Installation guide

TIME_WAIT - The socket is waiting after close for remote shutdown transmission so it may handle
packets still in the network.
CLOSE_WAIT - T he remote side has been shut down and is now waiting for the socket to close.
FIN_WAIT - The socket is closed, and the connection is now shutting down.
ESTABLISHED - T he socket has a connection established.
SYN_RCVD - T he connection request has been received from the network.
This probe can be helpful in finding and isolating network traffic to specific IP addresses or examining
network connections into the monitored system.
The filter parameters for the probe let you narrow the probe's scope. This probe uses the netstat -
ant command to retrieve data. T he Local IP address and Local port parameters use values in
the Local Address column of the output; the Rem ote IP address and Remote port parameters
use values in the Foreign Address column of the output for reporting.
Requirements - T he Red Hat Network monitoring daemon (rhnm d) must be running on the monitored
system to execute this probe.
Table A.27. Linux::TCP Connect ions by State sett ings
Field Value
Local IP address filter pattern list
Local port number filter
Remote IP address filter pattern list
Remote port number filter
Timeout* 15
Critical Maximum Total Connections
Warning Maximum Total Connections
Critical Maximum TIME_WAIT Connections
Warning Maximum TIME_WAIT Connections
Critical Maximum CLOSE_WAIT Connections
Warning Maximum CLOSE_WAIT Connections
Critical Maximum FIN_WAIT Connections
Warning Maximum FIN_WAIT Connections
Critical Maximum ESTABLISHED Connections
Warning Maximum ESTABLISHED Connections
Critical Maximum SYN_RCVD Connections
Warning Maximum SYN_RCVD Connections
A.5.14. Linux::Users
The Linux::Users probe monitors the users of a system and reports the following metric:
Users - The number of users currently logged in.
Requirements - T he Red Hat Network monitoring daemon (rhnm d) must be running on the monitored
system to execute this probe.
Probes
105