Search Exchange
Search All Sites
Nagios Live Webinars
Let our experts show you how Nagios can help your organization.Login
New ListingsChecks for the Bro Network Security Monitor
Last Release Date
2014-03-21
Compatible With
- Nagios 3.x
- Nagios 4.x
- Nagios XI
Owner
Hits
19337
This script should be run on the Bro manager.
-T Check type, "status/loss/capture_loss/myricom/print"
status - Check status of all Bro workers
loss - Average packet loss by name
capture_loss - Checks for packet loss in capture_loss.log
myricom - Average Myricom Sniffer driver packet loss
print - Print Bro values
###########
# Examples: #
###########
# 1.) Check status of all Bro workers
# $ ./check_bro.sh -f /usr/local/bro-2.2/bin/broctl -T status
# 2.) Return average packet loss for the 3 named bro workers
# $ ./check_bro.sh -T loss -i "nids0,nids1,nids2"
# 3.) Check average packet loss of all bro workers against warning and critical thresholds i.e > 10% or 20% packet loss.
# $ ./check_bro.sh -T loss -i all -w 10 -c 20
# 4.) Check packet loss percentage for the last most recent interval from Bro's capture_loss.log above 10% loss.
# $ ./check_bro.sh -f /usr/local/bro-2.2/logs/current/capture_loss.log -T capture_loss -c 10
# 5.) Check average packet loss reported by Myricom's SnifferG driver for each Bro node.
# $ ./check_bro.sh -T myricom -i "192.168.1.254,192.168.1.253" -u bro
status - Check status of all Bro workers
loss - Average packet loss by name
capture_loss - Checks for packet loss in capture_loss.log
myricom - Average Myricom Sniffer driver packet loss
print - Print Bro values
###########
# Examples: #
###########
# 1.) Check status of all Bro workers
# $ ./check_bro.sh -f /usr/local/bro-2.2/bin/broctl -T status
# 2.) Return average packet loss for the 3 named bro workers
# $ ./check_bro.sh -T loss -i "nids0,nids1,nids2"
# 3.) Check average packet loss of all bro workers against warning and critical thresholds i.e > 10% or 20% packet loss.
# $ ./check_bro.sh -T loss -i all -w 10 -c 20
# 4.) Check packet loss percentage for the last most recent interval from Bro's capture_loss.log above 10% loss.
# $ ./check_bro.sh -f /usr/local/bro-2.2/logs/current/capture_loss.log -T capture_loss -c 10
# 5.) Check average packet loss reported by Myricom's SnifferG driver for each Bro node.
# $ ./check_bro.sh -T myricom -i "192.168.1.254,192.168.1.253" -u bro
Reviews (0)
Be the first to review this listing!
