Collector Type: Agent
Category: Application Monitors
Application Name: IPTables
Global Template Name: LINUX IPTables Template
Parameters
| Name | Default Value |
|---|---|
| IPTables Chain Name Enter coma(,) separated string of chain names of the iptables. Examples:INPUT,OUTPUT,FORWARD (To get chain names of iptables, run the command: iptables -nvL | grep Chain | awk '{ print $2 }'). | INPUT, OUTPUT, FORWARD |
| Nat Table Min Count Minimum number of rules for NAT table. If the IPTables-NatRules monitor is disabled, pass 0 for this argument. | 0 |
| Filter Table Min Count Minimum number of rules for FILTER table. If the IPTables-FilterRules monitor is disabled, pass 0 for this argument. | 0 |
| Mangle Table Min Count Minimum number of rules for MANGLE table. If the IPTables-MangleRules monitor is disabled, pass 0 for this argument. | 0 |
Note: All field attributes are mandatory, use default values wherever applicable.
Collected Metrics
| Metric Name | Display Name |
|---|---|
| iptables.loaded Checks if rules have been specified for all chains except for Output and Forward. If no rules are specified then it throws an alert. | IPTables-Loaded |
| iptables.chain_bandwidth Captures traffic following through the IPTables which matches a given Chain. | IPTables-ChainBandwidth |
| iptables.nat_rules Checks a given table for a specific number of rules. If the number of rules in that table is less than what is specified in the argument it throws an alert. | IPTables-NatRules |
| iptables.filter_rules Checks a given table for a specific number of rules. If the number of rules in that table is less than what is specified in the argument it throws an alert. | IPTables-FilterRules |
| iptables.mangle_rules Checks a given table for a specific number of rules. If the number of rules in that table is less than what is specified in the argument it throws an alert. | IPTables-MangleRules |
| iptables.syn_connections Provides the number of activeSYNC connections. | IPTables-SYNConnections |
| iptables.tcp_connections Provides the number of active TCP connections. | IPTables-TCPConnections |
| iptables.udp_connections Provides the number of active UDP connections. | IPTables-UDPConnections |
| iptables.icmp_connections Provides the number of active ICMP connections. | IPTables-ICMPConnections |
| iptables.close_connections Provides the number of active CLOSE connections. | IPTables-CLOSEConnections |
| iptables.time_wait_connections Provides the number of active TIME_WAIT connections. | IPTables-TIME_WAITConnections |
| iptables.established_connections Provides the number of active established connections. | IPTables-ESTABLISHEDConnections |
| iptables.state Checks if the iptables file has been changed. | IPTables-State |