IP Conntrack monitoring

[Alives]

I use this template/script to graph the number of IP connections on a host at any given time.

You can use it for localhost or a remote host. It checks remote hosts using ssh so you will need to have keys installed without a passphrase. This is a big security risk and I do not advise it (I still do it and accept the dangers but only on my local lan).


To install, copy the ip_conntrack.sh script to your cacti/scripts/ directory and give it executable permissions. If you are using this to monitor a host other than the localhost, you will need to set up ssh keys. You also need to allow the user running cacti sudo access to cat the ip_conntrack table. Add the following to your sudoers file:

Code: Select all

www-data ALL=NOPASSWD: /bin/cat /proc/net/ip_conntrack

[psynode]

using wc -l /proc/net/ip_conntrack is a bad idea, as if you use this for a large router/nat firewall this number will get high

the count i already done in proc so use:
cat /proc/sys/net/ipv4/netfilter/ip_conntrack_count

Cheers