how to monitor netstat, exceeding a # of ESTABLISHED conns?

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
gornm565
Posts: 72
Joined: Tue Nov 15, 2016 6:11 pm

how to monitor netstat, exceeding a # of ESTABLISHED conns?

Post by gornm565 »

Hi
We had a runaway python.exe process on a critical Windows server that consumed too many resources and caused jobs to fail on it. When I ran "netstat -ano", I saw that there was a single process that had a ton of "ESTABLISHED" connections. The total output of "netstat -ano" just kept on scrolling, so it must have been hundreds or thousands. Once I killed the process, everything went back to normal. How can I get Nagios to monitor for this? Is there any kind of native check out there that I can use to warn me if there are more than a certain number of total "ESTABLISHED" connections or if a single process exceeds more than a specified number of "ESTABLISHED" connections?

What's the best way of going about it?

Thanks a lot.
npolovenko
Support Tech
Posts: 3457
Joined: Mon May 15, 2017 5:00 pm

Re: how to monitor netstat, exceeding a # of ESTABLISHED con

Post by npolovenko »

@gornm565, Please take a look at this plugin(you will need to install the nsclient in order to get it to work).
https://outsideit.net/monitoring-window ... nnections/
Scroll down to the "Nagios" section.
Let me know if you think this could work for you.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
Locked