1 |
|
#!/usr/bin/perl -w |
2 |
|
|
3 |
+ |
# |
4 |
+ |
# i-scream central monitoring system |
5 |
+ |
# http://www.i-scream.org.uk |
6 |
+ |
# Copyright (C) 2000-2002 i-scream |
7 |
+ |
# |
8 |
+ |
# This program is free software; you can redistribute it and/or |
9 |
+ |
# modify it under the terms of the GNU General Public License |
10 |
+ |
# as published by the Free Software Foundation; either version 2 |
11 |
+ |
# of the License, or (at your option) any later version. |
12 |
+ |
# |
13 |
+ |
# This program is distributed in the hope that it will be useful, |
14 |
+ |
# but WITHOUT ANY WARRANTY; without even the implied warranty of |
15 |
+ |
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
16 |
+ |
# GNU General Public License for more details. |
17 |
+ |
# |
18 |
+ |
# You should have received a copy of the GNU General Public License |
19 |
+ |
# along with this program; if not, write to the Free Software |
20 |
+ |
# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. |
21 |
+ |
# |
22 |
+ |
|
23 |
|
# ----------------------------------------------------------- |
24 |
|
# Perl i-scream Host. |
25 |
|
# http://www.i-scream.org.uk |
53 |
|
$fqdn |
54 |
|
$pidfile |
55 |
|
$retry_wait |
56 |
+ |
$ostype |
57 |
+ |
$key |
58 |
|
@data |
59 |
|
); |
60 |
|
|
68 |
|
$seq_no = 1; |
69 |
|
$retry_wait = 60; |
70 |
|
|
71 |
+ |
# work out our platform, if we can. |
72 |
+ |
$ostype = `uname -s`; |
73 |
+ |
chomp $ostype; |
74 |
+ |
$ostype = "unknown" if not defined $ostype; |
75 |
+ |
|
76 |
|
# write our PID to a file |
77 |
< |
$pidfile = "/var/tmp/ihost.pid"; |
77 |
> |
# use home dir by default |
78 |
> |
#$pidfile = $ENV{"HOME"}; |
79 |
> |
# or drop it in /var/tmp if we can't find HOME |
80 |
> |
$pidfile = "/var/tmp" if not defined $pidfile; |
81 |
> |
$pidfile .= "/.ihost.pid"; |
82 |
|
&write_pid(); |
83 |
|
|
84 |
|
&tcp_configure(); |
85 |
+ |
&send_tcp_heartbeat(); |
86 |
|
&send_udp_packet(); |
87 |
|
|
88 |
|
$last_udp_time = time; |
162 |
|
|
163 |
|
print $sock "LASTMODIFIED\n"; |
164 |
|
$response = <$sock>; |
165 |
< |
if (!$response) { |
166 |
< |
print "The i-scream server did not return anything for the LASTMODIFIED command.\n"; |
165 |
> |
if (!$response || $response eq "ERROR\n") { |
166 |
> |
print "The i-scream server did not provide the LASTMODIFIED value.\n"; |
167 |
|
close($sock); |
168 |
|
wait_then_retry(); |
169 |
|
next; |
170 |
|
} |
171 |
< |
chop $response; |
171 |
> |
chomp $response; |
172 |
|
$last_modified = $response; |
173 |
|
|
174 |
|
print "Config last modified: ". (scalar localtime $last_modified/1000) . "\n"; |
175 |
|
|
176 |
|
print $sock "FILELIST\n"; |
177 |
|
$response = <$sock>; |
178 |
< |
if (!$response) { |
178 |
> |
if (!$response || $response eq "ERROR\n") { |
179 |
|
print "The i-scream server did not provide a configuration file list.\n"; |
180 |
|
close($sock); |
181 |
|
wait_then_retry(); |
182 |
|
next; |
183 |
|
} |
184 |
< |
chop $response; |
184 |
> |
chomp $response; |
185 |
|
$file_list = $response; |
186 |
|
|
187 |
|
print "File list obtained: $file_list\n"; |
188 |
|
|
189 |
|
print $sock "FQDN\n"; |
190 |
|
$response = <$sock>; |
191 |
< |
if (!$response) { |
191 |
> |
if (!$response || $response eq "ERROR\n") { |
192 |
|
print "The i-scream server did not tell us our FQDN.\n"; |
193 |
|
close($sock); |
194 |
|
