5 |
|
# http://www.i-scream.org.uk |
6 |
|
# |
7 |
|
# An all-in-one script to act as an i-scream host on |
8 |
< |
# a typical Unix/Linux box. You may adapt the data-gathering |
9 |
< |
# methods as you see fit. |
10 |
< |
# - pjm2@ukc.ac.uk |
8 |
> |
# a typical Unix/Linux box. |
9 |
|
# |
10 |
|
# $Author$ |
11 |
|
# $Id$ |
33 |
|
$fqdn |
34 |
|
$pidfile |
35 |
|
$retry_wait |
36 |
+ |
$ostype |
37 |
+ |
@data |
38 |
|
); |
39 |
|
|
40 |
|
if (@ARGV != 2) { |
45 |
|
$filter_manager_port = $ARGV[1]; |
46 |
|
|
47 |
|
$seq_no = 1; |
48 |
< |
$retry_wait = 600; |
48 |
> |
$retry_wait = 60; |
49 |
|
|
50 |
+ |
# work out our platform, if we can. |
51 |
+ |
$ostype = `uname -s`; |
52 |
+ |
chomp $ostype; |
53 |
+ |
$ostype = "unknown" if not defined $ostype; |
54 |
+ |
|
55 |
|
# write our PID to a file |
56 |
< |
$pidfile = "/var/tmp/ihost.pid"; |
56 |
> |
# use home dir by default |
57 |
> |
#$pidfile = $ENV{"HOME"}; |
58 |
> |
# or drop it in /var/tmp if we can't find HOME |
59 |
> |
$pidfile = "/var/tmp" if not defined $pidfile; |
60 |
> |
$pidfile .= "/.ihost.pid"; |
61 |
|
&write_pid(); |
62 |
|
|
63 |
|
&tcp_configure(); |
84 |
|
else { |
85 |
|
$delay = $next_tcp; |
86 |
|
} |
87 |
< |
`sleep $delay`; |
87 |
> |
sleep $delay; |
88 |
|
} |
89 |
|
|
90 |
|
# we'll probably never get here... |
99 |
|
#----------------------------------------------------------------------- |
100 |
|
sub wait_then_retry() { |
101 |
|
print "Will retry configuration with filter manager in $retry_wait seconds.\n"; |
102 |
< |
`sleep $retry_wait`; |
102 |
> |
sleep $retry_wait; |
103 |
|
} |
104 |
|
|
105 |
|
|
111 |
|
#----------------------------------------------------------------------- |
112 |
|
sub tcp_configure() { |
113 |
|
|
114 |
< |
while (1 == 1) { |
114 |
> |
while (1) { |
115 |
|
my($sock) = new IO::Socket::INET( |
116 |
|
PeerAddr => $filter_manager_addr, |
117 |
|
PeerPort => $filter_manager_port, |
129 |
|
|
130 |
|
print $sock "STARTCONFIG\n"; |
131 |
|
$response = <$sock>; |
132 |
< |
if (!chop $response eq "OK") { |
133 |
< |
print "The i-scream server rejected the STARTCONFIG command. Terminated."; |
132 |
> |
if ($response && !($response eq "OK\n")) { |
133 |
> |
print "The i-scream server rejected the STARTCONFIG command.\n"; |
134 |
|
close($sock); |
135 |
|
wait_then_retry(); |
136 |
|
next; |
140 |
|
|
141 |
|
print $sock "LASTMODIFIED\n"; |
142 |
|
$response = <$sock>; |
143 |
+ |
if (!$response) { |
144 |
+ |
print "The i-scream server did not return anything for the LASTMODIFIED command.\n"; |
145 |
+ |
close($sock); |
146 |
+ |
wait_then_retry(); |
147 |
+ |
next; |
148 |
+ |
} |
149 |
|
chop $response; |
150 |
|
$last_modified = $response; |
151 |
|
|
153 |
|
|
154 |
|
print $sock "FILELIST\n"; |
155 |
|
$response = <$sock>; |
156 |
+ |
if (!$response) { |
157 |
+ |
print "The i-scream server did not provide a configuration file list.\n"; |
158 |
+ |
close($sock); |
159 |
+ |
wait_then_retry(); |
160 |
+ |
next; |
161 |
+ |
} |
162 |
|
chop $response; |
163 |
|
$file_list = $response; |
164 |
|
|
166 |
|
|
167 |
|
print $sock "FQDN\n"; |
168 |
|
$response = <$sock>; |
169 |
+ |
