checkServiceState in 0.3.8 is overloaded with incorrect Perfdata

[dvayntrub@…]

Windows Server standard 2008 64 bit.
Looks like in 0.3.8 the ALL stopped services are shown under Perfdata, and all of those services are stated in ERROR state, even though they all should be ignored and the check itself correclty gives the OK status. With enough services on the system it gets too big and fails to report to check_nrpe.
The truncate option doesn't seem to make any difference.
Below is the nsclient.log

010-06-04 09:24:38: message:modules\FileLogger\FileLogger.cpp:92: Starting to log for: NSClient++ - 0.3.8.72 2010-05-25
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:551: Attempting to start NSCLient++ - 0.3.8.72 2010-05-25
2010-06-04 09:24:38: message:CACHENSClient++.cpp:569: Enabling shared session...
2010-06-04 09:24:38: message:CACHENSClient++.cpp:571: Starting shared session...
2010-06-04 09:24:38: message:CACHEinclude\nsclient_session.hpp:459: Created new master session: channel-server= {Global\NSClientPP_channel_server_write, Global\NSClientPP_channel_server_signal, Global\NSClientPP_channel_server_memory}
2010-06-04 09:24:38: error:CACHEinclude\nsclient_session.hpp:265: Starting session responder for: server
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:703: Found 5 sessions
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:705: Found session: 0 state: 4
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:705: Found session: 1 state: 1
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:705: Found session: 2 state: 0
2010-06-04 09:24:38: message:CACHEinclude\nsclient_session.hpp:386: Creating session for: 2
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:705: Found session: 3 state: 0
2010-06-04 09:24:38: message:CACHEinclude\nsclient_session.hpp:386: Creating session for: 3
2010-06-04 09:24:38: message:CACHEinclude\nsclient_session.hpp:762: 2 says hello (again, probably bad)!
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:705: Found session: 65536 state: 6
2010-06-04 09:24:38: message:CACHEinclude\nsclient_session.hpp:762: 3 says hello (again, probably bad)!
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:969: Loading plugin: CheckDisk...
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:969: Loading plugin: Event log Checker....
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:969: Loading plugin: Helper function...
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:969: Loading plugin: CheckSystem...
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:969: Loading plugin: File logger...
2010-06-04 09:24:38: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:73: Autodetected w2k or later, using w2k PDH counters.
2010-06-04 09:24:38: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:110: Using index to retrive counternames
2010-06-04 09:24:38: message:CACHEmodules\FileLogger\FileLogger.cpp:93: Log path is: C:\nagios
nsclient.log
2010-06-04 09:24:38: debug:CACHENSClient++.cpp:969: Loading plugin: NRPE server (w/ SSL)...
2010-06-04 09:24:38: debug:CACHEmodules\NRPEListener\NRPEListener.cpp:91: Loading all commands (from NRPE)
2010-06-04 09:24:38: debug:CACHEmodules\NRPEListener\NRPEListener.cpp:121: Starting NRPE socket...
