5 |
|
# http://www.i-scream.org.uk |
6 |
|
# |
7 |
|
# An all-in-one script to act as an i-scream host on |
8 |
< |
# a typical Unix/Linux box. You may adapt the data-gathering |
9 |
< |
# methods as you see fit. |
10 |
< |
# - pjm2@ukc.ac.uk |
8 |
> |
# a typical Unix/Linux box. |
9 |
|
# |
10 |
|
# $Author$ |
11 |
|
# $Id$ |
33 |
|
$fqdn |
34 |
|
$pidfile |
35 |
|
$retry_wait |
36 |
+ |
@data |
37 |
|
); |
38 |
|
|
39 |
|
if (@ARGV != 2) { |
44 |
|
$filter_manager_port = $ARGV[1]; |
45 |
|
|
46 |
|
$seq_no = 1; |
47 |
< |
$retry_wait = 600; |
47 |
> |
$retry_wait = 60; |
48 |
|
|
49 |
|
# write our PID to a file |
50 |
|
$pidfile = "/var/tmp/ihost.pid"; |
74 |
|
else { |
75 |
|
$delay = $next_tcp; |
76 |
|
} |
77 |
< |
`sleep $delay`; |
77 |
> |
sleep $delay; |
78 |
|
} |
79 |
|
|
80 |
|
# we'll probably never get here... |
89 |
|
#----------------------------------------------------------------------- |
90 |
|
sub wait_then_retry() { |
91 |
|
print "Will retry configuration with filter manager in $retry_wait seconds.\n"; |
92 |
< |
`sleep $retry_wait`; |
92 |
> |
sleep $retry_wait; |
93 |
|
} |
94 |
|
|
95 |
|
|
101 |
|
#----------------------------------------------------------------------- |
102 |
|
sub tcp_configure() { |
103 |
|
|
104 |
< |
while (1 == 1) { |
104 |
> |
while (1) { |
105 |
|
my($sock) = new IO::Socket::INET( |
106 |
|
PeerAddr => $filter_manager_addr, |
107 |
|
PeerPort => $filter_manager_port, |
110 |
|
if (!defined $sock) { |
111 |
|
print "IHOST ERROR: Could not connect to $filter_manager_addr:$filter_manager_port.\n"; |
112 |
|
print "Please check that there is an i-scream server at this address.\n"; |
114 |
– |
close($sock); |
113 |
|
wait_then_retry(); |
114 |
|
next; |
115 |
|
} |
119 |
|
|
120 |
|
print $sock "STARTCONFIG\n"; |
121 |
|
$response = <$sock>; |
122 |
< |
if (!chop $response eq "OK") { |
123 |
< |
print "The i-scream server rejected the STARTCONFIG command. Terminated."; |
122 |
> |
if ($response && !($response eq "OK\n")) { |
123 |
> |
print "The i-scream server rejected the STARTCONFIG command.\n"; |
124 |
|
close($sock); |
125 |
|
wait_then_retry(); |
126 |
|
next; |
130 |
|
|
131 |
|
print $sock "LASTMODIFIED\n"; |
132 |
|
$response = <$sock>; |
133 |
+ |
if (!$response) { |
134 |
+ |
print "The i-scream server did not return anything for the LASTMODIFIED command.\n"; |
135 |
+ |
close($sock); |
136 |
+ |
wait_then_retry(); |
137 |
+ |
next; |
138 |
+ |
} |
139 |
|
chop $response; |
140 |
|
$last_modified = $response; |
141 |
|
|
143 |
|
|
144 |
|
print $sock "FILELIST\n"; |
145 |
|
$response = <$sock>; |
146 |
+ |
if (!$response) { |
147 |
+ |
print "The i-scream server did not provide a configuration file list.\n"; |
148 |
+ |
close($sock); |
149 |
+ |
wait_then_retry(); |
150 |
+ |
next; |
151 |
+ |
} |
152 |
|
chop $response; |
153 |
|
$file_list = $response; |
154 |
|
|
156 |
|
|
157 |
|
print $sock "FQDN\n"; |
158 |
|
$response = <$sock>; |
159 |
+ |
