Matejunkie » dns

Update 1.3: Bind check plugin for Nagios

Mike Adolphs — Wed, 20 May 2009 08:06:52 +0000

Thanks to Gareth’s feedback and advice I fixed a small, but nerving bug which raised an error when the plugin was called on a Debian based distribution.
The main problem here was, that the awk snippet failed because of an unescaped metacharacter when using mawk (Debian default awk alternative), but worked like a charm with gawk (Gentoo default). Apparently gawk is just more loose than mawk, it should’ve failed on both.

Anyway, this shouldn’t be a problem anymore. As always, the updated script is available at MonitoringExchange, or via svn. Please consider that the svn checkout is only possible via svnserve at the moment.

user@host: ~ $ svn co svn://svn.matejunkie.com/nagios-plugins/stable/check_bind/ check_bind/

Update 1.2: BIND Check Plugin for Nagios

Mike Adolphs — Sun, 03 May 2009 00:54:55 +0000

Update: I fixed a small, but nerving bug which is described further in this article. I also fixed the code below, means you can safely copy’n'paste it from this article as well.

I just made an update to the check_bind.sh script. It (hopefully without major bugs) now supports BIND 9.3 and 9.5 or greater as well. More of this and a few other improvements within the changelog.

Please note that I didn’t invest much time into testing yet. It works for me under Gentoo on different hosts via BIND 9.4 and BIND 9.6 without problems and on a Debian Lenny machine with BIND 9.5 as well. Please let me know if something doesn’t work for you and I try to improve the script to your needs. Thanks so far for the feedback!

Changelog

The plugin now supports BIND versions 9.3 and 9.5+.
The named.stats file is now initially parsed via awk and the excerpts are being copied to a temp directory for further use instead of frequently tail’ing the named.stats
The temporary directory is configurable via -t/–path-tmp as well
The path to the rndc binary is now configurable via -r/–path-rndc
You’re now able to deactivate the pid check via -N/–no-pid-check

The Script

As always the script is downloadable via NagiosExchange, from my public svn or directly with the nice and shiny copy’n'paste way from the codebox below.

user@host ~ $ svn co https://svn.matejunkie.com/svn/nagios-plugins/stable/check_bind/ check_bind/

#!/bin/sh
 
#   This program is free software; you can redistribute it and/or modify
#   it under the terms of the GNU General Public License as published by
#   the Free Software Foundation; either version 2 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU General Public License for more details.
#
#   You should have received a copy of the GNU General Public License
#   along with this program; if not, write to the Free Software
#   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
PROGNAME=`basename $0`
VERSION="Version 1.2,"
AUTHOR="2009, Mike Adolphs (http://www.matejunkie.com/)"
 
ST_OK=0
ST_WR=1
ST_CR=2
ST_UK=3
path_pid="/var/run/named"
name_pid="named.pid"
path_rndc="/usr/sbin"
path_stats="/var/bind"
path_tmp="/tmp"
version=9.4
pid_check=1
 
