2 * Copyright (c) 2010 Pierre-Yves Ritschard
3 * Copyright (c) 2011 Stefan Rinkes
5 * Permission to use, copy, modify, and distribute this software for any
6 * purpose with or without fee is hereby granted, provided that the above
7 * copyright notice and this permission notice appear in all copies.
9 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18 * Pierre-Yves Ritschard <pyr at openbsd.org>
19 * Stefan Rinkes <stefan.rinkes at gmail.org>
27 # include <sys/ioctl.h>
30 # include <sys/socket.h>
36 # include <netinet/in.h>
39 #include <net/pfvar.h>
43 # error "Unexpected value for FCNT_MAX"
45 # define FCNT_NAMES {"search", "insert", "removals", NULL};
50 # error "Unexpected value for SCNT_MAX"
52 # define SCNT_NAMES {"search", "insert", "removals", NULL};
55 static char const *pf_reasons[PFRES_MAX+1] = PFRES_NAMES;
56 static char const *pf_lcounters[LCNT_MAX+1] = LCNT_NAMES;
57 static char const *pf_fcounters[FCNT_MAX+1] = FCNT_NAMES;
58 static char const *pf_scounters[SCNT_MAX+1] = SCNT_NAMES;
60 static char const *pf_device = "/dev/pf";
62 static void pf_submit (char const *type, char const *type_instance,
63 uint64_t val, _Bool is_gauge)
66 value_list_t vl = VALUE_LIST_INIT;
69 values[0].gauge = (gauge_t) val;
71 values[0].derive = (derive_t) val;
75 sstrncpy (vl.host, hostname_g, sizeof (vl.host));
76 sstrncpy (vl.plugin, "pf", sizeof (vl.plugin));
77 sstrncpy (vl.type, type, sizeof(vl.type));
78 sstrncpy (vl.type_instance, type_instance, sizeof(vl.type_instance));
80 plugin_dispatch_values(&vl);
81 } /* void pf_submit */
83 static int pf_read (void)
85 struct pf_status state;
90 fd = open (pf_device, O_RDONLY);
94 ERROR("pf plugin: Unable to open %s: %s",
96 sstrerror (errno, errbuf, sizeof (errbuf)));
100 memset (&state, 0, sizeof (state));
101 status = ioctl (fd, DIOCGETSTATUS, &state);
105 ERROR("pf plugin: ioctl(DIOCGETSTATUS) failed: %s",
106 sstrerror (errno, errbuf, sizeof (errbuf)));
116 WARNING ("pf plugin: PF is not running.");
120 for (i = 0; i < PFRES_MAX; i++)
121 pf_submit ("pf_counters", pf_reasons[i], state.counters[i],
123 for (i = 0; i < LCNT_MAX; i++)
124 pf_submit ("pf_limits", pf_lcounters[i], state.lcounters[i],
126 for (i = 0; i < FCNT_MAX; i++)
127 pf_submit ("pf_state", pf_fcounters[i], state.fcounters[i],
129 for (i = 0; i < SCNT_MAX; i++)
130 pf_submit ("pf_source", pf_scounters[i], state.scounters[i],
133 pf_submit ("pf_states", "current", (uint32_t) state.states,
139 void module_register (void)
141 plugin_register_read ("pf", pf_read);