#!/usr/bin/perl -w 
############################## check_snmp_boostedge.pl #################
# Version : 1.0
# Date : Jan 16 2007
# Author  : Patrick Proy ( patrick at proy.org)
# Help : http://www.manubulon.com/nagios/
# License : GPL - http://www.fsf.org/licenses/gpl.txt
# Changelog :
# Contributors :
#################################################################
#
# Help : ./check_snmp_boostedge.pl -h
#

use strict;
use Net::SNMP;
use Getopt::Long;

# Icinga specific

my %ERRORS = ('OK' => 0, 'WARNING' => 1, 'CRITICAL' => 2, 'UNKNOWN' => 3, 'DEPENDENT' => 4);

# SNMP Datas

my $be_global_status = "1.3.6.1.4.1.4185.12.1.1.3.0";    # boostedge global status (stop(0), start(1))

my $be_service_number = "1.3.6.1.4.1.4185.12.1.5.1.0";   # beServiceNumber

my $be_service_table  = "1.3.6.1.4.1.4185.12.1.5";       # beServices
my $be_service_name   = "1.3.6.1.4.1.4185.12.1.5.2.1.2"; # beServiceName
my $be_service_status = "1.3.6.1.4.1.4185.12.1.5.2.1.4"; # status ("RUNNING")
my $be_service_mode   = "1.3.6.1.4.1.4185.12.1.5.2.1.5"; # beServiceMode (disabled(0), enabled(1))
my $be_service_datain = "1.3.6.1.4.1.4185.12.1.5.2.1.6"; # beServiceDataIn (Not populated for now : HTTP/S - V5.2.16.0)
my $be_service_dataout
    = "1.3.6.1.4.1.4185.12.1.5.2.1.7";                   # beServiceDataOut (Not populated for now : HTTP/S - V5.2.16.0)
my $be_service_connect
    = "1.3.6.1.4.1.4185.12.1.5.2.1.8";                   # beServiceConnect (Not populated for now : HTTP/S - V5.2.16.0)

# Globals

my $VERSION = "2.1.0";

my $o_host      = undef;                                 # hostname
my $o_community = undef;                                 # community
my $o_port      = 161;                                   # port
my $o_help      = undef;                                 # wan't some help ?
my $o_verb      = undef;                                 # verbose mode
my $o_version   = undef;                                 # print version
my $o_timeout   = undef;                                 # Timeout (Default 5)
my $o_perf      = undef;                                 # Output performance data
my $o_version2  = undef;                                 # use snmp v2c

# Specific
my $o_service  = undef;                                  # service regexp selection
my $o_nservice = undef;                                  # service number expected

# SNMPv3 specific
my $o_login     = undef;                                 # Login for snmpv3
my $o_passwd    = undef;                                 # Pass for snmpv3
my $v3protocols = undef;                                 # V3 protocol list.
my $o_authproto = 'md5';                                 # Auth protocol
my $o_privproto = 'des';                                 # Priv protocol
my $o_privpass  = undef;                                 # priv password

# functions

sub p_version { print "check_snmp_boostedge version : $VERSION\n"; }

sub print_usage {
    print
"Usage: $0 [-v] -H <host> -C <snmp_community> [-2] | (-l login -x passwd [-X pass -L <authp>,<privp>]) -s <service> -n <number> [-p <port>] [-f] [-t <timeout>] [-V]\n";
}

sub isnnum {                                             # Return true if arg is not a number
    my $num = shift;
    if ($num =~ /^(\d+\.?\d*)|(^\.\d+)$/) { return 0; }
    return 1;
}

sub set_status {    # return worst status with this order : OK, unknwonw, warning, critical
    my $new_status = shift;
    my $cur_status = shift;
    if (($cur_status == 0) || ($new_status == $cur_status)) { return $new_status; }
    if ($new_status == 3)          { return $cur_status; }
    if ($new_status > $cur_status) { return $new_status; }
    return $cur_status;
}

sub is_pattern_valid {    # Test for things like "<I\s*[^>" or "+5-i"
    my $pat = shift;
    if (!defined($pat)) { $pat = " "; }    # Just to get rid of compilation time warnings
    return eval { "" =~ /$pat/; 1 } || 0;
}

