Linux-Scripts/logwatch.sh

119 lines
3.6 KiB
Bash
Raw Normal View History

2017-06-22 19:59:56 -05:00
#!/bin/bash
2017-06-24 00:13:30 -05:00
PHONE1="5555555555@vtext.com"
PHONE2="5555555555@vtext.com"
PHONE3="5555555555@vtext.com"
LOG="/var/log/logs/192.168.1.113.log"
LOG2="/var/log/logs/192.168.1.104.log"
LOG3="/var/log/logs/192.168.1.252-1.log"
EVT="$(comm --nocheck-order -23 "$LOG" "$LOG.old" | wc -l)"
EVT2="$(comm --nocheck-order -23 "$LOG2" "$LOG2.old" | wc -l)"
EVT3="$(comm --nocheck-order -23 "$LOG3" "$LOG3.old" | wc -l)"
2017-06-22 19:59:56 -05:00
function procaplog(){
2017-06-24 00:13:30 -05:00
while IFS=, read -r date mac; do
SENDALERT=$(checkdisconnects "$date" $mac)
2017-06-24 00:13:30 -05:00
echo "starting mac check"
echo "starting mac check" >> /var/log/logwatch.log
HOSTNAME=$(checkmac $mac)
if [ "$HOSTNAME" ]; then
echo "__ $HOSTNAME __"
echo "__ $HOSTNAME __" >> /var/log/logwatch.log
case $HOSTNAME in
AMAZON_IOT_BUTTON)
/root/bin/sheet.py "$date" "Diaper Change"
if [ $SENDALERT -eq 1 ]; then
alert_dan "$date The button was pushed"
else
echo "Not alerting, Reconnection of $HOSTNAME" >> /var/log/logwatch.log
fi
2017-06-24 00:13:30 -05:00
python /root/bin/docast.py
;;
DAN_PIXEL)
if [ $SENDALERT -eq 1 ]; then
echo "Alerting Alli"
echo "Alerting Alli" >> /var/log/logwatch.log
alert_alli "Dan is home at $date"
else
echo "Not alerting, Reconnection of $HOSTNAME" >> /var/log/logwatch.log
fi
2017-06-24 00:13:30 -05:00
/root/bin/sheet.py "$date" $HOSTNAME
;;
2017-06-29 18:48:12 -05:00
ALLI_S7)
if [ $SENDALERT -eq 1 ]; then
echo "Alerting Dan"
echo "Alerting Dan" >> /var/log/logwatch.log
alert_dan "Alli is home at $date"
else
echo "Not alerting, Reconnection of $HOSTNAME" >> /var/log/logwatch.log
fi
/root/bin/sheet.py "$date" $HOSTNAME
;;
2017-06-24 00:13:30 -05:00
*)
echo "No Match with -$HOSTNAME- alerting"
echo "No Match with -$HOSTNAME- alerting">> /var/log/logwatch.log
/root/bin/sheet.py "$date" $HOSTNAME
;;
esac
else
echo "$mac"
if [ $SENDALERT -eq 1 ]; then
alert_dan "$NOW - Unknown host $mac connected at $date"
else
echo "Not alerting, Reconnection of $mac" >> /var/log/logwatch.log
fi
2017-06-24 00:13:30 -05:00
/root/bin/sheet.py "$date" $mac
fi
done
2017-06-22 19:59:56 -05:00
};
function checkdisconnects(){
THISCHECK=$(date -d "$1" +%s)
2017-06-29 18:48:12 -05:00
if [ "$(tail -n 30 "$LOG2" "$LOG" | grep "$(date +"%b %e")" | grep "$2" | grep "disassociated" |wc -l)" -gt 0 ]; then
echo 0
else
echo 1
fi
}
2017-06-22 19:59:56 -05:00
function procswitchlog(){
2017-06-24 00:13:30 -05:00
echo "$1" >> /var/log/logwatch.log
echo "$1"
while IFS=, read -r date device port state; do
if [ "$state" == "Up:" ]; then
alert_dan "Port $port on switch $device came up at $date"
else
alert_dan "Port $port on switch $device went down at $date"
fi
done
2017-06-22 19:59:56 -05:00
}
function checkmac(){
2017-06-24 00:13:30 -05:00
LINE=$(grep "$1" /root/bin/test.txt )
if [ "$LINE" ]; then
read -r mac hostname <<< $LINE
echo "$hostname"
echo "$hostname" >> /var/log/logwatch.log
fi
2017-06-22 19:59:56 -05:00
};
function alert_alli(){
2017-06-24 00:13:30 -05:00
echo "$1"
echo "$1" >> /var/log/logwatch.log
nail -s "$1" -S from="Alerts@hamik.net" "$PHONE2" <<<"."
2017-06-22 19:59:56 -05:00
};
function alert_dan(){
2017-06-24 00:13:30 -05:00
echo "$1"
echo "$1" >> /var/log/logwatch.log
nail -s "$1" -S from="Alerts@hamik.net" "$PHONE1" <<<"."
nail -s "$1" -S from="Alerts@hamik.net" "$PHONE3" <<<"."
2017-06-22 19:59:56 -05:00
};
2017-06-22 19:59:56 -05:00
if [ "$EVT" != "0" ]; then
2017-06-24 00:13:30 -05:00
cp "$LOG" "$LOG.old"
tail -n "$EVT" "$LOG" | awk '/IEEE 802.11: associated/ {print $1 " " $2 " " $3 ", " $9 }'|procaplog
2017-06-22 19:59:56 -05:00
fi
if [ "$EVT2" != "0" ]; then
2017-06-24 00:13:30 -05:00
cp "$LOG2" "$LOG2.old"
tail -n "$EVT2" "$LOG2" | awk '/IEEE 802.11: associated/ {print $1 " " $2 " " $3 ", " $9 }'|procaplog
2017-06-22 19:59:56 -05:00
fi
if [ "$EVT3" != "0" ]; then
2017-06-24 00:13:30 -05:00
cp "$LOG3" "$LOG3.old"
#tail -n "$EVT3" "$LOG3" | awk '/Link Up:/ {print $1 " " $2 " " $3 "," $4 "," $11 "," $10 }'|procswitchlog
#tail -n "$EVT3" "$LOG3" | awk '/Link Down:/ {print $1 " " $2 " " $3 "," $4 "," $11 "," $10}'|procswitchlog
2017-06-22 19:59:56 -05:00
fi