Page 1 of 1
what nagios plugins?
Posted: Tue Dec 22, 2015 8:23 am
by berhan30
Hallo,
What nagios plugins i can use it to detect any adress connect to my server from outside?
Thinks.
Re: what nagios plugins?
Posted: Tue Dec 22, 2015 10:29 am
by rkennedy
Can you provide a bit more information about what you're trying to do? What OS is your server running?
Re: what nagios plugins?
Posted: Tue Dec 22, 2015 10:43 am
by tmcdonald
I doubt there will be a plugin specifically for this, as that's not really how your typical plugin is meant to operate.
Most plugins check something on a schedule, or when needed. They check CPU usage every 5 minutes, disk usage every hour, etc. This type of event, an address connecting to your server, is very hard to monitor for many reasons. First, it's something that is probably happening several times per minute, which means lots of alerts (potentially). Second, it's hard to define exactly what should be displayed for a given service - do you have a separate host for each potential IP that could contact you? Do you have one service for all connections? If you do the first, you're going to have literally millions of hosts to manage, and if you do it the second way the information will update so frequently that it's almost useless.
The better way to do this is at the firewall level, but even then you run into a similar issue where you're likely to be overloaded with information due to the sheer number of connections.
Re: what nagios plugins?
Posted: Wed Dec 23, 2015 3:27 am
by berhan30
hallo
I want to detect every one try many times to connect to may server (Pirate)
thinks
Re: what nagios plugins?
Posted: Wed Dec 23, 2015 10:39 am
by tmcdonald
There are plenty of plugins for checking various network metrics:
https://exchange.nagios.org/directory/P ... Bandwidth/
and even one to check specific connection types:
https://exchange.nagios.org/directory/P ... ns/details
But I am very doubtful that there is a plugin that will detect every single time someone connects to your machine. As mentioned before, this would best be handled by logging on your firewall.