2010-06-04 09:24:38: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:130: Found countername: CPU: \Processor(_total)\% Processor Time
2010-06-04 09:24:38: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:131: Found countername: UPTIME: \System\System Up Time
2010-06-04 09:24:38: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:132: Found countername: MCL: \Memory\Commit Limit
2010-06-04 09:24:38: debug:CACHEmodules\CheckSystem\PDHCollector.cpp:133: Found countername: MCB: \Memory\Committed Bytes
2010-06-04 09:24:38: debug:NSClient++.cpp:671: NSCLient++ - 0.3.8.72 2010-05-25 Started!
2010-06-04 09:24:38: debug:include\Socket.h:669: Bound to: 0.0.0.0:5666
2010-06-04 09:24:52: debug:NSClient++.cpp:1106: Injecting: check_service:
2010-06-04 09:24:52: debug:NSClient++.cpp:1106: Injecting: checkServiceState: CheckAll?
2010-06-04 09:24:52: debug:NSClient++.cpp:1142: Injected Result: CRITICAL 'CRITICAL: TBS: stopped (critical)'
2010-06-04 09:24:52: debug:NSClient++.cpp:1143: Injected Performance Result: 'ALG: ERRORANTS Memory Profiler 5 Service: ERRORANTS Performance Profiler 5 Service: ERRORAppinfo: ERRORAppMgmt: ERRORaspnet_state: ERRORAudioEndpointBuilder: ERRORAudioSrv: ERRORBrowser: ERRORCertPropSvc: ERRORclr_optimization_v2.0.50727_32: ERRORclr_optimization_v2.0.50727_64: ERRORCOMSysApp: ERRORCscService: ERRORdot3svc: ERROREapHost: ERRORExchangeDominoConnector: ERRORFCRegSvc: ERRORfdPHost: ERRORFontCache3.0.0.0: ERRORhkmsvc: ERRORidsvc: ERRORIPBusEnum: ERRORKeyIso: ERRORlltdsvc: ERRORMicrosoft Office Groove Audit Service: ERRORMMCSS: ERRORMSExchangeCalCon: ERRORMSFTPSVC: ERRORMSiSCSI: ERRORmsiserver: ERRORMSSQLServerADHelper: ERRORmsvsmon90: ERRORnapagent: ERRORNetman: ERRORNetTcpPortSharing: ERRORodserv: ERROROpenSSHServer: ERRORose: ERRORPeerDistSvc: ERRORPerfHost: ERRORpla: ERRORProtectedStorage: ERRORRasAuto: ERRORRasMan: ERRORRemoteAccess: ERRORRpcLocator: ERRORRSoPProv: ERRORsacsvr: ERRORSCardSvr: ERRORSCPolicySvc: ERRORSessionEnv: ERRORSharedAccess: ERRORslanAccel: ERRORSLUINotify: ERRORSNMPTRAP: ERRORSSDPSRV: ERRORSstpSvc: ERRORswprv: ERRORSysMain: ERRORTapiSrv: ERRORThemes: ERRORTHREADORDER: ERRORTrustedInstaller: ERRORUI0Detect: ERRORUmRdpService: ERRORupnphost: ERRORvds: ERRORVSS: ERRORWAS: ERRORwbengine: ERRORWcsPlugInService: ERRORWdiServiceHost: ERRORWdiSystemHost: ERRORWecsvc: ERRORwercplsupport: ERRORWinHttpAutoProxySvc: ERRORwmiApSrv: ERRORWPDBusEnum: ERRORwudfsvc: ERROR'
2010-06-04 09:24:52: debug:NSClient++.cpp:1142: Injected Result: CRITICAL 'CRITICAL: TBS: stopped (critical)'
2010-06-04 09:24:52: debug:NSClient++.cpp:1143: Injected Performance Result: 'ALG: ERRORANTS Memory Profiler 5 Service: ERRORANTS Performance Profiler 5 Service: ERRORAppinfo: ERRORAppMgmt: ERRORaspnet_state: ERRORAudioEndpointBuilder: ERRORAudioSrv: ERRORBrowser: ERRORCertPropSvc: ERRORclr_optimization_v2.0.50727_32: ERRORclr_optimization_v2.0.50727_64: ERRORCOMSysApp: ERRORCscService: ERRORdot3svc: ERROREapHost: ERRORExchangeDominoConnector: ERRORFCRegSvc: ERRORfdPHost: ERRORFontCache3.0.0.0: ERRORhkmsvc: ERRORidsvc: ERRORIPBusEnum: ERRORKeyIso: ERRORlltdsvc: ERRORMicrosoft Office Groove Audit Service: ERRORMMCSS: ERRORMSExchangeCalCon: