十zabbix监控TCP连接状态

Posted 2021-09-26 哭泣的馒头

一、监控指标

ESTABLISHED       socket已经建立连接

CLOSED            socket没有被使用，无连接

CLOSING           服务器端和客户端都同时关闭连接

CLOSE_WAIT        等待关闭连接

TIME_WAIT         The socket is waiting after close to handle packets still in the network. 表示收到了对方的FIN报文，并发送出了ACK报文，等待2MSL后就可回到CLOSED状态

LAST_ACK          The remote end has shut down, and the socket is closed. Waiting for acknowledgement. 远端关闭，当前socket被动关闭后发送FIN报文，等待对方ACK报文

LISTEN            监听状态

SYN_RECV          接收到SYN报文

SYN_SENT          已经发送SYN报文

FIN_WAIT1         The socket is closed, and the connection is shutting down

FIN_WAIT2          Connection is closed, and the socket is waiting for a shutdown from the remote end.

二、编写脚本

​ss -antp|awk \'{a[$1]++}END{for(i in a)print i,a[i]}\'

​vi /usr/local/etc/zabbix_agentd.conf.d/tcp_status.conf

​UserParameter=tcp.status[*],ss -antp|awk \'{a[$$1]++}END{print a["\'$1\'"]}\'

​重启

killall -9 zabbix_agentd

zabbix_agentd

测试

zabbix_get -s 192.168.10.130 -k tcp.status[LISTEN]

三、web页面配置

分别添加

tcp_status_LISTEN

tcp_status_ESTAB

tcp_status_TIME-WAIT

tcp.status[LISTEN]

tcp.status[ESTAB]

tcp.status[TIME-WAIT]

监控数据