ucim sa skriptovat :) :: Something smarter than us is going to emerge


node:	ucim sa skriptovat :)
template:	4
parent:	LINUX pro uplne zacatecniky
owner:	soc
viewed by:
created:	12.01.2006 - 00:18:14

cwbe coordinatez:
101
63540
63542
2109677
63692
2087350

ABSOLUT
KYBERIA

permissions
you:	r,
system:	public
net:	yes

while true
do
dmesg > /root/scripts/old;
sleep 5;
dmesg > /root/scripts/dmesg;
if diff /root/scripts/old /root/scripts/dmesg | grep DST
then diff /root/scripts/old /root/scripts/dmesg | grep DST | wall ;
fi
done

takze spravil som si skript, ktory pokial zaznamena daco od iptables (grep DST) taj to posle na broadcast, takisto som v tom obmedzil to, aby to posielal vzdy, teraz moja otazka:
nedalo by sa to porovnanie riesit nejak cez premennu, proste tak, aby som nemusel vytvarat zbytocne subory ?

00000101000635400006354202109677000636920208735002087675

elegantnejsie je logovat si iptables priamo na konzolu nez riesit to takymto skriptom ;)
do syslog.conf si hod nieco taketo
kern.=info root
toto ti logne vsetky hlasky z kernelu s prioritou info (default level pri LOG targete v iptables)

0000010100063540000635420210967700063692020873500208767502088814

i know, ja sa len chcem naucit skriptovat v bash, aby som aspon trochu vedel ten terminal vyuzivat

0000010100063540000635420210967700063692020873500208767502088505

jj, ja som to volakedy robil tak, ze som cez skript filtroval zaujimave veci zo syslogu a posielal na dvanastu konzolu... ale uz si presne nepamatam, ako sa to robilo :)

00000101000635400006354202109677000636920208735002087396

while true
do
OUT1="`dmesg`"
sleep 5;
OUT2="`dmesg`"
if test $OUT1 != $OUT2
then echo $OUT2 | grep DST | grep -v -e $OUT1 | wall
fi
done

netestoval som to, ale fungovat by to malo. so subormi je to IMHO elegantnejsie... lebo pajpy su vlastne tiez subory, ňy?

0000010100063540000635420210967700063692020873500208739602088689

if test $OUT1 != $OUT2
then echo $OUT2 | grep DST | grep -v -e $OUT1 | wall

to by posielalo len prazdny broadcast vzdy ako nahle by vznikol dajaky event :)

000001010006354000063542021096770006369202087350020873960208868902088744

sakra, pravdu mas :). a este ine chyby tam su, tie premenne pri testovani by mali byt v uvodzovkach, takisto pri tom grepe... ale fungovat to asi aj tak nebude :)

00000101000635400006354202109677000636920208735002087396020886890208874402088811

nj pohram sa, ale teraz skor rozmyslam, ci je dajaky prikaz, alebo co, ale spravit vypis, tj ak v tom logu bude novy event so SRC, tak to SRC, zapise dakam :) tj vytiahnut usek s tym SRC=xxx.xxx.xxx.xxx

0000010100063540000635420210967700063692020873500208739602088689020887440208881102088841

v perle by sa to lahko dalo spravit :). neviem, aky format maju tie hlasenia, ale ak je to aspon nejako rozumne oddelene medzerami, skus to cez awk. hint: echo "jeden dva tri styri" | awk '{ print $3 }'

000001010006354000063542021096770006369202087350020873960208868902088744020888110208884102088873

vdaka