]> git.ipfire.org Git - thirdparty/pdns.git/blame - pdns/rec-snmp.cc
projects / thirdparty / pdns.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
rec: Don't account chained queries more than once
[thirdparty/pdns.git] / pdns / rec-snmp.cc
CommitLineData
d705aad9
RG		 1
2#include <unordered_map>
3
4#include "rec-snmp.hh"
5#include "rec_channel.hh"
6
7#include "logger.hh"
8
9#ifdef HAVE_NET_SNMP
10
11#define RECURSOR_OID 1, 3, 6, 1, 4, 1, 43315, 2
12#define RECURSOR_STATS_OID RECURSOR_OID, 1
13#define RECURSOR_TRAPS_OID RECURSOR_OID, 10, 0
14#define RECURSOR_TRAP_OBJECTS_OID RECURSOR_OID, 11
15
16static const oid trapReasonOID[] = { RECURSOR_TRAP_OBJECTS_OID, 1, 0 };
17static const oid customTrapOID[] = { RECURSOR_TRAPS_OID, 1 };
18
19static const oid questionsOID[] = { RECURSOR_STATS_OID, 1 };
20static const oid ipv6QuestionsOID[] = { RECURSOR_STATS_OID, 2 };
21static const oid tcpQuestionsOID[] = { RECURSOR_STATS_OID, 3 };
22static const oid cacheHitsOID[] = { RECURSOR_STATS_OID, 4 };
23static const oid cacheMissesOID[] = { RECURSOR_STATS_OID, 5 };
24static const oid cacheEntriesOID[] = { RECURSOR_STATS_OID, 6 };
25static const oid cacheBytesOID[] = { RECURSOR_STATS_OID, 7 };
26static const oid packetcacheHitsOID[] = { RECURSOR_STATS_OID, 8 };
27static const oid packetcacheMissesOID[] = { RECURSOR_STATS_OID, 9 };
28static const oid packetcacheEntriesOID[] = { RECURSOR_STATS_OID, 10 };
29static const oid packetcacheBytesOID[] = { RECURSOR_STATS_OID, 11 };
30static const oid mallocBytesOID[] = { RECURSOR_STATS_OID, 12 };
31static const oid servfailAnswersOID[] = { RECURSOR_STATS_OID, 13 };
32static const oid nxdomainAnswersOID[] = { RECURSOR_STATS_OID, 14 };
33static const oid noerrorAnswersOID[] = { RECURSOR_STATS_OID, 15 };
34static const oid unauthorizedUdpOID[] = { RECURSOR_STATS_OID, 16 };
35static const oid unauthorizedTcpOID[] = { RECURSOR_STATS_OID, 17 };
36static const oid tcpClientOverflowOID[] = { RECURSOR_STATS_OID, 18 };
37static const oid clientParseErrorsOID[] = { RECURSOR_STATS_OID, 19 };
38static const oid serverParseErrorsOID[] = { RECURSOR_STATS_OID, 20 };
39static const oid tooOldDropsOID[] = { RECURSOR_STATS_OID, 21 };
40static const oid answers01OID[] = { RECURSOR_STATS_OID, 22 };
41static const oid answers110OID[] = { RECURSOR_STATS_OID, 23 };
42static const oid answers10100OID[] = { RECURSOR_STATS_OID, 24 };
43static const oid answers1001000OID[] = { RECURSOR_STATS_OID, 25 };
44static const oid answersSlowOID[] = { RECURSOR_STATS_OID, 26 };
45static const oid auth4Answers01OID[] = { RECURSOR_STATS_OID, 27 };
46static const oid auth4Answers110OID[] = { RECURSOR_STATS_OID, 28 };
47static const oid auth4Answers10100OID[] = { RECURSOR_STATS_OID, 29 };
48static const oid auth4Answers1001000OID[] = { RECURSOR_STATS_OID, 30 };
49static const oid auth4AnswersslowOID[] = { RECURSOR_STATS_OID, 31 };
50static const oid auth6Answers01OID[] = { RECURSOR_STATS_OID, 32 };
51static const oid auth6Answers110OID[] = { RECURSOR_STATS_OID, 33 };
52static const oid auth6Answers10100OID[] = { RECURSOR_STATS_OID, 34 };
53static const oid auth6Answers1001000OID[] = { RECURSOR_STATS_OID, 35 };