if (!$response) { |
170 |
+ |
print "The i-scream server did not tell us our FQDN.\n"; |
171 |
+ |
close($sock); |
172 |
+ |
wait_then_retry(); |
173 |
+ |
next; |
174 |
+ |
} |
175 |
|
chop $response; |
176 |
|
$fqdn = $response; |
177 |
|
|
179 |
|
|
180 |
|
print $sock "UDPUpdateTime\n"; |
181 |
|
$response = <$sock>; |
182 |
+ |
if (!$response) { |
183 |
+ |
print "The i-scream server did not give us a UDPUpdateTime.\n"; |
184 |
+ |
close($sock); |
185 |
+ |
wait_then_retry(); |
186 |
+ |
next; |
187 |
+ |
} |
188 |
|
chop $response; |
189 |
|
$udp_update_time = $response; |
190 |
|
|
191 |
|
print $sock "TCPUpdateTime\n"; |
192 |
|
$response = <$sock>; |
193 |
+ |
if (!$response) { |
194 |
+ |
print "The i-scream server did not give us a TCPUpdateTime.\n"; |
195 |
+ |
close($sock); |
196 |
+ |
wait_then_retry(); |
197 |
+ |
next; |
198 |
+ |
} |
199 |
|
chop $response; |
200 |
|
$tcp_update_time = $response; |
201 |
|
|
203 |
|
|
204 |
|
print $sock "ENDCONFIG\n"; |
205 |
|
$response = <$sock>; |
206 |
< |
chomp $response; |
168 |
< |
if (!$response eq "OK") { |
206 |
> |
if ($response && !($response eq "OK\n")) { |
207 |
|
print "ENDCONFIG command to server failed. Terminated.\n"; |
208 |
|
close($sock); |
209 |
|
wait_then_retry(); |
214 |
|
|
215 |
|
print $sock "FILTER\n"; |
216 |
|
$response = <$sock>; |
217 |
< |
unless (defined($response)) { |
217 |
> |
if (!$response) { |
218 |
|
print "Failed: Could not get a filter address from the filter manager.\n"; |
219 |
|
close($sock); |
220 |
|
wait_then_retry(); |
221 |
|
next; |
222 |
|
} |
223 |
|
chop $response; |
224 |
< |
$response =~ /(.*);(.*);(.*)/; |
224 |
> |
$response =~ /^(.*);(.*);(.*)/; |
225 |
|
if ($response eq "ERROR") { |
226 |
|
print "There are no active configured filters for your host.\n"; |
227 |
|
close($sock); |
240 |
|
|
241 |
|
print $sock "END\n"; |
242 |
|
$response = <$sock>; |
243 |
< |
chop $response; |
206 |
< |
if ($response eq "OK") { |
243 |
> |
if ($response && ($response eq "OK\n")) { |
244 |
|
print "Host successfully configured via TCP.\n" |
245 |
|
} |
246 |
|
else { |
247 |
< |
print "The server failed the host configuration on the END command."; |
247 |
> |
print "The server failed the host configuration on the END command.\n"; |
248 |
|
close($sock); |
249 |
|
wait_then_retry(); |
250 |
|
next; |
259 |
|
} |
260 |
|
|
261 |
|
|
225 |
– |
|
226 |
– |
|
262 |
|
#----------------------------------------------------------------------- |
263 |
|
# send_udp_packet |
264 |
|
# Sends a UDP packet to an i-scream filter. |
267 |
|
#----------------------------------------------------------------------- |
268 |
|
sub send_udp_packet() { |
269 |
|
|
270 |
< |
my(@statgrab) = `./statgrab.pl`; |
271 |
< |
my(%packet); |
272 |
< |
for (my($i) = 0; $i <= $#statgrab; $i++) { |
273 |
< |
$statgrab[$i] =~ /^([^\s]*) (.*)$/; |
274 |
< |
$packet{$1} = $2; |
270 |
> |
my($plugins_dir) = "plugins"; |
271 |
> |
|
272 |
> |
opendir PLUGINS, $plugins_dir; |
273 |
> |
my(@plugins) = readdir PLUGINS; |
274 |
> |
foreach my $plugin (@plugins) { |
275 |
> |
push @data, `$plugins_dir/$plugin $ostype` if -x "$plugins_dir/$plugin" && -f "$plugins_dir/$plugin"; |