wait_then_retry(); |
195 |
|
next; |
196 |
|
} |
197 |
< |
chop $response; |
197 |
> |
chomp $response; |
198 |
|
$fqdn = $response; |
199 |
|
|
200 |
|
print "FQDN returned: $fqdn\n"; |
201 |
|
|
202 |
|
print $sock "UDPUpdateTime\n"; |
203 |
|
$response = <$sock>; |
204 |
< |
if (!$response) { |
204 |
> |
if (!$response || $response eq "ERROR\n") { |
205 |
|
print "The i-scream server did not give us a UDPUpdateTime.\n"; |
206 |
|
close($sock); |
207 |
|
wait_then_retry(); |
208 |
|
next; |
209 |
|
} |
210 |
< |
chop $response; |
210 |
> |
chomp $response; |
211 |
|
$udp_update_time = $response; |
212 |
|
|
213 |
|
print $sock "TCPUpdateTime\n"; |
214 |
|
$response = <$sock>; |
215 |
< |
if (!$response) { |
215 |
> |
if (!$response || $response eq "ERROR\n") { |
216 |
|
print "The i-scream server did not give us a TCPUpdateTime.\n"; |
217 |
|
close($sock); |
218 |
|
wait_then_retry(); |
219 |
|
next; |
220 |
|
} |
221 |
< |
chop $response; |
221 |
> |
chomp $response; |
222 |
|
$tcp_update_time = $response; |
223 |
|
|
224 |
|
print "UDP packet period: $udp_update_time seconds.\nTCP heartbeat period: $tcp_update_time seconds.\n"; |
242 |
|
wait_then_retry(); |
243 |
|
next; |
244 |
|
} |
245 |
< |
chop $response; |
214 |
< |
$response =~ /^(.*);(.*);(.*)/; |
245 |
> |
chomp $response; |
246 |
|
if ($response eq "ERROR") { |
247 |
|
print "There are no active configured filters for your host.\n"; |
248 |
|
close($sock); |
249 |
|
wait_then_retry(); |
250 |
|
next; |
251 |
|
} |
252 |
+ |
$response =~ /^(.*);(.*);(.*)/; |
253 |
|
($filter_addr, $udp_port, $tcp_port) = ($1, $2, $3); |
254 |
|
unless (defined($filter_addr) && defined($udp_port) && defined($tcp_port)) { |
255 |
|
print "Failed: Filter address response from server did not make sense: $response\n"; |
294 |
|
opendir PLUGINS, $plugins_dir; |
295 |
|
my(@plugins) = readdir PLUGINS; |
296 |
|
foreach my $plugin (@plugins) { |
297 |
< |
push @data, `$plugins_dir/$plugin` if -x "$plugins_dir/$plugin" && -f "$plugins_dir/$plugin"; |
297 |
> |
push @data, `$plugins_dir/$plugin $ostype` if -x "$plugins_dir/$plugin" && -f "$plugins_dir/$plugin"; |
298 |
|
} |
299 |
|
|
300 |
|
# get some extra data |
303 |
|
$ip = inet_ntoa(scalar(gethostbyname(hostname())) || 'localhost') or $ip = 'localhost'; |
304 |
|
|
305 |
|
# add some extra data to the array |
306 |
< |
push(@data, "packet.attributes.seq_no=$seq_no"); |
307 |
< |
push(@data, "packet.attributes.machine_name=$fqdn"); |
308 |
< |
push(@data, "packet.attributes.date=$date"); |
309 |
< |
push(@data, "packet.attributes.type=data"); |
310 |
< |
push(@data, "packet.attributes.ip=$ip"); |
306 |
> |
push(@data, "packet.attributes.seq_no $seq_no"); |
307 |
> |
push(@data, "packet.attributes.machine_name $fqdn"); |
308 |
> |
push(@data, "packet.attributes.date $date"); |
309 |
> |
push(@data, "packet.attributes.type data"); |
310 |
> |
push(@data, "packet.attributes.ip $ip"); |
311 |
> |
push(@data, "packet.attributes.key $key"); |
312 |
|
|
313 |
+ |
# sort the data |
314 |
+ |
@data = sort(grep(!/^$/, grep(/^packet\./, @data))); |
315 |
+ |
|
316 |
|
# turn the array into some nice XML |
317 |
|
my($xml) = &make_xml("", ""); |
318 |
< |
|
318 |
> |
|
319 |
|
my($sock) = new IO::Socket::INET ( |
320 |
|
PeerPort => $udp_port, |
321 |
|
PeerAddr => $filter_addr, |
325 |
|
