Take a look at the PORTS definition in column in the
server/etc/analysis.cfg file. You can count any port by port number or by
state and get graphs too. It uses information delivered by the standard
client in the ports column.
Ralph Mitchell
On Dec 16, 2014 6:33 PM, "Maik Heinelt" <user-4ab5eb34adb2@xymon.invalid> wrote:
Does someone know an add-on what check the CLOSE_WAIT total or threshold
of a server?
This would be a good help to get active against attacks, before the server
gets too busy.
Maik