ERRORMSFTPSVC: ERRORMSiSCSI: ERRORmsiserver: ERRORMSSQLServerADHelper: ERRORmsvsmon90: ERRORnapagent: ERRORNetman: ERRORNetTcpPortSharing: ERRORodserv: ERROROpenSSHServer: ERRORose: ERRORPeerDistSvc: ERRORPerfHost: ERRORpla: ERRORProtectedStorage: ERRORRasAuto: ERRORRasMan: ERRORRemoteAccess: ERRORRpcLocator: ERRORRSoPProv: ERRORsacsvr: ERRORSCardSvr: ERRORSCPolicySvc: ERRORSessionEnv: ERRORSharedAccess: ERRORslanAccel: ERRORSLUINotify: ERRORSNMPTRAP: ERRORSSDPSRV: ERRORSstpSvc: ERRORswprv: ERRORSysMain: ERRORTapiSrv: ERRORThemes: ERRORTHREADORDER: ERRORTrustedInstaller: ERRORUI0Detect: ERRORUmRdpService: ERRORupnphost: ERRORvds: ERRORVSS: ERRORWAS: ERRORwbengine: ERRORWcsPlugInService: ERRORWdiServiceHost: ERRORWdiSystemHost: ERRORWecsvc: ERRORwercplsupport: ERRORWinHttpAutoProxySvc: ERRORwmiApSrv: ERRORWPDBusEnum: ERRORwudfsvc: ERROR'
2010-06-04 09:24:52: error:modules\NRPEListener\NRPEListener.cpp:325: NRPESocketException: To much data cant create return packet (truncate datat)
2010-06-04 09:25:19: debug:NSClient++.cpp:1106: Injecting: checkVersion:
2010-06-04 09:25:19: debug:NSClient++.cpp:1142: Injected Result: OK '0.3.8.72 2010-05-25'
2010-06-04 09:25:19: debug:NSClient++.cpp:1143: Injected Performance Result:
2010-06-04 09:25:19: debug:NSClient++.cpp:1106: Injecting: check_cpu:
2010-06-04 09:25:19: debug:NSClient++.cpp:1106: Injecting: checkCPU: warn=100, crit=100, time=1m, warn=95, crit=99, time=5m, warn=90, crit=95, time=15m, ShowAll
2010-06-04 09:25:19: debug:NSClient++.cpp:1142: Injected Result: OK 'OK: 1m: 0%, 5m: 0%, 15m: 0%'
2010-06-04 09:25:19: debug:NSClient++.cpp:1143: Injected Performance Result: 1m'=0%;100;100; '5m'=0%;95;99; '15m'=0%;90;95; '
2010-06-04 09:25:19: debug:NSClient++.cpp:1142: Injected Result: OK 'OK: 1m: 0%, 5m: 0%, 15m: 0%'
2010-06-04 09:25:19: debug:NSClient++.cpp:1143: Injected Performance Result: 1m'=0%;100;100; '5m'=0%;95;99; '15m'=0%;90;95; '
2010-06-04 09:25:19: debug:NSClient++.cpp:1106: Injecting: check_ntp_time:
2010-06-04 09:25:20: debug:NSClient++.cpp:1106: Injecting: check_openmanage:
2010-06-04 09:25:20: debug:NSClient++.cpp:1142: Injected Result: OK 'NTP OK: Offset +0.0305321 secs'
2010-06-04 09:25:20: debug:NSClient++.cpp:1143: Injected Performance Result: offset'=+0.0305321s;20;240;
'
2010-06-04 09:25:26: debug:NSClient++.cpp:1142: Injected Result: OK 'OK - System: 'PowerEdge? 2950', SN: '4Z2FPJ1', hardware working fine, 1 logical drives, 2 physical drives<br/>----- BIOS='2.5.0 09/12/2008', DRAC5='1.45', BMC='2.37
2010-06-04 09:25:26: debug:NSClient++.cpp:1143: Injected Performance Result:
2010-06-04 09:25:45: debug:NSClient++.cpp:1106: Injecting: Check_Service: checkall, truncate=1001
2010-06-04 09:25:45: debug:NSClient++.cpp:1106: Injecting: checkServiceState: CheckAll?
2010-06-04 09:25:45: debug:NSClient++.cpp:1142: Injected Result: CRITICAL 'CRITICAL: TBS: stopped (critical)'
2010-06-04 09:25:45: debug:NSClient++.cpp:1143: Injected Performance Result: 'ALG: ERRORANTS Memory Profiler 5 Service: ERRORANTS Performance Profiler 5 Service: ERRORAppinfo: ERRORAppMgmt: ERRORaspnet_state: ERRORAudioEndpointBuilder: ERRORAudioSrv: ERRORBrowser: ERRORCertPropSvc: ERRORclr_optimization_v2.0.50727_32: ERRORclr_optimization_v2.0.50727_64: ERRORCOMSysApp: ERRORCscService: ERRORdot3svc: ERROREapHost: ERRORExchangeDominoConnector: ERRORFCRegSvc: ERRORfdPHost: ERRORFontCache3.0.0.0: ERRORhkmsvc: ERRORidsvc: ERRORIPBusEnum: ERRORKeyIso: ERRORlltdsvc: ERRORMicrosoft Office Groove Audit Service: ERRORMMCSS: ERRORMSExchangeCalCon: ERRORMSFTPSVC: ERRORMSiSCSI: ERRORmsiserver: ERRORMSSQLServerADHelper: ERRORmsvsmon90: ERRORnapagent: ERRORNetman: ERRORNetTcpPortSharing: ERRORodserv: ERROROpenSSHServer: ERRORose: ERRORPeerDistSvc: ERRORPerfHost: ERRORpla: ERRORProtectedStorage: ERRORRasAuto: ERRORRasMan: ERRORRemoteAccess: ERRORRpcLocator: ERRORRSoPProv: ERRORsacsvr: ERRORSCardSvr: ERRORSCPolicySvc: ERRORSessionEnv: ERRORSharedAccess: ERRORslanAccel: ERRORSLUINotify: ERRORSNMPTRAP: ERRORSSDPSRV: ERRORSstpSvc: ERRORswprv: ERRORSysMain: ERRORTapiSrv: ERRORThemes: ERRORTHREADORDER: ERRORTrustedInstaller: ERRORUI0Detect: ERRORUmRdpService: ERRORupnphost: ERRORvds: ERRORVSS: ERRORWAS: ERRORwbengine: ERRORWcsPlugInService: ERRORWdiServiceHost: ERRORWdiSystemHost: ERRORWecsvc: ERRORwercplsupport: ERRORWinHttpAutoProxySvc: ERRORwmiApSrv: ERRORWPDBusEnum: ERRORwudfsvc: ERROR'
2010-06-04 09:25:45: debug:NSClient++.cpp:1142: Injected Result: CRITICAL 'CRITICAL: TBS: stopped (critical)'
2010-06-04 09:25:45: debug:NSClient++.cpp:1143: Injected Performance Result: 'ALG: ERRORANTS Memory Profiler 5 Service: ERRORANTS Performance Profiler 5 Service: ERRORAppinfo: ERRORAppMgmt: ERRORaspnet_state: ERRORAudioEndpointBuilder: ERRORAudioSrv: ERRORBrowser: ERRORCertPropSvc: ERRORclr_optimization_v2.0.50727_32: ERRORclr_optimization_v2.0.50727_64: ERRORCOMSysApp: ERRORCscService: ERRORdot3svc: ERROREapHost: ERRORExchangeDominoConnector: ERRORFCRegSvc: ERRORfdPHost: ERRORFontCache3.0.0.0: ERRORhkmsvc: ERRORidsvc: ERRORIPBusEnum: ERRORKeyIso: ERRORlltdsvc: ERRORMicrosoft Office Groove Audit Service: ERRORMMCSS: ERRORMSExchangeCalCon: ERRORMSFTPSVC: ERRORMSiSCSI: ERRORmsiserver: ERRORMSSQLServerADHelper: ERRORmsvsmon90: ERRORnapagent: ERRORNetman: ERRORNetTcpPortSharing: ERRORodserv: ERROROpenSSHServer: ERRORose: ERRORPeerDistSvc: ERRORPerfHost: ERRORpla: ERRORProtectedStorage: ERRORRasAuto: ERRORRasMan: ERRORRemoteAccess: ERRORRpcLocator: ERRORRSoPProv: ERRORsacsvr: ERRORSCardSvr: ERRORSCPolicySvc: ERRORSessionEnv: ERRORSharedAccess: ERRORslanAccel: ERRORSLUINotify: ERRORSNMPTRAP: ERRORSSDPSRV: ERRORSstpSvc: ERRORswprv: ERRORSysMain: ERRORTapiSrv: ERRORThemes: ERRORTHREADORDER: ERRORTrustedInstaller: ERRORUI0Detect: ERRORUmRdpService: ERRORupnphost: ERRORvds: ERRORVSS: ERRORWAS: ERRORwbengine: ERRORWcsPlugInService: ERRORWdiServiceHost: ERRORWdiSystemHost: ERRORWecsvc: ERRORwercplsupport: ERRORWinHttpAutoProxySvc: ERRORwmiApSrv: ERRORWPDBusEnum: ERRORwudfsvc: ERROR'
2010-06-04 09:25:50: debug:NSClient++.cpp:1106: Injecting: Check_Service: checkall, truncate=1001
2010-06-04 09:25:50: debug:NSClient++.cpp:1106: Injecting: checkServiceState: CheckAll?
2010-06-04 09:25:50: debug:NSClient++.cpp:1142: Injected Result: CRITICAL 'CRITICAL: TBS: stopped (critical)'
