README
¶
Netfilter Conntrack Input Plugin
This plugin collects metrics from Netfilter's conntrack tools. There are two collection mechanisms for this plugin:
- Extracting information from
/proc/net/stat/nf_conntrack
files if thecollect
option is set accordingly for finding CPU specific values. - Using specific files and directories by specifying the
dirs
option. At runtime, conntrack exposes many of those connection statistics within/proc/sys/net
. Depending on your kernel version, these files can be found in either/proc/sys/net/ipv4/netfilter
or/proc/sys/net/netfilter
and will be prefixed with eitherip
ornf
.
In order to simplify configuration in a heterogeneous environment, a superset of directory and filenames can be specified. Any locations that doesn't exist is ignored.
⭐ Telegraf v1.0.0 🏷️ system 💻 linux
Global configuration options
In addition to the plugin-specific configuration settings, plugins support additional global and plugin configuration settings. These settings are used to modify metrics, tags, and field or create aliases and configure ordering, etc. See the CONFIGURATION.md for more details.
Configuration
# Collects conntrack stats from the configured directories and files.
# This plugin ONLY supports Linux
[[inputs.conntrack]]
## The following defaults would work with multiple versions of conntrack.
## Note the nf_ and ip_ filename prefixes are mutually exclusive across
## kernel versions, as are the directory locations.
## Look through /proc/net/stat/nf_conntrack for these metrics
## all - aggregated statistics
## percpu - include detailed statistics with cpu tag
collect = ["all", "percpu"]
## User-specified directories and files to look through
## Directories to search within for the conntrack files above.
## Missing directories will be ignored.
dirs = ["/proc/sys/net/ipv4/netfilter","/proc/sys/net/netfilter"]
## Superset of filenames to look for within the conntrack dirs.
## Missing files will be ignored.
files = ["ip_conntrack_count","ip_conntrack_max",
"nf_conntrack_count","nf_conntrack_max"]
Metrics
A detailed explanation of each fields can be found in kernel documentation
- conntrack
ip_conntrack_count
(int, count)
: The number of entries in the conntrack tableip_conntrack_max
(int, size)
: The max capacity of the conntrack tableip_conntrack_buckets
(int, size)
: The size of hash table.
With collect = ["all"]
:
entries
: The number of entries in the conntrack tablesearched
: The number of conntrack table lookups performedfound
: The number of searched entries which were successfulnew
: The number of entries added which were not expected beforeinvalid
: The number of packets seen which can not be trackedignore
: The number of packets seen which are already connected to an entrydelete
: The number of entries which were removeddelete_list
: The number of entries which were put to dying listinsert
: The number of entries inserted into the listinsert_failed
: The number of insertion attempted but failed (duplicate entry)drop
: The number of packets dropped due to conntrack failureearly_drop
: The number of dropped entries to make room for new ones, ifmaxsize
is reachedicmp_error
: Subset of invalid. Packets that can't be tracked due to errorexpect_new
: Entries added after an expectation was already presentexpect_create
: Expectations addedexpect_delete
: Expectations deletedsearch_restart
: Conntrack table lookups restarted due to hashtable resizes
Tags
With collect = ["percpu"]
will include detailed statistics per CPU thread.
Without "percpu"
the cpu
tag will have all
value.
Example Output
conntrack,host=myhost ip_conntrack_count=2,ip_conntrack_max=262144 1461620427667995735
with stats:
conntrack,cpu=all,host=localhost delete=0i,delete_list=0i,drop=2i,early_drop=0i,entries=5568i,expect_create=0i,expect_delete=0i,expect_new=0i,found=7i,icmp_error=1962i,ignore=2586413402i,insert=0i,insert_failed=2i,invalid=46853i,new=0i,search_restart=453336i,searched=0i 1615233542000000000
conntrack,host=localhost ip_conntrack_count=464,ip_conntrack_max=262144 1615233542000000000
Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.