Metadata-Version: 2.1
Name: iptables-exporter
Version: 0.9.3
Summary: Prometheus iptables exporter
Home-page: https://github.com/madron/iptables-exporter
Author: Massimiliano Ravelli
Author-email: massimiliano.ravelli@gmail.com
License: MIT
Keywords: prometheus monitoring iptables bandwidth
Platform: UNKNOWN
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: System Administrators
Classifier: Topic :: System :: Monitoring
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.4
Classifier: Programming Language :: Python :: 3.5
Classifier: Programming Language :: Python :: 3.6
Classifier: Programming Language :: Python :: 3.7
Description-Content-Type: text/markdown
Requires-Dist: prometheus-client
Requires-Dist: python-iptables (>=0.13)

# Iptables exporter

A Prometheus exporter that collects traffic data from iptables rules.


## Installation

    pip install iptables-exporter


## Usage

Test run:

    iptables-exporter --dump-data

Run iptables-exporter:

    iptables-exporter --port 9119

Point your browser to http://localhost:9119/metrics


## Docker

    docker run --net=host --cap-add=NET_ADMIN madron/iptables-exporter


## Configure iptables

Optionally you can monitor specific rules by adding a comment starting with `iptables-exporter`:

    iptables -A INPUT --dport ssh -j ACCEPT -m comment --comment "iptables-exporter ssh traffic"

collects packets and bytes counter:

    iptables_packets{ip_version="4",table="filter",chain="input",rule="ssh traffic"} 347.0
    iptables_bytes{ip_version="4",table="filter",chain="input",rule="ssh traffic"} 44512.0

More rules with same name:

    iptables -A INPUT -s 10.0.0.0/8     --dport ssh -j ACCEPT -m comment --comment "iptables-exporter ssh traffic"
    iptables -A INPUT -s 172.16.0.0/12  --dport ssh -j ACCEPT -m comment --comment "iptables-exporter ssh traffic"
    iptables -A INPUT -s 192.168.0.0/16 --dport ssh -j ACCEPT -m comment --comment "iptables-exporter ssh traffic"

exports total packets and bytes for the 3 rules as they have same ip_version, table, chain and name.


