1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
|
#!/usr/bin/env perl
##
## Read BGPd logfile and lookup RR's whois database.
##
## Copyright (c) 1997 Kunihiro Ishiguro
##
use Socket;
## Configuration variables
$whois_host = "whois.jpix.ad.jp";
#$mail_address = "toshio\@iri.co.jp";
$mail_address = "kunihiro\@zebra.org";
$mailer = "/usr/sbin/sendmail -oi";
#$logfile = "/usr/local/sbin/logfile"
$logfile = "logfile";
$lookuplog = "lookuplog";
## mail routine
{
local ($prefix, $origin);
open (LOG, $logfile) || die "can't open $logfile";
open (LOOKUP, ">$lookuplog") || die "can't open $lookuplog";
for (;;) {
while (<LOG>) {
if (/Update\S+ ([\d\.\/]+) .* (\d+) [ie\?]/) {
$prefix = $1;
$origin = $2;
$ret = &whois_check ($prefix, $origin);
if ($ret) {
print LOOKUP "$prefix AS$origin : Check OK\n";
} else {
print LOOKUP "$prefix AS$origin : Error\n";
}
# fflush (LOOKUP);
}
}
sleep (3);
}
}
sub whois_check
{
local ($prefix, $origin) = @_;
local ($rr_prefix, $rr_origin) = ();
local (@result);
$origin = "AS" . $origin;
# print "$prefix $origin\n";
@result = &whois ($prefix);
foreach (@result) {
if (/^route:.*\s([\d\.\/]+)$/) {
$rr_prefix = $1;
}
if (/^origin:.*\s(AS[\d]+)$/) {
$rr_origin = $1;
if ($prefix eq $rr_prefix and $origin eq $rr_origin) {
return 1;
}
}
}
alarm_mail ($prefix, $origin, @result);
return 0;
}
## get port of whois
sub get_whois_port
{
local ($name, $aliases, $port, $proto) = getservbyname ("whois", "tcp");
return ($port, $proto);
}
## whois lookup
sub whois
{
local ($query) = @_;
local ($port, $proto) = &get_whois_port;
local (@result);
if ($whois_host=~ /^\s*\d+\.\d+\.\d+\.\d+\s*$/) {
$address = pack ("C4",split(/\./,$host));
} else {
$address = (gethostbyname ($whois_host))[4];
}
socket (SOCKET, PF_INET, SOCK_STREAM, $proto);
if (connect (SOCKET, sockaddr_in ($port, $address))) {
local ($oldhandle) = select (SOCKET);
$| = 1;
select($oldhandle);
print SOCKET "$query\r\n";
@result = <SOCKET>;
return @result;
}
}
##
sub alarm_mail
{
local ($prefix, $origin, @result) = @_;
open (MAIL, "|$mailer -t $mail_address") || die "can't open $mailer";
print MAIL "From: root\@rr1.jpix.ad.jp\n";
print MAIL "Subject: RR $origin $prefix\n";
print MAIL "MIME-Version: 1.0\n";
print MAIL "Content-Type: text/plain; charset=us-ascii \n\n";
print MAIL "RR Lookup Error Report\n";
print MAIL "======================\n";
print MAIL "Announced route : $prefix from $origin\n\n";
print MAIL "@result";
close MAIL;
}
|