if (!$response) { |
160 |
+ |
print "The i-scream server did not tell us our FQDN.\n"; |
161 |
+ |
close($sock); |
162 |
+ |
wait_then_retry(); |
163 |
+ |
next; |
164 |
+ |
} |
165 |
|
chop $response; |
166 |
|
$fqdn = $response; |
167 |
|
|
169 |
|
|
170 |
|
print $sock "UDPUpdateTime\n"; |
171 |
|
$response = <$sock>; |
172 |
+ |
if (!$response) { |
173 |
+ |
print "The i-scream server did not give us a UDPUpdateTime.\n"; |
174 |
+ |
close($sock); |
175 |
+ |
wait_then_retry(); |
176 |
+ |
next; |
177 |
+ |
} |
178 |
|
chop $response; |
179 |
|
$udp_update_time = $response; |
180 |
|
|
181 |
|
print $sock "TCPUpdateTime\n"; |
182 |
|
$response = <$sock>; |
183 |
+ |
if (!$response) { |
184 |
+ |
print "The i-scream server did not give us a TCPUpdateTime.\n"; |
185 |
+ |
close($sock); |
186 |
+ |
wait_then_retry(); |
187 |
+ |
next; |
188 |
+ |
} |
189 |
|
chop $response; |
190 |
|
$tcp_update_time = $response; |
191 |
|
|
193 |
|
|
194 |
|
print $sock "ENDCONFIG\n"; |
195 |
|
$response = <$sock>; |
196 |
< |
chomp $response; |
169 |
< |
if (!$response eq "OK") { |
196 |
> |
if ($response && !($response eq "OK\n")) { |
197 |
|
print "ENDCONFIG command to server failed. Terminated.\n"; |
198 |
|
close($sock); |
199 |
|
wait_then_retry(); |
204 |
|
|
205 |
|
print $sock "FILTER\n"; |
206 |
|
$response = <$sock>; |
207 |
< |
unless (defined($response)) { |
207 |
> |
if (!$response) { |
208 |
|
print "Failed: Could not get a filter address from the filter manager.\n"; |
209 |
|
close($sock); |
210 |
|
wait_then_retry(); |
211 |
|
next; |
212 |
|
} |
213 |
|
chop $response; |
214 |
< |
$response =~ /(.*);(.*);(.*)/; |
214 |
> |
$response =~ /^(.*);(.*);(.*)/; |
215 |
|
if ($response eq "ERROR") { |
216 |
|
print "There are no active configured filters for your host.\n"; |
217 |
|
close($sock); |
230 |
|
|
231 |
|
print $sock "END\n"; |
232 |
|
$response = <$sock>; |
233 |
< |
chop $response; |
207 |
< |
if ($response eq "OK") { |
233 |
> |
if ($response && ($response eq "OK\n")) { |
234 |
|
print "Host successfully configured via TCP.\n" |
235 |
|
} |
236 |
|
else { |
237 |
< |
print "The server failed the host configuration on the END command."; |
237 |
> |
print "The server failed the host configuration on the END command.\n"; |
238 |
|
close($sock); |
239 |
|
wait_then_retry(); |
240 |
|
next; |
249 |
|
} |
250 |
|
|
251 |
|
|
226 |
– |
|
227 |
– |
|
252 |
|
#----------------------------------------------------------------------- |
253 |
|
# send_udp_packet |
254 |
|
# Sends a UDP packet to an i-scream filter. |
257 |
|
#----------------------------------------------------------------------- |
258 |
|
sub send_udp_packet() { |
259 |
|
|
260 |
< |
my(@statgrab) = `./statgrab.pl`; |
261 |
< |
my(%packet); |
262 |
< |
for (my($i) = 0; $i <= $#statgrab; $i++) { |
263 |
< |
$statgrab[$i] =~ /^([^\s]*) (.*)$/; |
264 |
< |
$packet{$1} = $2; |
260 |
> |
my($plugins_dir) = "plugins"; |
261 |
> |
|
262 |
> |