276 |
|
} |
277 |
|
|
278 |
+ |
# get some extra data |
279 |
|
my($date) = time; |
280 |
+ |
my($ip); |
281 |
+ |
$ip = inet_ntoa(scalar(gethostbyname(hostname())) || 'localhost') or $ip = 'localhost'; |
282 |
|
|
283 |
< |
my($disk_info) = "<disk>"; |
284 |
< |
my($i) = 0; |
285 |
< |
while (defined $packet{"packet.disk.p$i.attributes.mount"}) { |
286 |
< |
$disk_info .= "<p$i"; |
287 |
< |
$disk_info .= " name=\"" . $packet{"packet.disk.p$i.attributes.name"} . "\""; |
288 |
< |
$disk_info .= " kbytes=\"" . $packet{"packet.disk.p$i.attributes.kbytes"} . "\""; |
250 |
< |
$disk_info .= " used=\"" . $packet{"packet.disk.p$i.attributes.used"} . "\""; |
251 |
< |
$disk_info .= " avail=\"" . $packet{"packet.disk.p$i.attributes.avail"} . "\""; |
252 |
< |
$disk_info .= " mount=\"" . $packet{"packet.disk.p$i.attributes.mount"} . "\""; |
253 |
< |
$disk_info .= "></p$i>"; |
254 |
< |
++$i; |
255 |
< |
} |
256 |
< |
$disk_info .= "</disk>"; |
257 |
< |
|
258 |
< |
my($ip) = inet_ntoa(scalar(gethostbyname(hostname())) || 'localhost'); |
259 |
< |
|
260 |
< |
# Build the XML packet this way, as we can clearly |
261 |
< |
# see the structure and contents... I like this ;-) |
262 |
< |
# [Note that the server rejects UDP packets that are |
263 |
< |
# larger than 8196 bytes] |
264 |
< |
my($xml) = <<EOF; |
283 |
> |
# add some extra data to the array |
284 |
> |
push(@data, "packet.attributes.seq_no $seq_no"); |
285 |
> |
push(@data, "packet.attributes.machine_name $fqdn"); |
286 |
> |
push(@data, "packet.attributes.date $date"); |
287 |
> |
push(@data, "packet.attributes.type data"); |
288 |
> |
push(@data, "packet.attributes.ip $ip"); |
289 |
|
|
290 |
< |
<packet seq_no="$seq_no" machine_name="$fqdn" date="$date" type="data" ip="$ip"> |
291 |
< |
<load> |
268 |
< |
<load1>$packet{"packet.load.load1"}</load1> |
269 |
< |
<load5>$packet{"packet.load.load5"}</load5> |
270 |
< |
<load15>$packet{"packet.load.load15"}</load15> |
271 |
< |
</load> |
272 |
< |
<os> |
273 |
< |
<name>$packet{"packet.os.name"}</name> |
274 |
< |
<release>$packet{"packet.os.release"}</release> |
275 |
< |
<platform>$packet{"packet.os.platform"}</platform> |
276 |
< |
<sysname>$packet{"packet.os.sysname"}</sysname> |
277 |
< |
<version>$packet{"packet.os.version"}</version> |
278 |
< |
<uptime>$packet{"packet.os.uptime"}</uptime> |
279 |
< |
</os> |
280 |
< |
<users> |
281 |
< |
<count>$packet{"packet.users.count"}</count> |
282 |
< |
<list>$packet{"packet.users.list"}</list> |
283 |
< |
</users> |
284 |
< |
<processes> |
285 |
< |
<total>$packet{"packet.processes.total"}</total> |
286 |
< |
<sleeping>$packet{"packet.processes.sleeping"}</sleeping> |
287 |
< |
<zombie>$packet{"packet.processes.zombie"}</zombie> |
288 |
< |
<stopped>$packet{"packet.processes.stopped"}</stopped> |
289 |
< |
<cpu>$packet{"packet.processes.cpu"}</cpu> |
290 |
< |
</processes> |
291 |
< |
<cpu> |
292 |
< |
<idle>$packet{"packet.cpu.idle"}</idle> |
293 |
< |
<user>$packet{"packet.cpu.user"}</user> |
294 |
< |
<kernel>$packet{"packet.cpu.kernel"}</kernel> |
295 |
< |
<iowait>$packet{"packet.cpu.iowait"}</iowait> |
