[xymon] Making a custom graph

Ralph Mitchell ralphmitchell at gmail.com
Fri Feb 18 18:34:55 CET 2011


On Fri, Feb 18, 2011 at 11:21 AM, Root, Paul <Paul.Root at qwest.com> wrote:

>
> -----Original Message-----
> > From: Buchan Milne [mailto:bgmilne at staff.telkomsa.net]
> > Sent: Friday, February 18, 2011 4:07 AM
> > To: xymon at xymon.com
> > Cc: Root, Paul
> > Subject: Re: [xymon] Making a custom graph
>
> > On Thursday, 17 February 2011 22:58:41 Root, Paul wrote:
> > > Hi,
> > >         I have a simple script that counts the number of connects we
> have
> > > for a certain port. Specifically, the ssh proxy port for HP NA.
> > >
> > > My output looks like this:
> > >
> > > Concurrent SSH Sessions
> > >
> > >
> > >
> > > Sessions : 17
> > >
> > > Proto Recv-Q Send-Q Local Address Foreign Address State
> > > tcp 0 0 :::8022 :::* LISTEN
> > > tcp 0 0 ::ffff:199.168.33.8:8022 ::ffff:10.1.193.70:1810 ESTABLISHED
> > >
> > > I see that I have issues as there are a bunch of colons. I want to
> graph
> > > just the number of sessions for each interval.
> > >
>
> > Is there any reason you aren't using the built-in PORTS feature, e.g.
>
> > # hobbit-clients.cfg
> > HOST=xxx
> >       PORT LOCAL=*:8022 0 STATE=ESTABLISHED TRACK=hpna COL=green
>
> > That would give you a graph with name hpna of established to the local
> 8022
> > port.
>
>
>
> The one problem is that we had a situation where a number of connections
> was stuck in CLOSE-WAIT. I'm guessing this isn't going to track that. Or is
> it?
>
> Can I set STATE to CLOSE-WAIT? The man page suggests not.



The man page says the state can be anything that netstat reports:

STATE=state

Causes only the sockets in the specified state to be included, "state" is
usually LISTEN or ESTABLISHED but can be any socket state reported by the
clients "netstat" command.


As long as netstat gives you CLOSE-WAIT, it should be possible to track it.

Ralph Mitchell
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xymon.com/pipermail/xymon/attachments/20110218/9c0a5809/attachment.html>


More information about the Xymon mailing list