opendir PLUGINS, $plugins_dir; |
263 |
> |
my(@plugins) = readdir PLUGINS; |
264 |
> |
foreach my $plugin (@plugins) { |
265 |
> |
push @data, `$plugins_dir/$plugin` if -x "$plugins_dir/$plugin" && -f "$plugins_dir/$plugin"; |
266 |
|
} |
267 |
|
|
268 |
+ |
# get some extra data |
269 |
|
my($date) = time; |
270 |
+ |
my($ip); |
271 |
+ |
$ip = inet_ntoa(scalar(gethostbyname(hostname())) || 'localhost') or $ip = 'localhost'; |
272 |
|
|
273 |
< |
my($disk_info) = "<disk>"; |
274 |
< |
my($i) = 0; |
275 |
< |
while (defined $packet{"packet.disk.p$i.attributes.mount"}) { |
276 |
< |
$disk_info .= "<p$i"; |
277 |
< |
$disk_info .= " name=\"" . $packet{"packet.disk.p$i.attributes.name"} . "\""; |
278 |
< |
$disk_info .= " kbytes=\"" . $packet{"packet.disk.p$i.attributes.kbytes"} . "\""; |
251 |
< |
$disk_info .= " used=\"" . $packet{"packet.disk.p$i.attributes.used"} . "\""; |
252 |
< |
$disk_info .= " avail=\"" . $packet{"packet.disk.p$i.attributes.avail"} . "\""; |
253 |
< |
$disk_info .= " mount=\"" . $packet{"packet.disk.p$i.attributes.mount"} . "\""; |
254 |
< |
$disk_info .= "></p$i>"; |
255 |
< |
++$i; |
256 |
< |
} |
257 |
< |
$disk_info .= "</disk>"; |
258 |
< |
|
259 |
< |
my($ip) = inet_ntoa(scalar(gethostbyname(hostname())) || 'localhost'); |
260 |
< |
|
261 |
< |
# Build the XML packet this way, as we can clearly |
262 |
< |
# see the structure and contents... I like this ;-) |
263 |
< |
# [Note that the server rejects UDP packets that are |
264 |
< |
# larger than 8196 bytes] |
265 |
< |
my($xml) = <<EOF; |
273 |
> |
# add some extra data to the array |
274 |
> |
push(@data, "packet.attributes.seq_no=$seq_no"); |
275 |
> |
push(@data, "packet.attributes.machine_name=$fqdn"); |
276 |
> |
push(@data, "packet.attributes.date=$date"); |
277 |
> |
push(@data, "packet.attributes.type=data"); |
278 |
> |
push(@data, "packet.attributes.ip=$ip"); |
279 |
|
|
280 |
< |
<packet seq_no="$seq_no" machine_name="$fqdn" date="$date" type="data" ip="$ip"> |
281 |
< |
<load> |
282 |
< |
<load1>$packet{"packet.load.load1"}</load1> |
270 |
< |
<load5>$packet{"packet.load.load5"}</load5> |
271 |
< |
<load15>$packet{"packet.load.load15"}</load15> |
272 |
< |
</load> |
273 |
< |
<os> |
274 |
< |
<name>$packet{"packet.os.name"}</name> |
275 |
< |
<release>$packet{"packet.os.release"}</release> |
276 |
< |
<platform>$packet{"packet.os.platform"}</platform> |
277 |
< |
<sysname>$packet{"packet.os.sysname"}</sysname> |
278 |
< |
<version>$packet{"packet.os.version"}</version> |
279 |
< |
<uptime>$packet{"packet.os.uptime"}</uptime> |
280 |
< |
</os> |
281 |
< |
<users> |
282 |
< |
<count>$packet{"packet.users.count"}</count> |
283 |
< |
<list>$packet{"packet.users.list"}</list> |
284 |
< |
</users> |
285 |
< |
<processes> |
286 |
< |
<total>$packet{"packet.processes.total"}</total> |
287 |
< |
<sleeping>$packet{"packet.processes.sleeping"}</sleeping> |
288 |
< |
<zombie>$packet{"packet.processes.zombie"}</zombie> |
289 |
< |
