From bdfe99510e0b70e53fa5468dc617cbd8aa190d45 Mon Sep 17 00:00:00 2001 From: "David M. Syzdek" Date: Wed, 13 Mar 2019 12:19:14 -0800 Subject: bbfw-log: adding utility --- Makefile.am | 6 ++- src/bbfw-log.in | 131 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 136 insertions(+), 1 deletion(-) create mode 100755 src/bbfw-log.in diff --git a/Makefile.am b/Makefile.am index 09b45a8..2935dc7 100644 --- a/Makefile.am +++ b/Makefile.am @@ -75,7 +75,7 @@ noinst_PROGRAMS = bin_PROGRAMS = bin_SCRIPTS = pkgdata_DATA = -sbin_SCRIPTS = src/bbfw +sbin_SCRIPTS = src/bbfw src/bbfw-log # lists @@ -90,6 +90,7 @@ EXTRA_DIST = \ README.md \ doc/slack-desc \ src/bbfw.in \ + src/bbfw-log.in \ src/firewall.d/global.d/rules-example \ src/firewall.d/global.d/rules4-example \ src/firewall.d/global.d/rules6-example \ @@ -159,6 +160,9 @@ include $(srcdir)/@bindletools_srcdir@/build-aux/makefile-version.am src/bbfw: Makefile src/bbfw.in @$(do_subst_fn) +src/bbfw-log: Makefile src/bbfw-log.in + @$(do_subst_fn) + src/rc.firewall: Makefile src/rc.firewall.in @$(do_subst_fn) diff --git a/src/bbfw-log.in b/src/bbfw-log.in new file mode 100755 index 0000000..26acb43 --- /dev/null +++ b/src/bbfw-log.in @@ -0,0 +1,131 @@ +#!/bin/sh +# +# Bindle Binaries Linux Firewall +# Copyright (c) 2019 David M. Syzdek . +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions are +# met: +# +# * Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# * Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# * Neither the name of David M. Syzdek nor the +# names of its contributors may be used to endorse or promote products +# derived from this software without specific prior written permission. +# +# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS +# IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, +# THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR +# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL DAVID M. SYZDEK BE LIABLE FOR +# ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR +# SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER +# CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# + + +############### +# ENVIRONMENT # +############### + +PATH=/usr/bin:/bin:/usr/sbin:/sbin +export PATH + + +# sets script/package information +PROG_NAME="$(basename "${0}")" +PACKAGE_NAME="$(echo '@PACKAGE_NAME@' |sed -e 's/[@].*[@]/ /g')" +PACKAGE_VERSION="$(echo '@PACKAGE_VERSION@' |sed -e 's/[@].*[@]/ /g')" +PACKAGE_BUGREPORT="$(echo '@PACKAGE_BUGREPORT@' |sed -e 's/[@].*[@]/ /g')" + + + +############# +# FUNCTIONS # +############# + +usage() +{ + printf "Usage: ${PROG_NAME} [OPTIONS]\n" + printf "OPTIONS:\n" + printf " -h, --help print this help and exit\n" + printf " -k, --kerneltime print kernel timestamp\n" + printf " -n, --notime do not print timestamp\n" + printf " -t, --timestamp print human readable timestamp\n" + printf " -v, --version print version and exit\n" + printf " -w, --follow wait for new messages\n" + printf "\n" + printf "Please send bug reports to ${PACKAGE_BUGREPORT}.\n" +} + + +version() +{ + printf "${PROG_NAME} (${PACKAGE_NAME}) ${PACKAGE_VERSION}\n" + printf "\n" + printf "Please send bug reports to ${PACKAGE_BUGREPORT}.\n" +} + + +############ +### MAIN ### +############ + +DMESG_TIME="-T" +DMESG_FOLLOW="" +DMESG_PATTERN=" IN=[-.:/a-zA-Z0-9]{0,} OUT=[-.:/a-zA-Z0-9]{0,} MAC=[:a-fA-F0-9]{0,} SRC=[:.0-9a-fA-F]{0,} DST=[:.0-9a-fA-F]{0,} " + +while true; do + case "$@" in + -h|--help) usage; exit 0;; + -k|--kerneltime) DMESG_TIME=""; shift ;; + -n|--notime) DMESG_TIME="-t"; shift ;; + -t|--timestamp) DMESG_TIME="-T"; shift ;; + -v|--version) version; exit 0;; + -w|--follow) DMESG_FOLLOW="-w"; shift ;; + "") break ;; + --) shift; break ;; + *) usage; exit 1 ;; + esac +done + + +/bin/dmesg ${DMESG_TIME} ${DMESG_FOLLOW} \ + |egrep "${DMESG_PATTERN}" \ + |sed \ + -e 's/[^[:graph:]]/ /g' \ + -e 's/ip6tables drop: /,in,/g' \ + -e 's/ip6tables input: /,in,/g' \ + -e 's/ip6tables forward: /,fwd,/g' \ + -e 's/ip6tables output: /,out,/g' \ + -e 's/ip6tables blackhole: /,blkhol,/g' \ + -e 's/ip6tables \([-_a-z0-9:;,]\{1,\}\): /,\1,/gi' \ + -e 's/[[:space:][:cntrl:]]\{1,\}/ /g' \ + -e 's/ [[:upper:]]\{1,\} / /g' \ + -e 's/ MAC=[:[:xdigit:]]\{1,\} / /g' \ + -e 's/ ID=[[:digit:]]\{1,\} / /g' \ + -e 's/ TTL=[[:digit:]]\{1,\} / /g' \ + -e 's/ LEN=[[:digit:]]\{1,\} / /g' \ + -e 's/ URGP=[[:digit:]]\{1,\} / /g' \ + -e 's/ WINDOW=[[:digit:]]\{1,\} / /g' \ + -e 's/ PREC=0x[[:xdigit:]]\{1,\} / /g' \ + -e 's/ RES=0x[[:xdigit:]]\{1,\} / /g' \ + -e 's/ TOS=0x[[:xdigit:]]\{1,\} / /g' \ + -e 's/ ACK / /g' \ + -e 's/ CWR / /g' \ + -e 's/ DF / /g' \ + -e 's/ ECE / /g' \ + -e 's/ RST / /g' \ + -e 's/ SYN / /g' \ + -e 's/ PSH / /g' \ + -e 's/ \([A-Z]\{1,\}=\)/,\1/g' \ + |column -t -s ',' + + +# End of scripts -- cgit v1.2.3