NAME
Monitoring::Sneck::Checks::conntrack - checks how full the connection tracking table is
VERSION
Version 0.0.1
SYNOPSIS
conntrack|perl:conntrack
pf_states|perl:conntrack -w 70 -c 85DESCRIPTION
Checks the percent of the connection tracking table in use. Once it is full, new connections are dropped, with nothing but a kernel log line saying so.
On Linux, it is nf_conntrack_count against nf_conntrack_max, under /proc/sys/net/netfilter. If conntrack is not loaded there is no table, which is OK. On FreeBSD, it is pf's states, from pfctl -si and the states limit from pfctl -sm, which needs root. pf being loaded but disabled is OK. pfctl failing, such as pf not being in the kernel, is UNKNOWN, as are other OSes.
OPTIONS
- -w, --warning :: Range of percent used. Default :: 80
- -c, --critical :: Range of percent used. Default :: 90
METHODS
check
Does the check.
table
Returns the entries in use, the limit, and what the table is, or undef for the entries and why there is no table. Dies if it can not be found.