RE: {bb} Solaris netstat monitoring script

To: <bb@bb4.com>

Subject: RE: {bb} Solaris netstat monitoring script

From: "Paul Snow" <Paul.Snow@aeso.ca>

Date: Fri, 4 Feb 2005 13:42:48 -0700

Content-class: urn:content-classes:message

Content-type: multipart/alternative; boundary="----_=_NextPart_001_01C50AFA.16A5FF5C"

Reply-to: bb@bb4.com

Sender: owner-bb@bb4.com

Thread-index: AcUK8+Gs0UZ06uQaQ6CYOFZkiQiD9QABaOGQ

Thread-topic: {bb} Solaris netstat monitoring script

That's very interesting. There used to be one there, our solaris sa found it for his machines, if you'd like I can get a copy of it for you. - Paul

-----Original Message-----
From: owner-bb@bb4.com [mailto:owner-bb@bb4.com]On Behalf Of chris.ivey@verizon.com
Sent: Friday, February 04, 2005 12:55 PM
To: bb@bb4.com
Subject: RE: {bb} Solaris netstat monitoring script

Hey Paul, thanks for the response. I have looked on deadcat, and there are none for Unix that I can find - they are all for Wintel. Also, I do not feel that I was clear earlier so let me elaborate...

I want to have a script that will look at the "netstat -s" output and report on errors/drops/etc. For instance, on my primary server (running Solaris 8) my netstat output looks like this:

{server}:/usr/rootk> netstat -s

RAWIP
rawipInDatagrams =755610 rawipInErrors = 0
rawipInCksumErrs = 0 rawipOutDatagrams = 30992
rawipOutErrors = 0

UDP
udpInDatagrams =12548666 udpInErrors = 0
udpOutDatagrams =11062204 udpOutErrors = 0

TCP tcpRtoAlgorithm = 4 tcpRtoMin = 400
tcpRtoMax = 60000 tcpMaxConn = -1
tcpActiveOpens =872473 tcpPassiveOpens =1326062
tcpAttemptFails = 2926 tcpEstabResets = 4644
tcpCurrEstab = 1480 tcpOutSegs =100580533
tcpOutDataSegs =76824074 tcpOutDataBytes =668147233
tcpRetransSegs = 48631 tcpRetransBytes =56456210
tcpOutAck =23671381 tcpOutAckDelayed =9389816
tcpOutUrg = 25 tcpOutWinUpdate =113068
tcpOutWinProbe = 243 tcpOutControl =4422094
tcpOutRsts = 35910 tcpOutFastRetrans = 8731
tcpInSegs =100694422
tcpInAckSegs =66125746 tcpInAckBytes =640690214
tcpInDupAck =3047765 tcpInAckUnsent = 0
tcpInInorderSegs =67836580 tcpInInorderBytes =4005332222
tcpInUnorderSegs = 29006 tcpInUnorderBytes =1566267
tcpInDupSegs = 60689 tcpInDupBytes =5854942
tcpInPartDupSegs = 54 tcpInPartDupBytes = 20405
tcpInPastWinSegs = 0 tcpInPastWinBytes = 0
tcpInWinProbe = 1588 tcpInWinUpdate = 240
tcpInClosed = 5599 tcpRttNoUpdate = 34606
tcpRttUpdate =63947008 tcpTimRetrans = 60567
tcpTimRetransDrop = 84 tcpTimKeepalive = 17241
tcpTimKeepaliveProbe= 4536 tcpTimKeepaliveDrop = 18
tcpListenDrop = 686 tcpListenDropQ0 = 0
tcpHalfOpenDrop = 0 tcpOutSackRetrans = 14106

IPv4 ipForwarding = 2 ipDefaultTTL = 255
ipInReceives =30081501 ipInHdrErrors = 0
ipInAddrErrors = 0 ipInCksumErrs = 0
ipForwDatagrams = 0 ipForwProhibits = 0
ipInUnknownProtos = 0 ipInDiscards = 0
ipInDelivers =112600366 ipOutRequests =33290646
ipOutDiscards = 0 ipOutNoRoutes = 60
ipReasmTimeout = 60 ipReasmReqds =182117
ipReasmOKs =182117 ipReasmFails = 0
ipReasmDuplicates = 0 ipReasmPartDups = 0
ipFragOKs = 23738 ipFragFails = 0
ipFragCreates =138839 ipRoutingDiscards = 0
tcpInErrs = 11 udpNoPorts = 43684
udpInCksumErrs = 0 udpInOverflows = 12164
rawipInOverflows = 0 ipsecInSucceeded = 0
ipsecInFailed = 0 ipInIPv6 = 0
ipOutIPv6 = 0 ipOutSwitchIPv6 = 12407

