Ad Widget

Collapse

I have 1 question about UDP port

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • Tam Dang
    Junior Member
    • Aug 2022
    • 3
    #1

    I have 1 question about UDP port

    Hi guys!
    I am doing simple check with UDP port 123
    key as follows: net.udp.service[ntp,myIP,123]
    As result always return 0 (down)
    When I use the command: nc -zvu 172.16.60.68 123
    The result is as follows: Connection to 172.16.60.68 123 port [udp/ntp] succeeded!
    It means my port 123 has ntp protocol open
    But when monitoring on zabbix, it still returns 0.
    I'm a newbie, have searched for related questions but to no avail. Hope you guys can help me
    Thanks all!
    Tags: None
    • Hamardaban
      Senior Member
      Zabbix Certified SpecialistZabbix Certified Professional
      • May 2019
      • 2713
      #2
      Zabbix is waiting for the correct response from the ntp server
      https://www.zabbix.com/documentation...et.udp.service
      Item net.udp.service parameters
      Sends an SNTP packet over UDP and validates the response according to RFC 4330, section 5. Default port 123 is used if not specified.
      You can use third-party utilities like nmap to detect open UDP ports and transfer data to zabbix.
      Due to the features of the UDP protocol, it is not easy to create a universal solution.
      Last edited by Hamardaban; 12-08-2022, 10:09.

        Comment

        • Tam Dang
          Junior Member
          • Aug 2022
          • 3
          #3
          Originally posted by Hamardaban
          Zabbix is waiting for the correct response from the ntp server
          https://www.zabbix.com/documentation...et.udp.service


          You can use third-party utilities like nmap to detect open UDP ports and transfer data to zabbix.
          Due to the features of the UDP protocol, it is not easy to create a universal solution.
          Thank you so much,
          Is there any way I can monitor the udp port as is the case I am having? it's very important to me right now

            Comment

            • Hamardaban
              Senior Member
              Zabbix Certified SpecialistZabbix Certified Professional
              • May 2019
              • 2713
              #4
              If a zabbix agent is installed on the host, then you can use agent checks net.udp.xxxx (not simple checks!) https://www.zabbix.com/documentation...s/zabbix_agent

              The problem is not new - read at least this https://support.zabbix.com/browse/ZBXNEXT-6501

              Nmap scan specific udp port – Linux Hint
              https://linuxhint.com/nmap_scan_udp_port/
              This tutorial starts by showing how to carry out UDP scans and identify vulnerable candidates to execute RDDOS (Reflective Denial of Service) attacks. This tutorial is optimized for readers looking for a fast implementation of scanning udp ports with nmap.
              Last edited by Hamardaban; 12-08-2022, 10:44.

                Comment

                • Tam Dang
                  Junior Member
                  • Aug 2022
                  • 3
                  #5
                  Originally posted by Hamardaban
                  If a zabbix agent is installed on the host, then you can use agent checks net.udp.xxxx (not simple checks!) https://www.zabbix.com/documentation...s/zabbix_agent

                  The problem is not new - read at least this https://support.zabbix.com/browse/ZBXNEXT-6501

                  https://linuxhint.com/nmap_scan_udp_port/
                  Thank you so much,
                  I will do more research

                    Comment

                    Previous template Next
                    Working...