print_version() {
    echo "$VERSION $AUTHOR"
}
 
print_help() {
    print_version $PROGNAME $VERSION
    echo ""
    echo "$PROGNAME is a Nagios plugin to check the bind daemon whether it's"
    echo "running via its pid file and then gets the statistics via rndc stats."
    echo "The user that run the script needs the ability to 'sudo rndc stats'!"
    echo "The timeframe in which the rndc stats output is updated is controlled"
    echo "by the check interval. The output shows amount of requests of various"
    echo "types occured during the last check interval."
    echo "The script itself is written sh-compliant and free software under the"
    echo "terms of the GPLv2 (or later)."
    echo ""
    echo "$PROGNAME -p/--path_pid /var/run/named -n/--name_pid named.pid"
    echo "  -r/--path-rndc /usr/sbin -s/--path-stats /var/bind"
    echo "  -V/--bind-version 9.3/9.4/9.5 -N"
    echo ""
    echo "Options:"
    echo "  -p/--path-pid)"
    echo "     Path where the pid file for bind is stored. You might need to"
    echo "     alter this to your distribution's way of dealing with pid files."
    echo "     Default is: /var/run/named"
    echo "  -n/--name_pid)"
    echo "     Name of the pid file. Default is: named.pid"
    echo "  -r/--path-rndc)"
    echo "     Path where the rndc binary is located. Default is: /usr/sbin"
    echo "  -s/--path-stats)"
    echo "     Path where the named.stats file is stored. Default is:"
    echo "     /var/bind"
    echo "  -t/--path-tmp)"
    echo "     Path where the temporary named.stats excerpt is being stored."
    echo "     Default is: /tmp"
    echo "  -V/--bind-version)"
    echo "     Specifies the bind version you're running. Currently there's"
    echo "     BIND 9.3, 9.4 and 9.5 supported. Default is: 9.4"
    echo "  -N/--no-pid-check)"
    echo "     If you don't want that the script checks for the pid file,"
    echo "     use this option. Default is: off"
    exit $ST_UK
}
 
while test -n "$1"; do
    case "$1" in
        -help|-h)
            print_help
            exit $ST_UK
            ;;
        --version|-v)
            print_version $PROGNAME $VERSION
            exit $ST_UK
            ;;
        --path-pid|-p)
            path_pid=$2
            shift
            ;;
        --name-pid|-n)
            name_pid=$2
            shift
            ;;
        --path-rndc|-r)
            path_rndc=$2
            shift
            ;;
        --path-stats|-s)
            path_stats=$2
            shift
            ;;
        --path-tmp|-t)
            path_tmp=$2
            shift
            ;;
        --bind-version|-V)
            version=$2
            shift
            ;;
        --no-check-pid|-N)
            pid_check=0
            ;;
        *)
            echo "Unknown argument: $1"
            print_help
            exit $ST_UK
            ;;
    esac
    shift
done
 
check_pid() {
    if [ -f "$path_pid/$name_pid" ]
    then
        retval=0
    else
        retval=1
    fi
}
 
trigger_stats() {
    sudo $path_rndc/rndc stats
}
 
copy_to_tmp() {
    tac $path_stats/named.stats | awk '/--- \([0-9]*\)/{p=1} p{print} /\+\+\+ \([0-9]*\)/{p=0;if (count++==1) exit}' > $path_tmp/named.stats.tmp
}
 
