| 2 |
|
|
| 3 |
|
# ----------------------------------------------------------- |
| 4 |
|
# Perl i-scream Host. |
| 5 |
+ |
# http://www.i-scream.org.uk |
| 6 |
|
# |
| 7 |
|
# An all-in-one script to act as an i-scream host on |
| 8 |
|
# a typical Unix/Linux box. You may adapt the data-gathering |
| 32 |
|
$tcp_port |
| 33 |
|
$filter_addr |
| 34 |
|
$file_list |
| 35 |
+ |
$fqdn |
| 36 |
|
); |
| 37 |
|
|
| 38 |
|
if (@ARGV != 2) { |
| 50 |
|
$last_udp_time = time; |
| 51 |
|
$last_tcp_time = time; |
| 52 |
|
while (1) { |
| 53 |
< |
if (time >= $last_udp_time + $udp_update_time) { |
| 53 |
> |
my($time) = time; |
| 54 |
> |
if ($time >= $last_udp_time + $udp_update_time) { |
| 55 |
|
&send_udp_packet(); |
| 56 |
< |
$last_udp_time = time; |
| 56 |
> |
$last_udp_time = $time; |
| 57 |
|
} |
| 58 |
< |
if (time >= $last_tcp_time + $tcp_update_time) { |
| 58 |
> |
if ($time >= $last_tcp_time + $tcp_update_time) { |
| 59 |
|
&send_tcp_heartbeat(); |
| 60 |
< |
$last_tcp_time = time; |
| 60 |
> |
$last_tcp_time = $time; |
| 61 |
|
} |
| 62 |
< |
`sleep 1`; |
| 62 |
> |
my($next_udp) = $udp_update_time - $time + $last_udp_time; |
| 63 |
> |
my($next_tcp) = $tcp_update_time - $time + $last_tcp_time; |
| 64 |
> |
my($delay); |
| 65 |
> |
if ($next_udp < $next_tcp) { |
| 66 |
> |
$delay = $next_udp |
| 67 |
> |
} |
| 68 |
> |
else { |
| 69 |
> |
$delay = $next_tcp; |
| 70 |
> |
} |
| 71 |
> |
`sleep $delay`; |
| 72 |
|
} |
| 73 |
|
|
| 74 |
|
exit(0); |
| 75 |
|
|
| 76 |
+ |
|
| 77 |
+ |
#----------------------------------------------------------------------- |
| 78 |
+ |
# tcp_configure |
| 79 |
+ |
# Establishes a TCP connection to the specified i-scream filter manager. |
| 80 |
+ |
# The host then requests details from the server, such as the intervals |
| 81 |
+ |
# at which to send UDP packets. |
| 82 |
+ |
#----------------------------------------------------------------------- |
| 83 |
|
sub tcp_configure() { |
| 84 |
|
|
| 85 |
|
my($sock) = new IO::Socket::INET( |
| 86 |
|
PeerAddr => $filter_manager_addr, |
| 87 |
|
PeerPort => $filter_manager_port, |
| 88 |
|
Proto => 'tcp' |
| 89 |
< |
) or die "Could not perform configuration via TCP: $!\n"; |
| 89 |
> |
); |
| 90 |
> |
if (!defined $sock) { |
| 91 |
> |
print "IHOST ERROR: Could not connect to $filter_manager_addr:$filter_manager_port.\n"; |
| 92 |
> |
print "Please check that there is an i-scream server at this address.\n"; |
| 93 |
> |
print "Program ended.\n"; |
| 94 |
> |
exit(1); |
| 95 |
> |
} |
| 96 |
|
|
| 97 |
< |
die "Could not connect to the i-scream filter manager: $!\n" unless $sock; |
| 73 |
< |
|
| 74 |
< |
# Now run through the configuration process. |
| 97 |
> |
# Now run through the configuration process... |
| 98 |
|
my($response); |
| 99 |
|
|
| 100 |
|
print $sock "STARTCONFIG\n"; |
| 120 |
|
|
| 121 |
|
print "File list obtained: $file_list\n"; |
| 122 |
|
|
| 123 |
+ |
print $sock "FQDN\n"; |
