src/proc_net_stat_conntrack.c

   1 #include <inttypes.h>
   2 #include <stdio.h>
   3 #include <stdlib.h>
   4 #include <string.h>
   5
   6 #include "common.h"
   7 #include "log.h"
   8 #include "config.h"
   9 #include "procfile.h"
  10 #include "rrd.h"
  11 #include "plugin_proc.h"
  12
  13 #define RRD_TYPE_NET_STAT_CONNTRACK     "netfilter"
  14 #define RRD_TYPE_NET_STAT_CONNTRACK_LEN strlen(RRD_TYPE_NET_STAT_CONNTRACK)
  15
  16 int do_proc_net_stat_conntrack(int update_every, unsigned long long dt) {
  17         static procfile *ff = NULL;
  18         static int do_sockets = -1, do_new = -1, do_changes = -1, do_expect = -1, do_search = -1, do_errors = -1;
  19
  20         if(do_sockets == -1)    do_sockets = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connections", 1);
  21         if(do_new == -1)                do_new = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter new connections", 1);
  22         if(do_changes == -1)    do_changes = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection changes", 1);
  23         if(do_expect == -1)             do_expect = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection expectations", 1);
  24         if(do_search == -1)             do_search = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter connection searches", 1);
  25         if(do_errors == -1)             do_errors = config_get_boolean("plugin:proc:/proc/net/stat/nf_conntrack", "netfilter errors", 1);
  26
  27         if(dt) {};
  28
  29         if(!ff) {
  30                 char filename[FILENAME_MAX + 1];
  31                 snprintf(filename, FILENAME_MAX, "%s%s", global_host_prefix, "/proc/net/stat/nf_conntrack");
  32                 ff = procfile_open(config_get("plugin:proc:/proc/net/stat/nf_conntrack", "filename to monitor", filename), " \t:", PROCFILE_FLAG_DEFAULT);
  33         }
  34         if(!ff) return 1;
  35
  36         ff = procfile_readall(ff);
  37         if(!ff) return 0; // we return 0, so that we will retry to open it next time
  38
  39         uint32_t lines = procfile_lines(ff), l;
  40         uint32_t words;
  41
  42         unsigned long long aentries = 0, asearched = 0, afound = 0, anew = 0, ainvalid = 0, aignore = 0, adelete = 0, adelete_list = 0,
  43                 ainsert = 0, ainsert_failed = 0, adrop = 0, aearly_drop = 0, aicmp_error = 0, aexpect_new = 0, aexpect_create = 0, aexpect_delete = 0, asearch_restart = 0;
  44
  45         for(l = 1; l < lines ;l++) {
  46                 words = procfile_linewords(ff, l);
  47                 if(words < 17) {
  48                         if(words) error("Cannot read /proc/net/stat/nf_conntrack line. Expected 17 params, read %d.", words);
  49                         continue;
  50                 }
  51
  52                 unsigned long long tentries = 0, tsearched = 0, tfound = 0, tnew = 0, tinvalid = 0, tignore = 0, tdelete = 0, tdelete_list = 0, tinsert = 0, tinsert_failed = 0, tdrop = 0, tearly_drop = 0, ticmp_error = 0, texpect_new = 0, texpect_create = 0, texpect_delete = 0, tsearch_restart = 0;
  53
  54                 tentries                = strtoull(procfile_lineword(ff, l, 0), NULL, 16);
  55                 tsearched               = strtoull(procfile_lineword(ff, l, 1), NULL, 16);
  56                 tfound                  = strtoull(procfile_lineword(ff, l, 2), NULL, 16);
  57                 tnew                    = strtoull(procfile_lineword(ff, l, 3), NULL, 16);
  58                 tinvalid                = strtoull(procfile_lineword(ff, l, 4), NULL, 16);
  59                 tignore                 = strtoull(procfile_lineword(ff, l, 5), NULL, 16);
  60                 tdelete                 = strtoull(procfile_lineword(ff, l, 6), NULL, 16);
  61                 tdelete_list    = strtoull(procfile_lineword(ff, l, 7), NULL, 16);
  62                 tinsert                 = strtoull(procfile_lineword(ff, l, 8), NULL, 16);
  63                 tinsert_failed  = strtoull(procfile_lineword(ff, l, 9), NULL, 16);
  64                 tdrop                   = strtoull(procfile_lineword(ff, l, 10), NULL, 16);
  65                 tearly_drop             = strtoull(procfile_lineword(ff, l, 11), NULL, 16);
  66                 ticmp_error             = strtoull(procfile_lineword(ff, l, 12), NULL, 16);
  67                 texpect_new             = strtoull(procfile_lineword(ff, l, 13), NULL, 16);
  68                 texpect_create  = strtoull(procfile_lineword(ff, l, 14), NULL, 16);
  69                 texpect_delete  = strtoull(procfile_lineword(ff, l, 15), NULL, 16);
  70                 tsearch_restart = strtoull(procfile_lineword(ff, l, 16), NULL, 16);
  71
  72                 if(!aentries) aentries =  tentries;
  73
  74                 // sum all the cpus together
  75                 asearched                       += tsearched;           // conntrack.search
  76                 afound                          += tfound;                      // conntrack.search
  77                 anew                            += tnew;                        // conntrack.new
  78                 ainvalid                        += tinvalid;            // conntrack.new
  79                 aignore                         += tignore;                     // conntrack.new
  80                 adelete                         += tdelete;                     // conntrack.changes
  81                 adelete_list            += tdelete_list;        // conntrack.changes
  82                 ainsert                         += tinsert;                     // conntrack.changes
  83                 ainsert_failed          += tinsert_failed;      // conntrack.errors
  84                 adrop                           += tdrop;                       // conntrack.errors
  85                 aearly_drop             += tearly_drop;         // conntrack.errors
  86                 aicmp_error             += ticmp_error;         // conntrack.errors
  87                 aexpect_new             += texpect_new;         // conntrack.expect
  88                 aexpect_create          += texpect_create;      // conntrack.expect
  89                 aexpect_delete          += texpect_delete;      // conntrack.expect
  90                 asearch_restart         += tsearch_restart;     // conntrack.search
  91         }
  92
  93         RRDSET *st;
  94
