Xymon Mailing List Archive search

Port Check on a Server

6 messages in this thread

list Bb · Mon, 22 Apr 2024 08:44:39 -0400 ·
Hello,

I have a system that is running a rsyslog server on a non standard port and is an appliance. I need to check that the several ports are up and listening, however I can not install a client on the system. 

The test would need to be initiated from the xymon server.  I assume I need a custom script, can someone point me in the right direction for this.  Heres nmap output.  Preferably I'd like to check if the port 443, 517,8001, 8002,and 80003 are all open.  If any of those are not open, go red.

PORT     STATE  SERVICE
22/tcp   closed ssh
443/tcp  open   https
517/tcp  open   XXXX
8001/tcp open   XXXX
8002/tcp open   XXXX
8003/tcp open   XXXX
list Torsten Richter · Mon, 22 Apr 2024 15:28:28 +0200 ·
Hi,

maybe you want to check out rports.sh: 
https://github.com/Elfmeterversemmler/XYmonscripts

Regards,
Torsten

Am 22.04.2024 um 14:44 schrieb user-adff70a40333@xymon.invalid:
quoted from Bb
Hello,

I have a system that is running a rsyslog server on a non standard port and is an appliance. I need to check that the several ports are up and listening, however I can not install a client on the system.

The test would need to be initiated from the xymon server.  I assume I need a custom script, can someone point me in the right direction for this.  Heres nmap output.  Preferably I'd like to check if the port 443, 517,8001, 8002,and 80003 are all open.  If any of those are not open, go red.

PORT     STATE  SERVICE
22/tcp   closed ssh
443/tcp  open   https
517/tcp  open   XXXX
8001/tcp open   XXXX
8002/tcp open   XXXX
8003/tcp open   XXXX

-- 
+---------------------------------------------------------+

| E-mail  : user-c862b499d9fa@xymon.invalid			  |
|							  |
| Homepage: https://www.unixadmin.de/			  |
+---------------------------------------------------------+
Download my public key from:
http://keys.gnupg.net/pks/lookup?search=0x899093AC&op=get
list Kris Springer · Mon, 22 Apr 2024 07:51:08 -0600 ·
analysis.cfg has built-in PORT tests. See instructions at
https://xymon.sourceforge.io/xymon/help/manpages/man5/analysis.cfg.5.html

Kris Springer
quoted from Torsten Richter


On 4/22/24 6:44 AM, user-adff70a40333@xymon.invalid wrote:
Hello,

I have a system that is running a rsyslog server on a non standard port and is an appliance. I need to check that the several ports are up and listening, however I can not install a client on the system.

The test would need to be initiated from the xymon server.? I assume I need a custom script, can someone point me in the right direction for this.? Heres nmap output.? Preferably I'd like to check if the port 443, 517,8001, 8002,and 80003 are all open. If any of those are not open, go red.

PORT???? STATE? SERVICE
22/tcp?? closed ssh
443/tcp? open?? https
517/tcp? open?? XXXX
8001/tcp open? ?XXXX
8002/tcp open? ?XXXX
8003/tcp open? ?XXXX

list Bb · Mon, 22 Apr 2024 10:37:15 -0400 ·
I may not fully understand, but I thought that analysis.cfg uses client data sent from the xymon client on the system it is monitoring and analysis.cfg controls what colors etc. that is generated from the client data?
quoted from Kris Springer

On Mon, Apr 22, 2024, at 9:51 AM, Kris Springer wrote:
analysis.cfg has built-in PORT tests. See instructions at
https://xymon.sourceforge.io/xymon/help/manpages/man5/analysis.cfg.5.html

Kris Springer


On 4/22/24 6:44 AM, user-adff70a40333@xymon.invalid wrote:
Hello,

I have a system that is running a rsyslog server on a non standard > port and is an appliance. I need to check that the several ports are > up and listening, however I can not install a client on the system.

The test would need to be initiated from the xymon server.  I assume I > need a custom script, can someone point me in the right direction for > this.  Heres nmap output.  Preferably I'd like to check if the port > 443, 517,8001, 8002,and 80003 are all open. If any of those are not > open, go red.

PORT     STATE  SERVICE
22/tcp   closed ssh
443/tcp  open   https
517/tcp  open   XXXX
8001/tcp open   XXXX
8002/tcp open   XXXX
8003/tcp open   XXXX
list Tom Schmidt · Mon, 22 Apr 2024 08:52:22 -0600 ·
The analysis.cfg file is used to analyze the results sent by the client
monitor.  Since you do not have a Xymon client on the client side, you need
to instead do the port testing from the Xymon server.  This would be put in
the hosts.cfg file.  See
https://xymon.sourceforge.io/xymon/help/manpages/man5/hosts.cfg.5.html
under the "Simple Network Tests" section.  FTP, ssh and https tests are
already standardly built-in.  Since you want to make sure ssh is closed,
use "!ssh" on the hosts.cfg line for the host. For your custom ports, you
could use syntax like ftp:571 if the response on port 571 is similar to
FTP.  You can experiment by using telnet to the ports to see what kind of
response they give, such as "telnet host 571".

Tom
quoted from Bb

On Mon, Apr 22, 2024 at 8:37?AM <user-adff70a40333@xymon.invalid> wrote:
I may not fully understand, but I thought that analysis.cfg uses client
data sent from the xymon client on the system it is monitoring and
analysis.cfg controls what colors etc. that is generated from the client
data?

On Mon, Apr 22, 2024, at 9:51 AM, Kris Springer wrote:

analysis.cfg has built-in PORT tests. See instructions at
https://xymon.sourceforge.io/xymon/help/manpages/man5/analysis.cfg.5.html

Kris Springer


On 4/22/24 6:44 AM, user-adff70a40333@xymon.invalid wrote:
Hello,

I have a system that is running a rsyslog server on a non standard
port and is an appliance. I need to check that the several ports are
up and listening, however I can not install a client on the system.

The test would need to be initiated from the xymon server.  I assume I
need a custom script, can someone point me in the right direction for
this.  Heres nmap output.  Preferably I'd like to check if the port
443, 517,8001, 8002,and 80003 are all open. If any of those are not
open, go red.

PORT     STATE  SERVICE
22/tcp   closed ssh
443/tcp  open   https
517/tcp  open   XXXX
8001/tcp open   XXXX
8002/tcp open   XXXX
8003/tcp open   XXXX

list Stef Coene · Mon, 22 Apr 2024 16:53:06 +0200 ·
Hi,

You can add a new section to etc/protocols.cfg like
[syslog1]
port = 8001

Then just add 'syslog1' to the host in etc/hosts.cfg as an option


Stef
quoted from Tom Schmidt

On 2024-04-22 14:44, user-adff70a40333@xymon.invalid wrote:
Hello,

I have a system that is running a rsyslog server on a non standard port and is an appliance. I need to check that the several ports are up and listening, however I can not install a client on the system.

The test would need to be initiated from the xymon server.? I assume I need a custom script, can someone point me in the right direction for this.? Heres nmap output.? Preferably I'd like to check if the port 443, 517,8001, 8002,and 80003 are all open.? If any of those are not open, go red.

PORT???? STATE? SERVICE
22/tcp?? closed ssh
443/tcp? open?? https
517/tcp? open?? XXXX
8001/tcp open? ?XXXX
8002/tcp open? ?XXXX
8003/tcp open? ?XXXX