{"id":502,"date":"2013-11-26T14:04:28","date_gmt":"2013-11-26T11:04:28","guid":{"rendered":"http:\/\/hgs.name\/?p=502"},"modified":"2014-04-14T13:41:04","modified_gmt":"2014-04-14T11:41:04","slug":"%d1%81%d0%ba%d1%80%d0%b8%d0%bf%d1%82-%d0%b7%d0%b0-%d1%81%d0%bb%d0%b5%d0%b4%d0%b5%d0%bd%d0%b5-%d0%bd%d0%b0-%d1%82%d1%80%d0%b0%d1%84%d0%b8%d0%ba%d0%b0","status":"publish","type":"post","link":"https:\/\/hgs.name\/?p=502","title":{"rendered":"\u0421\u043a\u0440\u0438\u043f\u0442 \u0437\u0430 \u0441\u043b\u0435\u0434\u0435\u043d\u0435 \u043d\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 – \u043e\u0431\u043d\u043e\u0432\u0435\u043d\u0430 \u043d\u0430 11.04.2013"},"content":{"rendered":"

\u041d\u0430\u043b\u043e\u0436\u0438 \u043c\u0438 \u0441\u0435 \u0434\u0430 \u0440\u0430\u0437\u0431\u0435\u0440\u0430 \u043a\u044a\u0434\u0435 \u043e\u0442\u0438\u0432\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0435\u0434\u043d\u0430 \u043c\u0440\u0435\u0436\u0430. \u0421\u043b\u0435\u0434 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0440\u043e\u0432\u0435\u043d\u0435 \u0438\u0437 \u043d\u0435\u0442\u0430 \u0441 \u0433\u0443\u0433\u0430\u043b \u043f\u043e\u043f\u0430\u0434\u043d\u0430\u0445 \u043d\u0430 \u0435\u0434\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u044f \u043a\u043e\u0435\u0442\u043e \u043c\u0438 \u0434\u0430\u0434\u0435 \u0438\u0434\u0435\u044f \u0437\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u0434\u0430 \u0440\u0430\u0437\u0431\u0435\u0440\u0430 \u043a\u043e\u0435 IP \u043a\u043e\u043b\u043a\u043e \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430\u0432\u044a\u0440\u0442\u0430 \u0438 \u0441 \u043a\u0430\u043a\u044a\u0432 MAC \u0430\u0434\u0440\u0435\u0441 \u0435. \u00a0\u0418\u043c\u0430 \u0432 \u0435\u0434\u0438\u043d \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0434\u0435\u044f \u0434\u0430 \u0441\u0435 \u043f\u0440\u0430\u0432\u0438 \u0444\u0438\u043b\u0442\u0440\u0438\u0440\u0430\u043d\u0435 \u043f\u043e MAC \u0430\u0434\u0440\u0435\u0441, \u043d\u043e \u0442\u043e\u0432\u0430 \u0435 \u0434\u0440\u0443\u0433\u0430 \u0442\u0435\u043c\u0430. \u0412 \u043d\u0430\u0447\u0430\u043b\u043e\u0442\u043e \u043c\u0438\u0441\u043b\u0435\u0445 \u0434\u0430 \u0441\u043b\u0435\u0434\u044f \u0441\u0430\u043c\u043e \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a, \u043d\u043e \u043d\u0435\u0449\u0430\u0442\u0430 \u0441\u0435 \u043f\u0440\u043e\u043c\u0435\u043d\u0438\u0445\u0430 \u0438 \u0441\u0435 \u043d\u0430\u043b\u043e\u0436\u0438 \u0434\u0430 \u0434\u043e\u0440\u0430\u0437\u0432\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0434\u0430 \u0441\u043b\u0435\u0434\u044f \u0438 \u0438\u0437\u0445\u043e\u0434\u0430\u0449\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a<\/p>\n

