webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-02 08:12:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

IPS: Ada a graph that shows the IPS throughput

Browse Source 
This graph is split into three parts. One shows bypassed packets, the
next one shows the actually scanned packets and lastly we show the total
throughput.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2024-09-11 00:43:59 +02:00
parent a85924cc25
commit 4721fac3c8
14 changed files with 152 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

73
config/cfgroot/graphs.pl
View File

@@ -1189,3 +1189,76 @@ sub updateconntrackgraph {
return "Error in RRD::Graph for conntrack: " . $ERROR . "\n" if $ERROR;
}
sub updateipsthroughputgraph {
my $period = $_[0];
my @command = (
@GRAPH_ARGS,
"-",
"--start",
"-1" . $period,
"-r",
"--lower-limit","0",
"-v $Lang::tr{'bytes per second'}",
"--color=BACK" . $color{"color21"},
# Read bypassed packets
"DEF:bypassed_bytes=$mainsettings{'RRDLOG'}/collectd/localhost/iptables-mangle-IPS/ipt_bytes-BYPASSED.rrd:value:AVERAGE",
#"DEF:bypassed_packets=$mainsettings{'RRDLOG'}/collectd/localhost/iptables-mangle-IPS/ipt_packets-BYPASSED.rrd:value:AVERAGE",
"VDEF:bypassed_bytes_avg=bypassed_bytes,AVERAGE",
"VDEF:bypassed_bytes_min=bypassed_bytes,MINIMUM",
"VDEF:bypassed_bytes_max=bypassed_bytes,MAXIMUM",
# Read scanned packets
"DEF:scanned_bytes=$mainsettings{'RRDLOG'}/collectd/localhost/iptables-mangle-IPS/ipt_bytes-SCANNED.rrd:value:AVERAGE",
#"DEF:scanned_packets=$mainsettings{'RRDLOG'}/collectd/localhost/iptables-mangle-IPS/ipt_packets-SCANNED.rrd:value:AVERAGE",
"VDEF:scanned_bytes_avg=scanned_bytes,AVERAGE",
"VDEF:scanned_bytes_min=scanned_bytes,MINIMUM",
"VDEF:scanned_bytes_max=scanned_bytes,MAXIMUM",
# Total
"CDEF:total_bytes=bypassed_bytes,scanned_bytes,+",
#"CDEF:total_packets=bypassed_packets,scanned_packets,+",
"VDEF:total_bytes_avg=total_bytes,AVERAGE",
"VDEF:total_bytes_min=total_bytes,MINIMUM",
"VDEF:total_bytes_max=total_bytes,MAXIMUM",
# Add some space below the graph
"COMMENT: \\n",
# Headline
"COMMENT:" . sprintf("%32s", ""),
"COMMENT:" . sprintf("%16s", $Lang::tr{'average'}),
"COMMENT:" . sprintf("%16s", $Lang::tr{'minimum'}),
"COMMENT:" . sprintf("%16s", $Lang::tr{'maximum'}) . "\\j",
# Bypassed Packets
"AREA:bypassed_bytes$color{'color12'}A0:" . sprintf("%-30s", $Lang::tr{'bypassed'}),
"GPRINT:bypassed_bytes_avg:%9.2lf %sbps",
"GPRINT:bypassed_bytes_min:%9.2lf %sbps",
"GPRINT:bypassed_bytes_max:%9.2lf %sbps\\j",
# Scanned Packets
"STACK:scanned_bytes$color{'color13'}A0:" . sprintf("%-30s", $Lang::tr{'scanned'}),
"GPRINT:scanned_bytes_avg:%9.2lf %sbps",
"GPRINT:scanned_bytes_min:%9.2lf %sbps",
"GPRINT:scanned_bytes_max:%9.2lf %sbps\\j",
"COMMENT: \\n",
# Total Packets
"COMMENT:" . sprintf("%-32s", $Lang::tr{'total'}),
"GPRINT:total_bytes_avg:%9.2lf %sbps",
"GPRINT:total_bytes_min:%9.2lf %sbps",
"GPRINT:total_bytes_max:%9.2lf %sbps\\j",
);
RRDs::graph(@command);
$ERROR = RRDs::error;
return "Error in RRD::Graph for conntrack: " . $ERROR . "\n" if $ERROR;
}