Smokeping 网络链路状态和稳定性监控

yum -y install httpd httpd-devel gcc make curl wget

yum -y install libxml2-devel libpng-devel glib pango pango-devel \
freetype freetype-devel fontconfig cairo cairo-devel \
libart_lgpl libart_lgpl-devel

yum -y install perl-Sys-Syslog podofo  mod_fcgid bind-utils

yum -y install perl perl-Net-Telnet perl-Net-DNS perl-LDAP perl-libwww-perl \
perl-RadiusPerl perl-IO-Socket-SSL perl-Socket6 perl-CGI-SpeedyCGI \
perl-FCGI perl-CGI-SpeedCGI perl-Time-HiRes perl-ExtUtils-MakeMaker \
perl-RRD-Simple rrdtool rrdtool-per

wget http://www.fping.org/dist/fping-3.10.tar.gz
wget https://fossies.org/linux/misc/old/echoping-6.0.2.tar.gz
wget http://oss.oetiker.ch/smokeping/pub/smokeping-2.6.9.tar.gz

tar xf fping-3.10.tar.gz
cd fping-3.10
./configure
make && make install

tar xf echoping-6.0.2.tar.gz
cd echoping-6.0.2
./configure
make && make install

tar xf smokeping-2.6.9.tar.gz
cd smokeping-2.6.9
./setup/build-perl-modules.sh /usr/local/smokeping/thirdparty
./configure --prefix=/usr/local/smokeping
/usr/bin/gmake install

# 创建cache var　data 三个目录和smokeping.log日志文件
cd /usr/local/smokeping/
mkdir cache data var

# 刚刚创建的文件和目录授予apache权限，这里将整个smokeping都赋权
chown -R apache:apache /usr/local/smokeping/
# web文件
cd /usr/local/smokeping/htdocs
mv smokeping.fcgi.dist smokeping.fcgi
cd /usr/local/smokeping/etc
mv config.dist config

cgiurl = http://some.url/smokeping.cgi  #把some.url 改成本地IP或者域名
step = 60  #默认300 建议改为 60 ， 一分钟采集一次数据

chmod 600 /usr/local/smokeping/etc/smokeping_secrets.dist

# 在DocumentRoot “/var/www/html” 这一行下添加如下代码：
  Alias /cache "/usr/local/smokeping/cache/"
  Alias /cropper "/usr/local/smokeping/htdocs/cropper/"
  Alias /smokeping "/usr/local/smokeping/htdocs/smokeping.fcgi"
<Directory "/usr/local/smokeping">
  AllowOverride None
  Options All
  AddHandler cgi-script .fcgi .cgi
  Order allow,deny
  Allow from all
  AuthName "Smokeping"
  AuthType Basic
  AuthUserFile /usr/local/smokeping/htdocs/htpasswd
  Require valid-user
  DirectoryIndex smokeping.fcgi
</Directory>

htpasswd -cd   /usr/local/smokeping/htdocs/htpasswd admin
# 添加web认证密码

yum -y install wqy-zenhei-fonts.noarch

*** Presentation ***
charset = UTF-8    # 第50行左右添加字符编码
template = /usr/local/smokeping/etc/basepage.html.dist

"DEF:maxping=$cfg->{General}{datadir}${host}.rrd:median:AVERAGE",
 '--font TITLE:20:"WenQuanYi Zen Hei Mono"',  #第149左右插入内容
             'PRINT:maxping:MAX:%le' );

###########################################################
#+Test
#menu= Targets
##parents = owner:/Test/James localtion:/
......

#menu = Multihost
#title = James and James as seen from Boomer
#host = /Test/James /Test/James~boomer
###########################################################
#以上几行可以直接删除，也可注释掉，没有用，下面添加监控项



# 监控节点样例如下，注意+是第一层，++是第二层，+++ 是第三层
+ Other
menu = 网络链路稳定性监控
title = 监控列表


++ company
menu = 公司监控
title = 网络监控列表
+++  xx-idc
menu = 西溪机房防火墙
title = 西溪机房防火墙
alerts = someloss
host = 183.136.xxx.xxx


++ public
menu = 公共服务
title = 公共服务列表
+++ 114dns
menu = 114.114.114.114
title = 114 DNS
alerts = someloss
host = 114.114.114.114

