tyler.durden
/
pandorafms
mirror of https://github.com/pandorafms/pandorafms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Added snmp_storm_silence_period

This commit is contained in:
Daniel Maya 2020-10-28 10:57:21 +01:00
parent 288b81dcc4
commit c1a7fc2e9a
5 changed files with 26 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
pandora_server/FreeBSD/pandora_server.conf.new
View File

@ -481,6 +481,9 @@ snmp_storm_protection 25
# Time interval for snmp_storm protection (in seconds).
snmp_storm_timeout 10
# Silenced time period in seconds, when trap storm is detected
snmp_storm_silence_period 300
# Default texts for some events. The macros _module_ and _data_ are supported.
#text_going_down_normal Module '_module_' is going to NORMAL (_data_)
#text_going_up_critical Module '_module_' is going to CRITICAL (_data_)

3
pandora_server/conf/pandora_server.conf.new
View File

@ -537,6 +537,9 @@ snmp_storm_protection 25
# Time interval for snmp_storm protection (in seconds).
snmp_storm_timeout 10
# Silenced time period in seconds, when trap storm is detected
snmp_storm_silence_period 300
# Default texts for some events. The macros _module_ and _data_ are supported.
#text_going_down_normal Module '_module_' is going to NORMAL (_data_)
#text_going_up_critical Module '_module_' is going to CRITICAL (_data_)

3
pandora_server/conf/pandora_server.conf.windows
View File

@ -471,6 +471,9 @@ snmp_storm_protection 25
# Time interval for snmp_storm protection (in seconds).
snmp_storm_timeout 10
# Silenced time period in seconds, when trap storm is detected
snmp_storm_silence_period 300
# Default texts for some events. The macros _module_ and _data_ are supported.
#text_going_down_normal Module '_module_' is going to NORMAL (_data_)
#text_going_up_critical Module '_module_' is going to CRITICAL (_data_)

4
pandora_server/lib/PandoraFMS/Config.pm
View File

@ -321,6 +321,7 @@ sub pandora_load_config {
$pa_config->{"snmp_pdu_address"} = 0; # 5.0
$pa_config->{"snmp_storm_protection"} = 0; # 5.0
$pa_config->{"snmp_storm_timeout"} = 600; # 5.0
$pa_config->{"snmp_storm_silence_period"} = 0; # 7.0
$pa_config->{"snmp_delay"} = 0; # > 6.0SP3
$pa_config->{"snmpconsole_threads"} = 1; # 5.1
$pa_config->{"translate_variable_bindings"} = 0; # 5.1
@ -675,6 +676,9 @@ sub pandora_load_config {
elsif ($parametro =~ m/^snmp_storm_timeout\s+(\d+)/i) {
$pa_config->{'snmp_storm_timeout'}= clean_blank($1);
}
elsif ($parametro =~ m/^snmp_storm_silence_period\s+(\d+)/i) {
$pa_config->{'snmp_storm_silence_period'}= clean_blank($1);
}
elsif ($parametro =~ m/^snmp_delay\s+(\d+)/i) {
$pa_config->{'snmp_delay'}= clean_blank($1);
}

13
pandora_server/lib/PandoraFMS/SNMPServer.pm
View File

@ -49,6 +49,8 @@ my $TaskSem :shared;
# Trap statistics by agent
my %AGENTS = ();
# Sources silenced by storm protection.
my %SILENCEDSOURCES = ();
# Index and buffer management for trap log files
my $SNMPTRAPD = { 'log_file' => '', 'fd' => undef, 'idx_file' => '', 'last_line' => 0, 'last_size' => 0, 'read_ahead_line' => '', 'read_ahead_pos' => 0 };
@ -167,12 +169,21 @@ sub data_producer ($) {
if (! defined ($AGENTS{$source})) {
$AGENTS{$source}{'count'} = 1;
$AGENTS{$source}{'event'} = 0;
if (! defined ($SILENCEDSOURCES{$source})) {
$SILENCEDSOURCES{$source} = 0;
}
} else {
$AGENTS{$source}{'count'} += 1;
}
# Silence source.
if ((defined ($SILENCEDSOURCES{$source})) && ($SILENCEDSOURCES{$source} > $curr_time)) {
next;
}
if ($pa_config->{'snmp_storm_protection'} > 0 && $AGENTS{$source}{'count'} > $pa_config->{'snmp_storm_protection'}) {
if ($AGENTS{$source}{'event'} == 0) {
pandora_event ($pa_config, "Too many traps coming from $source. Silenced for " . int ($pa_config->{"snmp_storm_timeout"} / 60) . " minutes.", 0, 0, 4, 0, 0, 'system', 0, $dbh);
$SILENCEDSOURCES{$source} = $curr_time + $pa_config->{'snmp_storm_silence_period'};
my $silenced_time = ($pa_config->{'snmp_storm_silence_period'} eq 0 ? $pa_config->{"snmp_storm_timeout"} : $pa_config->{'snmp_storm_silence_period'});
pandora_event ($pa_config, "Too many traps coming from $source. Silenced for " . $silenced_time . " seconds.", 0, 0, 4, 0, 0, 'system', 0, $dbh);
}
$AGENTS{$source}{'event'} = 1;
next;