From e4354556c3f4a1c4631c4feb1979fdabc07b1e06 Mon Sep 17 00:00:00 2001 From: Subhendu Ghosh Date: Tue, 14 Oct 2003 03:15:19 +0000 Subject: [PATCH] snmpv3 patches git-svn-id: https://nagiosplug.svn.sourceforge.net/svnroot/nagiosplug/nagiosplug/trunk@746 f882894a-f735-0410-b71e-b25c423dba1c --- plugins-scripts/check_ifoperstatus.pl | 315 ++++++++++++++++++-------- 1 file changed, 224 insertions(+), 91 deletions(-) diff --git a/plugins-scripts/check_ifoperstatus.pl b/plugins-scripts/check_ifoperstatus.pl index f4eaefc..8a23ca5 100644 --- a/plugins-scripts/check_ifoperstatus.pl +++ b/plugins-scripts/check_ifoperstatus.pl @@ -5,6 +5,7 @@ # Copyright (C) 2000 Christoph Kron, # Modified 5/2002 to conform to updated Nagios Plugin Guidelines # Added support for named interfaces per Valdimir Ivaschenko (S. Ghosh) +# Added SNMPv3 support (10/2003) # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License @@ -42,6 +43,10 @@ use Getopt::Long; &Getopt::Long::config('bundling'); my $PROGNAME = "check_ifoperstatus"; +sub print_help (); +sub usage (); +sub process_arguments (); + my $status; my %ifOperStatus = ('1','up', '2','down', @@ -55,6 +60,8 @@ my $state = "UNKNOWN"; my $answer = ""; my $snmpkey = 0; my $community = "public"; +my $maxmsgsize = 1472 ; # Net::SNMP default is 1472 +my ($seclevel, $authproto, $secname, $authpass, $privpass, $auth, $priv, $context); my $port = 161; my @snmpoids; my $sysUptime = '1.3.6.1.2.1.1.3.0'; @@ -92,81 +99,7 @@ alarm($TIMEOUT); ### Validate Arguments -$status = GetOptions( - "V" => \$opt_V, "version" => \$opt_V, - "h" => \$opt_h, "help" => \$opt_h, - "v=i" => \$snmp_version, "snmp_version=i" => \$snmp_version, - "C=s" =>\$community, "community=s" => \$community, - "k=i" =>\$snmpkey, "key=i",\$snmpkey, - "d=s" =>\$ifdescr, "descr=s" => \$ifdescr, - "l=s" => \$lastc, "lastchange=s" => \$lastc, - "p=i" =>\$port, "port=i",\$port, - "H=s" => \$hostname, "hostname=s" => \$hostname, - "I" => \$ifXTable, "ifmib" => \$ifXTable, - "n=s" => \$ifName, "name=s" => \$ifName, - "w=s" => \$dormantWarn, "warn=s" => \$dormantWarn ); - - - -if ($status == 0) -{ - print_help(); - exit $ERRORS{'OK'}; -} - -if ($opt_V) { - print_revision($PROGNAME,'$Revision$ '); - exit $ERRORS{'OK'}; -} - -if ($opt_h) { - print_help(); - exit $ERRORS{'OK'}; -} - -if (! utils::is_hostname($hostname)){ - usage(); - exit $ERRORS{"UNKNOWN"}; -} - - -unless ($snmpkey > 0 || defined $ifdescr){ - printf "Either a valid snmpkey key (-k) or a ifDescr (-d) must be provided)\n"; - usage(); - exit $ERRORS{"UNKNOWN"}; -} - - -if (defined $name) { - $ifXTable=1; -} - -if ( $snmp_version =~ /[12]/ ) { - ($session, $error) = Net::SNMP->session( - -hostname => $hostname, - -community => $community, - -port => $port, - -version => $snmp_version - ); - - if (!defined($session)) { - $state='UNKNOWN'; - $answer=$error; - print ("$state: $answer"); - exit $ERRORS{$state}; - } -}elsif ( $snmp_version =~ /3/ ) { - $state='UNKNOWN'; - print ("$state: No support for SNMP v3 yet\n"); - exit $ERRORS{$state}; -}else{ - $state='UNKNOWN'; - print ("$state: No support for SNMP v$snmp_version yet\n"); - exit $ERRORS{$state}; -} - -## End validation - +$status = process_arguments(); ## map ifdescr to ifindex - should look at being able to cache this value @@ -179,7 +112,7 @@ if (defined $ifdescr) { # recommend use of SNMP v2 (get-bulk) if ($status==0) { $state = "UNKNOWN"; - printf "$state: could not retrive snmpkey - $status-$snmpkey\n"; + printf "$state: could not retrive ifdescr snmpkey - $status-$snmpkey\n"; $session->close; exit $ERRORS{$state}; } @@ -245,21 +178,21 @@ push(@snmpoids,$snmpIfAlias) if (defined $ifXTable) ; $answer = "Interface $name (index $snmpkey) is down."; } elsif ( $response->{$snmpIfOperStatus} == 5 ) { if (defined $dormantWarn ) { - if ($dormantWarn eq "w") { - $state = 'WARNNG'; - $answer = "Interface $name (index $snmpkey) is dormant."; - }elsif($dormantWarn eq "c") { - $state = 'CRITICAL'; - $answer = "Interface $name (index $snmpkey) is dormant."; + if ($dormantWarn eq "w") { + $state = 'WARNNG'; + $answer = "Interface $name (index $snmpkey) is dormant."; + }elsif($dormantWarn eq "c") { + $state = 'CRITICAL'; + $answer = "Interface $name (index $snmpkey) is dormant."; }elsif($dormantWarn eq "i") { - $state = 'OK'; - $answer = "Interface $name (index $snmpkey) is dormant."; + $state = 'OK'; + $answer = "Interface $name (index $snmpkey) is dormant."; } - }else{ - # dormant interface - but warning/critical/ignore not requested - $state = 'CRITICAL'; - $answer = "Interface $name (index $snmpkey) is dormant."; - } + }else{ + # dormant interface - but warning/critical/ignore not requested + $state = 'CRITICAL'; + $answer = "Interface $name (index $snmpkey) is dormant."; + } } elsif ( $response->{$snmpIfOperStatus} == 6 ) { $state = 'CRITICAL'; $answer = "Interface $name (index $snmpkey) notPresent - possible hotswap in progress."; @@ -311,7 +244,7 @@ sub fetch_ifdescr { return $snmpkey; } -sub usage { +sub usage() { printf "\nMissing arguments!\n"; printf "\n"; printf "usage: \n"; @@ -324,7 +257,7 @@ sub usage { exit $ERRORS{"UNKNOWN"}; } -sub print_help { +sub print_help() { printf "check_ifoperstatus plugin for Nagios monitors operational \n"; printf "status of a particular network interface on the target host\n"; printf "\nUsage:\n"; @@ -335,6 +268,16 @@ sub print_help { printf " 2 for SNMP v2c\n"; printf " SNMP v2c will use get_bulk for less overhead\n"; printf " if monitoring with -d\n"; + printf " -L (--seclevel) choice of \"noAuthNoPriv\", \"authNoPriv\", or \"authPriv\"\n"; + printf " -U (--secname) username for SNMPv3 context\n"; + printf " -c (--context) SNMPv3 context name (default is empty string)"; + printf " -A (--authpass) authentication password (cleartext ascii or localized key\n"; + printf " in hex with 0x prefix generated by using \"snmpkey\" utility\n"; + printf " auth password and authEngineID\n"; + printf " -a (--authproto) Authentication protocol ( MD5 or SHA1)\n"; + printf " -X (--privpass) privacy password (cleartext ascii or localized key\n"; + printf " in hex with 0x prefix generated by using \"snmpkey\" utility\n"; + printf " privacy password and authEngineID\n"; printf " -k (--key) SNMP IfIndex value\n"; printf " -d (--descr) SNMP ifDescr value\n"; printf " -p (--port) SNMP port (default 161)\n"; @@ -343,6 +286,7 @@ sub print_help { printf " -n (--name) the value should match the returned ifName\n"; printf " (Implies the use of -I)\n"; printf " -w (--warn =i|w|c) ignore|warn|crit if the interface is dormant (default critical)\n"; + printf " -M (--maxmsgsize) Max message size - usefull only for v1 or v2c\n"; printf " -V (--version) Plugin version\n"; printf " -h (--help) usage help \n\n"; printf " -k or -d must be specified\n\n"; @@ -353,3 +297,192 @@ sub print_help { print_revision($PROGNAME, '$Revision$'); } + +sub process_arguments() { + $status = GetOptions( + "V" => \$opt_V, "version" => \$opt_V, + "h" => \$opt_h, "help" => \$opt_h, + "v=i" => \$snmp_version, "snmp_version=i" => \$snmp_version, + "C=s" => \$community, "community=s" => \$community, + "L=s" => \$seclevel, "seclevel=s" => \$seclevel, + "a=s" => \$authproto, "authproto=s" => \$authproto, + "U=s" => \$secname, "secname=s" => \$secname, + "A=s" => \$authpass, "authpass=s" => \$authpass, + "X=s" => \$privpass, "privpass=s" => \$privpass, + "c=s" => \$context, "context=s" => \$context, + "k=i" => \$snmpkey, "key=i",\$snmpkey, + "d=s" => \$ifdescr, "descr=s" => \$ifdescr, + "l=s" => \$lastc, "lastchange=s" => \$lastc, + "p=i" = >\$port, "port=i" =>\$port, + "H=s" => \$hostname, "hostname=s" => \$hostname, + "I" => \$ifXTable, "ifmib" => \$ifXTable, + "n=s" => \$ifName, "name=s" => \$ifName, + "w=s" => \$dormantWarn, "warn=s" => \$dormantWarn, + "M=i" => \$maxmsgsize, "maxmsgsize=i" => \$maxmsgsize); + + + + if ($status == 0){ + print_help(); + exit $ERRORS{'OK'}; + } + + if ($opt_V) { + print_revision($PROGNAME,'$Revision$ '); + exit $ERRORS{'OK'}; + } + + if ($opt_h) { + print_help(); + exit $ERRORS{'OK'}; + } + + if (! utils::is_hostname($hostname)){ + usage(); + exit $ERRORS{"UNKNOWN"}; + } + + + unless ($snmpkey > 0 || defined $ifdescr){ + printf "Either a valid snmpkey key (-k) or a ifDescr (-d) must be provided)\n"; + usage(); + exit $ERRORS{"UNKNOWN"}; + } + + + if (defined $name) { + $ifXTable=1; + } + + if (defined $dormantWarn) { + unless ($dormantWarn =~ /^(w|c|i)$/ ) { + printf "Dormant alerts must be one of w|c|i \n"; + exit $ERRORS{'UNKNOWN'}; + } + } + + if ($snmp_version =~ /3/ ) { + # Must define a security level even though default is noAuthNoPriv + # v3 requires a security username + if (defined $seclevel && defined $secname) { + + # Must define a security level even though defualt is noAuthNoPriv + unless ($seclevel eq ('noAuthNoPriv' || 'authNoPriv' || 'authPriv' ) ) { + usage(); + exit $ERRORS{"UNKNOWN"}; + } + + # Authentication wanted + if ($seclevel eq ('authNoPriv' || 'authPriv') ) { + + unless ($authproto eq ('MD5' || 'SHA1') ) { + usage(); + exit $ERRORS{"UNKNOWN"}; + } + + if ( !defined $authpass) { + usage(); + exit $ERRORS{"UNKNOWN"}; + }else{ + if ($authpass =~ /^0x/ ) { + $auth = "-authkey => $authpass" ; + }else{ + $auth = "-authpassword => $authpass"; + } + } + + } + + # Privacy (DES encryption) wanted + if ($seclevel eq 'authPriv' ) { + if (! defined $privpass) { + usage(); + exit $ERRORS{"UNKNOWN"}; + }else{ + if ($privpass =~ /^0x/){ + $priv = "-privkey => $privpass"; + }else{ + $priv = "-privpassword => $privpass"; + } + } + } + + # Context name defined or default + + unless ( defined $context) { + $context = ""; + } + + + + }else { + usage(); + exit $ERRORS{'UNKNOWN'}; ; + } + } # end snmpv3 + + + if ( $snmp_version =~ /[12]/ ) { + ($session, $error) = Net::SNMP->session( + -hostname => $hostname, + -community => $community, + -port => $port, + -version => $snmp_version, + -maxmsgsize => $maxmsgsize + ); + + if (!defined($session)) { + $state='UNKNOWN'; + $answer=$error; + print ("$state: $answer"); + exit $ERRORS{$state}; + } + + }elsif ( $snmp_version =~ /3/ ) { + + if ($seclevel eq 'noAuthNoPriv') { + ($session, $error) = Net::SNMP->session( + -hostname => $hostname, + -port => $port, + -version => $snmp_version, + -username => $secname, + ); + + }elsif ( $seclevel eq 'authNoPriv' ) { + ($session, $error) = Net::SNMP->session( + -hostname => $hostname, + -port => $port, + -version => $snmp_version, + -username => $secname, + $auth, + -authprotocol => $authproto, + ); + }elsif ($seclevel eq 'authPriv' ) { + ($session, $error) = Net::SNMP->session( + -hostname => $hostname, + -port => $port, + -version => $snmp_version, + -username => $secname, + $auth, + -authprotocol => $authproto, + $priv + ); + } + + + if (!defined($session)) { + $state='UNKNOWN'; + $answer=$error; + print ("$state: $answer"); + exit $ERRORS{$state}; + } + + }else{ + $state='UNKNOWN'; + print ("$state: No support for SNMP v$snmp_version yet\n"); + exit $ERRORS{$state}; + } + +} +## End validation + -- 2.30.2