54static const oid auth6AnswersSlowOID[] = { RECURSOR_STATS_OID, 36 };
55static const oid qaLatencyOID[] = { RECURSOR_STATS_OID, 37 };
56static const oid unexpectedPacketsOID[] = { RECURSOR_STATS_OID, 38 };
57static const oid caseMismatchesOID[] = { RECURSOR_STATS_OID, 39 };
58static const oid spoofPreventsOID[] = { RECURSOR_STATS_OID, 40 };
59static const oid nssetInvalidationsOID[] = { RECURSOR_STATS_OID, 41 };
60static const oid resourceLimitsOID[] = { RECURSOR_STATS_OID, 42 };
61static const oid overCapacityDropsOID[] = { RECURSOR_STATS_OID, 43 };
62static const oid policyDropsOID[] = { RECURSOR_STATS_OID, 44 };
63static const oid noPacketErrorOID[] = { RECURSOR_STATS_OID, 45 };
64static const oid dlgOnlyDropsOID[] = { RECURSOR_STATS_OID, 46 };
65static const oid ignoredPacketsOID[] = { RECURSOR_STATS_OID, 47 };
66static const oid maxMthreadStackOID[] = { RECURSOR_STATS_OID, 48 };
67static const oid negcacheEntriesOID[] = { RECURSOR_STATS_OID, 49 };
68static const oid throttleEntriesOID[] = { RECURSOR_STATS_OID, 50 };
69static const oid nsspeedsEntriesOID[] = { RECURSOR_STATS_OID, 51 };
70static const oid failedHostEntriesOID[] = { RECURSOR_STATS_OID, 52 };
71static const oid concurrentQueriesOID[] = { RECURSOR_STATS_OID, 53 };
72static const oid securityStatusOID[] = { RECURSOR_STATS_OID, 54 };
73static const oid outgoingTimeoutsOID[] = { RECURSOR_STATS_OID, 55 };
74static const oid outgoing4TimeoutsOID[] = { RECURSOR_STATS_OID, 56 };
75static const oid outgoing6TimeoutsOID[] = { RECURSOR_STATS_OID, 57 };
76static const oid tcpOutqueriesOID[] = { RECURSOR_STATS_OID, 58 };
77static const oid allOutqueriesOID[] = { RECURSOR_STATS_OID, 59 };
78static const oid ipv6OutqueriesOID[] = { RECURSOR_STATS_OID, 60 };
79static const oid throttledOutqueriesOID[] = { RECURSOR_STATS_OID, 61 };
80static const oid dontOutqueriesOID[] = { RECURSOR_STATS_OID, 62 };
81static const oid unreachablesOID[] = { RECURSOR_STATS_OID, 63 };
82static const oid chainResendsOID[] = { RECURSOR_STATS_OID, 64 };
83static const oid tcpClientsOID[] = { RECURSOR_STATS_OID, 65 };
84static const oid udpRecvbufErrorsOID[] = { RECURSOR_STATS_OID, 66 };
85static const oid udpSndbufErrorsOID[] = { RECURSOR_STATS_OID, 67 };
86static const oid udpNoportErrorsOID[] = { RECURSOR_STATS_OID, 68 };
87static const oid udpinErrorsOID[] = { RECURSOR_STATS_OID, 69 };
88static const oid ednsPingMatchesOID[] = { RECURSOR_STATS_OID, 70 };
89static const oid ednsPingMismatchesOID[] = { RECURSOR_STATS_OID, 71 };
90static const oid dnssecQueriesOID[] = { RECURSOR_STATS_OID, 72 };
91static const oid nopingOutqueriesOID[] = { RECURSOR_STATS_OID, 73 };
92static const oid noednsOutqueriesOID[] = { RECURSOR_STATS_OID, 74 };
93static const oid uptimeOID[] = { RECURSOR_STATS_OID, 75 };
94static const oid realMemoryUsageOID[] = { RECURSOR_STATS_OID, 76 };
95static const oid fdUsageOID[] = { RECURSOR_STATS_OID, 77 };
96static const oid userMsecOID[] = { RECURSOR_STATS_OID, 78 };
97static const oid sysMsecOID[] = { RECURSOR_STATS_OID, 79 };
98static const oid dnssecValidationsOID[] = { RECURSOR_STATS_OID, 80 };
99static const oid dnssecResultInsecureOID[] = { RECURSOR_STATS_OID, 81 };
100static const oid dnssecResultSecureOID[] = { RECURSOR_STATS_OID, 82 };