get_vals() {
    case ${version} in
        9.3)
            succ_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^success [0-9]*' | sort -n | awk '{print $2}'`
            succ_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^success [0-9]*' | sort -n | grep -m1 '^success [0-9]*' | awk '{print $2}'`
            ref_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^referral [0-9]*' | sort -n | awk '{print $2}'`
            ref_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^referral [0-9]*' | sort -n | grep -m1 '^referral [0-9]*' | awk '{print $2}'`
            nxrr_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^nxrrset [0-9]*' | sort -n | awk '{print $2}'`
            nxrr_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^nxrrset [0-9]*' | sort -n | grep -m1 '^nxrrset [0-9]*' | awk '{print $2}'`
            nxdom_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^nxdomain [0-9]*' | sort -n | awk '{print $2}'`
            nxdom_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^nxdomain [0-9]*' | sort -n | grep -m1 '^nxdomain [0-9]*' | awk '{print $2}'`
            rec_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^recursion [0-9]*' | sort -n | awk '{print $2}'`
            rec_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^recursion [0-9]*' | sort -n | grep -m1 '^recursion [0-9]*' | awk '{print $2}'`
            fail_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^failure [0-9]*' | sort -n | awk '{print $2}'`
            fail_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^failure [0-9]*' | sort -n | grep -m1 '^failure [0-9]*' | awk '{print $2}'`
            ;;
        9.4)
            succ_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^success [0-9]*' | sort -n | awk '{print $2}'`
            succ_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^success [0-9]*' | sort -n | grep -m1 '^success [0-9]*' | awk '{print $2}'`
            ref_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^referral [0-9]*' | sort -n | awk '{print $2}'`
            ref_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^referral [0-9]*' | sort -n | grep -m1 '^referral [0-9]*' | awk '{print $2}'`
            nxrr_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^nxrrset [0-9]*' | sort -n | awk '{print $2}'`
            nxrr_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^nxrrset [0-9]*' | sort -n | grep -m1 '^nxrrset [0-9]*' | awk '{print $2}'`
            nxdom_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^nxdomain [0-9]*' | sort -n | awk '{print $2}'`
            nxdom_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^nxdomain [0-9]*' | sort -n | grep -m1 '^nxdomain [0-9]*' | awk '{print $2}'`
            rec_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^recursion [0-9]*' | sort -n | awk '{print $2}'`
            rec_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^recursion [0-9]*' | sort -n | grep -m1 '^recursion [0-9]*' | awk '{print $2}'`
            fail_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^failure [0-9]*' | sort -n | awk '{print $2}'`
            fail_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^failure [0-9]*' | sort -n | grep -m1 '^failure [0-9]*' | awk '{print $2}'`
            dup_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^duplicate [0-9]*' | sort -n | awk '{print $2}'`
            dup_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^duplicate [0-9]*' | sort -n | grep -m1 '^duplicate [0-9]*' | awk '{print $2}'`
            drop_1st=`cat $path_tmp/named.stats.tmp | grep -m1 '^dropped [0-9]*' | sort -n | awk '{print $2}'`
            drop_2nd=`cat $path_tmp/named.stats.tmp | grep -o '^dropped [0-9]*' | sort -n | grep -m1 '^dropped [0-9]*' | awk '{print $2}'`
            ;;
        9.5)
            succ_1st=`grep 'resulted in successful answer' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            succ_2nd=`grep 'resulted in successful answer' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            ref_1st=`grep 'resulted in referral' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            ref_2nd=`grep 'resulted in referral' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            nxrr_1st=`grep 'resulted in nxrrset' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            nxrr_2nd=`grep 'resulted in nxrrset' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            nxdom_1st=`grep 'resulted in NXDOMAIN' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            nxdom_2nd=`grep 'resulted in NXDOMAIN' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            rec_1st=`grep 'caused recursion' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            rec_2nd=`grep 'caused recursion' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            fail_1st=`grep 'resulted in SERVFAIL' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            fail_2nd=`grep 'resulted in SERVFAIL' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            dup_1st=`grep 'duplicate queries received' $path_tmp/named.stats.tmp | awk '{ print $1 }' | grep -m1 ''`
            dup_2nd=`grep 'duplicate queries received' $path_tmp/named.stats.tmp | awk '{ print $1 }' | sort -n | grep -m1 ''`
            ;;
    esac
 
    if [ "$succ_1st" == '' ]
    then
        success=0
    else
        success=`expr $succ_1st - $succ_2nd`
    fi
    if [ "$ref_1st" == '' ]
    then
        referral=0
    else
        referral=`expr $ref_1st - $ref_2nd`
    fi
    if [ "$nxrr_1st" == '' ]
    then
        nxrrset=0
    else
        nxrrset=`expr $nxrr_1st - $nxrr_2nd`
    fi
    if [ "$nxdom_1st" == '' ]
    then
        nxdomain=0
    else
        nxdomain=`expr $nxdom_1st - $nxdom_2nd`
    fi
    if [ "$rec_1st" == '' ]
    then
        recursion=0
    else
        recursion=`expr $rec_1st - $rec_2nd`
    fi
    if [ "$fail_1st" == '' ]
    then
        failure=0
    else
        failure=`expr $fail_1st - $fail_2nd`
    fi
    if [ "$dup_1st" == '' ]
    then
        duplicate=0
    else
        duplicate=`expr $dup_1st - $dup_2nd`
    fi
    if [ "$drop_1st" == '' ]
    then
        dropped=0
    else
        dropped=`expr $drop_1st - $drop_2nd`
    fi
}
 