\u0418\u0437\u043f\u043e\u043b\u0437\u0432\u0430\u0442 \u0441\u0435 iptables \u0438 apr. \u0421\u043a\u0440\u0438\u043f\u0442\u0430 \u0441\u0438 \u0435 \u0447\u0438\u0441\u0442\u043e \u043c\u043e\u0435 \u0434\u0435\u043b\u043e \u043a\u0430\u0442\u043e \u0438\u0434\u0435\u044f \u0438 \u043f\u0438\u0441\u0430\u043d\u0435, \u041d\u041e \u0432\u044a\u0432 \u0432\u044a\u0437\u043b\u043e\u0432 \u043c\u043e\u043c\u0435\u043d\u0442 \u0441\u0435 \u043d\u0430\u043c\u0435\u0441\u0438 \u041a\u0438\u0440\u043e \u043a\u043e\u0439\u0442\u043e \u0440\u0435\u0448\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430\u0442\u0430 \u0432 \u0435\u0434\u0438\u043d \u043e\u0442 IF-\u0432\u0435\u0442\u0435, \u0437\u0430 \u043a\u043e\u0435\u0442\u043e \u0441\u044a\u043c \u043c\u0443 \u043c\u043d\u043e\u0433\u043e \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0435\u043d. \u00a0\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u0441\u043a\u043e \u041a\u0438\u0440\u0435 \ud83d\ude09<\/p>\n

\u041f\u0440\u0438\u043d\u0446\u0438\u043f\u0430 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u0435 \u0441\u043b\u0435\u0434\u043d\u0438\u044f:<\/p>\n

1. \u0421\u044a\u0437\u0434\u0430\u0432\u0430\u043c\u0435 \u043d\u043e\u0432\u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 \u043a\u043e\u044f\u0442\u043e \u0430\u0437 \u0441\u0438 \u043a\u0440\u044a\u0441\u0442\u0438\u0445 TRAFFIC_DOWN \u0438 TRAFFIC_UP (\u0432 \u0441\u043b\u0443\u0447\u0430\u044f \u043c\u043e\u0436\u0435 \u0438 \u0434\u0440\u0443\u0433\u043e \u0438\u043c\u0435);<\/p>\n

2. \u041f\u0440\u0430\u0432\u0438\u043c \u043f\u0440\u0435\u043d\u0430\u0441\u043e\u0447\u0432\u0430\u043d\u0435 \u043d\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043a\u044a\u043c IP\u00a0\u0425\u0425\u0425.\u0425\u0425\u0425.\u0425\u0425\u0425.NNN, \u043a\u0430\u0442\u043e NNN \u043c\u043e\u0436\u0435 \u0434\u0430 \u0435 \u043e\u0442 1 \u0434\u043e 253, \u0432 \u043c\u043e\u044f \u0441\u043b\u0443\u0447\u0430\u0439 \u043e\u0442 100 \u0434\u043e 253.<\/p>\n

[code lang=“bash“]
\niptables -N\u00a0TRAFFIC_DOWN
\niptables -N\u00a0TRAFFIC_UP
\niptables -I FORWARD -j TRAFFIC_DOWN
\niptables -I FORWARD -j TRAFFIC_UP
\niptables -A TRAFFIC_DOWN -j RETURN -d \u0425\u0425\u0425.\u0425\u0425\u0425.\u0425\u0425\u0425.NNN
\niptables -A TRAFFIC_UP -j RETURN -s \u0425\u0425\u0425.\u0425\u0425\u0425.\u0425\u0425\u0425.NNN
\n[\/code]<\/p>\n

\u0421\u043b\u0435\u0434 \u043a\u043e\u0435\u0442\u043e \u0437\u0430\u043b\u0430\u0433\u0430\u043c\u0435 \u0441\u043b\u0435\u0434\u043d\u0438\u044f \u0440\u0435\u0434 \u0432 crontab:<\/p>\n

[code lang=“bash“]<\/p>\n

# crontab -e<\/p>\n

0 20 * * * \/etc\/monitoring\/traffic_monitoring\/traffic_monitoring.sh # Starting script for monitoring on traffic IP<\/p>\n

[\/code]\n<\/p>\n

\u0415\u0442\u043e \u0433\u043e \u0438 \u0441\u0430\u043c\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442 traffic_monitoring.sh\u00a0\ud83d\ude42<\/p>\n

[code lang=“bash“]
\n#!\/bin\/bash
\n#
\n# script by alex@hgs.name
\n##############################################
\npath=“\/etc\/monitoring\/traffic_monitoring“
\niptables=“\/sbin\/iptables“
\nemail=“admin@domain.com“
\nserver=“domain.com“
\nreport=“report_ip_traffic.txt“
\nreport_log=“report_ip_traffic_`date +%d“.“%m“.“%Y`.txt“
\nstart_number=1
\nend_number=67
\nb_ip=100
\ne_ip=253
\ntime_sleep=600
\ntraffic_limit=1500
\n##############################################<\/p>\n

