Klnagchk: a utility for diagnostics of Network Agent connection properties


Kaspersky Endpoint Security 8 for Linux


Klnagchk: a utility for diagnostics of Network Agent connection properties

Back to "Remote Administration"
2014 Apr 22 ID: 5107

Applies to Kaspersky Endpoint Security 8 for Linux

The utility Klnagchk has been designed to run Network Agent to Administration Server connection diagnostics. The utility should be used on client computers having problems with connecting to Administration Server. The utility allows defining settings used by Network Agent to connect to Administration Server, as well as run simple connection diagnostics.

The utility is included into Network Agent distribution package, and can be found in Network Agent installation folder (/opt/kaspersky/klnagent/bin/klnagchk).

WarningThe utility klnagchk should be executed on a client computer as root. It is recommended to output its execution results into a log file.

The following command line options can be used to run the utility:
-logfile LOGFILE – write all information into the log file named LOGFILE. By default, normal output is used, i.e. the information is displayed on the screen.
-sp – output the text of the password for proxy. The text is not displayed by default.
-savecert CERTFILE – save the certificate used by Network Agent for connecting to Administration Server into the file CERTFILE.
-restart – restart Network Agent upon termination of the utility.

When run, the utility accesses Network Agent configuration files and outputs connection properties:

  • Server address – Administration Server address.
  • Use SSL – use of secure connection to Administration Server, can be 0 or 1.
  • Server SSL ports – ports allowed to use for secure connection to Administration Server (only one port, usually).
  • Server ports – ports allowed to use for standard (non-secure) connection to Administration Server (only one port, usually).
  • Certificate – availability of an Administration Server certificate on the client computer. The certificate may be unavailable if Network Agent never successfully established a connection with Administration Server. Can be 0 or 1.
  • Use proxy – usage of a proxy server. Can be 0 or 1.
  • Proxy location – proxy server address and port, separated with a two-spot.
  • Proxy login – user name used for proxy server authentication.
  • Proxy password – password used for proxy server authentication. It is displayed only when using the option sp.
  • Open UDP port – whether Network Agent uses a UDP port to receive synchronization requests from Administration Server.
  • UDP ports – UDP ports that may be used by Network Agent.
  • Ping period – standard interval between synchronizations, in seconds.
  • Conn timeout – connection timeout.
  • RW timeout – timeout for read/write operations.
The utility then attempts to determine whether the Administration Server is available and makes an attempt to establish connection with it using Network Agent settings. If Administration Server is unavailable, the utility sends an ICMP package to the Administration Server (or proxy server, if any) address and displays the results of the request.

Run on a computer with installed Administration Server, the utility reports that there is a local Administration Server installed instead of making a connection attempt.

Whether the connection has been established successfully or not, the utility attempts to determine if Network Agent is started. If Network Agent service is not started, the utility terminates. If Network Agent service is started, the utility outputs connection statistics:
  • Ping count – number of attempts to connect to Administration Server
  • Succ. Pings – number of successful connection attempts
  • Sync count – number of synchronization attempts
  • Succ. syncs – number of successful synchronization attempts
  • Last ping – date and time of the last connection

Was this information helpful?
Yes No
Thank you


How can we improve this article?

Your feedback will be used for content improvement purposes only. If you need assistance, please contact technical support.

Submit Submit

Thank you for your feedback!

Your suggestions will help improve this article.