296 |
< |
<swap>$packet{"packet.cpu.swap"}</swap> |
297 |
< |
</cpu> |
298 |
< |
<memory> |
299 |
< |
<total>$packet{"packet.memory.total"}</total> |
300 |
< |
<free>$packet{"packet.memory.free"}</free> |
301 |
< |
</memory> |
302 |
< |
<swap> |
303 |
< |
<total>$packet{"packet.swap.total"}</total> |
304 |
< |
<free>$packet{"packet.swap.free"}</free> |
305 |
< |
</swap> |
306 |
< |
$disk_info |
307 |
< |
</packet> |
290 |
> |
# sort the data |
291 |
> |
@data = sort(grep(!/^$/, grep(/^packet\./, @data))); |
292 |
|
|
293 |
< |
EOF |
293 |
> |
# turn the array into some nice XML |
294 |
> |
my($xml) = &make_xml("", ""); |
295 |
|
|
311 |
– |
# Make the packet smaller by stripping out newlines and leading spaces. |
312 |
– |
$xml =~ s/\n\s*//g; |
313 |
– |
|
296 |
|
my($sock) = new IO::Socket::INET ( |
297 |
|
PeerPort => $udp_port, |
298 |
|
PeerAddr => $filter_addr, |
299 |
|
Proto => 'udp' |
300 |
|
) or die "Could not send UDP: $!\n"; |
301 |
< |
|
301 |
> |
|
302 |
|
print $sock $xml or die "Could not send UDP packet: $!\n"; |
303 |
|
close($sock); |
304 |
|
$seq_no++; |
308 |
|
} |
309 |
|
|
310 |
|
|
329 |
– |
|
330 |
– |
|
311 |
|
#----------------------------------------------------------------------- |
312 |
|
# send_tcp_heartbeat |
313 |
|
# Establishes a TCP connection to an i-scream filter. |
314 |
|
# The heartbeat is used as a guaranteed "I'm alive" delivery mechanism. |
315 |
+ |
# If we need to reconfigure, then we complete the heartbeat before |
316 |
+ |
# doing so. |
317 |
|
#----------------------------------------------------------------------- |
318 |
|
sub send_tcp_heartbeat() { |
319 |
|
|
320 |
+ |
my ($doReconfigure) = 0; |
321 |
+ |
|
322 |
|
my($sock) = new IO::Socket::INET( |
323 |
|
PeerAddr => $filter_addr, |
324 |
|
PeerPort => $tcp_port, |
335 |
|
|
336 |
|
print $sock "HEARTBEAT\n"; |
337 |
|
$response = <$sock>; |
338 |
< |
return if (!defined $response); |
355 |
< |
chop $response; |
356 |
< |
if (!$response eq "OK") { |
338 |
> |
if (!$response eq "OK\n") { |
339 |
|
close($sock); |
340 |
|
print "Server gave wrong response to HEARTBEAT: $response\n"; |
341 |
|
&tcp_configure(); |
344 |
|
|
345 |
|
print $sock "CONFIG\n"; |
346 |
|
$response = <$sock>; |
347 |
< |
return if (!defined $response); |
366 |
< |
chop $response; |
367 |
< |
if (!$response eq "OK") { |
347 |
> |
if (!$response eq "OK\n") { |
348 |
|
close($sock); |
349 |
|
print "Server gave wrong response to CONFIG: $response\n"; |
350 |
|
&tcp_configure(); |
353 |
|
|
354 |
|
print $sock "$file_list\n"; |
355 |
|
$response = <$sock>; |
356 |
< |
return if (!defined $response); |
377 |
< |
chop $response; |
378 |
< |
if (!$response eq "OK") { |
356 |
> |
if (!$response eq "OK\n") { |
357 |
|
close($sock); |
358 |
|
print "Server gave wrong response to file list: $response\n"; |
359 |
|
&tcp_configure(); |
362 |
|
|
363 |
|
print $sock "$last_modified\n"; |
364 |
|
$response = <$sock>; |
365 |
< |
return if (!defined $response); |
388 |
< |
chop $response; |
389 |
< |
if ($response eq "ERROR") { |
365 |
> |
if ($response eq "ERROR\n") { |
366 |
|
close($sock); |
367 |
|