101static const oid dnssecResultBogusOID[] = { RECURSOR_STATS_OID, 83 };
102static const oid dnssecResultIndeterminateOID[] = { RECURSOR_STATS_OID, 84 };
103static const oid dnssecResultNtaOID[] = { RECURSOR_STATS_OID, 85 };
104static const oid policyResultNoactionOID[] = { RECURSOR_STATS_OID, 86 };
105static const oid policyResultDropOID[] = { RECURSOR_STATS_OID, 87 };
106static const oid policyResultNxdomainOID[] = { RECURSOR_STATS_OID, 88 };
107static const oid policyResultNodataOID[] = { RECURSOR_STATS_OID, 89 };
108static const oid policyResultTruncateOID[] = { RECURSOR_STATS_OID, 90 };
109static const oid policyResultCustomOID[] = { RECURSOR_STATS_OID, 91 };
fecff8b0 110static const oid queryPipeFullDropsOID[] = { RECURSOR_STATS_OID, 92 };
d705aad9
RG		 111
112static std::unordered_map<oid, std::string> s_statsMap;
113
114/* We are never called for a GETNEXT if it's registered as a
115 "instance", as it's "magically" handled for us. */
116/* a instance handler also only hands us one request at a time, so
117 we don't need to loop over a list of requests; we'll only get one. */
118
119static int handleCounter64Stats(netsnmp_mib_handler* handler,
120 netsnmp_handler_registration* reginfo,
121 netsnmp_agent_request_info* reqinfo,
122 netsnmp_request_info* requests)
123{
124 if (reqinfo->mode != MODE_GET) {
125 return SNMP_ERR_GENERR;
126 }
127
128 if (reginfo->rootoid_len != OID_LENGTH(questionsOID) + 1) {
129 return SNMP_ERR_GENERR;
130 }
131
132 const auto& it = s_statsMap.find(reginfo->rootoid[reginfo->rootoid_len - 2]);
133 if (it == s_statsMap.end()) {
134 return SNMP_ERR_GENERR;
135 }
136
137 optional<uint64_t> value = getStatByName(it->second);
138 if (value) {
139 return RecursorSNMPAgent::setCounter64Value(requests, *value);
140 } else {
141 return RecursorSNMPAgent::setCounter64Value(requests, 0);
142 }
143}
144
145static void registerCounter64Stat(const char* name, const oid statOID[], size_t statOIDLength)
146{
147 if (statOIDLength != OID_LENGTH(questionsOID)) {
148 L<<Logger::Error<<"Invalid OID for SNMP Counter64 statistic "<<std::string(name)<<endl;
149 return;
150 }
151
152 if (s_statsMap.find(statOID[statOIDLength - 1]) != s_statsMap.end()) {
153 L<<Logger::Error<<"OID for SNMP Counter64 statistic "<<std::string(name)<<" has already been registered"<<endl;
154 return;
155 }
156
157 s_statsMap[statOID[statOIDLength - 1]] = name;
158 netsnmp_register_scalar(netsnmp_create_handler_registration(name,
159 handleCounter64Stats,
160 statOID,
161 statOIDLength,
162 HANDLER_CAN_RONLY));
163}
164
165#endif /* HAVE_NET_SNMP */
166
167std::shared_ptr<RecursorSNMPAgent> g_snmpAgent{nullptr};
168
169bool RecursorSNMPAgent::sendCustomTrap(const std::string& reason)
170{
171#ifdef HAVE_NET_SNMP
172 netsnmp_variable_list* varList = nullptr;
173
174 snmp_varlist_add_variable(&varList,
175 snmpTrapOID,
176 snmpTrapOIDLen,
177 ASN_OBJECT_ID,
178 customTrapOID,
179 OID_LENGTH(customTrapOID) * sizeof(oid));
180
181 snmp_varlist_add_variable(&varList,
182 trapReasonOID,
183 OID_LENGTH(trapReasonOID),
184 ASN_OCTET_STR,
185 reason.c_str(),
186 reason.size());
187
188 return sendTrap(d_trapPipe[1], varList);