get_perfdata() {
    case ${version} in
        9.3)
            perfdata=`echo "'success'=$success 'referral'=$referral 'nxrrset'=$nxrrset 'nxdomain'=$nxdomain 'recursion'=$recursion 'failure'=$failure"`
            ;;
        *)
            perfdata=`echo "'success'=$success 'referral'=$referral 'nxrrset'=$nxrrset 'nxdomain'=$nxdomain 'recursion'=$recursion 'failure'=$failure 'duplicate'=$duplicate 'dropped'=$dropped"`
            ;;
    esac
}
 
if [ ${pid_check} == 1 ]
then
    check_pid
    if [ "$retval" = 1 ]
    then
        echo "There's no pid file for bind9. Is it actually running?"
        exit $ST_CR
    fi
fi
 
trigger_stats
copy_to_tmp
get_vals
get_perfdata
 
echo "Bind9 is running. $success successfull requests, $referral referrals, $nxdomain nxdomains since last check. | $perfdata"
exit $ST_OK

The License

As always this little script is ment to be sh-compliant and released under the terms of the GPL Version 2 only. Feel free to subscribe via rss to get updates on this one. More options will be added in the future.

Bind check plugin for Nagios

Mike Adolphs — Thu, 19 Mar 2009 00:03:37 +0000

Update: After reading this article, consider reading the update to version 1.2 as well.

check_bind.sh is another Nagios Plugin I’ve written. It’s purpose is to check whether the daemon is running and to trigger rndc stats to get BIND‘s performance data. First the bad news: It does only support BIND 9.4 or probably lower at the moment since the rndc stats output has been heavily changed in version 9.5. I’ve planned to release the script also with support for 9.5 in the first place, but then decided to update the script afterwards because of the time it’ll take to do the scripting for parsing the new rndc stats output. It’s much more comprehensive than the ones before.
The good news: Everything else should be working fine. The script has been tested under Gentoo, but should be running fine on other distributions as well when using the parameters described below. The only real requirement is that you have to enable the user to run rndc stats via sudo as seen below.

user@host ~ # sudo cat /etc/sudoers | grep nagios
nagios  ALL=(ALL)       NOPASSWD: /usr/sbin/rndc stats

Plugin overview

checks whether the BIND daemon is running through pid file check
runs rndc stats via sudo (has to be configured first)
grabs the difference between the last check’s performance data and generates performance data

How it works

In general the script first checks whether BIND is running through checking the pid file. You might need to alter the -p/–path-pid and -n/–name-pid option to fit your local directory structure. As mentioned the user that shall run the script needs rights to sudo rndc stats. The file that is being generated by that command must be readable by the user and its path given by an option called -s or –path-stats.
It then parses the content of named.stats for the actual and the previous check, providing the difference as the actual performance data. How often rndc stats is called is specified by the check interval set in your Nagios configuration. Assume you’re running the check every 5 Minutes. The performance data then shows the amount of various DNS request types for the last 5 minutes.

PNP Template

I’ve included a simple PNP Template that shows all performance output in one single graph as you can see below. It’s source code is located at the end of this article. Please add the php tags by yourself or download the file at NagiosExchange.

PNP Template for check_bind.sh

The script

Since public svn here is obviously not so public at the moment (I’ll fix this till next weekend), you’ll find the whole script below. Feel also free to stop by at NagiosExchange to get the script there.

