From: Eric Leblond <eric@regit.org>
Date: Wed, 13 Mar 2013 09:50:21 +0000 (+0100)
Subject: Import suri-graphite script
X-Git-Tag: suricata-2.0beta1~111
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0d2f3bfa16133afb705986ef5d88536cd7b876b9;p=thirdparty%2Fsuricata.git

Import suri-graphite script

This patch import suri-graphite into suricata contrib directory.
This script reads counters from suricata unix socket and send them
to a Graphite graphing server.
---

diff --git a/contrib/Makefile.am b/contrib/Makefile.am
index 2fe815ad9e..0f7e35caec 100644
--- a/contrib/Makefile.am
+++ b/contrib/Makefile.am
@@ -1 +1,3 @@
 SUBDIRS = file_processor
+
+EXTRA_DIST = suri-graphite
diff --git a/contrib/suri-graphite b/contrib/suri-graphite
new file mode 100755
index 0000000000..c7d675b4f8
--- /dev/null
+++ b/contrib/suri-graphite
@@ -0,0 +1,48 @@
+#!/usr/bin/env python
+# Copyright (C) 2013 Eric Leblond <eric@regit.org>
+#
+# You can copy, redistribute or modify this Program under the terms of
+# the GNU General Public License version 3 as published by the Free
+# Software Foundation.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# version 3 along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
+# 02110-1301, USA.
+
+import suricatasc
+import socket
+import time
+import argparse
+
+parser = argparse.ArgumentParser(prog='suri-graphite', description='Export suricata stats to Graphite')
+parser.add_argument('-H', '--host', default='localhost', help='Host running Graphite')
+parser.add_argument('-P', '--port', default=2003, help='Port of Graphite data socket')
+parser.add_argument('-D', '--delay', default=10, help='Delay between data dump')
+parser.add_argument('-r', '--root', default='suricata.perf', help='Prefix of data name in Graphite')
+parser.add_argument('socket', help='suricata socket file to connect to',
+                    default="/usr/local/var/run/suricata/suricata-command.socket", nargs='?')
+parser.add_argument('-v', '--verbose', action='store_const', const=True, help='verbose output', default=False)
+
+args = parser.parse_args()
+sc = suricatasc.SuricataSC(args.socket)
+sc.connect()
+
+sck = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
+sck.connect((args.host, args.port))
+
+while 1:
+    res = sc.send_command("dump-counters")
+    res = res['message']
+    tnow = int(time.time())
+    for thread in res:
+        for counter in res[thread]:
+            sck.send("%s.%s.%s %s %d\n" % (args.root, thread , counter, res[thread][counter], tnow))
+            if args.verbose:
+                print "%s.%s.%s %s %d\n" % (args.root, thread , counter, res[thread][counter], tnow)
+    time.sleep(float(args.delay))