False positive? (CRITICAL - Time to live exceeded)

[Andreas Ericsson]

Jason Byrns wrote:
>  > You can try check_icmp instead. It will tell you why the ttl count was
>  > exceeded (it can be done either in transmit or in packet re-assembly).
> 
> Verbose result from check_icmp:
> 
> ttl set to 64
> Setting alarm timeout to 10 seconds
> packets: 5, targets: 1
> target_interval: 0.000, pkt_interval 80.000
> crit.rta: 500.000
> max_completion_time: 3400.000
> crit = {500000, 80%}, warn = {200000, 40%}
> pkt_interval: 80000  target_interval: 0  retry_interval: 0
> icmp_pkt_size: 64  timeout: 10
> 90.852 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
> 90.604 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
> 75.332 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
> 86.757 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
> 89.019 ms rtt from [IP.ADD.RE.SS], outgoing ttl: 64, incoming ttl: 52
> icmp_sent: 5  icmp_recv: 5  icmp_lost: 0
> targets: 1  targets_alive: 1
> OK -
> [IP.ADD.RE.SS]: rta 86.513ms, lost 0%|
> rta=86.513ms;200.000;500.000;0; pl=0%;40;80;;
> targets: 1, targets_alive: 1
> 
>  >> $USER1$/check_ping -H $HOSTADDRESS$ -w 3000.0,80% -c 5000.0,100%
>  >> This works just fine
>  >
>  > Define "fine". Does it print exactly one line of output? Does it exit
>  > with the expected exit-code?
> 
> Result from check_ping:
> 
> PING OK - Packet loss = 0%, RTA = 32.21 ms
> 
> Looks the same as from any other host, except the response time changes 
> slightly.
> 
> It seems odd that our current Nagios server seems to get the exact same 
> response from this host, using check_icmp.


Same as what? Same as the above? Same as you got with check_ping?

I expect you ran check_icmp and check_fping from the Nagios server, right?

-- 
Andreas Ericsson                   andreas.ericsson at op5.se
OP5 AB                             www.op5.se
Tel: +46 8-230225                  Fax: +46 8-230231


-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null