#!/bin/sh
 
#   This program is free software; you can redistribute it and/or modify
#   it under the terms of the GNU General Public License as published by
#   the Free Software Foundation; either version 2 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU General Public License for more details.
#
#   You should have received a copy of the GNU General Public License
#   along with this program; if not, write to the Free Software
#   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
 
PROGNAME=`basename $0`
VERSION="Version 1.0,"
AUTHOR="2009, Mike Adolphs (http://www.matejunkie.com/)"
 
ST_OK=0
ST_WR=1
ST_CR=2
ST_UK=3
path_pid="/var/run/named"
name_pid="named.pid"
path_stats="/var/bind"
version=9.4
 
print_version() {
    echo "$VERSION $AUTHOR"
}
 
print_help() {
    print_version $PROGNAME $VERSION
    echo ""
    echo "$PROGNAME is a Nagios plugin to check the bind daemon whether it's"
    echo "running via its pid file and then gets the statistics via rndc stats."
    echo "The user that run the script needs the ability to 'sudo rndc stats'!"
    echo "The timeframe in which the rndc stats output is updated is controlled"
    echo "by the check interval. The output shows amount of requests of various"
    echo "types occured during the last check interval."
    echo "The script itself is written sh-compliant and free software under the"
    echo "terms of the GPLv2 (or later)."
    echo ""
    echo "$PROGNAME -p/--path_pid /var/run/named -n/--name_pid named.pid"
    echo "  -s/--path-stats /var/bind -V/--bind-version 9.4/9.5"
    echo "Options:"
    echo "  -p/--path-pid)"
    echo "     Path where the pid file for bind is stored. You might need to"
    echo "     alter this to your distribution's way of dealing with pid files."
    echo "     Default is: /var/run/named"
    echo "  -n/--name-pid)"
    echo "     Name of the pid file. Default is: named.pid"
    echo "  -s/--path-stats)"
    echo "     Path where the named.stats file is stored. Default is:"
    echo "     /var/bind"
    echo "  -V/--bind-version)"
    echo "     Specifies the bind version you're running. Currently only 9.4"
    echo "     is supported. In Bind 9.5 the stats output changed massively."
    echo "     It'll take a couple of more days to implement this. Default"
    echo "     is: 9.4"
    exit $ST_UK
}
 
while test -n "$1"; do
    case "$1" in
        --help|-h)
            print_help
            exit $ST_UK
            ;;
        --version|-v)
            print_version $PROGNAME $VERSION
            exit $ST_UK
            ;;
        --path-pid|-p)
            path_pid=$2
            shift
            ;;
        --name-pid|-n)
            name_pid=$2
            shift
            ;;
        --bind-version|-V)
            version=$2
            shift
            ;;
        --path-stats|-s)
            path_stats=$2
            shift
            ;;
        *)
            echo "Unknown argument: $1"
            print_help
            exit $ST_UK
            ;;
    esac
    shift
done
 
case "$version" in
    9.4)
        check_pid() {
            if [ -f "$path_pid/$name_pid" ]
            then
                retval=0
            else
                retval=1
            fi
        }
 
        trigger_stats() {
            sudo rndc stats
        }
 
        get_vals() {
            succ_1st=`tail -n22 $path_stats/named.stats | grep -o '^success [0-9]*' | sort -r | grep -m1 '^success [0-9]*' | awk '{print $2}'`
            succ_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^success [0-9]*' | sort -r | awk '{print $2}'`
            success=`expr $succ_1st - $succ_2nd`
 
            ref_1st=`tail -n22 $path_stats/named.stats | grep -o '^referral [0-9]*' | sort -r | grep -m1 '^referral [0-9]*' | awk '{print $2}'`
            ref_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^referral [0-9]*' | sort -r | awk '{print $2}'`
            referral=`expr $ref_1st - $ref_2nd`
 
            nxrr_1st=`tail -n22 $path_stats/named.stats | grep -o '^nxrrset [0-9]*' | sort -r | grep -m1 '^nxrrset [0-9]*' | awk '{print $2}'`
            nxrr_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^nxrrset [0-9]*' | sort -r | awk '{print $2}'`
            nxrrset=`expr $nxrr_1st - $nxrr_2nd`
 
