{"id":750,"date":"2021-07-29T14:50:21","date_gmt":"2021-07-29T06:50:21","guid":{"rendered":"https:\/\/egonlin.com\/?p=750"},"modified":"2021-07-30T10:43:58","modified_gmt":"2021-07-30T02:43:58","slug":"%e7%ac%ac%e4%ba%8c%e8%8a%82%ef%bc%9a%e6%89%b9%e9%87%8f%e5%88%9b%e5%bb%ba%e8%87%aa%e5%ae%9a%e4%b9%89%e7%9b%91%e6%8e%a7%e9%a1%b9","status":"publish","type":"post","link":"https:\/\/egonlin.com\/?p=750","title":{"rendered":"\u7b2c\u4e8c\u8282\uff1a\u6279\u91cf\u521b\u5efa\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879"},"content":{"rendered":"

\u6279\u91cf\u521b\u5efa\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879<\/h1>\n

\u4e00\u3001\u975ezabbix\u76d1\u63a7\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879<\/h2>\n

1\u3001\u9700\u8981\u76d1\u63a7\u7684tcp\u5341\u4e00\u79cd\u72b6\u6001<\/h3>\n
ESTABLISHED\nSYN_SENT\nSYN_RECV\nFIN_WAIT1\nFIN_WAIT2\nTIME_WAIT\nCLOSE\nCLOSE_WAIT\nLAST_ACK\nLISTEN\nCLOSING<\/code><\/pre>\n
2\u3001\u547d\u4ee4\u884c\u76d1\u63a7<\/h3>\n
[root@web01 ~]# netstat -ant|grep -c ESTABLISHED\n1\n\n[root@web01 ~]# netstat -ant|grep -c SYN_SENT\n0\n....<\/code><\/pre>\n
\u4e8c\u3001\u624b\u52a8\u6279\u91cf\u521b\u5efa\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879<\/h2>\n
1\uff09\u5c06\u5341\u4e00\u79cd\u72b6\u6001\u5199\u5165\u4e00\u4e2a\u6587\u4ef6<\/h3>\n
[root@zabbix ~]# vim tcps.txt\nESTABLISHED\nSYN_SENT\nSYN_RECV\nFIN_WAIT1\nFIN_WAIT2\nTIME_WAIT\nCLOSE\nCLOSE_WAIT\nLAST_ACK\nLISTEN\nCLOSING<\/code><\/pre>\n
2)\u4f7f\u7528\u5faa\u73af\u521b\u5efa\u5b50\u914d\u7f6e\u6587\u4ef6\uff0c\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879key<\/h3>\n
[root@zabbix ~]# for n in `cat tcps.txt`; do echo "UserParameter=$n,netstat -ant |grep -c $n">>\/etc\/zabbix\/zabbix_agentd.d\/user_def.conf ;done\n[root@zabbix ~]# cat \/etc\/zabbix\/zabbix_agentd.d\/user_def.conf \n  1 UserParameter=ESTABLISHED,netstat -ant |grep -c ESTABLISHED\n  2 UserParameter=SYN_SENT,netstat -ant |grep -c SYN_SENT\n  3 UserParameter=SYN_RECV,netstat -ant |grep -c SYN_RECV\n  4 UserParameter=FIN_WAIT1,netstat -ant |grep -c FIN_WAIT1\n  5 UserParameter=FIN_WAIT2,netstat -ant |grep -c FIN_WAIT2\n  6 UserParameter=TIME_WAIT,netstat -ant |grep -c TIME_WAIT\n  7 UserParameter=CLOSE,netstat -ant |grep -c CLOSE\n  8 UserParameter=CLOSE_WAIT,netstat -ant |grep -c CLOSE_WAIT\n  9 UserParameter=LAST_ACK,netstat -ant |grep -c LAST_ACK\n 10 UserParameter=LISTEN,netstat -ant |grep -c LISTEN\n 11 UserParameter=CLOSING,netstat -ant |grep -c CLOSING\n\n\u683c\u5f0f\uff1aUserParameter=\u540d,\u503c<\/code><\/pre>\n
3\uff09\u91cd\u542f\u6d4b\u8bd5<\/h3>\n
[root@zabbix ~]# systemctl restart zabbix-agent.service \n[root@zabbix ~]# zabbix_get -s 127.0.0.1 -k TIME_WAIT\n42<\/code><\/pre>\n
4\uff09web\u9875\u9762\u6dfb\u52a0\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879<\/h3>\n
1.\u521b\u5efa\u5e94\u7528\u96c6<\/h4>\n
\"\"<\/div>
\n
\"\"<\/div>
\n
\"\"<\/div><\/p>\n
2.\u521b\u5efa\u76d1\u63a7\u9879<\/h4>\n
\"\"<\/div><\/p>\n
\"\"<\/div><\/p>\n
\"\"<\/div><\/p>\n
\"\"<\/div><\/p>\n
\u5269\u4e0b\u5341\u4e2a\u540c\u4e0a<\/strong><\/p>\n
\u4e09\u3001\u6293\u5305\u5faa\u73af\u521b\u5efa\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879<\/h2>\n
1\u3001\u83b7\u53d6\u6dfb\u52a0\u76d1\u63a7\u9879\u8bf7\u6c42\u6570\u636e<\/h3>\n
1) \u6dfb\u52a0\u76d1\u63a7\u9879\u8bf7\u6c42url\uff1a<\/h4>\n
<\/p>
<\/div>
\u67e5\u770b\u66f4\u591a<\/h2>
\u8054\u7cfb\u7ba1\u7406\u5458\u5fae\u4fe1tutu19192010\uff0c\u6ce8\u518c\u8d26\u53f7<\/p>\n<\/div>
<\/div>
<\/td><\/tr>
<\/td><\/tr><\/tbody><\/table>
<\/td><\/tr><\/tbody><\/table><\/form>
Register<\/a><\/div>
Forgotten username or password?<\/a><\/div>
<\/div><\/div><\/div>
<\/div>","protected":false},"excerpt":{"rendered":"
\u6279\u91cf\u521b\u5efa\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879 \u4e00\u3001\u975ezabbix\u76d1\u63a7\u81ea\u5b9a\u4e49\u76d1\u63a7\u9879 1\u3001\u9700\u8981\u76d1\u63a7\u7684tcp\u5341\u4e00\u79cd\u72b6\u6001 ESTABLISHE […]<\/p>\n","protected":false},"author":3,"featured_media":763,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[107],"tags":[21,19,22,117,118,20],"_links":{"self":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/750"}],"collection":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=750"}],"version-history":[{"count":0,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/posts\/750\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=\/wp\/v2\/media\/763"}],"wp:attachment":[{"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=750"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=750"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/egonlin.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=750"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}