189#endif /* HAVE_NET_SNMP */
190 return true;
191}
192
193
194RecursorSNMPAgent::RecursorSNMPAgent(const std::string& name, const std::string& masterSocket): SNMPAgent(name, masterSocket)
195{
196#ifdef HAVE_NET_SNMP
197 /* This is done so that the statistics maps are
198 initialized. */
b0b37121 199 registerAllStats();
d705aad9
RG		 200
201 registerCounter64Stat("questions", questionsOID, OID_LENGTH(questionsOID));
202 registerCounter64Stat("ipv6-questions", ipv6QuestionsOID, OID_LENGTH(ipv6QuestionsOID));
203 registerCounter64Stat("tcp-questions", tcpQuestionsOID, OID_LENGTH(tcpQuestionsOID));
204 registerCounter64Stat("cache-hits", cacheHitsOID, OID_LENGTH(cacheHitsOID));
205 registerCounter64Stat("cache-misses", cacheMissesOID, OID_LENGTH(cacheMissesOID));
206 registerCounter64Stat("cache-entries", cacheEntriesOID, OID_LENGTH(cacheEntriesOID));
207 registerCounter64Stat("cache-bytes", cacheBytesOID, OID_LENGTH(cacheBytesOID));
208 registerCounter64Stat("packetcache-hits", packetcacheHitsOID, OID_LENGTH(packetcacheHitsOID));
209 registerCounter64Stat("packetcache-misses", packetcacheMissesOID, OID_LENGTH(packetcacheMissesOID));
210 registerCounter64Stat("packetcache-entries", packetcacheEntriesOID, OID_LENGTH(packetcacheEntriesOID));
211 registerCounter64Stat("packetcache-bytes", packetcacheBytesOID, OID_LENGTH(packetcacheBytesOID));
212 registerCounter64Stat("malloc-bytes", mallocBytesOID, OID_LENGTH(mallocBytesOID));
213 registerCounter64Stat("servfail-answers", servfailAnswersOID, OID_LENGTH(servfailAnswersOID));
214 registerCounter64Stat("nxdomain-answers", nxdomainAnswersOID, OID_LENGTH(nxdomainAnswersOID));
215 registerCounter64Stat("noerror-answers", noerrorAnswersOID, OID_LENGTH(noerrorAnswersOID));
216 registerCounter64Stat("unauthorized-udp", unauthorizedUdpOID, OID_LENGTH(unauthorizedUdpOID));
217 registerCounter64Stat("unauthorized-tcp", unauthorizedTcpOID, OID_LENGTH(unauthorizedTcpOID));
218 registerCounter64Stat("tcp-client-overflow", tcpClientOverflowOID, OID_LENGTH(tcpClientOverflowOID));
219 registerCounter64Stat("client-parse-errors", clientParseErrorsOID, OID_LENGTH(clientParseErrorsOID));
220 registerCounter64Stat("server-parse-errors", serverParseErrorsOID, OID_LENGTH(serverParseErrorsOID));
221 registerCounter64Stat("too-old-drops", tooOldDropsOID, OID_LENGTH(tooOldDropsOID));
fecff8b0 222 registerCounter64Stat("query-pipe-full-drops", queryPipeFullDropsOID, OID_LENGTH(queryPipeFullDropsOID));
d705aad9
RG		 223 registerCounter64Stat("answers0-1", answers01OID, OID_LENGTH(answers01OID));
224 registerCounter64Stat("answers1-10", answers110OID, OID_LENGTH(answers110OID));
225 registerCounter64Stat("answers10-100", answers10100OID, OID_LENGTH(answers10100OID));
226 registerCounter64Stat("answers100-1000", answers1001000OID, OID_LENGTH(answers1001000OID));
227 registerCounter64Stat("answers-slow", answersSlowOID, OID_LENGTH(answersSlowOID));
228 registerCounter64Stat("auth4-answers0-1", auth4Answers01OID, OID_LENGTH(auth4Answers01OID));
229 registerCounter64Stat("auth4-answers1-10", auth4Answers110OID, OID_LENGTH(auth4Answers110OID));
230 registerCounter64Stat("auth4-answers10-100", auth4Answers10100OID, OID_LENGTH(auth4Answers10100OID));
