debugging spiking netstat "failed connection attempts" with iptables

Posted by someara on Server Fault See other posts from Server Fault or by someara
Published on 2010-05-08T03:13:17Z Indexed on 2010/05/08 3:18 UTC
Read the original article Hit count: 491

Filed under:

munin

|

netstat

|

iptables

http://farm4.static.flickr.com/3305/4588110530_a60c934289_o.png

This graph is munin collecting netstat -s output.

I want to determine where the connections are coming from. There is nothing obvious in wireshare dumps.

It's been a while since I've done anything fancy with iptables. How can I go about logging these?

Thanks

-s

© Server Fault or respective owner

Related posts about munin

Installing Munin on Centos 6

as seen on Server Fault - Search for 'Server Fault'
I've hit problems installing munin on Centos 6. This seems to be a conflict between parts of Perl. I think the version of Perl is newer on Centos 6 (v5.10.1) When installing munin via yum I get errors relating to perl dependencies as below. I'm not a big enough whiz at yum or rpm to figure out the… >>> More
Munin not creating HTML files in Ubuntu Server 14.04

as seen on Server Fault - Search for 'Server Fault'
I have used munin in several servers and this is the first time is taking me so much time to set it up. When I telnet munin directly, I can list the services, there is no error at the logs and munin its being updated every 5 minutes. However no html files are created. I'm using the default location… >>> More
Munin email notification

as seen on Server Fault - Search for 'Server Fault'
I am trying to get munin to notify me via email. I have configured munin and it reports critical and warning values but no alerts are being sent neither is any script being called. Can you please help me out with this? I have included part of the munin.conf below # Drop [email protected] and… >>> More
Evaluate a Munin graph defined in munin.conf

as seen on Server Fault - Search for 'Server Fault'
Hi, I have defined an additional graph (in Munin, munin.conf) that calculates the total size of my MySQL database. The index and data sizes are extracted from an external plugin. The definition looks like this: [...] [Database;my.host.com] address my.host.com use_node_name yes dbsize… >>> More
Munin-cron fails "Nothing to do", possibly a munin.conf problem?

as seen on Server Fault - Search for 'Server Fault'
I have been working on this for a few hours now, and haven't yet been able to get munin to output the html files/generated graphs of resource usage on my CentOS 5.3 server. Here are some things I run as the munin user, and the results: /usr/share/munin/munin-update --nofork --debug (above works… >>> More

Related posts about netstat

SMB starts but didn't show up in netstat

as seen on Server Fault - Search for 'Server Fault'
I've running an SMB server at a SLES 10 server. The SMB server starts up well without error messages in log files. But it didn't show up when I try to check with netstat if the smb server is listening at the designated ports. I've no more ideas about how to fix this problem. Note - the SMB server… >>> More
debugging spiking netstat "failed connection attempts" with iptables

as seen on Server Fault - Search for 'Server Fault'
http://farm4.static.flickr.com/3305/4588110530_a60c934289_o.png This graph is munin collecting netstat -s output. I want to determine where the connections are coming from. There is nothing obvious in wireshare dumps. It's been a while since I've done anything fancy with iptables. How can I go… >>> More
Netstat -i redirection problem

as seen on Super User - Search for 'Super User'
Hi ..When I run this command netstat -t 1 -i 2>&1 > $NETStat_OUT_FILE & inside a script , the output of netstat does not get redirected to the file.. Could any one find a solution for this ? >>> More
Why netstat reporting incorrect machine names?

as seen on Server Fault - Search for 'Server Fault'
I need to investigate what clients connected to my application and I am using the netstat command for this. I noticed that sometimes it does not report me the correct machine name. Why this is happening? Is there a better way to get the list of clients connected to my server? >>> More
Netstat -ban (or -oan) equivalent in C#

as seen on Stack Overflow - Search for 'Stack Overflow'
I'd like to know if a particular process is using a given port, i.e. netstat -ban. I came across using IPGlobalProperties to get the list of active connections, but this doesn't seem to include process information. It would be nice if there exists some class in C# that lets me do this programmatically… >>> More