$iptables -Z TRAFFIC_UP #Clear upload traffic
\n$iptables -Z TRAFFIC_DOWN #Clear download traffic
\ntouch $path\/$report
\nchmod 777 $path\/$report
\n ip_number () {
\n\tif [ $start_number -gt $end_number ]; then
\n\t\tmv $path\/$report $path\/$report_log
\n\t\texport begin_ip=$b_ip
\n\t\texport end_ip=$e_ip
\n\t\ttouch $path\/report2mail.txt
\n\t\tchmod 777 $path\/report2mail.txt
\n\t\treport2mail
\n\telse
\n\t\texport begin_ip=$b_ip
\n\t\texport end_ip=$e_ip
\n\t\texport number_line=$start_number
\n\t\tip_cicle >> $path\/$report
\n\t\tstart_number=$(( $start_number+1 ))
\n\t\tsleep $time_sleep
\n\t\tip_number
\n\tfi
\n}<\/p>\n

ip_cicle () {
\nif [ $begin_ip -gt $end_ip ]; then
\n\techo
\nelse
\n\tfor IP in 192.168.1.$begin_ip ;
\n\tdo
\n\t\ttraffic=`iptables -L TRAFFIC_DOWN -n -v | grep „$IP “ | grep „M“ | awk ‘{print $2}’`
\n\t\tif [ `echo $traffic | wc -m` -gt 1 ]; then
\n\t\t\tip_to_mac=`arp -vn | grep „$IP “ | awk ‘{print $3}’`
\n\t\t\ttraffic_d=`iptables -L TRAFFIC_DOWN -n -v | grep „$IP “ | awk ‘{ print $2 }’`
\n\t\t\ttraffic_u=`iptables -L TRAFFIC_UP -n -v | grep „$IP “ | awk ‘{ print $2 }’`
\n\t\t\techo „$number_line~ `date +%H:%M“ „%d.%m.%y` IP $IP traffic download is $traffic_d – MAC address is $ip_to_mac“
\n\t\t\techo „$number_line~ `date +%H:%M“ „%d.%m.%y` IP $IP traffic upload is $traffic_u – MAC address is $ip_to_mac“
\n\t\t\tbegin_ip=$(( $begin_ip+1 ))
\n\t\t\tip_cicle
\n\t\telse
\n\t\t\tbegin_ip=$(( $begin_ip+1 ))
\n\t\t\tip_cicle
\n\t\tfi
\n\tdone
\nfi
\n}<\/p>\n

report2mail () {
\nif [ $begin_ip -gt $end_ip ]; then
\n\tif [ -e „$path\/report2mail.txt“ ]; then
\n (
\n cat $path\/report2mail.txt
\n ) | mail -s „$server monitoring IP traffic `date +%d“.“%m“.“%Y`“ $email
\n rm $path\/report2mail.txt
\n exit
\n\telse
\n\t exit
\n\tfi
\nelse
\n for IP in 192.168.1.$begin_ip ;
\n do
\n\t\t\tdt=`cat $path\/$report_log | grep „$end_number~ “ | grep „192.168.1.$begin_ip “ | grep „download“ | awk ‘{print $9}’`
\n\t\t\tut=`cat $path\/$report_log | grep „$end_number~ “ | grep „192.168.1.$begin_ip “ | grep „upload“ | awk ‘{print $9}’`
\n\t\tif [ `echo $dt | wc -m` -gt 1 ]; then
\n \t\t if [ `echo $dt | grep „[0-9.]*“ -o` -ge $traffic_limit ]; then
\n\t\t\tmac_export=`cat $path\/$report_log | grep „192.168.1.$begin_ip“ | grep -n 1 -m 1 |awk ‘{print $14}’`
\n\t\t\techo „| `date +%d“.“%m“.“%Y` | $mac_export | 192.168.1.$begin_ip | $dt | $ut“ >> $path\/detail_report
\n\t\t\techo „192.168.1.$begin_ip – download $dt, upload $ut, mac address is $mac_export“ >> $path\/report2mail.txt
\n\t\t\techo „––––––––––––––––––––––“ >> $path\/report2mail.txt
\n\t\t\techo „| Date | Mac Address | IP | DOWN | UP “ >> $path\/report2mail.txt
\n\t\t\techo „––––––––––––––––––––––“ >> $path\/report2mail.txt
\n\t\t\techo „`cat $path\/detail_report | grep $mac_export`“ >> $path\/report2mail.txt
\n\t\t\techo “ “ >> $path\/report2mail.txt
\n\t\t\tbegin_ip=$(( $begin_ip+1 ))
\n\t\t\treport2mail
\n\t\t else
\n\t\t begin_ip=$(( $begin_ip+1 ))
\n\t\t report2mail
\n\t\t fi
\n else
\n\t\t begin_ip=$(( $begin_ip+1 ))
\n\t\t report2mail
\n\t \tfi
\n done
\nfi
\n}<\/p>\n

