PDA

View Full Version : Agentd: determine if port is blocked by firewall or the port is not open on host


PaXa
02-02-2010, 12:56
Hello,

There is a need to determine from agentd that remote host:port is
1) Open
2) Closed (host is not listening)
3) Blocked (on the way by Firewall)

All these conditions should be checked using single item. Item 3) is a challenge at the moment. I know this can be determined using exit code of *NIX telnet (as I recall if Connection is refused - port is simply closed and if Timeout - blocked, etc)
I had difficulties with net.tcp.port and net.tcp.service - they simply does not return any value for port that I know is blocked.

I appreciate your feedback. Thanks.

bashman
19-01-2011, 12:51
I have a similar problem:


I had difficulties with net.tcp.port and net.tcp.service - they simply does not return any value for port that I know is blocked.


I know that a port is blocked and Zabbix agent (windows) spends about 15 seconds to return the 0 value.

Zabbix server Timeout=10
Zabbix agent Timeout=3

time zabbix_get -sX.X.X.X -k"net.tcp.port[Y.Y.Y.Y,1433]"
0

real 0m23.113s
user 0m0.000s
sys 0m0.000s

It's related to http://www.zabbix.com/forum/showthread.php?t=7518

bashman
19-01-2011, 13:07
Issue created: https://support.zabbix.com/browse/ZBX-3437

bashman
24-01-2011, 10:04
Any news about this issue?:

https://support.zabbix.com/browse/ZBX-3437

bashman
02-02-2011, 11:06
Any news about fixing this problem?:

https://support.zabbix.com/browse/ZBX-3437