print "Server configuration changed. Reconfiguring with filter manager.\n"; |
368 |
< |
&tcp_configure(); |
393 |
< |
return; |
368 |
> |
$doReconfigure = 1; |
369 |
|
} |
370 |
< |
if (!$response eq "OK") { |
370 |
> |
if (!$response eq "OK\n") { |
371 |
|
close($sock); |
372 |
|
print "Server gave wrong response to HEARTBEAT: $response\n"; |
373 |
|
&tcp_configure(); |
376 |
|
|
377 |
|
print $sock "ENDHEARTBEAT\n"; |
378 |
|
$response = <$sock>; |
379 |
< |
return if (!defined $response); |
405 |
< |
chop $response; |
406 |
< |
if (!$response eq "OK") { |
379 |
> |
if (!$response eq "OK\n") { |
380 |
|
close($sock); |
381 |
|
print "Server gave wrong response to ENDHEARTBEAT: $response\n"; |
382 |
|
&tcp_configure(); |
386 |
|
close($sock); |
387 |
|
print "^"; |
388 |
|
|
389 |
+ |
&tcp_configure() if $doReconfigure; |
390 |
+ |
|
391 |
|
return; |
392 |
|
} |
393 |
|
|
394 |
+ |
|
395 |
|
#----------------------------------------------------------------------- |
396 |
|
# write_pid |
397 |
|
# Writes the PID (process ID) of this instance to $pidfile. |
403 |
|
close PID; |
404 |
|
|
405 |
|
return; |
406 |
+ |
} |
407 |
+ |
|
408 |
+ |
#----------------------------------------------------------------------- |
409 |
+ |
# make_xml |
410 |
+ |
# Turns an array of plugins data into an XML string. |
411 |
+ |
#----------------------------------------------------------------------- |
412 |
+ |
sub make_xml() { |
413 |
+ |
my($curlevel, $curline) = @_; |
414 |
+ |
my($xmltemp) = ""; my($curtag) = ""; my($attributes) = ""; |
415 |
+ |
while(1) { |
416 |
+ |
$curline = shift(@data) if $curline eq ""; |
417 |
+ |
return $xmltemp if not defined $curline; |
418 |
+ |
chomp $curline; |
419 |
+ |
# dealing with nest (or attributes) |
420 |
+ |
if($curline =~ /^$curlevel([^\.\s]+\.)/) { |
421 |
+ |
$curtag=$1; |
422 |
+ |
if($curline =~ /^$curlevel$curtag([^\.\s]+)\s+(.*)$/) { |
423 |
+ |
$xmltemp .= &make_xml("$curlevel$curtag", $curline); |
424 |
+ |
} |
425 |
+ |
elsif($curline =~ /^$curlevel$curtag(attributes)\.([^\.\s]+)\s+(.*)$/) { |
426 |
+ |
$attributes .= " $2=\"$3\""; |
427 |
+ |
} |
428 |
+ |
else { |
429 |
+ |
$xmltemp .= &make_xml("$curlevel$curtag", $curline); |
430 |
+ |
} |
431 |
+ |
my($nextline) = $data[0]; chomp $nextline if defined $nextline; |
432 |
+ |
$curtag =~ s/(.*)\./$1/; |
433 |
+ |
if((defined $nextline) && ($nextline =~ /^$curlevel$curtag\./)) { |
434 |
+ |
$curline = ""; |
435 |
+ |
} |
436 |
+ |
else { |
437 |
+ |
$xmltemp = "<$curtag$attributes>$xmltemp</$curtag>" unless $curtag eq ""; |
438 |
+ |
return $xmltemp; |
439 |
+ |
} |
440 |
+ |
} |
441 |
+ |
# dealing with value |
442 |
+ |
elsif($curline =~ /^$curlevel([^\.\s]+)\s+(.*)$/) { |
443 |
+ |
$curtag=$1; |
444 |
+ |
$xmltemp=$2; |
445 |
+ |
my($nextline) = $data[0]; chomp $nextline if defined $nextline; |
446 |
+ |
if(defined $nextline && ($nextline =~ /^$curlevel$curtag\./ || $nextline =~ /^$curlevel$curtag\s+/)) { |
447 |
+ |
$curline = ""; |
448 |
+ |
} |
449 |
+ |
else { |
450 |
+ |
$xmltemp = "<$curtag$attributes>$xmltemp</$curtag>" unless $curtag eq ""; |
451 |
+ |
return $xmltemp; |
452 |
+ |
} |
453 |
+ |
} |
454 |
+ |
} |
455 |
|
} |