# The start of script
\nip_number<\/p>\n

[\/code]<\/p>\n

\u041c\u0430\u043b\u043a\u043e \u0440\u0430\u0437\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u043f\u043e traffic_monitoring.sh:<\/p>\n

sleep e \u0432\u0440\u0435\u043c\u0435\u0442\u043e \u043a\u043e\u0435\u0442\u043e \u0434\u0430 \u0447\u0430\u043a\u0430 \u043f\u0440\u0435\u0434\u0438 \u0434\u0430 \u043f\u043e\u0432\u0442\u043e\u0440\u0438 \u0446\u0438\u043a\u044a\u043b\u0430 IF \u043e\u0442\u043d\u043e\u0432\u043e, \u0432 \u0441\u043b\u0443\u0447\u0430\u044f \u0441\u0430 600 \u0441\u0435\u043a\u0443\u043d\u0434\u0438 \u0438\u043b\u0438 10 \u043c\u0438\u043d\u0443\u0442\u0438.<\/p>\n

start_number \u0438 end_number \u0441\u0430 \u043d\u0430\u0447\u0430\u043b\u043e \u0438 \u043a\u0440\u0430\u044f \u043d\u0430 \u0431\u0440\u043e\u044f\u0447\u0430 \u0437\u0430 \u0446\u0438\u043a\u044a\u043b\u0430 IF. \u0412 \u0441\u043b\u0443\u0447\u0430\u044f \u043d\u0430 \u0432\u0441\u0435\u043a\u0438 10 \u043c\u0438\u043d\u0443\u0442\u0438, \u0437\u0430 84 \u0446\u0438\u043a\u044a\u043b\u0430, \u0430\u043a\u043e \u043d\u0435 \u0441\u044a\u043c \u0441\u0431\u044a\u0440\u043a\u0430\u043b \u0441\u0430 12 \u0447\u0430\u0441\u0430.<\/p>\n

traffic_limit \u041f\u0440\u043e\u043c\u0435\u043d\u043b\u0438\u0432\u0430 \u043a\u043e\u044f\u0442\u043e \u043e\u043a\u0430\u0437\u0430 \u043d\u0430\u0434 \u043a\u043e\u043b\u043a\u043e MB \u0434\u0430 \u0438\u0437\u043f\u0440\u0430\u0449\u0430 \u0435\u043c\u0430\u0438\u043b.<\/p>\n

\u041f\u0440\u0430\u0432\u0438\u043b\u043e\u0442\u043e $iptables -Z TRAFFIC_DOWN \u0437\u0430\u043d\u0443\u043b\u044f\u0432\u0430 \u0438\u0437\u0431\u0440\u043e\u0435\u043d\u0438\u0442\u0435 \u043f\u0430\u043a\u0435\u0442\u0438 \u0438 \u0441\u0432\u0430\u043b\u0435\u043d \u0442\u0440\u0430\u0444\u0438\u043a.<\/p>\n

\u0413\u043e\u043b\u044f\u043c\u0430 \u0431\u043e\u0440\u0431\u0430, \u0433\u043e\u043b\u044f\u043c\u043e \u0447\u0443\u0434\u043e \u0434\u043e\u043a\u0430\u0442\u043e \u0433\u0438 \u043e\u0431\u0435\u0434\u0438\u043d\u044f \u0434\u0432\u0430\u0442\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0432 \u0435\u0434\u043d\u043e \u0438 \u0434\u0430 \u043f\u0440\u0430\u0432\u0438 \u0438 \u043f\u043e\u0432\u0435\u0447\u0435 \u043d\u0435\u0449\u0430 \ud83d\ude42<\/p>\n

