src/proc_net_stat_conntrack.c

   1 #ifdef HAVE_CONFIG_H
   2 #include <config.h>
   3 #endif
   4 #include <stdio.h>
   5 #include <stdlib.h>
   6 #include <string.h>
   7
   8 #include "common.h"
   9 #include "log.h"
  10 #include "appconfig.h"
  11 #include "procfile.h"
  12 #include "rrd.h"
  13 #include "plugin_proc.h"
  14
  15 #define RRD_TYPE_NET_STAT_CONNTRACK     "netfilter"
  16 #define RRD_TYPE_NET_STAT_CONNTRACK_LEN strlen(RRD_TYPE_NET_STAT_CONNTRACK)
  17
  18 int do_proc_net_stat_conntrack(int update_every, unsigned long long dt) {
  19         static procfile *ff = NULL;
  20         static int do_sockets = -1, do_new = -1, do_changes = -1, do_expect = -1, do_search = -1, do_errors = -1;
  21
  22         if(do_sockets == -1)    do_sockets = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connections", 1);
  23         if(do_new == -1)                do_new = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter new connections", 1);
  24         if(do_changes == -1)    do_changes = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection changes", 1);
  25         if(do_expect == -1)             do_expect = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection expectations", 1);
  26         if(do_search == -1)             do_search = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection searches", 1);
  27         if(do_errors == -1)             do_errors = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter errors", 1);
  28
  29         if(dt) {};
  30
  31         if(!ff) {
  32                 char filename[FILENAME_MAX + 1];
  33                 snprintf(filename, FILENAME_MAX, "%s%s", global_host_prefix, "/proc/net/stat/nf_conntrack");
  34                 ff = procfile_open(config_get("plugin:proc:/proc/net/stat/nf_conntrack", "filename to monitor", filename), " \t:", PROCFILE_FLAG_DEFAULT);
  35         }
  36         if(!ff) return 1;
  37
  38         ff = procfile_readall(ff);
  39         if(!ff) return 0; // we return 0, so that we will retry to open it next time
  40
  41         uint32_t lines = procfile_lines(ff), l;
  42         uint32_t words;
  43
  44         unsigned long long aentries = 0, asearched = 0, afound = 0, anew = 0, ainvalid = 0, aignore = 0, adelete = 0, adelete_list = 0,
  45                 ainsert = 0, ainsert_failed = 0, adrop = 0, aearly_drop = 0, aicmp_error = 0, aexpect_new = 0, aexpect_create = 0, aexpect_delete = 0, asearch_restart = 0;
  46
  47         for(l = 1; l < lines ;l++) {
  48                 words = procfile_linewords(ff, l);
  49                 if(words < 17) {
  50                         if(words) error("Cannot read /proc/net/stat/nf_conntrack line. Expected 17 params, read %d.", words);
  51                         continue;
  52                 }
  53
  54                 unsigned long long tentries = 0, tsearched = 0, tfound = 0, tnew = 0, tinvalid = 0, tignore = 0, tdelete = 0, tdelete_list = 0, tinsert = 0, tinsert_failed = 0, tdrop = 0, tearly_drop = 0, ticmp_error = 0, texpect_new = 0, texpect_create = 0, texpect_delete = 0, tsearch_restart = 0;
  55
  56                 tentries                = strtoull(procfile_lineword(ff, l, 0), NULL, 16);
  57                 tsearched               = strtoull(procfile_lineword(ff, l, 1), NULL, 16);
  58                 tfound                  = strtoull(procfile_lineword(ff, l, 2), NULL, 16);
  59                 tnew                    = strtoull(procfile_lineword(ff, l, 3), NULL, 16);
  60                 tinvalid                = strtoull(procfile_lineword(ff, l, 4), NULL, 16);
  61                 tignore                 = strtoull(procfile_lineword(ff, l, 5), NULL, 16);
  62                 tdelete                 = strtoull(procfile_lineword(ff, l, 6), NULL, 16);
  63                 tdelete_list    = strtoull(procfile_lineword(ff, l, 7), NULL, 16);
  64                 tinsert                 = strtoull(procfile_lineword(ff, l, 8), NULL, 16);
  65                 tinsert_failed  = strtoull(procfile_lineword(ff, l, 9), NULL, 16);
  66                 tdrop                   = strtoull(procfile_lineword(ff, l, 10), NULL, 16);
  67                 tearly_drop             = strtoull(procfile_lineword(ff, l, 11), NULL, 16);
  68                 ticmp_error             = strtoull(procfile_lineword(ff, l, 12), NULL, 16);
  69                 texpect_new             = strtoull(procfile_lineword(ff, l, 13), NULL, 16);
  70                 texpect_create  = strtoull(procfile_lineword(ff, l, 14), NULL, 16);
  71                 texpect_delete  = strtoull(procfile_lineword(ff, l, 15), NULL, 16);
  72                 tsearch_restart = strtoull(procfile_lineword(ff, l, 16), NULL, 16);
  73
  74                 if(!aentries) aentries =  tentries;
  75
  76                 // sum all the cpus together
  77                 asearched                       += tsearched;           // conntrack.search
  78                 afound                          += tfound;                      // conntrack.search
  79                 anew                            += tnew;                        // conntrack.new
  80                 ainvalid                        += tinvalid;            // conntrack.new
  81                 aignore                         += tignore;                     // conntrack.new
  82                 adelete                         += tdelete;                     // conntrack.changes
  83                 adelete_list            += tdelete_list;        // conntrack.changes
  84                 ainsert                         += tinsert;                     // conntrack.changes
  85                 ainsert_failed          += tinsert_failed;      // conntrack.errors
  86                 adrop                           += tdrop;                       // conntrack.errors
  87                 aearly_drop             += tearly_drop;         // conntrack.errors
  88                 aicmp_error             += ticmp_error;         // conntrack.errors
  89                 aexpect_new             += texpect_new;         // conntrack.expect
  90                 aexpect_create          += texpect_create;      // conntrack.expect
  91                 aexpect_delete          += texpect_delete;      // conntrack.expect
  92                 asearch_restart         += tsearch_restart;     // conntrack.search
  93         }
  94
  95         RRDSET *st;
  96
