From a824d066559b83abc44509a5524b1a1ef63f3e3b Mon Sep 17 00:00:00 2001 From: Mike Reeves Date: Thu, 29 Nov 2018 19:13:28 -0500 Subject: [PATCH] Bro - Add cron for checking PL --- salt/bro/cron/packetloss.sh | 1 + salt/bro/init.sls | 9 +++++++-- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/salt/bro/cron/packetloss.sh b/salt/bro/cron/packetloss.sh index e69de29bb..984f8abbb 100644 --- a/salt/bro/cron/packetloss.sh +++ b/salt/bro/cron/packetloss.sh @@ -0,0 +1 @@ +docker exec -it so-bro /opt/bro/bin/broctl netstats | awk -F '[ =]' '{RCVD += $5;DRP += $7;TTL += $9} END { print "rcvd: " RCVD, "dropped: " DRP, "total: " TTL}' >> /nsm/bro/logs/packetloss.log diff --git a/salt/bro/init.sls b/salt/bro/init.sls index 62a504614..b5ef69058 100644 --- a/salt/bro/init.sls +++ b/salt/bro/init.sls @@ -65,9 +65,14 @@ nodecfgsync: - group: 939 - template: jinja -brocron: +plcronscript: + file.managed: + - name: /usr/local/bin/packetloss.sh + - source: salt://bro/cron/packetloss.sh + - mode: 755 + +/usr/local/bin/packetloss.sh: cron.present: - - name: docker exec -it so-bro /opt/bro/bin/broctl netstats | awk -F '[ =]' '{RCVD += $5;DRP += $7;TTL += $9} END { print "rcvd: " RCVD, "dropped: " DRP, "total: " TTL}' >> /nsm/bro/logs/packetloss.log; - user: root - minute: '*/10' - hour: '*'