IPv6 ipv6Forwarding = 2 ipv6DefaultHopLimit = 255
ipv6InReceives = 0 ipv6InHdrErrors = 0
ipv6InTooBigErrors = 0 ipv6InNoRoutes = 0
ipv6InAddrErrors = 0 ipv6InUnknownProtos = 0
ipv6InTruncatedPkts = 0 ipv6InDiscards = 0
ipv6InDelivers = 0 ipv6OutForwDatagrams= 0
ipv6OutRequests = 0 ipv6OutDiscards = 0
ipv6OutNoRoutes = 0 ipv6OutFragOKs = 0
ipv6OutFragFails = 0 ipv6OutFragCreates = 0
ipv6ReasmReqds = 0 ipv6ReasmOKs = 0
ipv6ReasmFails = 0 ipv6InMcastPkts = 0
ipv6OutMcastPkts = 0 ipv6ReasmDuplicates = 0
ipv6ReasmPartDups = 0 ipv6ForwProhibits = 0
udpInCksumErrs = 0 udpInOverflows = 0
rawipInOverflows = 0 ipv6InIPv4 = 0
ipv6OutIPv4 = 0 ipv6OutSwitchIPv4 = 0

ICMPv4 icmpInMsgs =356771 icmpInErrors = 0
icmpInCksumErrs = 55 icmpInUnknowns = 0
icmpInDestUnreachs = 4807 icmpInTimeExcds = 1181
icmpInParmProbs = 0 icmpInSrcQuenchs = 0
icmpInRedirects = 0 icmpInBadRedirects = 0
icmpInEchos =336992 icmpInEchoReps = 13736
icmpInTimestamps = 0 icmpInTimestampReps = 0
icmpInAddrMasks = 0 icmpInAddrMaskReps = 0
icmpInFragNeeded = 0 icmpOutMsgs =337681
icmpOutDrops = 43055 icmpOutErrors = 0
icmpOutDestUnreachs = 689 icmpOutTimeExcds = 0
icmpOutParmProbs = 0 icmpOutSrcQuenchs = 0
icmpOutRedirects = 0 icmpOutEchos = 0
icmpOutEchoReps =336992 icmpOutTimestamps = 0
icmpOutTimestampReps= 0 icmpOutAddrMasks = 0
icmpOutAddrMaskReps = 0 icmpOutFragNeeded = 0
icmpInOverflows = 0

ICMPv6 icmp6InMsgs = 0 icmp6InErrors = 0
icmp6InDestUnreachs = 0 icmp6InAdminProhibs = 0
icmp6InTimeExcds = 0 icmp6InParmProblems = 0
icmp6InPktTooBigs = 0 icmp6InEchos = 0
icmp6InEchoReplies = 0 icmp6InRouterSols = 0
icmp6InRouterAds = 0 icmp6InNeighborSols = 0
icmp6InNeighborAds = 0 icmp6InRedirects = 0
icmp6InBadRedirects = 0 icmp6InGroupQueries = 0
icmp6InGroupResps = 0 icmp6InGroupReds = 0
icmp6InOverflows = 0
icmp6OutMsgs = 0 icmp6OutErrors = 0
icmp6OutDestUnreachs= 0 icmp6OutAdminProhibs= 0
icmp6OutTimeExcds = 0 icmp6OutParmProblems= 0
icmp6OutPktTooBigs = 0 icmp6OutEchos = 0
icmp6OutEchoReplies = 0 icmp6OutRouterSols = 0
icmp6OutRouterAds = 0 icmp6OutNeighborSols= 0
icmp6OutNeighborAds = 0 icmp6OutRedirects = 0
icmp6OutGroupQueries= 0 icmp6OutGroupResps = 0
icmp6OutGroupReds = 0

IGMP:
3 messages received
0 messages received with too few bytes
0 messages received with bad checksum
3 membership queries received
0 membership queries received with invalid field(s)
0 membership reports received
0 membership reports received with invalid field(s)
0 membership reports received for groups to which we belong
0 membership reports sent

I am pretty good with scripting and such, but I have become frustrated trying to break up this output into one column (have tried cut, sed, and awk).... so now I come to the point of asking all the wonderful folks on this list if anyone already has this and would be willing to share. :o)

Thanks again!

Chris Ivey

MTS - Systems Engineer IV
Verizon Data Services, ENSS-West NMS Tools Group
AIM: IveyAtGTEDS

"He who ha-ha's last, ha-ha's best." :: Nelson Muntz

I think there are a couple that come to mind at deadcat
http://www.deadcat.net/
http://www.deadcat.net.au/

-----Original Message-----
From: owner-bb@bb4.com [mailto:owner-bb@bb4.com]On Behalf Of chris.ivey@verizon.com
Sent: Friday, February 04, 2005 12:14 PM
To: bb@bb4.com
Subject: {bb} Solaris netstat monitoring script

I was wondering if anyone has a script to monitor netstat on a Solaris machine for errors, drops, etc. The bb-memory script for Wintel does this function by default, and I would like to mimic the funcationality from my Solaris servers. Any help would, as always, be greatly appreciated. Thank you!

Chris Ivey

MTS - Systems Engineer IV
Verizon Data Services, ENSS-West NMS Tools Group
AIM: IveyAtGTEDS

"He who ha-ha's last, ha-ha's best." :: Nelson Muntz