| 1 |
< |
#!/usr/local/bin/perl -w |
| 1 |
> |
#!/usr/bin/perl -w |
| 2 |
|
|
| 3 |
|
# ----------------------------------------------------------- |
| 4 |
|
# Perl i-scream Host. |
| 5 |
+ |
# http://www.i-scream.org.uk |
| 6 |
|
# |
| 7 |
|
# An all-in-one script to act as an i-scream host on |
| 8 |
|
# a typical Unix/Linux box. You may adapt the data-gathering |
| 32 |
|
$tcp_port |
| 33 |
|
$filter_addr |
| 34 |
|
$file_list |
| 35 |
+ |
$fqdn |
| 36 |
|
); |
| 37 |
|
|
| 38 |
|
if (@ARGV != 2) { |
| 50 |
|
$last_udp_time = time; |
| 51 |
|
$last_tcp_time = time; |
| 52 |
|
while (1) { |
| 53 |
< |
if (time >= $last_udp_time + $udp_update_time) { |
| 53 |
> |
my($time) = time; |
| 54 |
> |
if ($time >= $last_udp_time + $udp_update_time) { |
| 55 |
|
&send_udp_packet(); |
| 56 |
< |
$last_udp_time = time; |
| 56 |
> |
$last_udp_time = $time; |
| 57 |
|
} |
| 58 |
< |
if (time >= $last_tcp_time + $tcp_update_time) { |
| 58 |
> |
if ($time >= $last_tcp_time + $tcp_update_time) { |
| 59 |
|
&send_tcp_heartbeat(); |
| 60 |
< |
$last_tcp_time = time; |
| 60 |
> |
$last_tcp_time = $time; |
| 61 |
|
} |
| 62 |
< |
`sleep 1`; |
| 62 |
> |
my($next_udp) = $udp_update_time - $time + $last_udp_time; |
| 63 |
> |
my($next_tcp) = $tcp_update_time - $time + $last_tcp_time; |
| 64 |
> |
my($delay); |
| 65 |
> |
if ($next_udp < $next_tcp) { |
| 66 |
> |
$delay = $next_udp |
| 67 |
> |
} |
| 68 |
> |
else { |
| 69 |
> |
$delay = $next_tcp; |
| 70 |
> |
} |
| 71 |
> |
`sleep $delay`; |
| 72 |
|
} |
| 73 |
|
|
| 74 |
|
exit(0); |
| 75 |
|
|
| 76 |
+ |
|
| 77 |
+ |
#----------------------------------------------------------------------- |
| 78 |
+ |
# tcp_configure |
| 79 |
+ |
# Establishes a TCP connection to the specified i-scream filter manager. |
| 80 |
+ |
# The host then requests details from the server, such as the intervals |
| 81 |
+ |
# at which to send UDP packets. |
| 82 |
+ |
#----------------------------------------------------------------------- |
| 83 |
|
sub tcp_configure() { |
| 84 |
|
|
| 85 |
|
my($sock) = new IO::Socket::INET( |
| 86 |
|
PeerAddr => $filter_manager_addr, |
| 87 |
|
PeerPort => $filter_manager_port, |
| 88 |
|
Proto => 'tcp' |
| 89 |
< |
) or die "Could not perform configuration via TCP: $!\n"; |
| 89 |
> |
); |
| 90 |
> |
if (!defined $sock) { |
| 91 |
> |
print "IHOST ERROR: Could not connect to $filter_manager_addr:$filter_manager_port.\n"; |
| 92 |
> |
print "Please check that there is an i-scream server at this address.\n"; |
| 93 |
> |
print "Program ended.\n"; |
| 94 |
> |
exit(1); |
| 95 |
> |
} |
| 96 |
|
|
| 97 |
< |
die "Could not connect to the i-scream filter manager: $!\n" unless $sock; |
| 73 |
< |
|
| 74 |
< |
# Now run through the configuration process. |
| 97 |
> |
# Now run through the configuration process... |
| 98 |
|
my($response); |
| 99 |
|
|
| 100 |
|
print $sock "STARTCONFIG\n"; |
| 111 |
|
chop $response; |
| 112 |
|
$last_modified = $response; |
| 113 |
|
|
| 114 |
< |
print "Config last modified: ". scalar localtime $last_modified . "\n"; |
| 114 |
> |
print "Config last modified: ". (scalar localtime $last_modified/1000) . "\n"; |
| 115 |
|
|
| 116 |
|
print $sock "FILELIST\n"; |
| 117 |
|
$response = <$sock>; |
| 120 |
|
|
| 121 |
|
print "File list obtained: $file_list\n"; |
| 122 |
|
|
| 123 |
+ |
print $sock "FQDN\n"; |
| 124 |
+ |
$response = <$sock>; |
| 125 |
+ |
