Zabbix 监控TCP的SYN,establised

原创

ihanxiao2100 2014-08-06 11:54:00 ©著作权

文章标签 监控 return systems function 文章分类 数字化转型

©著作权归作者所有：来自51CTO博客作者ihanxiao2100的原创作品，请联系作者获取转载授权，否则将追究法律责任

1、在 agent 端建立脚本，并赋予 zabbix 执行权限

#!/bin/bash

# Script to fetch Netstat statuses for tribily monitoring systems

# Author: hanxiao2100@qq.com

# License: GPLv2

# Set Variables

# Functions to return tcp stats

function tcp {

netstat -n | grep tcp | wc -l

}

function udp {

netstat -n | grep udp | wc -l

}

function icmp {

netstat -n | grep icmp | wc -l

}

function syn {

netstat -n | grep SYN | wc -l

}

function timewait {

netstat -n | grep TIME_WAIT | wc -l

}

function established {

netstat -n | grep ESTABLISHED | wc -l

}

function close {

netstat -n | grep CLOSE | wc -l

}

# Run the requested function

2、添加zabbix_agent用户参数

# Monitor Network status

UserParameter=network.tcp,/usr/local/zabbix_agent/etc/scripts/networkStatus tcp

UserParameter=network.udp,/usr/local/zabbix_agent/etc/scripts/networkStatus udp

UserParameter=network.icmp,/usr/local/zabbix_agent/etc/scripts/networkStatus icmp

UserParameter=network.tcp.syn,/usr/local/zabbix_agent/etc/scripts/networkStatus syn

UserParameter=network.tcp.timewait,/usr/local/zabbix_agent/etc/scripts/networkStatus timewait

UserParameter=network.tcp.established,/usr/local/zabbix_agent/etc/scripts/networkStatus established

UserParameter=network.tcp.close,/usr/local/zabbix_agent/etc/scripts/networkStatus close

到服务端来采集，测试下是不是正常

Zabbix 监控TCP的SYN,establised_function

3、在zabbix 服务端创建模板

Zabbix 监控TCP的SYN,establised_监控_02

Zabbix 监控TCP的SYN,establised_function_03

创建 Applications 应用

Zabbix 监控TCP的SYN,establised_return_04

创建监控项目

Zabbix 监控TCP的SYN,establised_监控_05

Zabbix 监控TCP的SYN,establised_systems_06

Zabbix 监控TCP的SYN,establised_return_07

Zabbix 监控TCP的SYN,establised_监控_08

Zabbix 监控TCP的SYN,establised_systems_09

Zabbix 监控TCP的SYN,establised_return_10

Zabbix 监控TCP的SYN,establised_systems_11

创建图表

Zabbix 监控TCP的SYN,establised_systems_12

4、查看监控数据

Zabbix 监控TCP的SYN,establised_return_13

http://www.linuxidc.com/Linux/2012-06/62870.htm

onitoring network connection states with Zabbix (+ iptables + iptstate)

This is a little howto about displaying some small n’ nice graphs regarding to network connections of your machine. In the way of “Nothing is silly if it involves getting graphs”, the goal of this article is to get a realtime graph showing numbers of current server connections according to protocols,

本文内容英文原文由以下博客作者提供！我做中文说明. 呵呵

http://blog.portwd.com/sysadmin/monitoring-iptables-with-zabbix/

1. iptables, iptstate, zabbix server/agent

2. iptables Zabbix template

3. monitoring scripts

We need to get the template from point 2. and import it to Zabbix sever. Then we will rename it’s application from “Network” to e.g. Network_iptables, due to namespace conflict with default Linux template. Now when we have a possibility to display TCP states and type of connections, let’s fill it with data.

/etc/zabbix_agentd.conf:

UserParameter=iptstate.tcp,/etc/zabbix/scripts/net-tcp

UserParameter=iptstate.tcp.syn,/etc/zabbix/scripts/net-syn

UserParameter=iptstate.tcp.timewait,/etc/zabbix/scripts/net-time-wait

UserParameter=iptstate.tcp.established,/etc/zabbix/scripts/net-established

UserParameter=iptstate.tcp.close,/etc/zabbix/scripts/net-close

UserParameter=iptstate.udp,/etc/zabbix/scripts/net-udp

UserParameter=iptstate.icmp,/etc/zabbix/scripts/net-icmp

Bold font are the names of keys in our newly imported iptables/iptstate zabbix template. Then you need to authorize zabbix user to run iptstate command (potentially without password) and you do it in /etc/sudoers file. Since zabbix agent doesn’t allow to callsudo command directly from it’s config ( you will end up with error log “you must have a tty to run sudo” ), it is also required to turn off “Defaults requiretty” by commenting it out. The scripts which are called in the example above are located in point 3.

#!/bin/bash

est=`sudo iptstate -s | grep ESTABLISHED | wc -l`

echo $est

Output of this simple script is a number of connections which are in ESTABLISHED TCP state. These checks are periodical, so after restarting zabbix-agentd, you’ll get graphs like from beggining of this article. Good part is that you don’t need to be stuck with defaults, you can define some more like this:

iptstate -s -t | head -2 |tail -1 | sed 's/^.*OTHER: //'

上一张我的图吧，还是热呼呼的，呵呵！

第一步，导入zabbix的关于tcp的模版和脚本文件.见附件！

第二步编辑/etc/zabbix_agentd.conf: