SSH, FTP flutter

Richard Galvez richy at daviesinc.com
Sat Sep 16 20:03:33 CEST 2006


Hello everyone,

I have a problem with the sensitivity of the check_ssh and check_ftp
services in my Nagios monitoring. I have a medium sized network of 100+
servers all running ssh and ftp (with the exception of some) and the
service seems to come in and out, in particular with the ssh service
check. I know the problem, it's just that I have scan attacks regularly
on my network (no one gets in though) but I would like to suppress these
alerts as they don't pose an actual problem, just a scan attack. In
particular, the ssh service returns the string "server answer: " when
someone is scanning it, and I would like a way of just making that take
it to warning level rather than critical.

Any ideas? I need to stop this flutter, I get alerted regularly..

Regards,
Richard


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list