  97         // --------------------------------------------------------------------
  98
  99         if(do_sockets) {
 100                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".sockets");
 101                 if(!st) {
 102                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "sockets", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connections", "active connections", 1000, update_every, RRDSET_TYPE_LINE);
 103
 104                         rrddim_add(st, "connections", NULL, 1, 1, RRDDIM_ABSOLUTE);
 105                 }
 106                 else rrdset_next(st);
 107
 108                 rrddim_set(st, "connections", aentries);
 109                 rrdset_done(st);
 110         }
 111
 112         // --------------------------------------------------------------------
 113
 114         if(do_new) {
 115                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".new");
 116                 if(!st) {
 117                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "new", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter New Connections", "connections/s", 1001, update_every, RRDSET_TYPE_LINE);
 118
 119                         rrddim_add(st, "new", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 120                         rrddim_add(st, "ignore", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 121                         rrddim_add(st, "invalid", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 122                 }
 123                 else rrdset_next(st);
 124
 125                 rrddim_set(st, "new", anew);
 126                 rrddim_set(st, "ignore", aignore);
 127                 rrddim_set(st, "invalid", ainvalid);
 128                 rrdset_done(st);
 129         }
 130
 131         // --------------------------------------------------------------------
 132
 133         if(do_changes) {
 134                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".changes");
 135                 if(!st) {
 136                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "changes", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Changes", "changes/s", 1002, update_every, RRDSET_TYPE_LINE);
 137                         st->isdetail = 1;
 138
 139                         rrddim_add(st, "inserted", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 140                         rrddim_add(st, "deleted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 141                         rrddim_add(st, "delete_list", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 142                 }
 143                 else rrdset_next(st);
 144
 145                 rrddim_set(st, "inserted", ainsert);
 146                 rrddim_set(st, "deleted", adelete);
 147                 rrddim_set(st, "delete_list", adelete_list);
 148                 rrdset_done(st);
 149         }
 150
 151         // --------------------------------------------------------------------
 152
 153         if(do_expect) {
 154                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".expect");
 155                 if(!st) {
 156                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "expect", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Expectations", "expectations/s", 1003, update_every, RRDSET_TYPE_LINE);
 157                         st->isdetail = 1;
 158
 159                         rrddim_add(st, "created", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 160                         rrddim_add(st, "deleted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 161                         rrddim_add(st, "new", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 162                 }
 163                 else rrdset_next(st);
 164
 165                 rrddim_set(st, "created", aexpect_create);
 166                 rrddim_set(st, "deleted", aexpect_delete);
 167                 rrddim_set(st, "new", aexpect_new);
 168                 rrdset_done(st);
 169         }
 170
 171         // --------------------------------------------------------------------
 172
 173         if(do_search) {
 174                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".search");
 175                 if(!st) {
 176                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "search", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Searches", "searches/s", 1010, update_every, RRDSET_TYPE_LINE);
 177                         st->isdetail = 1;
 178
 179                         rrddim_add(st, "searched", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 180                         rrddim_add(st, "restarted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 181                         rrddim_add(st, "found", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 182                 }
 183                 else rrdset_next(st);
 184
 185                 rrddim_set(st, "searched", asearched);
 186                 rrddim_set(st, "restarted", asearch_restart);
 187                 rrddim_set(st, "found", afound);
 188                 rrdset_done(st);
 189         }
 190
 191         // --------------------------------------------------------------------
 192
 193         if(do_errors) {
 194                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".errors");
 195                 if(!st) {
 196                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "errors", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Errors", "events/s", 1005, update_every, RRDSET_TYPE_LINE);
 197                         st->isdetail = 1;
 198
 199                         rrddim_add(st, "icmp_error", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 200                         rrddim_add(st, "insert_failed", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 201                         rrddim_add(st, "drop", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 202                         rrddim_add(st, "early_drop", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 203                 }
 204                 else rrdset_next(st);
 205
 206                 rrddim_set(st, "icmp_error", aicmp_error);
 207                 rrddim_set(st, "insert_failed", ainsert_failed);
 208                 rrddim_set(st, "drop", adrop);
 209                 rrddim_set(st, "early_drop", aearly_drop);
 210                 rrdset_done(st);
 211         }
 212
 213         return 0;
 214 }