            nxdom_1st=`tail -n22 $path_stats/named.stats | grep -o '^nxdomain [0-9]*' | sort -r | grep -m1 '^nxdomain [0-9]*' | awk '{print $2}'`
            nxdom_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^nxdomain [0-9]*' | sort -r | awk '{print $2}'`
            nxdomain=`expr $nxdom_1st - $nxdom_2nd`
 
            rec_1st=`tail -n22 $path_stats/named.stats | grep -o '^recursion [0-9]*' | sort -r | grep -m1 '^recursion [0-9]*' | awk '{print $2}'`
            rec_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^recursion [0-9]*' | sort -r | awk '{print $2}'`
            recursion=`expr $rec_1st - $rec_2nd`
 
            fail_1st=`tail -n22 $path_stats/named.stats | grep -o '^failure [0-9]*' | sort -r | grep -m1 '^failure [0-9]*' | awk '{print $2}'`
            fail_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^failure [0-9]*' | sort -r | awk '{print $2}'`
            failure=`expr $fail_1st - $fail_2nd`
 
            dup_1st=`tail -n22 $path_stats/named.stats | grep -o '^duplicate [0-9]*' | sort -r | grep -m1 '^duplicate [0-9]*' | awk '{print $2}'`
            dup_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^duplicate [0-9]*' | sort -r | awk '{print $2}'`
            duplicate=`expr $dup_1st - $dup_2nd`
 
            drop_1st=`tail -n22 $path_stats/named.stats | grep -o '^dropped [0-9]*' | sort -r | grep -m1 '^dropped [0-9]*' | awk '{print $2}'`
            drop_2nd=`tail -n22 $path_stats/named.stats | grep -m1 '^dropped [0-9]*' | sort -r | awk '{print $2}'`
            dropped=`expr $drop_1st - $drop_2nd`
        }
 
        get_perfdata() {
            perfdata=`echo "'success'=$success 'referral'=$referral 'nxrrset'=$nxrrset 'nxdomain'=$nxdomain 'recursion'=$recursion 'failure'=$failure 'duplicate'=$duplicate 'dropped'=$dropped"`
        }
        ;;
    9.5)
        echo "Please use -V 9.4 at the moment. Support for 9.5 is not yet implemented."
        exit $ST_UK
        ;;
    *)
        echo "Please use -V 9.4 at the moment. Support for 9.5 is not yet implemented."
        exit $ST_UK
        ;;
esac
 
check_pid
if [ "$retval" = 1 ]
then
    echo "There's no pid file for bind9. Is it actually running?"
    exit $ST_CR
else
    trigger_stats
    get_vals
    get_perfdata
 
    echo "Bind9 is running. $success successfull requests, $referral referrals, $nxdomain nxdomains since last check. | $perfdata"
    exit $ST_OK
fi

This program is free software; you can redistribute it and/or modify
#   it under the terms of the GNU General Public License as published by
#   the Free Software Foundation; either version 2 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU General Public License for more details.
#
#   You should have received a copy of the GNU General Public License
#   along with this program; if not, write to the Free Software
#   Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA

#   PNP Template for check_bind.sh
#   Author: Mike Adolphs (http://www.matejunkie.com/)

$opt[1] = "--vertical-label "DNS Requests " -l 0 -r --title "DNS Requests for $hostname / $servicedesc" ";
 
$def[1]  = "DEF:success=$rrdfile:$DS[1]:AVERAGE " ;
$def[1] .= "DEF:referral=$rrdfile:$DS[2]:AVERAGE " ;
$def[1] .= "DEF:nxrrset=$rrdfile:$DS[3]:AVERAGE " ;
$def[1] .= "DEF:nxdomain=$rrdfile:$DS[4]:AVERAGE " ;
$def[1] .= "DEF:recursion=$rrdfile:$DS[5]:AVERAGE " ;
$def[1] .= "DEF:failure=$rrdfile:$DS[6]:AVERAGE " ;
$def[1] .= "DEF:duplicate=$rrdfile:$DS[7]:AVERAGE " ;
$def[1] .= "DEF:dropped=$rrdfile:$DS[8]:AVERAGE " ;
 
