For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

OhioBuckeye_687's avatar
OhioBuckeye_687
Icon for Nimbostratus rankNimbostratus
Apr 25, 2008

SFTP Monitoring

Can an SFTP port be monitored with the full handshake? Right now it looks like our F5 is just completing a port check (similar to a telnet to the port) that is causing an error within the SFTP server...
management
monitoring
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
Mar 12, 2010
Use an external monitor and perform a

 

 

CHECKDATE=`ssh -n @ date`

 

 

with a public/private keypair... The -n parameter is in there in case something happens to the public key the server gives back... You need to do this by hand BTW before the automated check will work.

 

 

Then just check that the $CHECKDATE environment variable is sane... If it is, then sshd is up & running on the target server...

 

 

Changing the command to use NODE_IP and NODE_PORT (And any logging etc you'd like on it) is left as an exercise for the reader. You don't have to do this as a shell script BTW... It could be perl or whatever.

 

 

 

H