chop $response; |
| 126 |
+ |
$fqdn = $response; |
| 127 |
+ |
|
| 128 |
+ |
print "FQDN returned: $fqdn\n"; |
| 129 |
+ |
|
| 130 |
|
print $sock "UDPUpdateTime\n"; |
| 131 |
|
$response = <$sock>; |
| 132 |
|
chop $response; |
| 137 |
|
chop $response; |
| 138 |
|
$tcp_update_time = $response; |
| 139 |
|
|
| 140 |
< |
print "UDP packet period: $udp_update_time seconds.\nTCP heartbeat period: $tcp_update_time.\n"; |
| 140 |
> |
print "UDP packet period: $udp_update_time seconds.\nTCP heartbeat period: $tcp_update_time seconds.\n"; |
| 141 |
|
|
| 142 |
|
print $sock "ENDCONFIG\n"; |
| 143 |
|
$response = <$sock>; |
| 171 |
|
close($sock); |
| 172 |
|
|
| 173 |
|
print "Configuration finished sucessfully!\n"; |
| 174 |
+ |
|
| 175 |
+ |
return; |
| 176 |
|
} |
| 177 |
|
|
| 178 |
+ |
|
| 179 |
+ |
|
| 180 |
+ |
|
| 181 |
+ |
#----------------------------------------------------------------------- |
| 182 |
+ |
# send_udp_packet |
| 183 |
+ |
# Sends a UDP packet to an i-scream filter. |
| 184 |
+ |
# The packet contains XML markup describing some of the machine's state. |
| 185 |
+ |
# Receipt of UDP packets is not guaranteed. |
| 186 |
+ |
#----------------------------------------------------------------------- |
| 187 |
|
sub send_udp_packet() { |
| 188 |
|
|
| 189 |
|
my(@statgrab) = `./statgrab.pl`; |
| 190 |
|
my(%packet); |
| 191 |
< |
for (my($i) = 0; $i < $#statgrab; $i++) { |
| 191 |
> |
for (my($i) = 0; $i <= $#statgrab; $i++) { |
| 192 |
|
$statgrab[$i] =~ /^([^\s]*) (.*)$/; |
| 193 |
|
$packet{$1} = $2; |
| 194 |
|
} |
| 198 |
|
my($disk_info) = "<disk>"; |
| 199 |
|
my($i) = 0; |
| 200 |
|
while (defined $packet{"packet.disk.p$i.attributes.mount"}) { |
| 201 |
< |
$disk_info .= "<p$i>"; |
| 202 |
< |
$disk_info .= qq/<name>$packet{"packet.disk.p$i.attributes.name"}<\/name>/; |
| 203 |
< |
$disk_info .= qq/<kbytes>$packet{"packet.disk.p$i.attributes.kbytes"}<\/kbytes>/; |
| 204 |
< |
$disk_info .= qq/<used>$packet{"packet.disk.p$i.attributes.used"}<\/used>/; |
| 205 |
< |
$disk_info .= qq/<avail>$packet{"packet.disk.p$i.attributes.avail"}<\/avail>/; |
| 206 |
< |
$disk_info .= qq/<mount>$packet{"packet.disk.p$i.attributes.mount"}<\/mount>/; |
| 207 |
< |
$disk_info .= "</p$i>"; |
| 201 |
> |
$disk_info .= "<p$i"; |
| 202 |
> |
$disk_info .= " name=\"" . $packet{"packet.disk.p$i.attributes.name"} . "\""; |
| 203 |
> |
$disk_info .= " kbytes=\"" . $packet{"packet.disk.p$i.attributes.kbytes"} . "\""; |
| 204 |
> |
$disk_info .= " used=\"" . $packet{"packet.disk.p$i.attributes.used"} . "\""; |
| 205 |
> |
$disk_info .= " avail=\"" . $packet{"packet.disk.p$i.attributes.avail"} . "\""; |
| 206 |
> |
$disk_info .= " mount=\"" . $packet{"packet.disk.p$i.attributes.mount"} . "\""; |
| 207 |
> |
$disk_info .= "></p$i>"; |
| 208 |
|
++$i; |
| 209 |
|
} |
| 210 |
|
$disk_info .= "</disk>"; |
| 211 |
|
|
| 212 |
|
my($hostname) = hostname(); |
| 213 |
< |
$hostname =~ s/^([^\.]*?)/$1/; |
| 214 |
< |
my($domainname) = `cat /etc/resolv.conf`; |
| 215 |
< |
$domainname =~ s/domain\s*([^\s]*?)/$1/; |
| 216 |
< |
my($machine_name) = "$hostname.$domainname"; |
| 213 |
> |
$hostname =~ s/\..*$//g; |
| 214 |
> |
my($resolv) = `cat /etc/resolv.conf`; |
| 215 |
> |
my($domainname); |
| 216 |
> |
my($machine_name); |
| 217 |
> |
if($resolv =~ /domain\s+([^\s]+)/) { |
| 218 |
> |
# some machines have domain <domain> in resolv.conf |
| 219 |
