Alert for server connection or CLOSE_WAIT threshold?
Does someone know an add-on what check the CLOSE_WAIT total or threshold of a server? This would be a good help to get active against attacks, before the server gets too busy.
Maik
Take a look at the PORTS definition in column in the server/etc/analysis.cfg file. You can count any port by port number or by state and get graphs too. It uses information delivered by the standard client in the ports column.
Ralph Mitchell On Dec 16, 2014 6:33 PM, "Maik Heinelt" <maik at vegasystems.com> wrote:
Does someone know an add-on what check the CLOSE_WAIT total or threshold of a server? This would be a good help to get active against attacks, before the server gets too busy.
Maik
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
for eg. in analysis.cfg
HOST=host1.example.com,host2.example.com PORT STATE=SYN_RECV MIN=0 MAX=100 COLOR=yellow TRACK="SYN_RECV" PORT STATE=ESTABLISHED MIN=0 MAX=500 COLOR=yellow TRACK="EST"
On Tue, Dec 16, 2014 at 3:45 PM, Ralph Mitchell <ralphmitchell at gmail.com> wrote:
Take a look at the PORTS definition in column in the server/etc/analysis.cfg file. You can count any port by port number or by state and get graphs too. It uses information delivered by the standard client in the ports column.
Ralph Mitchell On Dec 16, 2014 6:33 PM, "Maik Heinelt" <maik at vegasystems.com> wrote:
Does someone know an add-on what check the CLOSE_WAIT total or threshold of a server? This would be a good help to get active against attacks, before the server gets too busy.
Maik
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon
participants (3)
-
deepakdeore2004＠gmail.com
-
maik＠vegasystems.com
-
ralphmitchell＠gmail.com