Synproxy Input Plugin

This plugin gathers metrics about the Linux netfilter’s synproxy module used for mitigating SYN attacks.

Introduced in: Telegraf v1.13.0 Tags: network OS support: linux

Global configuration options

In addition to the plugin-specific configuration settings, plugins support additional global and plugin configuration settings. These settings are used to modify metrics, tags, and field or create aliases and configure ordering, etc. See the CONFIGURATION.md for more details.

Configuration

# Get synproxy counter statistics from procfs
# This plugin ONLY supports Linux
[[inputs.synproxy]]
  # no configuration

Troubleshooting

Execute the following CLI command in Linux to test the synproxy counters:

cat /proc/net/stat/synproxy

Metrics

The following synproxy counters are gathered

• synproxy
  • fields:
    • cookie_invalid (uint32, packets, counter) - Invalid cookies
    • cookie_retrans (uint32, packets, counter) - Cookies retransmitted
    • cookie_valid (uint32, packets, counter) - Valid cookies
    • entries (uint32, packets, counter) - Entries
    • syn_received (uint32, packets, counter) - SYN received
    • conn_reopened (uint32, packets, counter) - Connections reopened

Example Output

This section shows example output in Line Protocol format.

synproxy,host=Filter-GW01,rack=filter-node1 conn_reopened=0i,cookie_invalid=235i,cookie_retrans=0i,cookie_valid=8814i,entries=0i,syn_received=8742i 1549550634000000000