Configuring a port monitor
This section describes how to add a monitor for monitoring TCP/IP-based servers, Telnet servers, and SSH, protocols.
To add a monitor
- Access the Port Monitor (INET_Portmon_Top) menu command.
The application class menu is displayed. - Select Knowledge Module Commands > Add Monitor from the menu.
The Add Monitor: Step 1 dialog box appears. - Select the session type to monitor:
- TCP/IP-based session (excluding Telnet) see Monitoring standard deviation parameters)
- Telnet session - see Portmon telnet example)
- SSH session
- Click Next.
The Add Monitor: Step 2 dialog box appears. - Monitor name: Type a name for the new monitor that you want to create. Enter only alpha-numeric characters.
- Host: Type the computer name or IP address.
- Port: Type the port number of the host name you want to monitor. You can choose between 1 and 65535. If you selected the Telnet session option, the default value is 23. If you selected the SSH session option, the default value is 22.
- Perform one of the following:
- If you selected TCP/IP-based session (excluding Telnet) in step 3, continue to step 9.
- If you selected Telnet session in step 3, enter the username and password. Re-enter the password for verification.
If you selected SSH session in step 3, enter the username and password. Re-enter the password for verification.
- Use the Timeout slide to select the number of seconds until the session timeout. This timeout is applied as the timeout value for each read and write operation you define in step n. The default is 30 seconds.
- Perform the following if you selected either TCP/IP-based session (excluding Telnet) or Telnet session in step 3. If you selected SSH session in step 3, go to step 11.
- Define a session by selecting one of the following:
- Select Define the session on screen and click Next.
The Add Monitor: Step 3 (File) dialog box appears. - Select Define the session with a file and click Next.
The Add Monitor: Step 3 (File) dialog box appears.
- Select Define the session on screen and click Next.
- Type the full path name to the file, or click Browse to manually locate the file. Go to step 11.
- For this monitor, select one of the following operations and enter the required expressions:
- Write - send some data
- Write line - send some data followed by carriage return - line feed (CR-LF)
- Read - read data on the channel
- For Read operations, leave this field blank.
- Read until - read until a specific set of characters is found
- Ensure the Read until operation contains an argument.
You can enter up to 10 such expressions. If you need more than 10 expressions, press Cancel and define your operations in a file instead.
- Define a session by selecting one of the following:
- Perform the following if you selected SSH session in step 3.
In the SSH Command set configuration, enter SSH commands. You can also enter multiple SSH commands separated by a semicolon.
- Click Next.
The Add Monitor: Step 4 dialog box appears. Entering data in this dialog box is optional. If you do not want to enter data in this dialog box, go to step 18. - (Optional) Enter the expression you want to look for using one of the following methods:
- For a single line expression, enter the content in the Single Line Content Expression field.
- For a larger expression, enter the full path to a file containing the contents to be checked in the Multiple Line Expression field.
- Select the Evaluate Unix-style regular expressions check box to include Unix-style regular expressions inside the content expression you specified in either single-line or multi-line.
If both content expression areas are filled in, the multiple-line expression is used. - Select the Case Sensitive Match check box if you want to check for case sensitive matches.
- Select whether the data read from the monitored port should or should not match your content expression.
- Use the pull-down menu to indicate whether the application should alarm if the contents match or do not match the content expression.
- Click Finish.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*