Hey everyone.
I'm running zabbix 1.6.1 server and agents on a Debian 4.0r5 server with MySQL monitoring Window computers.
Some monkey of a user is generating lots of internet traffic and I'd like to have a zabbix agent on the workstations monitoring network bytes in/out, a netstat -aon to see who its talking to and a tasklist to compare the PID of the talking network connections.
I'm storing the netstat and tasklist as text, which I plan to just read raw when I see suspicious net in/out from an alert.
Sounds simple, except that for both the output of the system.run["netstat -aon"] and the system.run["tasklist"] gets chopped off at 2018 bytes.
I read in the manual that the text field is supposed to be unlimited length, so I guess I've got a problem somewhere.
Anyone have any suggestions on what I could investigate?
Could someone with a similar setup try the system.run["tasklist"] item and see if it also is chopped at 2018 bytes?
Does anyone have a suggestion for an alternative or better way of approaching my problem?
I'm running zabbix 1.6.1 server and agents on a Debian 4.0r5 server with MySQL monitoring Window computers.
Some monkey of a user is generating lots of internet traffic and I'd like to have a zabbix agent on the workstations monitoring network bytes in/out, a netstat -aon to see who its talking to and a tasklist to compare the PID of the talking network connections.
I'm storing the netstat and tasklist as text, which I plan to just read raw when I see suspicious net in/out from an alert.
Sounds simple, except that for both the output of the system.run["netstat -aon"] and the system.run["tasklist"] gets chopped off at 2018 bytes.
I read in the manual that the text field is supposed to be unlimited length, so I guess I've got a problem somewhere.
Anyone have any suggestions on what I could investigate?
Could someone with a similar setup try the system.run["tasklist"] item and see if it also is chopped at 2018 bytes?
Does anyone have a suggestion for an alternative or better way of approaching my problem?
Comment