sensu-plugins-network-checks 3.0.0 → 3.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 657f6d68bbee8aca2ec7dc4331d727a45ea9970253c4b1d3d5f31764bd97217d
-  data.tar.gz: c0da8c7a1d2098e9dd61f5e73426e2c68e5d22f50ffcc6083d085ba5a0646885
+  metadata.gz: d45fea7e87a7fd0b77422c1a62942711f58840a1c15b73de68801904cd12d687
+  data.tar.gz: 024755f7eef5cf48b75831ba1d106f5b703f8541d588041eb0e0371281aa9691
 SHA512:
-  metadata.gz: 3a36487ab0ef6fee539ea55ce28d37149e58bc223c5e32f5346b5e4a6fadf6ae930eff6174b64d6de6ccdfb58ddbc4c909a4a978c736411bb504333e9a29e90f
-  data.tar.gz: ecd98e5e3b7773fbfc1f3a8869e8b121a71d0d8dbb018df47ce6685c0a5021848a8261cbb1cc83ab01d8d6c6c7babf6398f48152deea3ee8042fa389e3dd58f0
+  metadata.gz: 3e2fab411354ea8eb666ce798c2aa3d1f4c6df7f01342e2ddd34ac83b0413c344919ec80ea66ea01255b4cc7b73abc3e9c7f71b8415e63b2d284638afcfd93fc
+  data.tar.gz: 4133ad29aa21bb4ea96a001359ea6828c79eda462ff543e4b90ec38c0a8873fd5e5b165db0e9e496b94a8298a284002f4f781e32f86894d7280fb78c211b55a5

data/CHANGELOG.md

@@ -4,6 +4,8 @@ This project adheres to [Semantic Versioning](http://semver.org/).
 This CHANGELOG follows the format listed  [here](https://github.com/sensu-plugins/community/blob/master/HOW_WE_CHANGELOG.md)
 
 ## [Unreleased]
+### Changed
+- check-netfilter-conntrack.rb: ditch the associated shellscript and turned into pure Ruby.
 
 ## [3.0.0] - 2018-03-17
 ### Security
@@ -212,7 +214,8 @@ This CHANGELOG follows the format listed  [here](https://github.com/sensu-plugin
 
 * initial release, same as community repo
 
-[Unreleased]: https://github.com/sensu-plugins/sensu-plugins-network-checks/compare/2.3.0...HEAD
+[Unreleased]: https://github.com/sensu-plugins/sensu-plugins-network-checks/compare/3.1.0...HEAD
+[3.1.0]: https://github.com/sensu-plugins/sensu-plugins-network-checks/compare/3.0.0...3.1.0
 [3.0.0]: https://github.com/sensu-plugins/sensu-plugins-network-checks/compare/2.3.0...3.0.0
 [2.3.1]: https://github.com/sensu-plugins/sensu-plugins-network-checks/compare/2.3.0...2.3.1
 [2.3.0]: https://github.com/sensu-plugins/sensu-plugins-network-checks/compare/2.2.0...2.3.0

data/README.md

@@ -9,6 +9,7 @@
 
 ## Files
  * bin/check-banner.rb
+ * bin/check-netfilter-conntrack.rb
  * bin/check-jsonwhois-domain-expiration.rb
  * bin/check-mtu.rb
  * bin/check-multicast-groups.rb

data/bin/check-netfilter-conntrack.rb

@@ -1,7 +1,74 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
-bin_dir = File.expand_path(__dir__)
-shell_script_path = File.join(bin_dir, File.basename($PROGRAM_NAME, '.rb') + '.sh')
+#
+#   check-netfilter-conntrack
+#
+# DESCRIPTION:
+#   Check netfilter connection tracking table condition
+#
+# OUTPUT:
+#   plain text
+#
+# PLATFORMS:
+#   Linux
+#
+# DEPENDENCIES:
+#   gem: sensu-plugin
+#
+# USAGE:
+#   $ ./check-netfilter-conntrack.rb --warning 60 --critical 90
+#
+# NOTES:
+#   - If you need to check the conntrack table of a specific linux
+#     network namespace (e.g in a docker context), run this check as
+#     `nsenter --net=<file> check-netfilter-conntrack.rb` to use the
+#     network namespace which `<file>`'s descriptor indicates.
+#
+# LICENSE:
+#   Released under the same terms as Sensu (the MIT license); see LICENSE
+#   for details.
+#
 
