-
Notifications
You must be signed in to change notification settings - Fork 118
/
check_traffic.sh
executable file
·120 lines (104 loc) · 2.37 KB
/
check_traffic.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
#!/usr/bin/env bash
# Author: Jon Schipp
# Nagios Exit Codes
OK=0
WARNING=1
CRITICAL=2
UNKNOWN=3
usage()
{
cat <<EOF
Nagios plug-in that checks packet rate for traffic specified with a bpf
Options:
-i Network interface
-f <bpf> Filter in libpcap syntax
-t <int> Time interval in seconds (def: 1)
-w <int> Warning threshold
-c <int> Critical threshold
EOF
}
argcheck() {
if [ $ARGC -lt $1 ]; then
echo "Please specify an argument!, try $0 -h for more information"
exit 1
fi
}
depend_check(){
bin=$(which tcpdump)
[[ -f $bin ]] || { echo "UNKNOWN: $bin not found in ${PATH}" && exit $UNKNOWN; }
[[ -d /tmp ]] && DIR=/tmp && return
[[ -d /var/tmp ]] && DIR=/var/tmp && return
DIR=.
}
check_bpf () {
[ "$1" ] || { echo "No BPF specified, use \`\`-f''" && exit $UNKNOWN; }
exp='\0324\0303\0262\0241\02\0\04\0\0\0\0\0\0\0\0\0\0377\0377\0\0\01\0\0\0'
echo -en "$exp" | tcpdump -r - "$*" >/dev/null 2>&1 || { echo "UNKNOWN: Invalid BPF" && exit $UNKNOWN; }
}
get_packets() {
timeout -s SIGINT $TIME tcpdump -nni $INT "$FILTER" 2>/dev/null > $BEFORE
timeout -s SIGINT $TIME tcpdump -nni $INT "$FILTER" 2>/dev/null > $AFTER
! [ -f $BEFORE ] && echo "UNKNOWN: $BEFORE doesn't exist!" && exit $UNKNOWN
! [ -f $AFTER ] && echo "UNKNOWN: $AFTER doesn't exist!" && exit $UNKNOWN
}
get_counts() {
START=$(cat $BEFORE | wc -l)
STOP=$(cat $AFTER | wc -l)
[[ $START -gt $STOP ]] && RESULT=$((START-STOP))
[[ $STOP -gt $START ]] && RESULT=$((STOP-START))
}
traffic_calculation() {
if [ $1 -gt $CRIT ]; then
exit $CRITICAL
elif [ $1 -gt $WARN ]; then
exit $WARNING
else
exit $OK
fi
}
PPS=0
BPS=0
LINERATE=0
TIME=1
WARN=0
CRIT=0
ARGC=$#
BEFORE=$DIR/check_traffic1.txt
AFTER=$DIR/check_traffic2.txt
# Print warning and exit if less than n arguments specified
argcheck 1
depend_check
# option and argument handling
while getopts "hi:c:f:t:w:" OPTION
do
case $OPTION in
h)
usage
exit
;;
i)
INT=$OPTARG
;;
f)
FILTER="$OPTARG"
;;
t)
TIME=$OPTARG
;;
c)
CRIT=$OPTARG
;;
w)
WARN=$OPTARG
;;
*)
exit $UNKNOWN
;;
esac
done
[ -d /sys/class/net/$INT ] || { "UNKNOWN: $INT does not exist" && exit $UNKNOWN; }
[ -d /proc ] && check_bpf "$FILTER"
get_packets
get_counts
echo "Traffic rate is ~${RESULT}/${TIME}"
traffic_calculation $RESULT