6 # Revision 1.1 2005/01/25 09:09:33 stanleyhopcroft
7 # New plugin - checks that ICA master browser is what it should be (important for firewalled dialup)
16 use lib
qw(/usr/local/nagios/libexec) ;
17 use utils
qw(%ERRORS &print_revision &support &usage);
18 use packet_utils qw(&pdump &tethereal) ;
20 my $PROGNAME = 'check_ica_master_browser' ;
22 # You might have to change this...
24 my $PACKET_TIMEOUT = 1;
25 # Number of seconds to wait for further UDP packets
27 # Number of datagrams sent without reply
28 my $BUFFER_SIZE = 1500;
29 # buffer size used for 'recv' calls.
31 # what port ICA runs on. Unlikely to change.
35 my ($debug, $preferred_master, $bcast_addr, $ica_browser, $timeout) ;
37 Getopt
::Long
::Configure
('bundling', 'no_ignore_case');
39 ("V|version" => \
&version
,
41 "v|verbose" => \
$debug,
42 "B|broadcast_addr:s" => \
$bcast_addr,
43 "I|ica_browser:s" => \
$ica_browser,
44 "P|preferred_master:s" => \
$preferred_master,
45 "T|Packet_timeout:i" => \
$timeout,
49 my $broadcast_addr = $1 if $bcast_addr and $bcast_addr =~ m
#(\d+\.\d+\.\d+\.\d+)# ;
50 usage
("Invalid broadcast address: $bcast_addr")
51 if $bcast_addr and not defined($broadcast_addr) ;
53 usage
("You must provide either the name of an ICA browser or the broadcast address of the subnet containing them\n")
54 unless ($ica_browser or $broadcast_addr) ;
56 usage
("You must provide the name or address of a preferred ICA master browser\n")
57 unless ($preferred_master) ;
59 my $preferred_master_n = $preferred_master =~ m
#(\d+\.\d+\.\d+\.\d+)#
61 : inet_ntoa
(scalar gethostbyname($preferred_master)) ;
63 my $Timeout = $timeout || $PACKET_TIMEOUT ;
65 # Definitions of query strings. Change at your own risk :)
66 # this info was gathered with tcpdump whilst trying to use an ICA client,
67 # so I'm not 100% sure of what each value is.
69 my $bcast_helo = &tethereal
(<<'End_of_Tethereal_trace', '1e') ;
70 0020 ff ff 04 d6 06 44 00 26 4a 76 1e 00 01 30 02 fd .....D.&Jv...0..
71 0030 a8 e3 00 02 f5 95 9f f5 30 07 00 00 00 00 00 00 ........0.......
72 0040 00 00 00 00 00 00 01 00 ........
73 End_of_Tethereal_trace
75 my $direct_helo = &tethereal(<<'End_of_Tethereal_trace
', '20') ;
76 0020 64 17 05 0f 06 44 00 28 ab b5 20 00 01 30 02 fd d....D.(.. ..0..
77 0030 a8 e3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
78 0040 00 00 00 00 00 00 00 00 00 00 ........
79 End_of_Tethereal_trace
81 my $Udp = IO::Socket::INET->new( Proto => 'udp
' )
82 || die "Socket failure: $!";
84 # select is here to allow us to set timeouts on the connections. Otherwise they
85 # just 'stop
' until a server appears.
87 my $select = IO::Select->new($Udp)
88 || die "Select failure: $!";
90 $Udp->sockopt(SO_BROADCAST, 1 );
92 my ($remote_host, $buff, $destination, $raddr, $rport, $rhost, @remote_response);
93 my ($query_message, $send_addr, $this_test) ;
98 # If there is no response to the first helo packet it will be resent
99 # up to $TEST_COUNT (see at the top).