> |
$domainname = $1; |
| 220 |
> |
$machine_name = "$hostname.$domainname"; |
| 221 |
> |
} |
| 222 |
> |
elsif($resolv =~ /search\s+([^\s]+)/) { |
| 223 |
> |
# some machines have search <domain> in resolv.conf |
| 224 |
> |
$domainname = $1; |
| 225 |
> |
$machine_name = "$hostname.$domainname"; |
| 226 |
> |
} |
| 227 |
> |
else { |
| 228 |
> |
# we can't find out the domain |
| 229 |
> |
$machine_name = $hostname; |
| 230 |
> |
} |
| 231 |
|
my($ip) = inet_ntoa(scalar(gethostbyname($hostname)) || 'localhost'); |
| 232 |
|
|
| 233 |
|
# Build the XML packet this way, as we can clearly |
| 234 |
|
# see the structure and contents... I like this ;-) |
| 235 |
+ |
# [Note that the server rejects UDP packets that are |
| 236 |
+ |
# larger than 8196 bytes] |
| 237 |
|
my($xml) = <<EOF; |
| 238 |
|
|
| 239 |
|
<packet seq_no="$seq_no" machine_name="$machine_name" date="$date" type="data" ip="$ip"> |
| 248 |
|
<platform>$packet{"packet.os.platform"}</platform> |
| 249 |
|
<sysname>$packet{"packet.os.sysname"}</sysname> |
| 250 |
|
<version>$packet{"packet.os.version"}</version> |
| 251 |
+ |
<uptime>$packet{"packet.os.uptime"}</uptime> |
| 252 |
|
</os> |
| 253 |
|
<users> |
| 254 |
|
<count>$packet{"packet.users.count"}</count> |
| 269 |
|
<swap>$packet{"packet.cpu.swap"}</swap> |
| 270 |
|
</cpu> |
| 271 |
|
<memory> |
| 272 |
< |
<total>$packet{"packet.memory.real"}</total> |
| 272 |
> |
<total>$packet{"packet.memory.total"}</total> |
| 273 |
|
<free>$packet{"packet.memory.free"}</free> |
| 274 |
|
</memory> |
| 275 |
|
<swap> |
| 276 |
< |
<total>$packet{"packet.memory.swap_total"}</total> |
| 277 |
< |
<free>$packet{"packet.memory.swap_free"}</free> |
| 276 |
> |
<total>$packet{"packet.swap.total"}</total> |
| 277 |
> |
<free>$packet{"packet.swap.free"}</free> |
| 278 |
|
</swap> |
| 279 |
|
$disk_info |
| 280 |
|
</packet> |
| 281 |
|
|
| 282 |
|
EOF |
| 283 |
|
|
| 284 |
+ |
# Make the packet smaller by stripping out newlines and leading spaces. |
| 285 |
|
$xml =~ s/\n\s*//g; |
| 286 |
|
|
| 287 |
|
my($sock) = new IO::Socket::INET ( |
| 294 |
|
close($sock); |
| 295 |
|
$seq_no++; |
| 296 |
|
print "-"; |
| 297 |
+ |
|
| 298 |
+ |
return; |
| 299 |
|
} |
| 300 |
|
|
| 301 |
+ |
|
| 302 |
+ |
|
| 303 |
+ |
|
| 304 |
+ |
#----------------------------------------------------------------------- |
| 305 |
+ |
# send_tcp_heartbeat |
| 306 |
+ |
# Establishes a TCP connection to an i-scream filter. |
| 307 |
+ |
# The heartbeat is used as a guaranteed "I'm alive" delivery mechanism. |
| 308 |
+ |
#----------------------------------------------------------------------- |
| 309 |
|
sub send_tcp_heartbeat() { |
| 310 |
|
|
| 311 |
|
my($sock) = new IO::Socket::INET( |
| 312 |
|
PeerAddr => $filter_addr, |
| 313 |
|
PeerPort => $tcp_port, |
| 314 |
|
Proto => 'tcp' |
| 315 |
< |
) or die "Could not perform heartbeat via TCP: $!\n"; |
| 315 |
> |
); |
| 316 |
> |
if (!defined $sock) { |
| 317 |
> |
print "IHOST WARNING: Failed to deliver a heartbeat to the i-scream filter.\n"; |
| 318 |
> |
return; |
| 319 |
> |
} |
| 320 |
|
|
| 248 |
– |
die "Could not connect to the i-scream filter: $!\n" unless $sock; |
| 249 |
– |
|
| 321 |
|
# Now run through the configuration process. |
| 322 |
|
my($response); |
| 323 |
|
|
| 373 |
|
|
| 374 |
|
close($sock); |
| 375 |
|
print "^"; |
| 376 |
+ |
|
| 377 |
+ |
return; |
| 378 |
|
} |