sub help {
    print "\nSNMP Boostedge service monitor for Icinga/Nagios/Naemon/Shinken, Version ", $VERSION, "\n";
    print "GPL License, (c)2006-2007 Patrick Proy\n\n";
    print_usage();
    print <<EOT;
-v, --verbose
   print extra debugging information 
-h, --help
   print this help message
-H, --hostname=HOST
   name or IP address of host to check
-C, --community=COMMUNITY NAME
   community name for the host's SNMP agent (implies v1 protocol)
-s, --service=<service>
   Regexp of service to select
-n, --number=<number>
   Number of services selected that must be in running & enabled state
-2, --v2c
   Use snmp v2c
-l, --login=LOGIN ; -x, --passwd=PASSWD
   Login and auth password for snmpv3 authentication 
   If no priv password exists, implies AuthNoPriv 
-X, --privpass=PASSWD
   Priv password for snmpv3 (AuthPriv protocol)
-L, --protocols=<authproto>,<privproto>
   <authproto> : Authentication protocol (md5|sha : default md5)
   <privproto> : Priv protocole (des|aes : default des) 
-P, --port=PORT
   SNMP port (Default 161)
-f, --perfparse, --perfdata
   Performance data output
-t, --timeout=INTEGER
   timeout for SNMP in seconds (Default: 5)
-V, --version
   prints version number
EOT
}

# For verbose output
sub verb { my $t = shift; print $t, "\n" if defined($o_verb); }

sub check_options {
    Getopt::Long::Configure("bundling");
    GetOptions(
        'v'           => \$o_verb,
        'verbose'     => \$o_verb,
        'h'           => \$o_help,
        'help'        => \$o_help,
        'H:s'         => \$o_host,
        'hostname:s'  => \$o_host,
        'p:i'         => \$o_port,
        'port:i'      => \$o_port,
        'C:s'         => \$o_community,
        'community:s' => \$o_community,
        'l:s'         => \$o_login,
        'login:s'     => \$o_login,
        'x:s'         => \$o_passwd,
        'passwd:s'    => \$o_passwd,
        'X:s'         => \$o_privpass,
        'privpass:s'  => \$o_privpass,
        'L:s'         => \$v3protocols,
        'protocols:s' => \$v3protocols,
        't:i'         => \$o_timeout,
        'timeout:i'   => \$o_timeout,
        'V'           => \$o_version,
        'version'     => \$o_version,
        '2'           => \$o_version2,
        'v2c'         => \$o_version2,
        'f'           => \$o_perf,
        'perfparse'   => \$o_perf,
        'perfdata'    => \$o_perf,
        's:s'         => \$o_service,
        'service:s'   => \$o_service,
        'n:i'         => \$o_nservice,
        'number:i'    => \$o_nservice
    );

    # Basic checks
    if (defined($o_timeout) && (isnnum($o_timeout) || ($o_timeout < 2) || ($o_timeout > 60))) {
        print "Timeout must be >1 and <60 !\n";
        print_usage();
        exit $ERRORS{"UNKNOWN"};
    }
    if (!defined($o_timeout)) { $o_timeout = 5; }
    if (defined($o_help))    { help();      exit $ERRORS{"UNKNOWN"} }
    if (defined($o_version)) { p_version(); exit $ERRORS{"UNKNOWN"} }
    if (!defined($o_host))    # check host and filter
    {
        print_usage();
        exit $ERRORS{"UNKNOWN"};
    }

    # check snmp information
    if (!defined($o_community) && (!defined($o_login) || !defined($o_passwd))) {
        print "Put snmp login info!\n";
        print_usage();
        exit $ERRORS{"UNKNOWN"};
    }
    if ((defined($o_login) || defined($o_passwd)) && (defined($o_community) || defined($o_version2))) {
        print "Can't mix snmp v1,2c,3 protocols!\n";
        print_usage();
        exit $ERRORS{"UNKNOWN"};
    }
    if (defined($v3protocols)) {
        if (!defined($o_login)) {
            print "Put snmp V3 login info with protocols!\n";
            print_usage();
            exit $ERRORS{"UNKNOWN"};
        }
        my @v3proto = split(/,/, $v3protocols);
        if ((defined($v3proto[0])) && ($v3proto[0] ne "")) { $o_authproto = $v3proto[0]; }    # Auth protocol
        if (defined($v3proto[1])) { $o_privproto = $v3proto[1]; }                             # Priv  protocol
        if ((defined($v3proto[1])) && (!defined($o_privpass))) {
            print "Put snmp V3 priv login info with priv protocols!\n";
            print_usage();
            exit $ERRORS{"UNKNOWN"};
        }
    }
    if (!defined($o_service) || !(is_pattern_valid($o_service))) {
        print "Service selection must be set and be a valid regexp\n";
        print_usage();
        exit $ERRORS{"UNKNOWN"};
    }
    if (!defined($o_nservice) || isnnum($o_nservice)) {
        print "Service number must be set and be an integer\n";
        print_usage();
        exit $ERRORS{"UNKNOWN"};
    }
}

########## MAIN #######

check_options();

# Check timeout if snmp screws up
if (defined($o_timeout)) {
    verb("Alarm in $o_timeout seconds");
    alarm($o_timeout);
}

