![[tokkee]](http://tokkee.org/images/avatar.png){kind=avatar}
diff --git a/plugins/netutils.c b/plugins/netutils.c
index e5d3528191bfa5ee8feb86482cec58ebf8a68b42..ea004bb40bafc59409049d2b5af13466d351b50d 100644 (file)
--- a/plugins/netutils.c
+++ b/plugins/netutils.c
*
****************************************************************************/
-#include "config.h"
#include "common.h"
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-#include <netdb.h>
+#include "netutils.h"
-extern int socket_timeout;
-RETSIGTYPE socket_timeout_alarm_handler (int);
-
-int process_tcp_request2 (char *, int, char *, char *, int);
-int process_tcp_request (char *, int, char *, char *, int);
-int process_udp_request (char *, int, char *, char *, int);
-int process_request (char *, int, char *, char *, char *, int);
-
-int my_tcp_connect (char *, int, int *);
-int my_udp_connect (char *, int, int *);
-int my_connect (char *, int, int *, char *);
-
-int my_inet_aton (register const char *, struct in_addr *);
+int socket_timeout = DEFAULT_SOCKET_TIMEOUT;
+int econn_refuse_state = STATE_CRITICAL;
+int was_refused = FALSE;
+int address_family = AF_UNSPEC;
/* handles socket timeouts */
void
socket_timeout_alarm_handler (int sig)
{
-
- printf ("Socket timeout after %d seconds\n", socket_timeout);
+ if (sig == SIGALRM)
+ printf ("CRITICAL - Socket timeout after %d seconds\n", socket_timeout);
+ else
+ printf ("CRITICAL - Abnormal timeout after %d seconds\n", socket_timeout);
exit (STATE_CRITICAL);
}
/* connects to a host on a specified TCP port, sends a string,
and gets a response */
int
-process_tcp_request (char *server_address,
- int server_port,
- char *send_buffer, char *recv_buffer, int recv_size)
+process_tcp_request (char *server_address, int server_port,
+ char *send_buffer, char *recv_buffer, int recv_size)
{
int result;
- char proto[4] = "tcp";
- result = process_request (server_address,
- server_port,
- proto, send_buffer, recv_buffer, recv_size);
+ result = process_request (server_address, server_port,
+ IPPROTO_TCP, send_buffer, recv_buffer, recv_size);
return result;
}
/* connects to a host on a specified UDP port, sends a string, and gets a
response */
int
-process_udp_request (char *server_address,
- int server_port,
- char *send_buffer, char *recv_buffer, int recv_size)
+process_udp_request (char *server_address, int server_port,
+ char *send_buffer, char *recv_buffer, int recv_size)
{
int result;
- char proto[4] = "udp";
- result = process_request (server_address,
- server_port,
- proto, send_buffer, recv_buffer, recv_size);
+ result = process_request (server_address, server_port,
+ IPPROTO_UDP, send_buffer, recv_buffer, recv_size);
return result;
}
response. loops on select-recv until timeout or eof to get all of a
multi-packet answer */
int
-process_tcp_request2 (char *server_address,
- int server_port,
- char *send_buffer, char *recv_buffer, int recv_size)
+process_tcp_request2 (char *server_address, int server_port,
+ char *send_buffer, char *recv_buffer, int recv_size)
{
int result;
fd_set readfds;
int recv_length = 0;
- result = my_connect (server_address, server_port, &sd, "tcp");
+ result = my_connect (server_address, server_port, &sd, IPPROTO_TCP);
if (result != STATE_OK)
return STATE_CRITICAL;
send_result = send (sd, send_buffer, strlen (send_buffer), 0);
- if (send_result != strlen (send_buffer)) {
+ if (send_result<0 || (size_t)send_result!=strlen(send_buffer)) {
printf ("send() failed\n");
result = STATE_WARNING;
}
}
else { /* it has */
recv_result =
- recv (sd, recv_buffer + recv_length, recv_size - recv_length - 1, 0);
