Monitor netstat connection states using nagios.

[asam30 at gmail.com]

Hi All,

I am using check_tcp to check status of a particular port on the server.
This is working good. I would also need to monitor LISTEN status (SYN_RECV)
of that port. for ex,

I have a ldap service running on port 3890, so the command

netstat  -anp  | grep 3890

tcp        0      0 0.0.0.0:3890                     0.0.0.0:*
   LISTEN             16029/java
tcp        0      0 10.121.30.121:3890          10.121.6.1:8831
ESTABLISHED 16029/java
tcp        0      0 10.121.30.121:3890          10.121.6.1:61052
ESTABLISHED 16029/java
tcp      228      0 10.121.30.121:3890          10.121.6.1:49440
ESTABLISHED 16029/java
tcp        0      0 10.121.30.121:3890          10.121.6.1:11664
  SYN_RECV    16029/java

The establish connections are ok to allow, but we need to monitor SYN_RECV
status. If there is any such(SYN_RECV) connection appears, we immediately
get an alert from nagios. Is there any way to monitor such states with
nagios or check_tcp?

I have written some shell script to monitor such events, but also I would
like to integrate that scripts into nagios? Is that possible?

Please help me or provide some suggestions

-- 
Shankar
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://www.monitoring-lists.org/archive/users/attachments/20090409/96fef0f7/attachment.html>
-------------- next part --------------
------------------------------------------------------------------------------
This SF.net email is sponsored by:
High Quality Requirements in a Collaborative Environment.
Download a free trial of Rational Requirements Composer Now!
http://p.sf.net/sfu/www-ibm-com
-------------- next part --------------
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null