\u041e\u0441\u0432\u0435\u043d traffic_limit \u0438\u043c\u0430 \u043f\u0440\u043e\u043c\u044f\u043d\u0430 \u0432 \u0441\u0430\u043c\u0438\u044f \u0441\u043a\u0440\u0438\u043f\u0442 \u0437\u0430 \u0438\u0437\u043f\u0440\u0430\u0449\u0430\u043d\u0435 \u043d\u0430 \u043f\u0438\u0441\u043c\u0430, \u0432\u0438\u0434\u0430 \u043d\u0430 \u043f\u0438\u0441\u043c\u043e\u0442\u043e \u043a\u0430\u043a\u0442\u043e \u0438 \u043a\u0430\u043a\u0442\u043e \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u043d\u043e \u0438\u0437\u0432\u0430\u0436\u0434\u0430\u043d\u0435 \u043d\u0430 MAC \u0430\u0434\u0440\u0435\u0441\u0430. \u0414\u043e\u0431\u0430\u0432\u044f \u0441\u0435 \u0438 \u0434\u043e\u043f\u044a\u043b\u043d\u0438\u0442\u0435\u043b\u043d\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043a\u044a\u043c MAC \u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u0430\u0442\u043e \u0434\u0430\u0442\u0430, \u043a\u0430\u0447\u0435\u043d, \u0441\u0432\u0430\u043b\u0435\u043d \u0442\u0440\u0430\u0444\u0438\u043a \u043a\u0430\u043a\u0442\u043e \u0438 IP.<\/p>\n","protected":false},"excerpt":{"rendered":"

\u041d\u0430\u043b\u043e\u0436\u0438 \u043c\u0438 \u0441\u0435 \u0434\u0430 \u0440\u0430\u0437\u0431\u0435\u0440\u0430 \u043a\u044a\u0434\u0435 \u043e\u0442\u0438\u0432\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0435\u0434\u043d\u0430 \u043c\u0440\u0435\u0436\u0430. \u0421\u043b\u0435\u0434 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0440\u043e\u0432\u0435\u043d\u0435 \u0438\u0437 \u043d\u0435\u0442\u0430 \u0441 \u0433\u0443\u0433\u0430\u043b \u043f\u043e\u043f\u0430\u0434\u043d\u0430\u0445 \u043d\u0430 \u0435\u0434\u043d\u0430 \u0441\u0442\u0430\u0442\u0438\u044f \u043a\u043e\u0435\u0442\u043e \u043c\u0438 \u0434\u0430\u0434\u0435 \u0438\u0434\u0435\u044f \u0437\u0430 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u0434\u0430 \u0440\u0430\u0437\u0431\u0435\u0440\u0430 \u043a\u043e\u0435 IP \u043a\u043e\u043b\u043a\u043e \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430\u0432\u044a\u0440\u0442\u0430 \u0438 \u0441 \u043a\u0430\u043a\u044a\u0432 MAC \u0430\u0434\u0440\u0435\u0441 \u0435. \u00a0\u0418\u043c\u0430 \u0432 \u0435\u0434\u0438\u043d \u043c\u043e\u043c\u0435\u043d\u0442 \u0438\u0434\u0435\u044f \u0434\u0430 \u0441\u0435 \u043f\u0440\u0430\u0432\u0438 \u0444\u0438\u043b\u0442\u0440\u0438\u0440\u0430\u043d\u0435 \u043f\u043e MAC \u0430\u0434\u0440\u0435\u0441, \u043d\u043e […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[11],"tags":[],"class_list":["post-502","post","type-post","status-publish","format-standard","hentry","category-11"],"_links":{"self":[{"href":"https:\/\/hgs.name\/index.php?rest_route=\/wp\/v2\/posts\/502","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hgs.name\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hgs.name\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hgs.name\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hgs.name\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=502"}],"version-history":[{"count":31,"href":"https:\/\/hgs.name\/index.php?rest_route=\/wp\/v2\/posts\/502\/revisions"}],"predecessor-version":[{"id":572,"href":"https:\/\/hgs.name\/index.php?rest_route=\/wp\/v2\/posts\/502\/revisions\/572"}],"wp:attachment":[{"href":"https:\/\/hgs.name\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=502"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hgs.name\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=502"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hgs.name\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=502"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}