101 $query_message = $broadcast_addr ? $bcast_helo : $direct_helo ;
102 $destination = $broadcast_addr ? $broadcast_addr: $ica_browser ;
103 $send_addr = sockaddr_in($ICA_PORT, inet_aton($destination) ) ;
105 while ( ++$this_test <= $TEST_COUNT && !$buff ) {
107 print "Sending helo datagram. datagram number: ", $this_test, "\n"
110 print "Querying $destination for master browser\n"
112 &pdump($query_message)
114 $Udp->send($query_message, 0, $send_addr );
115 if ( $select->can_read($Timeout) ) {
116 $remote_host = $Udp->recv($buff, $BUFFER_SIZE, 0 );
125 # Ok we've looped several
times, looking
for a response
. If we don
't have one
126 # yet, we simply mark the whole lot as being unavailable.
129 print "Failed. No response to helo datagram (master browser query) from $destination.\n" ;
130 exit $ERRORS{CRITICAL} ;
133 ($rport, $raddr) = sockaddr_in( $remote_host );
134 $rhost = gethostbyaddr( $raddr, AF_INET );
135 my @tmpbuf = unpack('C
*', $buff );
137 print "$rhost:$rport responded with: ",length($buff), " bytes\n";
141 # Now we have a response, then we need to figure out the master browser, and
142 # query it for published applications...
144 my $master_browser = join '.', @tmpbuf[32..35] ;
145 my ($master_browser_a) = gethostbyaddr(inet_aton($master_browser), AF_INET) =~ /^(\w+?)\./ ;
147 # Ok should probably error check this, because it's remotely possible
148 # that a server response might be completely wrong...
150 print "Master browser = $master_browser_a/$master_browser\n"
153 $send_addr = sockaddr_in
($ICA_PORT, inet_aton
($master_browser));
155 my $subject_clause = $bcast_addr ?
"of the \"$destination\" subnet" : "known to ICA server \"$destination\"" ;
157 if ( $master_browser eq $preferred_master_n ) {
158 print "Preferred master browser \"$preferred_master\" __is__ the master browser (\"$master_browser_a/$master_browser\") $subject_clause.\n" ;
161 print "\"\u$preferred_master\" is __not__ the master browser (\"$master_browser_a/$master_browser\") $subject_clause: remote clients (dialup) may not find Published applications from Master Browser.\n" ;
162 exit $ERRORS{CRITICAL
} ;
169 print "Usage: $PROGNAME (-B <broadcast_address>| -I <citrix_server>) - P <preferred_master_browser>" ;
173 print_revision
($PROGNAME,'$Revision$ ');
174 print "Copyright (c) 2002 Ed Rolison/Tom De Blende/S Hopcroft
176 Perl Check Citrix Master Browser plugin for Nagios.
178 Returns OK if the Citrix master browser is that given by the -P option.
181 If the -B option is specified, sends a broadcast helo to find the address of the Citrix master browser in the specified subnet.
182 return critical if there is no reply;
183 Else if the -I option is specified
184 send a direct helo to the specified server until there is a response (containing the address of the Citrix master browser)
187 return Critical if the response does not contain the address of the 'preferred master browser' (-P option).
190 How ICA Clients Use the Master ICA Browser.
192 Citrix ICA Clients must locate the master browser to get the address of a server or published application.
194 The Citrix ICA Client can locate the master browser by sending out broadcast packets, or,
195 if the address of a Citrix server is specified in the Citrix ICA Client or in an ICA file,
196 the ICA Client locates the master browser by sending directed packets to the specified address.
197 The ICA Client requests the address of the ICA master browser from the Citrix server.
202 -B, --broadcast_address:STRING
203 The broadcast address that should contain Citrix master browser. This option takes precedence over -I.
204 -I, --ica_browser:STRING
205 Optional name or address of an ICA server that could be the master browser (used when broadcast not possible).
206 -P, --preferred_master:STRING
207 Name or address of the ICA server that _should_ be the master browser.
209 -T, --packet-timeout:INTEGER
210 Time to wait for UDP packets (default 1 sec).
221 print_revision
($PROGNAME,'$Revision$ ');