-exec shell_script_path, *ARGV
+require 'sensu-plugin/check/cli'
+
+#
+# Check Netfilter connection tracking table condition
+#
+class CheckNetfilterConntrack < Sensu::Plugin::Check::CLI
+  option :warning,
+         description: 'Warn if conntrack table is filled more than PERC%',
+         short: '-w PERC',
+         long: '--warning PERC',
+         default: 80,
+         proc: proc(&:to_i)
+
+  option :critical,
+         description: 'Critical if conntrack table is filled more than PERC%',
+         short: '-c PERC',
+         long: '--critical PERC',
+         default: 90,
+         proc: proc(&:to_i)
+
+  def nf_conntrack_max
+    File.read('/proc/sys/net/netfilter/nf_conntrack_max').to_i
+  end
+
+  def nf_conntrack_count
+    File.read('/proc/sys/net/netfilter/nf_conntrack_count').to_i
+  end
+
+  def run
+    max = nf_conntrack_max
+    count = nf_conntrack_count
+    percentage = (count.to_f / max.to_f) * 100
+
+    message "Table is at #{percentage.round(1)}% (#{count}/#{max})"
+
+    critical if percentage >= config[:critical]
+    warning if percentage >= config[:warning]
+    ok
+  rescue StandardError
+    warning "Can't read conntrack information."
+  end
+end

data/lib/sensu-plugins-network-checks/version.rb

@@ -3,7 +3,7 @@
 module SensuPluginsNetworkChecks
   module Version
     MAJOR = 3
-    MINOR = 0
+    MINOR = 1
     PATCH = 0
 
     VER_STRING = [MAJOR, MINOR, PATCH].compact.join('.')

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: sensu-plugins-network-checks
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.1.0
 platform: ruby
 authors:
 - Sensu-Plugins and contributors
@@ -271,7 +271,6 @@ files:
 - bin/check-mtu.rb
 - bin/check-multicast-groups.rb
 - bin/check-netfilter-conntrack.rb
-- bin/check-netfilter-conntrack.sh
 - bin/check-netstat-tcp.rb
 - bin/check-ping.rb
 - bin/check-ports-bind.rb

data/bin/check-netfilter-conntrack.sh

@@ -1,54 +0,0 @@
-#!/bin/bash
-#
-# Check Net Filter Connection Track Table Usage
-# ===
-#
-# DESCRIPTION:
-#   This plugin provides a method for monitoring the percentage used of the nf_conntrack hash
-#
-# OUTPUT:
-#   plain-text
-#
-# PLATFORMS:
-#   Linux
-#
-# DEPENDENCIES:
-#
-# Copyright 2014 Yieldbot, Inc  <devops@yieldbot.com>
-#
-# Released under the same terms as Sensu (the MIT license); see LICENSE
-# for details.
-
-# CLI Options
-while getopts ':w:c:' OPT; do
-  case $OPT in
-    w)  WARN=$OPTARG;;
-    c)  CRIT=$OPTARG;;
-  esac
-done
-
-WARN=${WARN:=100}
-CRIT=${CRIT:=100}
-
-# Get the max connections
-MAX=$(sysctl net.netfilter.nf_conntrack_max | awk '{ print $3 }')
-
-# Get the current connections
-CURR=$(sysctl net.netfilter.nf_conntrack_count | awk '{ print $3 }')
-
-# Percent usage of conncetions
-PERCENT=$(echo "scale=3; $CURR / $MAX *100" | bc -l | cut -d "." -f1)
-
-# If percent isnt defined set it to 0
-PERCENT=${PERCENT:=0}
-
-if [[ $PERCENT -ge $CRIT ]] ; then
-  echo "NETFILTER CONNTRACK CRITICAL - $PERCENT"
-  exit 2
-elif [[ $PERCENT -ge $WARN ]] ; then
-  echo "NETFILTER CONNTRACK WARNING - $PERCENT"
-  exit 1
-else
-  echo "NETFILTER CONNTRACK OK - $PERCENT"
-  exit 0
-fi