src/proc_net_stat_conntrack.c

   1 #include <inttypes.h>
   2 #include <stdio.h>
   3 #include <stdlib.h>
   4 #include <string.h>
   5
   6 #include "common.h"
   7 #include "log.h"
   8 #include "config.h"
   9 #include "procfile.h"
  10 #include "rrd.h"
  11 #include "plugin_proc.h"
  12
  13 #define RRD_TYPE_NET_STAT_CONNTRACK     "netfilter"
  14 #define RRD_TYPE_NET_STAT_CONNTRACK_LEN strlen(RRD_TYPE_NET_STAT_CONNTRACK)
  15
  16 int do_proc_net_stat_conntrack(int update_every, unsigned long long dt) {
  17         static procfile *ff = NULL;
  18         static int do_sockets = -1, do_new = -1, do_changes = -1, do_expect = -1, do_search = -1, do_errors = -1;
  19
  20         if(do_sockets == -1)    do_sockets = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connections", 1);
  21         if(do_new == -1)                do_new = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter new connections", 1);
  22         if(do_changes == -1)    do_changes = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection changes", 1);
  23         if(do_expect == -1)             do_expect = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection expectations", 1);
  24         if(do_search == -1)             do_search = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection searches", 1);
  25         if(do_errors == -1)             do_errors = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter errors", 1);
  26
  27         if(dt) {};
  28
  29         if(!ff) ff = procfile_open("/proc/net/stat/nf_conntrack", " \t:", PROCFILE_FLAG_DEFAULT);
  30         if(!ff) return 1;
  31
  32         ff = procfile_readall(ff);
  33         if(!ff) return 0; // we return 0, so that we will retry to open it next time
  34
  35         uint32_t lines = procfile_lines(ff), l;
  36         uint32_t words;
  37
  38         unsigned long long aentries = 0, asearched = 0, afound = 0, anew = 0, ainvalid = 0, aignore = 0, adelete = 0, adelete_list = 0,
  39                 ainsert = 0, ainsert_failed = 0, adrop = 0, aearly_drop = 0, aicmp_error = 0, aexpect_new = 0, aexpect_create = 0, aexpect_delete = 0, asearch_restart = 0;
  40
  41         for(l = 1; l < lines ;l++) {
  42                 words = procfile_linewords(ff, l);
  43                 if(words < 17) {
  44                         if(words) error("Cannot read /proc/net/stat/nf_conntrack line. Expected 17 params, read %d.", words);
  45                         continue;
  46                 }
  47
  48                 unsigned long long tentries = 0, tsearched = 0, tfound = 0, tnew = 0, tinvalid = 0, tignore = 0, tdelete = 0, tdelete_list = 0, tinsert = 0, tinsert_failed = 0, tdrop = 0, tearly_drop = 0, ticmp_error = 0, texpect_new = 0, texpect_create = 0, texpect_delete = 0, tsearch_restart = 0;
  49
  50                 tentries                = strtoull(procfile_lineword(ff, l, 0), NULL, 16);
  51                 tsearched               = strtoull(procfile_lineword(ff, l, 1), NULL, 16);
  52                 tfound                  = strtoull(procfile_lineword(ff, l, 2), NULL, 16);
  53                 tnew                    = strtoull(procfile_lineword(ff, l, 3), NULL, 16);
  54                 tinvalid                = strtoull(procfile_lineword(ff, l, 4), NULL, 16);
  55                 tignore                 = strtoull(procfile_lineword(ff, l, 5), NULL, 16);
  56                 tdelete                 = strtoull(procfile_lineword(ff, l, 6), NULL, 16);
  57                 tdelete_list    = strtoull(procfile_lineword(ff, l, 7), NULL, 16);
  58                 tinsert                 = strtoull(procfile_lineword(ff, l, 8), NULL, 16);
  59                 tinsert_failed  = strtoull(procfile_lineword(ff, l, 9), NULL, 16);
  60                 tdrop                   = strtoull(procfile_lineword(ff, l, 10), NULL, 16);
  61                 tearly_drop             = strtoull(procfile_lineword(ff, l, 11), NULL, 16);
  62                 ticmp_error             = strtoull(procfile_lineword(ff, l, 12), NULL, 16);
  63                 texpect_new             = strtoull(procfile_lineword(ff, l, 13), NULL, 16);
  64                 texpect_create  = strtoull(procfile_lineword(ff, l, 14), NULL, 16);
  65                 texpect_delete  = strtoull(procfile_lineword(ff, l, 15), NULL, 16);
  66                 tsearch_restart = strtoull(procfile_lineword(ff, l, 16), NULL, 16);
  67
  68                 if(!aentries) aentries =  tentries;
  69
  70                 // sum all the cpus together
  71                 asearched                       += tsearched;           // conntrack.search
  72                 afound                          += tfound;                      // conntrack.search
  73                 anew                            += tnew;                        // conntrack.new
  74                 ainvalid                        += tinvalid;            // conntrack.new
  75                 aignore                         += tignore;                     // conntrack.new
  76                 adelete                         += tdelete;                     // conntrack.changes
  77                 adelete_list            += tdelete_list;        // conntrack.changes
  78                 ainsert                         += tinsert;                     // conntrack.changes
  79                 ainsert_failed          += tinsert_failed;      // conntrack.errors
  80                 adrop                           += tdrop;                       // conntrack.errors
  81                 aearly_drop             += tearly_drop;         // conntrack.errors
  82                 aicmp_error             += ticmp_error;         // conntrack.errors
  83                 aexpect_new             += texpect_new;         // conntrack.expect
  84                 aexpect_create          += texpect_create;      // conntrack.expect
  85                 aexpect_delete          += texpect_delete;      // conntrack.expect
  86                 asearch_restart         += tsearch_restart;     // conntrack.search
  87         }
  88
  89         RRDSET *st;
  90
  91         // --------------------------------------------------------------------
  92
  93         if(do_sockets) {
  94                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".sockets");