<stopped>$packet{"packet.processes.stopped"}</stopped> |
290 |
< |
<cpu>$packet{"packet.processes.cpu"}</cpu> |
291 |
< |
</processes> |
292 |
< |
<cpu> |
293 |
< |
<idle>$packet{"packet.cpu.idle"}</idle> |
294 |
< |
<user>$packet{"packet.cpu.user"}</user> |
295 |
< |
<kernel>$packet{"packet.cpu.kernel"}</kernel> |
296 |
< |
<iowait>$packet{"packet.cpu.iowait"}</iowait> |
297 |
< |
<swap>$packet{"packet.cpu.swap"}</swap> |
298 |
< |
</cpu> |
299 |
< |
<memory> |
300 |
< |
<total>$packet{"packet.memory.total"}</total> |
301 |
< |
<free>$packet{"packet.memory.free"}</free> |
302 |
< |
</memory> |
303 |
< |
<swap> |
304 |
< |
<total>$packet{"packet.swap.total"}</total> |
305 |
< |
<free>$packet{"packet.swap.free"}</free> |
306 |
< |
</swap> |
307 |
< |
$disk_info |
308 |
< |
</packet> |
309 |
< |
|
310 |
< |
EOF |
311 |
< |
|
312 |
< |
# Make the packet smaller by stripping out newlines and leading spaces. |
313 |
< |
$xml =~ s/\n\s*//g; |
314 |
< |
|
280 |
> |
# turn the array into some nice XML |
281 |
> |
my($xml) = &make_xml("", ""); |
282 |
> |
|
283 |
|
my($sock) = new IO::Socket::INET ( |
284 |
|
PeerPort => $udp_port, |
285 |
|
PeerAddr => $filter_addr, |
286 |
|
Proto => 'udp' |
287 |
|
) or die "Could not send UDP: $!\n"; |
288 |
< |
|
288 |
> |
|
289 |
|
print $sock $xml or die "Could not send UDP packet: $!\n"; |
290 |
|
close($sock); |
291 |
|
$seq_no++; |
295 |
|
} |
296 |
|
|
297 |
|
|
330 |
– |
|
331 |
– |
|
298 |
|
#----------------------------------------------------------------------- |
299 |
|
# send_tcp_heartbeat |
300 |
|
# Establishes a TCP connection to an i-scream filter. |
301 |
|
# The heartbeat is used as a guaranteed "I'm alive" delivery mechanism. |
302 |
+ |
# If we need to reconfigure, then we complete the heartbeat before |
303 |
+ |
# doing so. |
304 |
|
#----------------------------------------------------------------------- |
305 |
|
sub send_tcp_heartbeat() { |
306 |
|
|
307 |
+ |
my ($doReconfigure) = 0; |
308 |
+ |
|
309 |
|
my($sock) = new IO::Socket::INET( |
310 |
|
PeerAddr => $filter_addr, |
311 |
|
PeerPort => $tcp_port, |
322 |
|
|
323 |
|
print $sock "HEARTBEAT\n"; |
324 |
|
$response = <$sock>; |
325 |
< |
return if (!defined $response); |
356 |
< |
chop $response; |
357 |
< |
if (!$response eq "OK") { |
325 |
> |
if (!$response eq "OK\n") { |
326 |
|
close($sock); |
327 |
|
print "Server gave wrong response to HEARTBEAT: $response\n"; |
328 |
|
&tcp_configure(); |
331 |
|
|
332 |
|
print $sock "CONFIG\n"; |
333 |
|
$response = <$sock>; |
334 |
< |
return if (!defined $response); |
367 |
< |
chop $response; |
368 |
< |
if (!$response eq "OK") { |
334 |
> |
if (!$response eq "OK\n") { |
335 |
|
close($sock); |
336 |
|
print "Server gave wrong response to CONFIG: $response\n"; |
337 |
|
&tcp_configure(); |
340 |
|
|
341 |
|
print $sock "$file_list\n"; |
342 |
|
$response = <$sock>; |
343 |
< |
return if (!defined $response); |
378 |
< |
chop $response; |
379 |
< |