231 registerCounter64Stat("auth4-answers100-1000", auth4Answers1001000OID, OID_LENGTH(auth4Answers1001000OID));
232 registerCounter64Stat("auth4-answers-slow", auth4AnswersslowOID, OID_LENGTH(auth4AnswersslowOID));
233 registerCounter64Stat("auth6-answers0-1", auth6Answers01OID, OID_LENGTH(auth6Answers01OID));
234 registerCounter64Stat("auth6-answers1-10", auth6Answers110OID, OID_LENGTH(auth6Answers110OID));
235 registerCounter64Stat("auth6-answers10-100", auth6Answers10100OID, OID_LENGTH(auth6Answers10100OID));
236 registerCounter64Stat("auth6-answers100-1000", auth6Answers1001000OID, OID_LENGTH(auth6Answers1001000OID));
237 registerCounter64Stat("auth6-answers-slow", auth6AnswersSlowOID, OID_LENGTH(auth6AnswersSlowOID));
238 registerCounter64Stat("qa-latency", qaLatencyOID, OID_LENGTH(qaLatencyOID));
239 registerCounter64Stat("unexpected-packets", unexpectedPacketsOID, OID_LENGTH(unexpectedPacketsOID));
240 registerCounter64Stat("case-mismatches", caseMismatchesOID, OID_LENGTH(caseMismatchesOID));
241 registerCounter64Stat("spoof-prevents", spoofPreventsOID, OID_LENGTH(spoofPreventsOID));
242 registerCounter64Stat("nsset-invalidations", nssetInvalidationsOID, OID_LENGTH(nssetInvalidationsOID));
243 registerCounter64Stat("resource-limits", resourceLimitsOID, OID_LENGTH(resourceLimitsOID));
244 registerCounter64Stat("over-capacity-drops", overCapacityDropsOID, OID_LENGTH(overCapacityDropsOID));
245 registerCounter64Stat("policy-drops", policyDropsOID, OID_LENGTH(policyDropsOID));
246 registerCounter64Stat("no-packet-error", noPacketErrorOID, OID_LENGTH(noPacketErrorOID));
247 registerCounter64Stat("dlg-only-drops", dlgOnlyDropsOID, OID_LENGTH(dlgOnlyDropsOID));
248 registerCounter64Stat("ignored-packets", ignoredPacketsOID, OID_LENGTH(ignoredPacketsOID));
249 registerCounter64Stat("max-mthread-stack", maxMthreadStackOID, OID_LENGTH(maxMthreadStackOID));
250 registerCounter64Stat("negcache-entries", negcacheEntriesOID, OID_LENGTH(negcacheEntriesOID));
251 registerCounter64Stat("throttle-entries", throttleEntriesOID, OID_LENGTH(throttleEntriesOID));
252 registerCounter64Stat("nsspeeds-entries", nsspeedsEntriesOID, OID_LENGTH(nsspeedsEntriesOID));
253 registerCounter64Stat("failed-host-entries", failedHostEntriesOID, OID_LENGTH(failedHostEntriesOID));
254 registerCounter64Stat("concurrent-queries", concurrentQueriesOID, OID_LENGTH(concurrentQueriesOID));
255 registerCounter64Stat("security-status", securityStatusOID, OID_LENGTH(securityStatusOID));
256 registerCounter64Stat("outgoing-timeouts", outgoingTimeoutsOID, OID_LENGTH(outgoingTimeoutsOID));
257 registerCounter64Stat("outgoing4-timeouts", outgoing4TimeoutsOID, OID_LENGTH(outgoing4TimeoutsOID));
258 registerCounter64Stat("outgoing6-timeouts", outgoing6TimeoutsOID, OID_LENGTH(outgoing6TimeoutsOID));
259 registerCounter64Stat("tcp-outqueries", tcpOutqueriesOID, OID_LENGTH(tcpOutqueriesOID));
260 registerCounter64Stat("all-outqueries", allOutqueriesOID, OID_LENGTH(allOutqueriesOID));
261 registerCounter64Stat("ipv6-outqueries", ipv6OutqueriesOID, OID_LENGTH(ipv6OutqueriesOID));
262 registerCounter64Stat("throttled-outqueries", throttledOutqueriesOID, OID_LENGTH(throttledOutqueriesOID));
