########################################################################## # $Id: pound,v 1.7 2008/03/24 23:31:26 kirk Exp $ ########################################################################## ######################################################## # This was written and is maintained by: # luuk - luuk@planet.nl # # Please send all comments, suggestions, bug reports, # etc, to luuk@planet.nl. # ######################################################## ####################################################### ## Copyright (c) 2008 Kirk Bauer ## Covered under the included MIT/X-Consortium License: ## http://www.opensource.org/licenses/mit-license.php ## All modifications and contributions by other persons to ## this script are assumed to have been donated to the ## Logwatch project and thus assume the above copyright ## and licensing terms. If you want to make contributions ## under your own copyright or a different license this ## must be explicitly stated in the contribution an the ## Logwatch project reserves the right to not accept such ## contributions. If you have made significant ## contributions to this script and want to claim ## copyright please contact logwatch-devel@lists.sourceforge.net. ######################################################### $Debug = $ENV{'LOGWATCH_DEBUG'}; $DoLookup = $ENV{'pound_ip_lookup'}; $Detail = $ENV{'LOGWATCH_DETAIL_LEVEL'} || 0; $DoLookup = 1; sub LookupIP { my ($name, $a1, $a2,$a3,$a4,$PackedAddr,$Addr); $Addr = $_[0]; ($a1,$a2,$a3,$a4) = split /\./,$Addr; $PackedAddr = pack('C4',$a1,$a2,$a3,$a4); if ($DoLookup) { if ($name = gethostbyaddr ($PackedAddr,2)) { return ($name . " (" . $Addr . ")"); } else { return ($Addr); } } else { return ($Addr); } } if ( $Debug >= 5 ) { print STDERR "\n\nDEBUG: Inside Pound Filter \n\n"; } while (defined($ThisLine = <STDIN>)) { chomp($ThisLine); if ($ThisLine =~ /error read from ([\d|\.]+): Succes/) { $error{'read'}{$1}++; } elsif ($ThisLine =~ /([\d|\.]+) \w+ \S+ \S+ - \S+ 301 Unauthorized/) { $error{'unauthorized'}{$1}++; } elsif ($ThisLine =~ /([\d|\.]+) \w+ \/exchange\/([\w|\.]+)\/.* \S+/) { $user{$1}{$2}++; } elsif ($ThisLine =~ /([\d|\.]+) \w+ \/.* (\d\d\d .*?)$/) { $tmphost = $1; $tmpcode = $2; $ip{$tmphost}{'total'}++; $ip{$tmphost}{$tmpcode}++; } else { # Report any unmatched entries... $OtherList{$ThisLine}++; } } if ( ( $Detail >= 5 ) and (keys %user) ) { print "\nUsage by user:\n"; foreach $host (keys %user) { $rhost = LookupIP($host); print " $rhost:\n"; foreach $usr (keys %{$user{$host}}) { print " $usr: $user{$host}{$usr}\n"; } } } if ( ( $Detail >= 10 ) and (keys %ip) ) { print "\nUsage by host:\n"; foreach $host (keys %ip) { $rhost = LookupIP($host); print " $rhost: $ip{$host}{'total'}\n"; foreach $code (keys %{$ip{$host}}) { print " $code: $ip{$host}{$code}\n" if ($code ne 'total'); } } } if ( ( $Detail >= 5 ) and (keys %error) ) { print "\nError read from - Succes message:\n"; foreach $host (keys %{$error{'read'}}) { $rhost = LookupIP($host); print " $rhost: $error{'read'}{$host} \n"; } } if (keys %OtherList) { print "\n**Unmatched Entries**\n"; foreach $line (sort {$a cmp $b} keys %OtherList) { print " $line: $OtherList{$line} Time(s)\n"; } } exit(0); # vi: shiftwidth=3 tabstop=3 syntax=perl et # Local Variables: # mode: perl # perl-indent-level: 3 # indent-tabs-mode: nil # End: