Changes for version 0.2.0
- add apparmor, AppArmor enabled with profiles enforcing
- add auditd, auditing on, with the rules matching a list or a hash
- add bond, Linux bonding and FreeBSD lagg members down or not aggregating
- add edac, memory errors from Linux's EDAC, by DIMM
- add fail2ban, jails up and how many each has banned now
- add ldap, bind and search with response time, through Net::LDAP, which is optional
- add mailq, Postfix or Exim queue size and oldest message
- add selinux, SELinux in the mode it should be
- add smart, disk health through smartctl's JSON output
- add thermal_throttle, Intel CPU thermal throttle events since the last run
- add time_sync, chrony, ntpd, or timesyncd being synchronised, with offset
- add vrrp, keepalived, freevrrpd, or FreeBSD CARP in the state it should be
- add wireguard, how long since each peer last handshook
- add zfs, pool health, capacity, scrub age, and device errors
Modules
nagios style checks run as Perl inside of sneck
checks local user accounts
checks AppArmor is enabled with its profiles enforcing
checks Linux auditing is on, with the rules it should have
what Monitoring::Sneck::Checks checks are built on
checks link aggregation, bonding on Linux and lagg on FreeBSD
checks HP Smart Array controllers, through cciss_vol_status
checks every certificate in directories
checks certificate files
checks files against stored checksums
checks values in config files
checks how full the connection tracking table is
checks Docker or Podman containers
checks for Debian security fixes through debsecan
checks how full file systems are
checks a DNS lookup
checks a zone's nameservers have the same serial
checks for memory errors Linux's EDAC has counted
checks fail2ban's jails are up, and how many are banned
checks how old and how big a file is
checks a file being there, or not, and what is in it
checks how many files are open against the limit
checks the mode, owner, and group of files
checks /etc/hosts
checks a HTTP or HTTPS server
checks values in a JSON response
checks the certificate a TLS server hands out
checks network interfaces are up, at speed, and not erroring
checks FreeBSD jails and bhyve VMs are running
checks kernel modules are or are not loaded
checks a LDAP server binds and searches, timing it
checks for errors rasdaemon has logged
checks what ports are being listened on
checks the load averages
checks new lines in a log for a regex
checks the mail queue of Postfix or Exim
checks how much memory is used
checks file systems are mounted and writable
checks file mtimes against a time
checks how full the ARP and NDP neighbor tables are
checks the local clock against a NTP server
checks for processes killed for running out of memory
checks packages are or are not installed
checks the process in a PID file is running
checks packet loss and round trip time
checks FreeBSD packages for known vulnerabilities
checks Linux pressure stall information
checks how many processes are running
checks if a host is on DNS block lists
checks if a reboot or restarts are needed after updates
checks /etc/resolv.conf and its nameservers
checks SELinux is in the mode it should be
checks temperatures, fans, and voltages
checks services are running
checks disk health through smartctl
checks a SMTP server
checks settings in sshd_config
checks how much swap is used
checks software RAID, md on Linux and gmirror and graid on FreeBSD
checks sysctl values
checks for failed systemd units
checks a TCP service
checks for CPUs being thermally throttled
checks the local time daemon is synchronised, chrony, ntpd, or timesyncd
checks what TLS versions a server takes
checks how long the host has been up
checks keepalived, freevrrpd, or FreeBSD's CARP being MASTER or BACKUP as it should
checks WireGuard peers have handshaken recently
checks ZFS pools, health, capacity, scrubs, and device errors