2010-06-04 09:25:50: debug:NSClient++.cpp:1143: Injected Performance Result: 'ALG: ERRORANTS Memory Profiler 5 Service: ERRORANTS Performance Profiler 5 Service: ERRORAppinfo: ERRORAppMgmt: ERRORaspnet_state: ERRORAudioEndpointBuilder: ERRORAudioSrv: ERRORBrowser: ERRORCertPropSvc: ERRORclr_optimization_v2.0.50727_32: ERRORclr_optimization_v2.0.50727_64: ERRORCOMSysApp: ERRORCscService: ERRORdot3svc: ERROREapHost: ERRORExchangeDominoConnector: ERRORFCRegSvc: ERRORfdPHost: ERRORFontCache3.0.0.0: ERRORhkmsvc: ERRORidsvc: ERRORIPBusEnum: ERRORKeyIso: ERRORlltdsvc: ERRORMicrosoft Office Groove Audit Service: ERRORMMCSS: ERRORMSExchangeCalCon: ERRORMSFTPSVC: ERRORMSiSCSI: ERRORmsiserver: ERRORMSSQLServerADHelper: ERRORmsvsmon90: ERRORnapagent: ERRORNetman: ERRORNetTcpPortSharing: ERRORodserv: ERROROpenSSHServer: ERRORose: ERRORPeerDistSvc: ERRORPerfHost: ERRORpla: ERRORProtectedStorage: ERRORRasAuto: ERRORRasMan: ERRORRemoteAccess: ERRORRpcLocator: ERRORRSoPProv: ERRORsacsvr: ERRORSCardSvr: ERRORSCPolicySvc: ERRORSessionEnv: ERRORSharedAccess: ERRORslanAccel: ERRORSLUINotify: ERRORSNMPTRAP: ERRORSSDPSRV: ERRORSstpSvc: ERRORswprv: ERRORSysMain: ERRORTapiSrv: ERRORThemes: ERRORTHREADORDER: ERRORTrustedInstaller: ERRORUI0Detect: ERRORUmRdpService: ERRORupnphost: ERRORvds: ERRORVSS: ERRORWAS: ERRORwbengine: ERRORWcsPlugInService: ERRORWdiServiceHost: ERRORWdiSystemHost: ERRORWecsvc: ERRORwercplsupport: ERRORWinHttpAutoProxySvc: ERRORwmiApSrv: ERRORWPDBusEnum: ERRORwudfsvc: ERROR'
2010-06-04 09:25:50: debug:NSClient++.cpp:1142: Injected Result: CRITICAL 'CRITICAL: TBS: stopped (critical)'
2010-06-04 09:25:50: debug:NSClient++.cpp:1143: Injected Performance Result: 'ALG: ERRORANTS Memory Profiler 5 Service: ERRORANTS Performance Profiler 5 Service: ERRORAppinfo: ERRORAppMgmt: ERRORaspnet_state: ERRORAudioEndpointBuilder: ERRORAudioSrv: ERRORBrowser: ERRORCertPropSvc: ERRORclr_optimization_v2.0.50727_32: ERRORclr_optimization_v2.0.50727_64: ERRORCOMSysApp: ERRORCscService: ERRORdot3svc: ERROREapHost: ERRORExchangeDominoConnector: ERRORFCRegSvc: ERRORfdPHost: ERRORFontCache3.0.0.0: ERRORhkmsvc: ERRORidsvc: ERRORIPBusEnum: ERRORKeyIso: ERRORlltdsvc: ERRORMicrosoft Office Groove Audit Service: ERRORMMCSS: ERRORMSExchangeCalCon: ERRORMSFTPSVC: ERRORMSiSCSI: ERRORmsiserver: ERRORMSSQLServerADHelper: ERRORmsvsmon90: ERRORnapagent: ERRORNetman: ERRORNetTcpPortSharing: ERRORodserv: ERROROpenSSHServer: ERRORose: ERRORPeerDistSvc: ERRORPerfHost: ERRORpla: ERRORProtectedStorage: ERRORRasAuto: ERRORRasMan: ERRORRemoteAccess: ERRORRpcLocator: ERRORRSoPProv: ERRORsacsvr: ERRORSCardSvr: ERRORSCPolicySvc: ERRORSessionEnv: ERRORSharedAccess: ERRORslanAccel: ERRORSLUINotify: ERRORSNMPTRAP: ERRORSSDPSRV: ERRORSstpSvc: ERRORswprv: ERRORSysMain: ERRORTapiSrv: ERRORThemes: ERRORTHREADORDER: ERRORTrustedInstaller: ERRORUI0Detect: ERRORUmRdpService: ERRORupnphost: ERRORvds: ERRORVSS: ERRORWAS: ERRORwbengine: ERRORWcsPlugInService: ERRORWdiServiceHost: ERRORWdiSystemHost: ERRORWecsvc: ERRORwercplsupport: ERRORWinHttpAutoProxySvc: ERRORwmiApSrv: ERRORWPDBusEnum: ERRORwudfsvc: ERROR'

[mickem]

Try re-downloading (there is a newer 0.3.8 which fixes this issue)

Michael Medin

[dvayntrub@…]

The 5/27/2010 release of 0.3.8 fixed the problem
Thanks!

[mickem]

Good stuff.. this was something someone else reported "day of release" so I did a quick fix...

Michael Medin