try check_icmp instead. It will tell you why the ttl count was
 > exceeded (it can be done either in transmit or in packet re-assembly).

Verbose result from check_icmp:

ttl set to 64
Setting alarm timeout to 10 seconds
packets: 5, targets: 1
target_interval: 0.000, pkt_interval 80.000
crit.rta: 500.000
max_completion_time: 3400.000
crit = {500000, 80%}, warn = {200000, 40%}
pkt_interval: 80000  target_interval: 0  retry_interval: 0
icmp_pkt_size: 64  timeout: 10
90.852 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
90.604 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
75.332 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
86.757 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
89.019 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
icmp_sent: 5  icmp_recv: 5  icmp_lost: 0
targets: 1  targets_alive: 1
OK -
[IP.ADD.RE.SS]: rta 86.513ms, lost 0%|
rta=86.513ms;200.000;500.000;0; pl=0%;40;80;;
targets: 1, targets_alive: 1

 >> $USER1$/check_ping -H $HOSTADDRESS$ -w 3000.0,80% -c 5000.0,100%
 >> This works just fine
 >
 > Define "fine". Does it print exactly one line of output? Does it exit
 > with the expected exit-code?

Result from check_ping:

PING OK - Packet loss = 0%, RTA = 32.21 ms

Looks the same as from any other host, except the response time changes 
slightly.

It seems odd that our current Nagios server seems to get the exact same 
response from this host, using check_icmp.  But it doesn't throw any alerts.

(Old server specs)
Fedora Core 1
Kernel 2.4.22-1.2199.5.legacy.nptl
nagios-plugins-1.4-2.1.fc1.rf
nagios-1.2-2.1.fc1.rf

Anyway, thanks for your help!  (Anyone have further suggestions or 
advice on solving this problem?)

-- 
Jason Byrns
Production Manager
System Administrator
http://www.MicroLnk.com/
402-328-8600 ext. 653


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list