Monitoring a non-common-service

[ittec]

Hi folks

Im having a little trouble here. Few days ago I have installed on some servers open source software to prevent SSH brute force attacks: denyhosts.

I would like to monitor when this "service" is running or not. Denyohsts is a kind of python software (if im not wrong).

When I list processes on server I see:

root 17336 0.0 0.0 140668 5756 ? S 11:45 0:00 python /usr/bin/denyhosts.py --daemon --config=/etc/denyhosts/denyhosts.cfg


I don't know the way to monitor this, because is pyhton itself which is running denyhosts.py daemon. I was thinking on create a new item with proc.num but I'm not sure of how do it.

Somebody can help me a little with this?

Thanks guys

[bashman]

You can use:

proc.num[/usr/bin/denyhosts.py]

or:

ps -ef|grep "python /usr/bin/denyhosts.py --daemon --config=/etc/denyhosts/denyhosts.cfg"|grep -v grep > /dev/null 2>&1;echo $?

As a UserParameter command.

[James Wells]

Greetings,

root 17336 0.0 0.0 140668 5756 ? S 11:45 0:00 python /usr/bin/denyhosts.py --daemon --config=/etc/denyhosts/denyhosts.cfg

It really depends on how your system's proc/PID layout looks. Based on the ps output you are showing, the proper way to do it would be;

proc.num[python,,,denyhosts.py]

However, if your system supports setproctitle, then Bashman's code will work. If you are unsure, an alternative would be;

proc.num[,,,denyhosts.py]