Collector Type: Agent

Category: Application Monitors

Application Name: IPTables

Global Template Name: LINUX IPTables Template

Parameters

NameDefault Value
IPTables Chain Name

Enter coma(,) separated string of chain names of the iptables. Examples:INPUT,OUTPUT,FORWARD (To get chain names of iptables, run the command: iptables -nvL | grep Chain | awk '{ print $2 }').
INPUT, OUTPUT, FORWARD
Nat Table Min Count

Minimum number of rules for NAT table. If the IPTables-NatRules monitor is disabled, pass 0 for this argument.
0
Filter Table Min Count

Minimum number of rules for FILTER table. If the IPTables-FilterRules monitor is disabled, pass 0 for this argument.
0
Mangle Table Min Count

Minimum number of rules for MANGLE table. If the IPTables-MangleRules monitor is disabled, pass 0 for this argument.
0

Note: All field attributes are mandatory, use default values wherever applicable.

Collected Metrics

Metric NameDisplay Name
iptables.loaded

Checks if rules have been specified for all chains except for Output and Forward. If no rules are specified then it throws an alert.
IPTables-Loaded
iptables.chain_bandwidth

Captures traffic following through the IPTables which matches a given Chain.
IPTables-ChainBandwidth
iptables.nat_rules

Checks a given table for a specific number of rules. If the number of rules in that table is less than what is specified in the argument it throws an alert.
IPTables-NatRules
iptables.filter_rules

Checks a given table for a specific number of rules. If the number of rules in that table is less than what is specified in the argument it throws an alert.
IPTables-FilterRules
iptables.mangle_rules

Checks a given table for a specific number of rules. If the number of rules in that table is less than what is specified in the argument it throws an alert.
IPTables-MangleRules
iptables.syn_connections

Provides the number of activeSYNC connections.
IPTables-SYNConnections
iptables.tcp_connections

Provides the number of active TCP connections.
IPTables-TCPConnections
iptables.udp_connections

Provides the number of active UDP connections.
IPTables-UDPConnections
iptables.icmp_connections

Provides the number of active ICMP connections.
IPTables-ICMPConnections
iptables.close_connections

Provides the number of active CLOSE connections.
IPTables-CLOSEConnections
iptables.time_wait_connections

Provides the number of active TIME_WAIT connections.
IPTables-TIME_WAITConnections
iptables.established_connections

Provides the number of active established connections.
IPTables-ESTABLISHEDConnections
iptables.state

Checks if the iptables file has been changed.
IPTables-State