$def[1] .= "COMMENT:"\t\t\t\tLAST\t\tAVERAGE\t\tMAX\n" " ;
 
$def[1] .= "LINE2:success#008000:"user\t\t " " ;
$def[1] .= "GPRINT:success:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:success:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:success:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:referral#0C64E8:"referral\t\t " " ;
$def[1] .= "GPRINT:referral:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:referral:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:referral:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:nxrrset#E80C3E:"nxrrset\t\t " " ;
$def[1] .= "GPRINT:nxrrset:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:nxrrset:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:nxrrset:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:nxdomain#FFA500:"nxdomain\t\t " " ;
$def[1] .= "GPRINT:nxdomain:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:nxdomain:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:nxdomain:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:recursion#1CC8E8:"recursion\t\t " " ;
$def[1] .= "GPRINT:recursion:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:recursion:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:recursion:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:failure#E80C8C:"failure\t\t " " ;
$def[1] .= "GPRINT:failure:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:failure:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:failure:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:duplicate#00FF3F:"duplicate\t\t " " ;
$def[1] .= "GPRINT:duplicate:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:duplicate:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:duplicate:MAX:" %6.0lf\n" " ;
 
$def[1] .= "LINE2:dropped#FFFF00:"dropped\t\t " " ;
$def[1] .= "GPRINT:dropped:LAST:"%6.0lf\t" " ;
$def[1] .= "GPRINT:dropped:AVERAGE:" %6.0lf\t" " ;
$def[1] .= "GPRINT:dropped:MAX:" %6.0lf\n" " ;

License

As always this little script is ment to be sh-compliant and released under the terms of the GPL Version 2 only. Feel free to subscribe via rss to get updates on this one. Support for BIND 9.5 stats output will follow as an update within the next weeks.

Using Google Mail under your own domain

Mike Adolphs — Tue, 10 Mar 2009 22:26:36 +0000

Besides the popular gmail.com and googlemail.com adresses, Google also offers Google Mail as an E-Mail solution within the Google Aps package for companies, organizations and other private people who are able to configure their own DNS server. That means, you’re able to use Google Mail for yourname@yourdomain.tld.

The advantages are obvious:

You don’t have to care about setting up and maintaining your own mail infrastructure
- that includes proper spam protection
No need of a backup solution to archive E-Mails
Access to a bunch of other features like Google Calender or Docs
Easy setup for using E-Mail and other Google Aps on your mobile
Reachable almost anytime, few downtimes
Accessing E-Mails via Web-Interface, IMAP, POP3
Sending E-Mails from anywhere via SMTP

But where’s light, there’s also shadow (the disadvantages):

Less privacy due to the fact that E-Mails are getting parsed to provide ads that fit to the content
You’re bound to the service provider
Terms might get changed in the future to your disadvantage what might cause a migration for you
Your data is stored externally
If your domain is down, you won’t be able to receive E-Mails anymore (especially annoying when using low TTLs or really annoying when you configure bullshit with high TTLs as well)

Anyway, the important privacy part: As we all know, Google has access to a bunch of datasets from almost any of us. So if you’re in need of exchanging really important information, don’t do it the Google way!
For all other cases, e.g. using E-Mail to get informed when new comments have been made in your blog, trying out new web 2.0 services or reading several newsgroups, I’m fine with the fact, that Google parses every E-Mail to provide proper ads that fit to the content. This is done automatically as described in the privacy statement, but if you’re unsure whether it really fits your opinion of privacy, better take a look by yourself (and use other methods of communication to exchange really important information).

