how to monitor netstat, exceeding a # of ESTABLISHED conns?
Posted: Wed Dec 19, 2018 10:31 am
Hi
We had a runaway python.exe process on a critical Windows server that consumed too many resources and caused jobs to fail on it. When I ran "netstat -ano", I saw that there was a single process that had a ton of "ESTABLISHED" connections. The total output of "netstat -ano" just kept on scrolling, so it must have been hundreds or thousands. Once I killed the process, everything went back to normal. How can I get Nagios to monitor for this? Is there any kind of native check out there that I can use to warn me if there are more than a certain number of total "ESTABLISHED" connections or if a single process exceeds more than a specified number of "ESTABLISHED" connections?
What's the best way of going about it?
Thanks a lot.
We had a runaway python.exe process on a critical Windows server that consumed too many resources and caused jobs to fail on it. When I ran "netstat -ano", I saw that there was a single process that had a ton of "ESTABLISHED" connections. The total output of "netstat -ano" just kept on scrolling, so it must have been hundreds or thousands. Once I killed the process, everything went back to normal. How can I get Nagios to monitor for this? Is there any kind of native check out there that I can use to warn me if there are more than a certain number of total "ESTABLISHED" connections or if a single process exceeds more than a specified number of "ESTABLISHED" connections?
What's the best way of going about it?
Thanks a lot.