if (!$response eq "OK") { |
343 |
> |
if (!$response eq "OK\n") { |
344 |
|
close($sock); |
345 |
|
print "Server gave wrong response to file list: $response\n"; |
346 |
|
&tcp_configure(); |
349 |
|
|
350 |
|
print $sock "$last_modified\n"; |
351 |
|
$response = <$sock>; |
352 |
< |
return if (!defined $response); |
389 |
< |
chop $response; |
390 |
< |
if ($response eq "ERROR") { |
352 |
> |
if ($response eq "ERROR\n") { |
353 |
|
close($sock); |
354 |
|
print "Server configuration changed. Reconfiguring with filter manager.\n"; |
355 |
< |
&tcp_configure(); |
394 |
< |
return; |
355 |
> |
$doReconfigure = 1; |
356 |
|
} |
357 |
< |
if (!$response eq "OK") { |
357 |
> |
if (!$response eq "OK\n") { |
358 |
|
close($sock); |
359 |
|
print "Server gave wrong response to HEARTBEAT: $response\n"; |
360 |
|
&tcp_configure(); |
363 |
|
|
364 |
|
print $sock "ENDHEARTBEAT\n"; |
365 |
|
$response = <$sock>; |
366 |
< |
return if (!defined $response); |
406 |
< |
chop $response; |
407 |
< |
if (!$response eq "OK") { |
366 |
> |
if (!$response eq "OK\n") { |
367 |
|
close($sock); |
368 |
|
print "Server gave wrong response to ENDHEARTBEAT: $response\n"; |
369 |
|
&tcp_configure(); |
373 |
|
close($sock); |
374 |
|
print "^"; |
375 |
|
|
376 |
+ |
&tcp_configure() if $doReconfigure; |
377 |
+ |
|
378 |
|
return; |
379 |
|
} |
380 |
|
|
381 |
+ |
|
382 |
|
#----------------------------------------------------------------------- |
383 |
|
# write_pid |
384 |
|
# Writes the PID (process ID) of this instance to $pidfile. |
390 |
|
close PID; |
391 |
|
|
392 |
|
return; |
393 |
+ |
} |
394 |
+ |
|
395 |
+ |
#----------------------------------------------------------------------- |
396 |
+ |
# make_xml |
397 |
+ |
# Turns an array of plugins data into an XML string. |
398 |
+ |
#----------------------------------------------------------------------- |
399 |
+ |
sub make_xml() { |
400 |
+ |
my($curlevel, $curline) = @_; |
401 |
+ |
my($xmltemp) = ""; my($curtag) = ""; my($attributes) = ""; |
402 |
+ |
while(true) { |
403 |
+ |
$curline = shift(@data) if $curline eq ""; chomp $curline; |
404 |
+ |
if($curline =~ /^$curlevel([^\.\s]+\.)/) { |
405 |
+ |
$curtag=$1; |
406 |
+ |
} |
407 |
+ |
if($curline =~ /^$curlevel$curtag([^\.\s]+)\s+(.*)$/) { |
408 |
+ |
$xmltemp .= "<$1$attributes>$2</$1>"; |
409 |
+ |
} |
410 |
+ |
elsif($curline =~ /^$curlevel$curtag(attributes)\.([^\.=]+)=(.*)$/) { |
411 |
+ |
$attributes .= " $2=\"$3\""; |
412 |
+ |
} |
413 |
+ |
else { |
414 |
+ |
$xmltemp .= &make_xml("$curlevel$curtag", $curline); |
415 |
+ |
} |
416 |
+ |
my($nextline) = $data[0]; chomp $nextline if defined $nextline; |
417 |
+ |
$curtag =~ s/(.*)\./$1/; |
418 |
+ |
if(defined $nextline && $nextline =~ /^$curlevel$curtag\./) { |
419 |
+ |
$curline = ""; |
420 |
+ |
} |
421 |
+ |
else { |
422 |
+ |
$xmltemp = "<$curtag$attributes>$xmltemp</$curtag>" unless $curtag eq ""; |
423 |
+ |
return $xmltemp; |
424 |
+ |
} |
425 |
+ |
} |
426 |
|
} |