For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Josh_Hildebran1's avatar
Josh_Hildebran1
Icon for Nimbostratus rankNimbostratus
Jul 21, 2008

Monitor for SFTP

Does anyone have a sample external monitor for monitoring nodes that are running an SFTP (via ssh) server?     A default "tcp" monitor on port 22 seems to kill the FTP server to the p...
management
monitoring
FMA_199355's avatar
FMA_199355
Icon for Nimbostratus rankNimbostratus
Feb 15, 2017

Hey guys,

I followed hoolio's approach (thanks for you idea) to build a tiny monitor and this seems to be working fine for me.

Here is the string which is executed within external monitor:

sftp -o PubkeyAuthentication=yes -o IdentityFile=/root/.ssh/${PKEY} -b /home/${BFILE} ${USER}@${HOST} | grep ${MATCH} 2>&1 > /dev/null

Arguments here:

`PKEY` - private key file name for SFTP authentication
`BFILE` - batch file specifing which commands to execute after login
`HOST` - ip address of SFTP server
`DEBUG` - 0/1 = on/off
`MATCH` - a string we are looking for to check health
`USER` - account to access SFTP
`

In CLI it looks like:

sftp  -o PubkeyAuthentication=yes -o IdentityFile=/root/.ssh/sftpmonitor_rsa -b /home/sftpmonitor.input f5_monitor@10.128.192.192

Batch file 

sftpmonitor.input
is nothing more than:

dir
bye

SFTP administrator created a file named 

f5_health
which monitor is looking for. If it gets this string with grep, then we are marking pool member up. Otherwise it is red.