$SIG{'ALRM'} = sub {
    print "No answer from host $o_host:$o_port\n";
    exit $ERRORS{"UNKNOWN"};
};

# Connect to host
my ($session, $error);
if (defined($o_login) && defined($o_passwd)) {

    # SNMPv3 login
    verb("SNMPv3 login");
    if (!defined($o_privpass)) {
        verb("SNMPv3 AuthNoPriv login : $o_login, $o_authproto");
        ($session, $error) = Net::SNMP->session(
            -hostname     => $o_host,
            -port         => $o_port,
            -version      => '3',
            -username     => $o_login,
            -authpassword => $o_passwd,
            -authprotocol => $o_authproto,
            -timeout      => $o_timeout
        );
    } else {
        verb("SNMPv3 AuthPriv login : $o_login, $o_authproto, $o_privproto");
        ($session, $error) = Net::SNMP->session(
            -hostname     => $o_host,
            -port         => $o_port,
            -version      => '3',
            -username     => $o_login,
            -authpassword => $o_passwd,
            -authprotocol => $o_authproto,
            -privpassword => $o_privpass,
            -privprotocol => $o_privproto,
            -timeout      => $o_timeout
        );
    }
} else {
    if (defined($o_version2)) {

        # SNMPv2 Login
        verb("SNMP v2c login");
        ($session, $error) = Net::SNMP->session(
            -hostname  => $o_host,
            -version   => 2,
            -community => $o_community,
            -port      => $o_port,
            -timeout   => $o_timeout
        );
    } else {

        # SNMPV1 login
        verb("SNMP v1 login");
        ($session, $error) = Net::SNMP->session(
            -hostname  => $o_host,
            -community => $o_community,
            -port      => $o_port,
            -timeout   => $o_timeout
        );
    }
}
if (!defined($session)) {
    printf("ERROR opening session: %s.\n", $error);
    exit $ERRORS{"UNKNOWN"};
}

# Get global status
my @oidlist = ($be_global_status);
my $resultat
    = (version->parse(Net::SNMP->VERSION) < 4)
    ? $session->get_request(@oidlist)
    : $session->get_request(-varbindlist => \@oidlist);

if (!defined($resultat)) {
    printf("ERROR: Gloabal status table : %s.\n", $session->error);
    $session->close;
    exit $ERRORS{"UNKNOWN"};
}

if ($$resultat{$be_global_status} != 1) {
    print "Global service is stopped (", $$resultat{$be_global_status}, ") : CRITICAL\n";
    exit $ERRORS{"CRITICAL"};
}

$resultat = undef;

# Get service  table
$resultat
    = (version->parse(Net::SNMP->VERSION) < 4)
    ? $session->get_table($be_service_table)
    : $session->get_table(Baseoid => $be_service_table);

if (!defined($resultat)) {
    printf("ERROR: Description table : %s.\n", $session->error);
    $session->close;
    exit $ERRORS{"UNKNOWN"};
}
$session->close;

my $output        = "";
my $output_perf   = "";
my $global_status = 0;
my ($nservice, $nservice_ok) = (0, 0);
my (@found_service, @service_state) = undef;

foreach my $key (keys %$resultat) {
    verb("OID : $key, Desc : $$resultat{$key}");
    if (($key =~ /$be_service_name\./) && ($$resultat{$key} =~ /$o_service/)) {    # Get index of service with name
        $found_service[$nservice] = $$resultat{$key};
        $key =~ s/$be_service_name//;
        $service_state[$nservice] = $$resultat{ $be_service_status . $key };
        if (($service_state[$nservice] ne "RUNNING") || ($$resultat{ $be_service_mode . $key } != 1)) {
            $service_state[$nservice] .= "(" . $$resultat{ $be_service_mode . $key } . ")";
            $global_status = 2;
        } else {
            $nservice_ok++;
        }
        $nservice++;
        verb("Found service $found_service[$nservice-1]");
    }
}

if ($o_nservice > $nservice_ok) {
    for (my $i = 0; $i < $nservice; $i++) {
        if ($output ne "") { $output .= ", "; }
        $output .= $found_service[$i] . ":" . $service_state[$i];
    }
    if ($output ne "") { $output .= ", "; }
    $output .= ":" . $nservice_ok . " services OK < " . $o_nservice;
    print $output, " : CRITICAL\n";
    exit $ERRORS{"CRITICAL"};
}

$output = $nservice_ok . " services OK";
if ($o_nservice < $nservice_ok) {
    print $output, " > $o_nservice : WARNING\n";
    exit $ERRORS{"WARNING"};
}
print $output, " : OK\n";
exit $ERRORS{"OK"};