| 124 |
+ |
$response = <$sock>; |
| 125 |
+ |
chop $response; |
| 126 |
+ |
$fqdn = $response; |
| 127 |
+ |
|
| 128 |
+ |
print "FQDN returned: $fqdn\n"; |
| 129 |
+ |
|
| 130 |
|
print $sock "UDPUpdateTime\n"; |
| 131 |
|
$response = <$sock>; |
| 132 |
|
chop $response; |
| 171 |
|
close($sock); |
| 172 |
|
|
| 173 |
|
print "Configuration finished sucessfully!\n"; |
| 174 |
+ |
|
| 175 |
+ |
return; |
| 176 |
|
} |
| 177 |
|
|
| 178 |
+ |
|
| 179 |
+ |
|
| 180 |
+ |
|
| 181 |
+ |
#----------------------------------------------------------------------- |
| 182 |
+ |
# send_udp_packet |
| 183 |
+ |
# Sends a UDP packet to an i-scream filter. |
| 184 |
+ |
# The packet contains XML markup describing some of the machine's state. |
| 185 |
+ |
# Receipt of UDP packets is not guaranteed. |
| 186 |
+ |
#----------------------------------------------------------------------- |
| 187 |
|
sub send_udp_packet() { |
| 188 |
|
|
| 189 |
|
my(@statgrab) = `./statgrab.pl`; |
| 190 |
|
my(%packet); |
| 191 |
< |
for (my($i) = 0; $i < $#statgrab; $i++) { |
| 191 |
> |
for (my($i) = 0; $i <= $#statgrab; $i++) { |
| 192 |
|
$statgrab[$i] =~ /^([^\s]*) (.*)$/; |
| 193 |
|
$packet{$1} = $2; |
| 194 |
|
} |
| 198 |
|
my($disk_info) = "<disk>"; |
| 199 |
|
my($i) = 0; |
| 200 |
|
while (defined $packet{"packet.disk.p$i.attributes.mount"}) { |
| 201 |
< |
$disk_info .= "<p$i>"; |
| 202 |
< |
$disk_info .= qq/<name>$packet{"packet.disk.p$i.attributes.name"}<\/name>/; |
| 203 |
< |
$disk_info .= qq/<kbytes>$packet{"packet.disk.p$i.attributes.kbytes"}<\/kbytes>/; |
| 204 |
< |
$disk_info .= qq/<used>$packet{"packet.disk.p$i.attributes.used"}<\/used>/; |
| 205 |
< |
$disk_info .= qq/<avail>$packet{"packet.disk.p$i.attributes.avail"}<\/avail>/; |
| 206 |
< |
$disk_info .= qq/<mount>$packet{"packet.disk.p$i.attributes.mount"}<\/mount>/; |
| 207 |
< |
$disk_info .= "</p$i>"; |
| 201 |
> |
$disk_info .= "<p$i"; |
| 202 |
> |
$disk_info .= " name=\"" . $packet{"packet.disk.p$i.attributes.name"} . "\""; |
| 203 |
> |
$disk_info .= " kbytes=\"" . $packet{"packet.disk.p$i.attributes.kbytes"} . "\""; |
| 204 |
> |
$disk_info .= " used=\"" . $packet{"packet.disk.p$i.attributes.used"} . "\""; |
| 205 |
> |
$disk_info .= " avail=\"" . $packet{"packet.disk.p$i.attributes.avail"} . "\""; |
| 206 |
> |
$disk_info .= " mount=\"" . $packet{"packet.disk.p$i.attributes.mount"} . "\""; |
| 207 |
> |
$disk_info .= "></p$i>"; |
| 208 |
|
++$i; |
| 209 |
|
} |
| 210 |
|
$disk_info .= "</disk>"; |
| 211 |
|
|
| 212 |
< |
my($hostname) = hostname(); |
| 213 |
< |
$hostname =~ s/\..*$//g; |
| 173 |
< |
my($domainname) = `cat /etc/resolv.conf`; |
| 174 |
< |
$domainname =~ /domain\s+([^\s]+)/; |
| 175 |
< |
$domainname = $1; |
| 176 |
< |
my($machine_name) = "$hostname.$domainname"; |
| 177 |
< |
my($ip) = inet_ntoa(scalar(gethostbyname($hostname)) || 'localhost'); |
| 212 |
> |
my($machine_name) = hostname(); |
| 213 |
> |
