SSH, FTP flutter

Richard Galvez richy at daviesinc.com
Sun Sep 17 22:14:16 CEST 2006


To elaborate on the issue and update my current progress:

I enabled flap detection and now get a threshold parameter for every
host, as well as a percentage that I read about in the doc. My issue is
however, that I need to set up the flap detection for the "service" not
for the host. Any ideas?

Richard

On Sat, 2006-09-16 at 14:03 -0400, Richard Galvez wrote:
> Hello everyone,
> 
> I have a problem with the sensitivity of the check_ssh and check_ftp
> services in my Nagios monitoring. I have a medium sized network of 100+
> servers all running ssh and ftp (with the exception of some) and the
> service seems to come in and out, in particular with the ssh service
> check. I know the problem, it's just that I have scan attacks regularly
> on my network (no one gets in though) but I would like to suppress these
> alerts as they don't pose an actual problem, just a scan attack. In
> particular, the ssh service returns the string "server answer: " when
> someone is scanning it, and I would like a way of just making that take
> it to warning level rather than critical.
> 
> Any ideas? I need to stop this flutter, I get alerted regularly..
> 
> Regards,
> Richard
> 
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null
> 
> !DSPAM:450c3c83101876312921047!
> 


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list