portscan
Scan a host's ports and compare against a baseline. Needs nmap.
privileged Add portscan to agent.enable_addons. Needs the nmap binary on the box.
Parameters
| Parameter | Default | Meaning |
|---|---|---|
hostREQUIRED | Exactly one host. | |
portsREQUIRED | Ports or ranges to scan, up to 1024. | |
baselineREQUIRED | Ports expected open. | |
max_rate | 100/s | Capped at 1000. |
host_timeout | 60s |
An open port not in the baseline is down. A baseline port proved closed is degraded. A port the scan could not determine is degraded.
Measurements
open_ports, unexpected_ports, missing_ports, undetermined_ports, scan_ms.
Scan only what you ownA port scan is a heavier network footprint than the other addons and is noticed by the target. Point it at your own hosts.