Monitoring Connection attempts

Matthew Macdonald-Wallace mmw at tiger-computing.co.uk
Wed Mar 5 10:34:20 CET 2008


Hi All,

Before I start coding my own plugin to do this, does anyone know of a
plugin that monitors the number of external connection attempts over a
given period of time for a given service and sends alerts accordingly?

I've noticed on a number of servers that we maintain recently that
there are unauthorised attempts to connect via SSH/FTP.  These appear
in the log files about 2 seconds apart and are obviously automated.  

We've got Logcheck in place which alerts us to this kind of thing
already, however I like the idea of a nice visual/audible alert (we all
use the nagios-plugin for firefox here).

Like I say, if it doesn't exist, I'll try and write it, I just thought
someone might have a way of doing this already!

Cheers,

M.
-- 
|Matthew Macdonald-Wallace
|Tiger Computing Ltd
|"The Linux Specialists"
|
|Tel: 0845 373 3579
|Web: http://www.tiger-computing.co.uk
|
|Registered in England. Company number: 3389961
|Registered address: Wyastone Business Park,
| Wyastone Leys, Monmouth, NP25 3SR

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list