moncap.sh

来自「Linux Shell 编程」· Shell 代码 · 共 80 行

#!/bin/bash
# 是否是测试版
V_DEBUG=1
# 是否记录日志信息
EXEC_PROGRAM=0
# 是否记录日志信息
F_DEBUG=1
# 监测的网络接口
interface=eth0
# 监测的时间间隔，秒计
INTERVAL=10
# 两次检测之间的所接收和传输的包数的最小差值
DIFFERENCE=500
# 监测和进程名
PRGNAME="/etc/rc.d/init.d/network restart"

while true; do
   /bin/netstat -s -w> .if.tmp
   if [ ! -r .save.tmp ]; then
      last_in=0;
      last_out=0;
   else
      exec < .save.tmp
      read last_in
      read last_out
   fi

   exec < .if.tmp

   read udp_id

   read rxx
   NowRXpackets=`echo $rxx | cut -f1 -d' '`

   read uxx
   read exx

   read txx
   NowTXpackets=`echo $txx | cut -f1 -d' '`

   echo $NowRXpackets > .save.tmp
   echo $NowTXpackets >> .save.tmp

   RXdifference=`expr $NowRXpackets - $last_in`
   TXdifference=`expr $NowTXpackets - $last_out`

   if [ "$F_DEBUG" -eq "1" ]; then
    if [ "$V_DEBUG" -eq "1" ]; then
      echo "------- packet capture -------" >> /cap.log
      date >> /cap.log	
      echo "last in: $last_in, last_out: $last_out" >> /cap.log
      echo "now receive:$NowRXpackets, and send:$NowTXpackets" >> /cap.log
      echo "RX difference:$RXdifference, TX difference:$TXdifference" >> /cap.log
      vmstat 1 2 >> /cap.log
    fi
   fi

   if [ "$V_DEBUG" -eq "1" ]; then
      echo "last in: $last_in, last_out: $last_out"
      echo "now receive:$NowRXpackets, and send:$NowTXpackets"
      echo "RX difference:$RXdifference, TX difference:$TXdifference"
   fi
   if [ "$RXdifference" -lt "$DIFFERENCE" ]; then
         if [ "$EXEC_PROGRAM" -eq "1" ]; then
	      /usr/bin/killall -9 $PRGNAME &
     	      sleep 2
     	      $PRGNAME 
         fi 
         if [ "$F_DEBUG" -eq "1" ]; then
            echo "------------------Network restart----------------" >> /mon.log
            date >> /mon.log
            echo "last in: $last_in, last_out: $last_out" >> /mon.log
            echo "now receive:$NowRXpackets, and send:$NowTXpackets" >> /mon.log
            echo "RX difference:$RXdifference, TX difference:$TXdifference" >> /mon.log
         fi
   fi

   sleep $INTERVAL
done