  95                 if(!st) {
  96                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "sockets", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connections", "active connections", 1000, update_every, RRDSET_TYPE_LINE);
  97
  98                         rrddim_add(st, "connections", NULL, 1, 1, RRDDIM_ABSOLUTE);
  99                 }
 100                 else rrdset_next(st);
 101
 102                 rrddim_set(st, "connections", aentries);
 103                 rrdset_done(st);
 104         }
 105
 106         // --------------------------------------------------------------------
 107
 108         if(do_new) {
 109                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".new");
 110                 if(!st) {
 111                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "new", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter New Connections", "connections/s", 1001, update_every, RRDSET_TYPE_LINE);
 112
 113                         rrddim_add(st, "new", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 114                         rrddim_add(st, "ignore", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 115                         rrddim_add(st, "invalid", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 116                 }
 117                 else rrdset_next(st);
 118
 119                 rrddim_set(st, "new", anew);
 120                 rrddim_set(st, "ignore", aignore);
 121                 rrddim_set(st, "invalid", ainvalid);
 122                 rrdset_done(st);
 123         }
 124
 125         // --------------------------------------------------------------------
 126
 127         if(do_changes) {
 128                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".changes");
 129                 if(!st) {
 130                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "changes", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Changes", "changes/s", 1002, update_every, RRDSET_TYPE_LINE);
 131                         st->isdetail = 1;
 132
 133                         rrddim_add(st, "inserted", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 134                         rrddim_add(st, "deleted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 135                         rrddim_add(st, "delete_list", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 136                 }
 137                 else rrdset_next(st);
 138
 139                 rrddim_set(st, "inserted", ainsert);
 140                 rrddim_set(st, "deleted", adelete);
 141                 rrddim_set(st, "delete_list", adelete_list);
 142                 rrdset_done(st);
 143         }
 144
 145         // --------------------------------------------------------------------
 146
 147         if(do_expect) {
 148                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".expect");
 149                 if(!st) {
 150                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "expect", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Expectations", "expectations/s", 1003, update_every, RRDSET_TYPE_LINE);
 151                         st->isdetail = 1;
 152
 153                         rrddim_add(st, "created", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 154                         rrddim_add(st, "deleted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 155                         rrddim_add(st, "new", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 156                 }
 157                 else rrdset_next(st);
 158
 159                 rrddim_set(st, "created", aexpect_create);
 160                 rrddim_set(st, "deleted", aexpect_delete);
 161                 rrddim_set(st, "new", aexpect_new);
 162                 rrdset_done(st);
 163         }
 164
 165         // --------------------------------------------------------------------
 166
 167         if(do_search) {
 168                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".search");
 169                 if(!st) {
 170                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "search", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Searches", "searches/s", 1010, update_every, RRDSET_TYPE_LINE);
 171                         st->isdetail = 1;
 172
 173                         rrddim_add(st, "searched", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 174                         rrddim_add(st, "restarted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 175                         rrddim_add(st, "found", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 176                 }
 177                 else rrdset_next(st);
 178
 179                 rrddim_set(st, "searched", asearched);
 180                 rrddim_set(st, "restarted", asearch_restart);
 181                 rrddim_set(st, "found", afound);
 182                 rrdset_done(st);
 183         }
 184
 185         // --------------------------------------------------------------------
 186
 187         if(do_errors) {
 188                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".errors");
 189                 if(!st) {
 190                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "errors", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Errors", "events/s", 1005, update_every, RRDSET_TYPE_LINE);
 191                         st->isdetail = 1;
 192
 193                         rrddim_add(st, "icmp_error", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 194                         rrddim_add(st, "insert_failed", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 195                         rrddim_add(st, "drop", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 196                         rrddim_add(st, "early_drop", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 197                 }
 198                 else rrdset_next(st);
 199
 200                 rrddim_set(st, "icmp_error", aicmp_error);
 201                 rrddim_set(st, "insert_failed", ainsert_failed);
 202                 rrddim_set(st, "drop", adrop);
 203                 rrddim_set(st, "early_drop", aearly_drop);
 204                 rrdset_done(st);
 205         }
 206
 207         return 0;
 208 }