CyberMind-FR
2b695b475e
Modifié le collecteur pour fonctionner sans socket Unix. Parse netifyd -s + table ARP + stats réseau. - Supprimé dépendance socat - Parse netifyd -s pour metrics - Utilise ARP pour device count - Calcule bytes depuis /sys/class/net - Mis à jour RPC pour device_count et total_bytes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
71 lines
2.3 KiB
Bash
71 lines
2.3 KiB
Bash
#!/bin/sh
|
|
# Netifyd Data Collector
|
|
# Collects statistics from netifyd and creates status.json
|
|
# Copyright (C) 2025 CyberMind.fr
|
|
|
|
NETIFYD_STATUS="/var/run/netifyd/status.json"
|
|
TMP_FILE="/tmp/netifyd-status.tmp"
|
|
FLOW_DUMP="/tmp/netifyd-flow-dump.json"
|
|
|
|
# Create run directory if needed
|
|
mkdir -p /var/run/netifyd
|
|
|
|
# Check if netifyd is running
|
|
if ! pidof netifyd >/dev/null 2>&1; then
|
|
echo '{"error":"netifyd not running","flow_count":0,"devices":{},"dhc_size":0}' > "$NETIFYD_STATUS"
|
|
exit 1
|
|
fi
|
|
|
|
# Get status from netifyd CLI
|
|
STATUS_OUTPUT=$(netifyd -s 2>/dev/null)
|
|
|
|
# Parse flow count from status
|
|
FLOW_COUNT=$(echo "$STATUS_OUTPUT" | grep -i "flows:" | head -1 | awk '{print $2}' | tr -d ',' || echo 0)
|
|
|
|
# Parse detection stats from status output
|
|
# Example lines:
|
|
# Detection Cache Entries: 156
|
|
# Detected Applications: 24
|
|
# Detected Protocols: 12
|
|
DHC_SIZE=$(echo "$STATUS_OUTPUT" | grep -i "cache entries\|applications" | head -1 | awk '{print $NF}' | tr -d ',' || echo 0)
|
|
PROTO_COUNT=$(echo "$STATUS_OUTPUT" | grep -i "protocols:" | awk '{print $NF}' | tr -d ',' || echo 0)
|
|
|
|
# Try to extract device count from ARP table as fallback
|
|
DEVICE_COUNT=$(ip neigh show | grep -c "REACHABLE\|STALE\|DELAY" 2>/dev/null || echo 0)
|
|
|
|
# Build minimal devices object (MAC -> IP mapping from ARP)
|
|
if command -v jq >/dev/null 2>&1; then
|
|
DEVICES_OBJ=$(ip neigh show 2>/dev/null | awk '$5 != "" && $1 != "" {print "{\"mac\":\""$5"\",\"ip\":\""$1"\"}"}' | jq -s 'reduce .[] as $item ({}; .[$item.mac] += [$item.ip])' 2>/dev/null || echo '{}')
|
|
else
|
|
DEVICES_OBJ='{}'
|
|
fi
|
|
|
|
# Estimate total bytes from interface stats
|
|
TOTAL_BYTES=0
|
|
for iface in br-lan eth0 eth1 wlan0; do
|
|
if [ -d "/sys/class/net/$iface" ]; then
|
|
RX=$(cat /sys/class/net/$iface/statistics/rx_bytes 2>/dev/null || echo 0)
|
|
TX=$(cat /sys/class/net/$iface/statistics/tx_bytes 2>/dev/null || echo 0)
|
|
TOTAL_BYTES=$((TOTAL_BYTES + RX + TX))
|
|
fi
|
|
done
|
|
|
|
# Create JSON status file
|
|
cat > "$TMP_FILE" <<EOF
|
|
{
|
|
"flow_count": ${FLOW_COUNT:-0},
|
|
"devices": ${DEVICES_OBJ},
|
|
"dhc_size": ${DHC_SIZE:-0},
|
|
"protocol_count": ${PROTO_COUNT:-0},
|
|
"total_bytes": ${TOTAL_BYTES:-0},
|
|
"device_count": ${DEVICE_COUNT:-0},
|
|
"timestamp": $(date +%s),
|
|
"uptime": $(awk '{print int($1)}' /proc/uptime 2>/dev/null || echo 0)
|
|
}
|
|
EOF
|
|
|
|
# Atomic move to prevent partial reads
|
|
mv "$TMP_FILE" "$NETIFYD_STATUS"
|
|
|
|
exit 0
|