Xymon Mailing List Archive search

argh! Ports

list Galen Johnson
Thu, 17 May 2007 22:06:51 -0400
Message-Id: <user-b70e50f00beb@xymon.invalid>

Jeff Newman wrote:
All,

Quick question. I have tried every permutation I can think of but basically:

Every PORT example I can find has something similar to:

PORT LOCAL=%[.:]22$  (etc...)
or
PORT LOCAL=%[.:](80|443)

No example I have seen has it where you KNOW the IP and you DONT know
the port, such as:

192.168.22.3:???????????

I need the port string to match an IP with an unknown port number.

If I do:
PORT REMOTE=192.168.22.3:1234 (saying that netstat has a 1234 established)
it works fine, but (again pretending on the port #'s) if a netstat had
3 established connections to ports 1234,1111,23521 I only get the
1234. I want all of them.

Ive tried permutations for 2 hours now, and can't figure it out.

Thanks,
Jeff

Have you tried "REMOTE=%192.168.22.3:.*"?  Now, that will most likely get you every port on that IP...which is probably not what you want...it's usually easier to write it for the ports you want...or "EXREMOTE=%192.168.22.3:.*"...

=G=