In general there’re two options available: A freely available standard and a charged premium one. The standard package includes all available Google applications like Mail, Calender, Sites or Doc, provides 7,3 GB of space for mail and another 10 GB of space for Google Sites storage. The premium package comes with 25 GB of space for mail, a guaranteed uptime of 99,9% per month, more support options, optional archiving and security solutions by Postini and API support for 50 US$ per year and user. Both packages are able to be used via SSL.
For my purposes the standard package was just fine. I don’t have tons of old E-Mails, don’t need archiving or additional spam utilities, but I’m really in need of solutions for mobile use via Blackberry or iPhone without spending evenings to maintain my own E-Mail infrastructure. That’s just not worth the time.

The sign up process and the initial configuration within the Google environment is pretty straight-forward. Be aware of the fact, that you must have the ability to alter your own DNS configuration. During the sign up you have to add a custom CNAME which is checked by Google to authorize the whole process. To be able to get E-Mails you also have to add Google’s 7 MX records to your zone file. If you’re unsure how to to that, I’d strongly suggest you to stick to a free webmailer …

To send E-Mails via your Google Mail account directly from your server, you’re in need of a MTA like SSMTP which is included in almost any Linux distribution today. Its configuration is pretty easy as you can see below:

user@host:~$ sudo cat /etc/ssmtp/ssmtp.conf
root=postmaster
mailhub=smtp.googlemail.com
hostname=hostname.domain.tld
 
FromLineOverride=YES
 
UseSTARTTLS=YES
AuthUser=name@domain.tld
AuthPass=password

user@host:~$ sudo cat /etc/ssmtp/revaliases
root:name@domain.tld:smtp.googlemail.com:587
user:name@domain.tld:smtp.googlemail.com:587

GeoIP Lookups

Mike Adolphs — Sat, 07 Feb 2009 06:34:16 +0000

If you want to know the location of a server connected to the Internet, you need a tiny, useful tool called geoiplookup. In Debian or Ubuntu the installation is quite easy:

sudo aptitude install geoip-bin

After installation you’re able to use geoiplookup from the command line:

user@server:~$ geoiplookup www.heise.de
GeoIP Country Edition: DE, Germany

But that’ll only show you the country of the server’s location. For more precise information MaxMind‘s LGPL version of their GeoIP database comes in handy. It’s being updated at the beginning of each month and available via this link (approx. 30 MB).

Simply download the archive, gunzip it and move it to the proper location:

gunzip GeoLiteCity.dat.gz
mv GeoLiteCity.dat /usr/share/GeoIP/GeoIPCity.dat

After that, geoiplookup returns more accurate location details on a city-level:

user@server:~$ geoiplookup www.heise.de
GeoIP Country Edition: DE, Germany
GeoIP City Edition, Rev 1: DE, 06, Hanover, (null), 52.366699, 9.716700, 0, 0
GeoIP City Edition, Rev 0: DE, 06, Hanover, (null), 52.366699, 9.716700

Tossing longitude and latitude to Google Maps it’ll show the location of the Heise Verlag’s office, although the servers are running in Frankfurt/Main 350 kilometers south of Hannover.

View Larger Map

If you want to keep the information up to date you should create a small script, triggered by a cronjob running at 1:30am on the third day of each month.

The cronjob, assuming you define cronjobs via /etc/crontab:

30 1 3 * * root /root/scripts/update_geoip_db.sh

The “script”:

#!/bin/bash
 
wget -t 5 "http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz"
gunzip -f /root/scripts/GeoLiteCity.dat.gz
mv /root/scripts/GeoLiteCity.dat /usr/share/GeoIP/GeoIPCity.dat

On the console you usually won’t get more detailed information, because MaxMind doesn’t include all their knowledge in the LGPL version of their GeoIP databases. In case you need additional information you might want to use MaxMind’s freely accessible web-interface which uses some of the purchasable databases as its backend.

But don’t expect to get information on a district, street or even house number level. That’s simply not possible due to the common IP address block allocation and the fact that most of the information is gathered from whois data, which mostly doesn’t include the “end user’s” location rather than the ISP’s office address.