[Xymon] Can I monitor how many connections are in TIME_WAIT for a specific port

[Root, Paul]

As I said before, this isn't sufficient.

HP NA is so flakey, that this port test would show whether the port answers in the simple case, but it doesn't test that the port actually works for what we need it to do.

I have to have my script test the functionality of the port, not just that it answers.

Thanks for everyone's help. I have what I need to get done what I need.

Paul Root    - Senior Engineer
Managed Services Systems - CenturyLink



> -----Original Message-----
> From: Buchan Milne [mailto:bgmilne at staff.telkomsa.net]
> Sent: Wednesday, January 25, 2012 9:02 AM
> To: xymon at xymon.com
> Cc: Root, Paul
> Subject: Re: [Xymon] Can I monitor how many connections are in
> TIME_WAIT for a specific port
>
> On Tuesday, 24 January 2012 18:13:41 Root, Paul wrote:
> > Hi,
> >         We are monitoring a particular port that we are having issues
> with.
> > 8022, it's a proxy port for HP NA.
> >
> >         Anyway, I have an expect script that goes in and tests the
> > functionality of the port. But when it starts to go bad, this script
> get
> > stuck in TIME_WAIT, along with the users connecting to the port.
> >
> >         So, can I look at the port data before I try connecting, and
> if
> > there are a bunch of TIME_WAIT connections, just skip the test
> entirely?
>
> Why don't you just (in hobbit-clients.cfg or analysis.cfg) use
> something like
> this
>
>         PORT LOCAL=%([.:]389) STATE=TIME_WAIT MIN=0 MAX=750 COL=yellow
>         PORT LOCAL=%([.:]389) STATE=TIME_WAIT TRACK=ldap-wait MIN=0
> MAX=1500
> COL=red
>
> (example taken directly from a similar requirement for monitoring
> highly
> utilised LDAP servers with badly behaving clients - regex could
> probably be
> improved but works fine for my purposes)
>
>
> >         I'm running the test from the xymon server, so I was thinking
> of
> > pulling the data out of xymon directly. Would that by xymoncmd?
>
> Why script around it when built-in features can detect and alert on the
> error
> condition (and provide graphs as well in case you want to correlate the
> exact
> number of connections in a specific state to other events)?
>
> Regards,
> Buchan

This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly
prohibited and may be unlawful.  If you have received this communication
in error, please immediately notify the sender by reply e-mail and destroy
all copies of the communication and any attachments.