Netfilter
Netfilter documentationNetfilter
Plugin: nfacct.plugin Module: nfacct.plugin
Overview
Monitor Netfilter metrics for optimal packet filtering and manipulation. Keep tabs on packet counts, dropped packets, and error rates to secure network operations.
Netdata uses libmnl (https://www.netfilter.org/projects/libmnl/index.html) to collect information.
This collector is supported on all platforms.
This collector supports collecting metrics from multiple instances of this integration.
This plugin needs setuid.
Default Behavior
Auto-Detection
This plugin uses socket to connect with netfilter to collect data
Performance Impact
The default configuration for this integration is not expected to impose a significant performance impact on the system.
Setup
Prerequisites
Install required packages
Install libmnl-dev and libnetfilter-acct-dev using the package manager of your system.
Configuration
Options
| Option | Description | Default | Required |
|---|---|---|---|
| update every | Data collection frequency. | 1 | no |
| command options | Additinal parameters for collector | no |
via File
The configuration file name for this integration is netdata.conf.
Configuration for this specific integration is located in the [plugin:nfacct] section within that file.
The file format is a modified INI syntax. The general structure is:
[section1]
option1 = some value
option2 = some other value
[section2]
option3 = some third value
You can edit the configuration file using the edit-config script from the
Netdata config directory.
cd /etc/netdata 2>/dev/null || cd /opt/netdata/etc/netdata
sudo ./edit-config netdata.conf
Examples
There are no configuration examples.
Metrics
Metrics grouped by scope.
The scope defines the instance that the metric belongs to. An instance is uniquely identified by a set of labels.
Per Netfilter instance
This scope has no labels.
Metrics:
| Metric | Description | Dimensions | Unit |
|---|---|---|---|
| netfilter.netlink_new | Connection Tracker New Connections | new, ignore, invalid | connections/s |
| netfilter.netlink_changes | Connection Tracker Changes | insert, delete, delete_list | changes/s |
| netfilter.netlink_search | Connection Tracker Searches | searched, search_restart, found | searches/s |
| netfilter.netlink_errors | Connection Tracker Errors | icmp_error, insert_failed, drop, early_drop | events/s |
| netfilter.netlink_expect | Connection Tracker Expectations | created, deleted, new | expectations/s |
| netfilter.nfacct_packets | Netfilter Accounting Packets | a dimension per nfacct object | packets/s |
| netfilter.nfacct_bytes | Netfilter Accounting Bandwidth | a dimension per nfacct object | kilobytes/s |
Alerts
There are no alerts configured by default for this integration.
The observability platform companies need to succeed
Sign up for freeWant a personalised demo of Netdata for your use case?