- if (recv_result == -1) { /* recv failed, bail out */
+ recv (sd, recv_buffer + recv_length,
+ recv_size - recv_length - 1, 0);
+ if (recv_result == -1) {
+ /* recv failed, bail out */
strcpy (recv_buffer + recv_length, "");
result = STATE_WARNING;
break;
}
- else if (recv_result == 0) { /* end of file ? */
+ else if (recv_result == 0) {
+ /* end of file ? */
recv_buffer[recv_length] = 0;
break;
}
else { /* we got data! */
recv_length += recv_result;
- if (recv_length >= recv_size - 1) { /* buffer full, we're done */
+ if (recv_length >= recv_size - 1) {
+ /* buffer full, we're done */
recv_buffer[recv_size - 1] = 0;
break;
}
}
- } /* end if(!FD_ISSET(sd,&readfds)) */
- } /* end while(1) */
+ }
+ /* end if(!FD_ISSET(sd,&readfds)) */
+ }
+ /* end while(1) */
close (sd);
return result;
/* connects to a host on a specified port, sends a string, and gets a
response */
int
-process_request (char *server_address,
- int server_port,
- char *proto,
- char *send_buffer, char *recv_buffer, int recv_size)
+process_request (char *server_address, int server_port, int proto,
+ char *send_buffer, char *recv_buffer, int recv_size)
{
int result;
int send_result;
return STATE_CRITICAL;
send_result = send (sd, send_buffer, strlen (send_buffer), 0);
- if (send_result != strlen (send_buffer)) {
+ if (send_result<0 || (size_t)send_result!=strlen(send_buffer)) {
printf ("send() failed\n");
result = STATE_WARNING;
}
recv_result = recv (sd, recv_buffer, recv_size - 1, 0);
if (recv_result == -1) {
strcpy (recv_buffer, "");
- if (!strcmp (proto, "tcp"))
+ if (proto != IPPROTO_TCP)
printf ("recv() failed\n");
result = STATE_WARNING;
}
my_tcp_connect (char *host_name, int port, int *sd)
{
int result;
- char proto[4] = "tcp";
- result = my_connect (host_name, port, sd, proto);
+ result = my_connect (host_name, port, sd, IPPROTO_TCP);
return result;
}
my_udp_connect (char *host_name, int port, int *sd)
{
int result;
- char proto[4] = "udp";
- result = my_connect (host_name, port, sd, proto);
+ result = my_connect (host_name, port, sd, IPPROTO_UDP);
return result;
}
/* opens a tcp or udp connection to a remote host */
int
-my_connect (char *host_name, int port, int *sd, char *proto)
+my_connect (char *host_name, int port, int *sd, int proto)
{
- struct sockaddr_in servaddr;
- struct hostent *hp;
- struct protoent *ptrp;
+ struct addrinfo hints;
+ struct addrinfo *res;
+ char port_str[6];
int result;
- bzero ((char *) &servaddr, sizeof (servaddr));
- servaddr.sin_family = AF_INET;
- servaddr.sin_port = htons (port);
-
- /* try to bypass using a DNS lookup if this is just an IP address */
- if (!my_inet_aton (host_name, &servaddr.sin_addr)) {
+ memset (&hints, 0, sizeof (hints));
+ hints.ai_family = address_family;
+ hints.ai_protocol = proto;
+ hints.ai_socktype = (proto == IPPROTO_UDP) ? SOCK_DGRAM : SOCK_STREAM;
- /* else do a DNS lookup */
- hp = gethostbyname ((const char *) host_name);
- if (hp == NULL) {
- printf ("Invalid host name '%s'\n", host_name);
- return STATE_UNKNOWN;
- }
-
- memcpy (&servaddr.sin_addr, hp->h_addr, hp->h_length);
- }
+ snprintf (port_str, sizeof (port_str), "%d", port);
+ result = getaddrinfo (host_name, port_str, &hints, &res);
- /* map transport protocol name to protocol number */
- if ((ptrp = getprotobyname (proto)) == NULL) {
- printf ("Cannot map \"%s\" to protocol number\n", proto);
+ if (result != 0) {
+ printf ("%s\n", gai_strerror (result));
return STATE_UNKNOWN;
}
+ else {
+ while (res) {
+ /* attempt to create a socket */
+ *sd = socket (res->ai_family, (proto == IPPROTO_UDP) ?