print $sock $xml or die "Could not send UDP packet: $!\n"; |
326 |
|
close($sock); |
327 |
|
$seq_no++; |
328 |
< |
print "-: $xml\n"; |
328 |
> |
print "-"; |
329 |
|
|
330 |
|
return; |
331 |
|
} |
397 |
|
return; |
398 |
|
} |
399 |
|
|
400 |
+ |
print $sock "KEY\n"; |
401 |
+ |
$key = <$sock>; |
402 |
+ |
|
403 |
|
print $sock "ENDHEARTBEAT\n"; |
404 |
|
$response = <$sock>; |
405 |
|
if (!$response eq "OK\n") { |
438 |
|
sub make_xml() { |
439 |
|
my($curlevel, $curline) = @_; |
440 |
|
my($xmltemp) = ""; my($curtag) = ""; my($attributes) = ""; |
441 |
< |
while(true) { |
442 |
< |
$curline = shift(@data) if $curline eq ""; chomp $curline; |
441 |
> |
while(1) { |
442 |
> |
$curline = shift(@data) if $curline eq ""; |
443 |
> |
return $xmltemp if not defined $curline; |
444 |
> |
chomp $curline; |
445 |
> |
# dealing with nest (or attributes) |
446 |
|
if($curline =~ /^$curlevel([^\.\s]+\.)/) { |
447 |
|
$curtag=$1; |
448 |
+ |
if($curline =~ /^$curlevel$curtag([^\.\s]+)\s+(.*)$/) { |
449 |
+ |
$xmltemp .= &make_xml("$curlevel$curtag", $curline); |
450 |
+ |
} |
451 |
+ |
elsif($curline =~ /^$curlevel$curtag(attributes)\.([^\.\s]+)\s+(.*)$/) { |
452 |
+ |
$attributes .= " $2=\"$3\""; |
453 |
+ |
} |
454 |
+ |
else { |
455 |
+ |
$xmltemp .= &make_xml("$curlevel$curtag", $curline); |
456 |
+ |
} |
457 |
+ |
my($nextline) = $data[0]; chomp $nextline if defined $nextline; |
458 |
+ |
$curtag =~ s/(.*)\./$1/; |
459 |
+ |
if((defined $nextline) && ($nextline =~ /^$curlevel$curtag\./)) { |
460 |
+ |
$curline = ""; |
461 |
+ |
} |
462 |
+ |
else { |
463 |
+ |
$xmltemp = "<$curtag$attributes>$xmltemp</$curtag>" unless $curtag eq ""; |
464 |
+ |
return $xmltemp; |
465 |
+ |
} |
466 |
|
} |
467 |
< |
if($curline =~ /^$curlevel$curtag([^\.\s]+)\s+(.*)$/) { |
468 |
< |
$xmltemp .= "<$1$attributes>$2</$1>"; |
467 |
> |
# dealing with value |
468 |
> |
elsif($curline =~ /^$curlevel([^\.\s]+)\s+(.*)$/) { |
469 |
> |
$curtag=$1; |
470 |
> |
$xmltemp=$2; |
471 |
> |
my($nextline) = $data[0]; chomp $nextline if defined $nextline; |
472 |
> |
if(defined $nextline && ($nextline =~ /^$curlevel$curtag\./ || $nextline =~ /^$curlevel$curtag\s+/)) { |
473 |
> |
$curline = ""; |
474 |
> |
} |
475 |
> |
else { |
476 |
> |
$xmltemp = "<$curtag$attributes>$xmltemp</$curtag>" unless $curtag eq ""; |
477 |
> |
return $xmltemp; |
478 |
> |
} |
479 |
|
} |
480 |
< |
elsif($curline =~ /^$curlevel$curtag(attributes)\.([^\.=]+)=(.*)$/) { |
481 |
< |
$attributes .= " $2=\"$3\""; |
482 |
< |
} |
483 |
< |
else { |
484 |
< |
$xmltemp .= &make_xml("$curlevel$curtag", $curline); |
485 |
< |
} |
486 |
< |
my($nextline) = $data[0]; chomp $nextline if defined $nextline; |
487 |
< |
$curtag =~ s/(.*)\./$1/; |
488 |
< |
if(defined $nextline && $nextline =~ /^$curlevel$curtag\./) { |
489 |
< |
$curline = ""; |
420 |
< |
} |
421 |
< |
else { |
422 |
< |
$xmltemp = "<$curtag$attributes>$xmltemp</$curtag>" unless $curtag eq ""; |
423 |
< |
return $xmltemp; |
424 |
< |
} |
480 |
> |
# dealing with a null value |
481 |
> |
elsif($curline =~ /^$curlevel([^\.\s]+)$/) { |
482 |
> |
# simply adding a space makes the above elsif deal with it :) |
483 |
> |
# just level with an empty tag in the XML |
484 |
> |
$curline .= " "; |
485 |
> |
} |
486 |
> |
# failing all that, skip the line |
487 |
> |
else { |
488 |
> |
$curline = ""; |
489 |
> |
} |
490 |
|
} |
491 |
|
} |