263 registerCounter64Stat("dont-outqueries", dontOutqueriesOID, OID_LENGTH(dontOutqueriesOID));
264 registerCounter64Stat("unreachables", unreachablesOID, OID_LENGTH(unreachablesOID));
265 registerCounter64Stat("chain-resends", chainResendsOID, OID_LENGTH(chainResendsOID));
266 registerCounter64Stat("tcp-clients", tcpClientsOID, OID_LENGTH(tcpClientsOID));
267#ifdef __linux__
268 registerCounter64Stat("udp-recvbuf-errors", udpRecvbufErrorsOID, OID_LENGTH(udpRecvbufErrorsOID));
269 registerCounter64Stat("udp-sndbuf-errors", udpSndbufErrorsOID, OID_LENGTH(udpSndbufErrorsOID));
270 registerCounter64Stat("udp-noport-errors", udpNoportErrorsOID, OID_LENGTH(udpNoportErrorsOID));
271 registerCounter64Stat("udp-in-errors", udpinErrorsOID, OID_LENGTH(udpinErrorsOID));
272#endif /* __linux__ */
273 registerCounter64Stat("edns-ping-matches", ednsPingMatchesOID, OID_LENGTH(ednsPingMatchesOID));
274 registerCounter64Stat("edns-ping-mismatches", ednsPingMismatchesOID, OID_LENGTH(ednsPingMismatchesOID));
275 registerCounter64Stat("dnssec-queries", dnssecQueriesOID, OID_LENGTH(dnssecQueriesOID));
276 registerCounter64Stat("noping-outqueries", nopingOutqueriesOID, OID_LENGTH(nopingOutqueriesOID));
277 registerCounter64Stat("noedns-outqueries", noednsOutqueriesOID, OID_LENGTH(noednsOutqueriesOID));
278 registerCounter64Stat("uptime", uptimeOID, OID_LENGTH(uptimeOID));
279 registerCounter64Stat("real-memory-usage", realMemoryUsageOID, OID_LENGTH(realMemoryUsageOID));
280 registerCounter64Stat("fd-usage", fdUsageOID, OID_LENGTH(fdUsageOID));
281 registerCounter64Stat("user-msec", userMsecOID, OID_LENGTH(userMsecOID));
282 registerCounter64Stat("sys-msec", sysMsecOID, OID_LENGTH(sysMsecOID));
283 registerCounter64Stat("dnssec-validations", dnssecValidationsOID, OID_LENGTH(dnssecValidationsOID));
284 registerCounter64Stat("dnssec-result-insecure", dnssecResultInsecureOID, OID_LENGTH(dnssecResultInsecureOID));
285 registerCounter64Stat("dnssec-result-secure", dnssecResultSecureOID, OID_LENGTH(dnssecResultSecureOID));
286 registerCounter64Stat("dnssec-result-bogus", dnssecResultBogusOID, OID_LENGTH(dnssecResultBogusOID));
287 registerCounter64Stat("dnssec-result-indeterminate", dnssecResultIndeterminateOID, OID_LENGTH(dnssecResultIndeterminateOID));
288 registerCounter64Stat("dnssec-result-nta", dnssecResultNtaOID, OID_LENGTH(dnssecResultNtaOID));
289 registerCounter64Stat("policy-result-noaction", policyResultNoactionOID, OID_LENGTH(policyResultNoactionOID));
290 registerCounter64Stat("policy-result-drop", policyResultDropOID, OID_LENGTH(policyResultDropOID));
291 registerCounter64Stat("policy-result-nxdomain", policyResultNxdomainOID, OID_LENGTH(policyResultNxdomainOID));
292 registerCounter64Stat("policy-result-nodata", policyResultNodataOID, OID_LENGTH(policyResultNodataOID));
293 registerCounter64Stat("policy-result-truncate", policyResultTruncateOID, OID_LENGTH(policyResultTruncateOID));
294 registerCounter64Stat("policy-result-custom", policyResultCustomOID, OID_LENGTH(policyResultCustomOID));
295
296#endif /* HAVE_NET_SNMP */
297}
Unnamed repository; edit this file 'description' to name the repository.