+ SOCK_DGRAM : SOCK_STREAM, res->ai_protocol);
+
+ if (*sd < 0) {
+ printf ("Socket creation failed\n");
+ freeaddrinfo (res);
+ return STATE_UNKNOWN;
+ }
- /* create a socket */
- *sd =
- socket (PF_INET, (!strcmp (proto, "udp")) ? SOCK_DGRAM : SOCK_STREAM,
- ptrp->p_proto);
- if (*sd < 0) {
- printf ("Socket creation failed\n");
- return STATE_UNKNOWN;
- }
+ /* attempt to open a connection */
+ result = connect (*sd, res->ai_addr, res->ai_addrlen);
- /* open a connection */
- result = connect (*sd, (struct sockaddr *) &servaddr, sizeof (servaddr));
- if (result < 0) {
- switch (errno) {
- case ECONNREFUSED:
- printf ("Connection refused by host\n");
- break;
- case ETIMEDOUT:
- printf ("Timeout while attempting connection\n");
- break;
- case ENETUNREACH:
- printf ("Network is unreachable\n");
- break;
- default:
- printf ("Connection refused or timed out\n");
+ if (result == 0) {
+ was_refused = FALSE;
+ break;
+ }
+
+ if (result < 0) {
+ switch (errno) {
+ case ECONNREFUSED:
+ switch (econn_refuse_state) {
+ case STATE_OK:
+ case STATE_WARNING:
+ was_refused = TRUE;
+ }
+ break;
+ }
+ }
+
+ close (*sd);
+ res = res->ai_next;
}
+ freeaddrinfo (res);
+ }
+ if (result == 0)
+ return STATE_OK;
+ else if (was_refused)
+ return econn_refuse_state;
+ else {
+ printf ("%s\n", strerror(errno));
return STATE_CRITICAL;
}
-
- return STATE_OK;
}
+int
+is_host (char *address)
+{
+ if (is_addr (address) || is_hostname (address))
+ return (TRUE);
+ return (FALSE);
+}
-/* This code was taken from Fyodor's nmap utility, which was originally
- taken from the GLIBC 2.0.6 libraries because Solaris doesn't contain
- the inet_aton() funtion. */
int
-my_inet_aton (register const char *cp, struct in_addr *addr)
+is_addr (char *address)
{
- register unsigned int val; /* changed from u_long --david */
- register int base, n;
- register char c;
- u_int parts[4];
- register u_int *pp = parts;
-
- c = *cp;
-
- for (;;) {
-
- /*
- * Collect number up to ``.''.
- * Values are specified as for C:
- * 0x=hex, 0=octal, isdigit=decimal.
- */
- if (!isdigit ((int) c))
- return (0);
- val = 0;
- base = 10;
-
- if (c == '0') {
- c = *++cp;
- if (c == 'x' || c == 'X')
- base = 16, c = *++cp;
- else
- base = 8;
- }
+#ifdef USE_IPV6
+ if (is_inet_addr (address) && address_family != AF_INET6)
+#else
+ if (is_inet_addr (address))
+#endif
+ return (TRUE);
+
+#ifdef USE_IPV6
+ if (is_inet6_addr (address) && address_family != AF_INET)
+ return (TRUE);
+#endif
+
+ return (FALSE);
+}
- for (;;) {
- if (isascii ((int) c) && isdigit ((int) c)) {
- val = (val * base) + (c - '0');
- c = *++cp;
- }
- else if (base == 16 && isascii ((int) c) && isxdigit ((int) c)) {
- val = (val << 4) | (c + 10 - (islower ((int) c) ? 'a' : 'A'));
- c = *++cp;
- }
- else
- break;
- }
+int
+resolve_host_or_addr (char *address, int family)
+{
+ struct addrinfo hints;
+ struct addrinfo *res;
+ int retval;
- if (c == '.') {
-
- /*
- * Internet format:
- * a.b.c.d
- * a.b.c (with c treated as 16 bits)
- * a.b (with b treated as 24 bits)
- */
- if (pp >= parts + 3)
- return (0);
- *pp++ = val;
- c = *++cp;
- }
- else
- break;
- }
+ memset (&hints, 0, sizeof (hints));
+ hints.ai_family = family;
+ retval = getaddrinfo (address, NULL, &hints, &res);
- /* Check for trailing characters */
- if (c != '\0' && (!isascii ((int) c) || !isspace ((int) c)))
- return (0);
-
- /* Concoct the address according to the number of parts specified */
- n = pp - parts + 1;
- switch (n) {
-
- case 0:
- return (0); /* initial nondigit */
-
- case 1: /* a -- 32 bits */
- break;
-
- case 2: /* a.b -- 8.24 bits */
- if (val > 0xffffff)
- return (0);
- val |= parts[0] << 24;
- break;
-
- case 3: /* a.b.c -- 8.8.16 bits */
- if (val > 0xffff)
- return (0);
- val |= (parts[0] << 24) | (parts[1] << 16);
- break;
-
- case 4: /* a.b.c.d -- 8.8.8.8 bits */
- if (val > 0xff)
- return (0);
- val |= (parts[0] << 24) | (parts[1] << 16) | (parts[2] << 8);
- break;
+ if (retval != 0)
+ return FALSE;
+ else {
+ freeaddrinfo (res);
+ return TRUE;
}
+}
- if (addr)
- addr->s_addr = htonl (val);
+int
+is_inet_addr (char *address)
+{
+ return resolve_host_or_addr (address, AF_INET);
+}
- return (1);
+#ifdef USE_IPV6
+int
+is_inet6_addr (char *address)
+{
+ return resolve_host_or_addr (address, AF_INET6);
+}
+#endif
+
+int
+is_hostname (char *s1)
+{
+#ifdef USE_IPV6
+ return resolve_host_or_addr (s1, address_family);
+#else
+ return resolve_host_or_addr (s1, AF_INET);
+#endif
}
+