checks/cisco_asa_connections

   1 #!/usr/bin/python
   2 # -*- encoding: utf-8; py-indent-offset: 4 -*-
   3 # +------------------------------------------------------------------+
   4 # |             ____ _               _        __  __ _  __           |
   5 # |            / ___| |__   ___  ___| | __   |  \/  | |/ /           |
   6 # |           | |   | '_ \ / _ \/ __| |/ /   | |\/| | ' /            |
   7 # |           | |___| | | |  __/ (__|   <    | |  | | . \            |
   8 # |            \____|_| |_|\___|\___|_|\_\___|_|  |_|_|\_\           |
   9 # |                                                                  |
  10 # | Copyright Mathias Kettner 2017             mk@mathias-kettner.de |
  11 # +------------------------------------------------------------------+
  12 #
  13 # This file is part of Check_MK.
  14 # The official homepage is at http://mathias-kettner.de/check_mk.
  15 #
  16 # check_mk is free software;  you can redistribute it and/or modify it
  17 # under the  terms of the  GNU General Public License  as published by
  18 # the Free Software Foundation in version 2.  check_mk is  distributed
  19 # in the hope that it will be useful, but WITHOUT ANY WARRANTY;  with-
  20 # out even the implied warranty of  MERCHANTABILITY  or  FITNESS FOR A
  21 # PARTICULAR PURPOSE. See the  GNU General Public License for more de-
  22 # tails. You should have  received  a copy of the  GNU  General Public
  23 # License along with GNU Make; see the file  COPYING.  If  not,  write
  24 # to the Free Software Foundation, Inc., 51 Franklin St,  Fifth Floor,
  25 # Boston, MA 02110-1301 USA.
  26
  27 # .1.3.6.1.4.1.9.9.147.1.2.2.2.1.3.40.6  "number of connections currently in use by the entire firewall"
  28 # .1.3.6.1.4.1.9.9.147.1.2.2.2.1.3.40.7  "highest number of connections in use at any one time since system startup"
  29 # .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.6  1045
  30 # .1.3.6.1.4.1.9.9.147.1.2.2.2.1.5.40.7  2816
  31
  32
  33 def inventory_cisco_asa_connections(info):
  34     return [(None, {})]
  35
  36
  37 def check_cisco_asa_connections(_no_item, params, info):
  38     used_conns = int(info[0][0])
  39     overall_used_conns = info[1][0]
  40     infotext = "Currently used: %s" % used_conns
  41     state = 0
  42
  43     if params.get("connections"):
  44         warn, crit = params["connections"]
  45         perfdata = [("fw_connections_active", used_conns, warn, crit)]
  46         if used_conns >= crit:
  47             state = 2
  48         elif used_conns >= warn:
  49             state = 1
  50         if state > 0:
  51             infotext += " (warn/crit at %s/%s)" % (warn, crit)
  52     else:
  53         perfdata = [("fw_connections_active", used_conns)]
  54
  55     return state, "%s, Max. since system startup: %s" % (infotext, overall_used_conns), perfdata
  56
  57
  58 check_info['cisco_asa_connections'] = {
  59     'inventory_function'    : inventory_cisco_asa_connections,
  60     'check_function'        : check_cisco_asa_connections,
  61     'service_description'   : 'Connections',
  62     'snmp_info'             : ('.1.3.6.1.4.1.9.9.147.1.2.2.2.1', [
  63                                 '5', # CISCO-FIREWALL-MIB::cfwConnectionStatValue
  64                               ]),
  65     "snmp_scan_function"    : lambda oid: oid(".1.3.6.1.2.1.1.1.0").lower().startswith("cisco adaptive security") \
  66                                           or "cisco pix security" in oid(".1.3.6.1.2.1.1.1.0").lower(),
  67     "group"                 : "cisco_fw_connections",
  68     "has_perfdata"          : True,
  69 }