+++ aliyundns
menu = 223.5.5.5
title = Aliyun DNS
alerts = someloss
host = 223.5.5.5

systemctl enable httpd
grep smokeping  /etc/rc.local || echo "/usr/local/smokeping/bin/smokeping --restart" >>  /etc/rc.local
# 开启启动

systemctl restart httpd #启动http
/usr/local/smokeping/bin/smokeping --restart  #启动smokeping

*** Alerts ***
to = |/usr/local/smokeping/bin/alert.sh
from = sentinel@huored.com

+bigloss
type = loss
# in percent
pattern = ==0%,==0%,==0%,==0%,>0%,>0%,>0%
comment = suddenly there is packet loss

+someloss
type = loss
# in percent
pattern = >0%,*12*,>0%,*12*,>0%
comment = loss 3 times  in a row

+startloss
type = loss
# in percent
pattern = ==S,>0%,>0%,>0%
comment = loss at startup

+rttdetect
type = rtt
# in milli seconds
pattern = <10,<10,<10,<10,<10,<100,>100,>100,>100
comment = routing messed up again ?

+hostdown
type = loss
# in percent
pattern = ==0%,==0%,==0%, ==U
comment = no reply

+lossdetect #我一般使用lossdetect 策略
type = loss
# in percent
pattern = ==0%,==0%,==0%,==0%,>20%,>20%,>20%
comment = suddenly there is packet loss

*** Probes ***

+ FPing
binary = /usr/sbin/fping
packetsize = 1048  #设置ping的包大小

+ TCPPing  # 检测端口，有些高防IP不让ping的
binary = /usr/local/smokeping/bin/tcpping-smokeping
# tcpping是一个shell脚本并调用traceroute，测试:tcpping-smokeping  -C -x 10  attacker  80
# https://github.com/tobbez/tcpping-smokeping
pings = 5
port = 80


监控列表例子
++ SD-JCZJ
probe = TCPPing  # 此处调用了tcpping来测试，不写的话默认是Fping
menu=SD-JCZJ
title=SD-JCZJ-XXXXXX
alerts=lossdetect
host=XXXXXXX

########################################################
# Script to email a mtr report on alert from Smokeping #
########################################################
alertname=$1
target=$2
losspattern=$3
rtt=$4
hostname=$5
smokename="ALIYUN-smokeping-"
if [ "$losspattern" = "loss: 0%" ];
then
subject="Clear-${smokename}-Alert: $target host: ${hostname}"
else
subject="${smokename}Alert: ${target} – ${hostname}"
fi
echo "MTR Report for hostname: ${hostname}" > /tmp/mtr.txt
echo "" >> /tmp/mtr.txt
#echo "sudo mtr -n –report ${hostname} "
#sudo /usr/sbin/mtr -n –report ${hostname} >> /tmp/mtr.txt
#echo "" >> /tmp/mtr.txt
echo "Name of Alert: " $alertname >> /tmp/mtr.txt
echo "Target: " $target >> /tmp/mtr.txt
echo "Loss Pattern: " $losspattern >> /tmp/mtr.txt
echo "RTT Pattern: " $rtt >> /tmp/mtr.txt
echo "Hostname: " $hostname >> /tmp/mtr.txt
echo "" >> /tmp/mtr.txt
#echo "Full mtr command is: sudo /usr/sbin/mtr -n –report ${hostname}" >> /tmp/mtr.txt
echo "subject: " $subject
if [ -s /tmp/mtr.txt ]; then
echo "----------------"
#cat /tmp/mtr.txt|mail -s "${subject}" $email

Email=/usr/bin/sendEmail

smtp=smtp.attacker.club
#发件人SMTP服务器
user=info@attacker.club
#发件人账号
passwd='xxxxxx'
#发件人密码
#cc=admin@attacker.club
#抄送
to="admin@attacker.club"
#收件人邮件地址
#subject=主题
body=$(cat /tmp/mtr.txt)

$Email  -f $user -s $smtp -xu $user -xp $passwd -t $to -u "$subject" -m "$body" -o  message-charset=utf-8

fi

/usr/local/smokeping/bin/smokeping  --debug # debug
rm /usr/local/smokeping/data/Other/* -rf &&  /usr/local/smokeping/bin/smokeping --restart # 清理数据