my($ip) = inet_ntoa(scalar(gethostbyname($machine_name)) || 'localhost'); |
| 214 |
|
|
| 215 |
|
# Build the XML packet this way, as we can clearly |
| 216 |
|
# see the structure and contents... I like this ;-) |
| 217 |
+ |
# [Note that the server rejects UDP packets that are |
| 218 |
+ |
# larger than 8196 bytes] |
| 219 |
|
my($xml) = <<EOF; |
| 220 |
|
|
| 221 |
|
<packet seq_no="$seq_no" machine_name="$machine_name" date="$date" type="data" ip="$ip"> |
| 230 |
|
<platform>$packet{"packet.os.platform"}</platform> |
| 231 |
|
<sysname>$packet{"packet.os.sysname"}</sysname> |
| 232 |
|
<version>$packet{"packet.os.version"}</version> |
| 233 |
+ |
<uptime>$packet{"packet.os.uptime"}</uptime> |
| 234 |
|
</os> |
| 235 |
|
<users> |
| 236 |
|
<count>$packet{"packet.users.count"}</count> |
| 251 |
|
<swap>$packet{"packet.cpu.swap"}</swap> |
| 252 |
|
</cpu> |
| 253 |
|
<memory> |
| 254 |
< |
<total>$packet{"packet.memory.real"}</total> |
| 254 |
> |
<total>$packet{"packet.memory.total"}</total> |
| 255 |
|
<free>$packet{"packet.memory.free"}</free> |
| 256 |
|
</memory> |
| 257 |
|
<swap> |
| 258 |
< |
<total>$packet{"packet.memory.swap_total"}</total> |
| 259 |
< |
<free>$packet{"packet.memory.swap_free"}</free> |
| 258 |
> |
<total>$packet{"packet.swap.total"}</total> |
| 259 |
> |
<free>$packet{"packet.swap.free"}</free> |
| 260 |
|
</swap> |
| 261 |
|
$disk_info |
| 262 |
|
</packet> |
| 263 |
|
|
| 264 |
|
EOF |
| 265 |
|
|
| 266 |
+ |
# Make the packet smaller by stripping out newlines and leading spaces. |
| 267 |
|
$xml =~ s/\n\s*//g; |
| 268 |
|
|
| 269 |
|
my($sock) = new IO::Socket::INET ( |
| 276 |
|
close($sock); |
| 277 |
|
$seq_no++; |
| 278 |
|
print "-"; |
| 279 |
+ |
|
| 280 |
+ |
return; |
| 281 |
|
} |
| 282 |
|
|
| 283 |
+ |
|
| 284 |
+ |
|
| 285 |
+ |
|
| 286 |
+ |
#----------------------------------------------------------------------- |
| 287 |
+ |
# send_tcp_heartbeat |
| 288 |
+ |
# Establishes a TCP connection to an i-scream filter. |
| 289 |
+ |
# The heartbeat is used as a guaranteed "I'm alive" delivery mechanism. |
| 290 |
+ |
#----------------------------------------------------------------------- |
| 291 |
|
sub send_tcp_heartbeat() { |
| 292 |
|
|
| 293 |
|
my($sock) = new IO::Socket::INET( |
| 294 |
|
PeerAddr => $filter_addr, |
| 295 |
|
PeerPort => $tcp_port, |
| 296 |
|
Proto => 'tcp' |
| 297 |
< |
) or die "Could not perform heartbeat via TCP: $!\n"; |
| 297 |
> |
); |
| 298 |
> |
if (!defined $sock) { |
| 299 |
> |
print "IHOST WARNING: Failed to deliver a heartbeat to the i-scream filter.\n"; |
| 300 |
> |
return; |
| 301 |
> |
} |
| 302 |
|
|
| 249 |
– |
die "Could not connect to the i-scream filter: $!\n" unless $sock; |
| 250 |
– |
|
| 303 |
|
# Now run through the configuration process. |
| 304 |
|
my($response); |
| 305 |
|
|
| 355 |
|
|
| 356 |
|
close($sock); |
| 357 |
|
print "^"; |
| 358 |
+ |
|
| 359 |
+ |
return; |
| 360 |
|
} |