  95         // --------------------------------------------------------------------
  96
  97         if(do_sockets) {
  98                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".sockets");
  99                 if(!st) {
 100                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "sockets", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connections", "active connections", 1000, update_every, RRDSET_TYPE_LINE);
 101
 102                         rrddim_add(st, "connections", NULL, 1, 1, RRDDIM_ABSOLUTE);
 103                 }
 104                 else rrdset_next(st);
 105
 106                 rrddim_set(st, "connections", aentries);
 107                 rrdset_done(st);
 108         }
 109
 110         // --------------------------------------------------------------------
 111
 112         if(do_new) {
 113                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".new");
 114                 if(!st) {
 115                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "new", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter New Connections", "connections/s", 1001, update_every, RRDSET_TYPE_LINE);
 116
 117                         rrddim_add(st, "new", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 118                         rrddim_add(st, "ignore", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 119                         rrddim_add(st, "invalid", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 120                 }
 121                 else rrdset_next(st);
 122
 123                 rrddim_set(st, "new", anew);
 124                 rrddim_set(st, "ignore", aignore);
 125                 rrddim_set(st, "invalid", ainvalid);
 126                 rrdset_done(st);
 127         }
 128
 129         // --------------------------------------------------------------------
 130
 131         if(do_changes) {
 132                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".changes");
 133                 if(!st) {
 134                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "changes", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Changes", "changes/s", 1002, update_every, RRDSET_TYPE_LINE);
 135                         st->isdetail = 1;
 136
 137                         rrddim_add(st, "inserted", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 138                         rrddim_add(st, "deleted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 139                         rrddim_add(st, "delete_list", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 140                 }
 141                 else rrdset_next(st);
 142
 143                 rrddim_set(st, "inserted", ainsert);
 144                 rrddim_set(st, "deleted", adelete);
 145                 rrddim_set(st, "delete_list", adelete_list);
 146                 rrdset_done(st);
 147         }
 148
 149         // --------------------------------------------------------------------
 150
 151         if(do_expect) {
 152                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".expect");
 153                 if(!st) {
 154                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "expect", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Expectations", "expectations/s", 1003, update_every, RRDSET_TYPE_LINE);
 155                         st->isdetail = 1;
 156
 157                         rrddim_add(st, "created", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 158                         rrddim_add(st, "deleted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 159                         rrddim_add(st, "new", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 160                 }
 161                 else rrdset_next(st);
 162
 163                 rrddim_set(st, "created", aexpect_create);
 164                 rrddim_set(st, "deleted", aexpect_delete);
 165                 rrddim_set(st, "new", aexpect_new);
 166                 rrdset_done(st);
 167         }
 168
 169         // --------------------------------------------------------------------
 170
 171         if(do_search) {
 172                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".search");
 173                 if(!st) {
 174                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "search", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Connection Searches", "searches/s", 1010, update_every, RRDSET_TYPE_LINE);
 175                         st->isdetail = 1;
 176
 177                         rrddim_add(st, "searched", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 178                         rrddim_add(st, "restarted", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 179                         rrddim_add(st, "found", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 180                 }
 181                 else rrdset_next(st);
 182
 183                 rrddim_set(st, "searched", asearched);
 184                 rrddim_set(st, "restarted", asearch_restart);
 185                 rrddim_set(st, "found", afound);
 186                 rrdset_done(st);
 187         }
 188
 189         // --------------------------------------------------------------------
 190
 191         if(do_errors) {
 192                 st = rrdset_find(RRD_TYPE_NET_STAT_CONNTRACK ".errors");
 193                 if(!st) {
 194                         st = rrdset_create(RRD_TYPE_NET_STAT_CONNTRACK, "errors", NULL, RRD_TYPE_NET_STAT_CONNTRACK, "Netfilter Errors", "events/s", 1005, update_every, RRDSET_TYPE_LINE);
 195                         st->isdetail = 1;
 196
 197                         rrddim_add(st, "icmp_error", NULL, 1, 1 * update_every, RRDDIM_INCREMENTAL);
 198                         rrddim_add(st, "insert_failed", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 199                         rrddim_add(st, "drop", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 200                         rrddim_add(st, "early_drop", NULL, -1, 1 * update_every, RRDDIM_INCREMENTAL);
 201                 }
 202                 else rrdset_next(st);
 203
 204                 rrddim_set(st, "icmp_error", aicmp_error);
 205                 rrddim_set(st, "insert_failed", ainsert_failed);
 206                 rrddim_set(st, "drop", adrop);
 207                 rrddim_set(st, "early_drop", aearly_drop);
 208                 rrdset_done(st);
 209         }
 210
 211         return 0;
 212 }