cleanup

README.md

+# Check Point IPSec VPN
+
+Monitors the overall status of Check Point IPSec VPN service
+
+Check Info:
+
+* *service*: this cervice will create the service *IPSec VPN*
+* *state*: this check is allways **ok**
+* *wato*: none
+* *perfdata*: [
+    * Current ESP SAs in/out
+    * Packets/s in/out
+    * IKE errors/s, in/out errors/s, policy errors/s
+    * Authentication errors/s
+    * SA encryption errors/s
+    * SA other in errors/s
+    * SA other out errors/s
+    * SA policy errors/s
+    * SA replay errors/s
+    * SA unknown SPI errors/s
+    * bytes after compression/s
+    * bytes before compression/s
+    * compression errors/s
+    * packes compressed/s
+    * compression overhead/s
+    * bytes after decompression/s
+    * bytes before decompression/s
+    * decompression errors/s
+    * decompression overhead/s
+    * packets decompressed/s
+    * ESP decapsulated bytes/s
+    * ESP encapsulated bytes/s
+    * ESP decapsulated packets/s
+    * ESP encapsulated packets/s
+    * bytes noncompressible/s
+    * packets noncompressible/s
+    * ESP UDP decapsulated packets/s
+    * ESP UDP encapsulated packets/s
+    * Current IKE SAs
+    * Current IKE SAs init
+    * Current IKE SAs response
+    * Total IKE failures init
+    * IKE no respnse
+    * Total IKE failures reponse
+
+Sample output
+
+![sample output](/doc/sample.png?raw=true "sample [SHORT TITLE]")
+

checks/checkpoint_ipsecvpn

+#!/usr/bin/python
+# -*- encoding: utf-8; py-indent-offset: 4 -*-
+#
+# This is free software;  you can redistribute it and/or modify it
+# under the  terms of the  GNU General Public License  as published by
+# the Free Software Foundation in version 2.  check_mk is  distributed
+# in the hope that it will be useful, but WITHOUT ANY WARRANTY;  with-
+# out even the implied warranty of  MERCHANTABILITY  or  FITNESS FOR A
+# PARTICULAR PURPOSE. See the  GNU General Public License for more de-
+# tails. You should have  received  a copy of the  GNU  General Public
+# License along with GNU Make; see the file  COPYING.  If  not,  write
+# to the Free Software Foundation, Inc., 51 Franklin St,  Fifth Floor,
+# Boston, MA 02110-1301 USA.
+#
+
+# Author: Th.L.
+# Date  : 2018-11.22
+#
+# Monitor Check Point IPSec VPN statistics
+#
+# sample snmpwalk
+# OMD[mysite]:~$ snmpwalk -v2c -c xyz  -ObentU simulant .1.3.6.1.4.1.2620.1.2
+# .1.3.6.1.4.1.2620.1.2.1.0 = STRING: IPSec VPN.
+# .1.3.6.1.4.1.2620.1.2.2.0 = INTEGER: 6
+# .1.3.6.1.4.1.2620.1.2.3.0 = INTEGER: 0
+# .1.3.6.1.4.1.2620.1.2.4.1.1.0 = STRING: 43225
+# .1.3.6.1.4.1.2620.1.2.4.1.2.0 = STRING: 54672
+# .1.3.6.1.4.1.2620.1.2.4.2.1.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.4.2.2.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.4.2.3.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.4.2.4.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.2.1.0 = STRING: 11
+# .1.3.6.1.4.1.2620.1.2.5.2.2.0 = STRING: 23
+# .1.3.6.1.4.1.2620.1.2.5.2.3.0 = STRING: 10
+# .1.3.6.1.4.1.2620.1.2.5.2.4.0 = STRING: 128
+# .1.3.6.1.4.1.2620.1.2.5.2.9.0 = STRING: 16
+# .1.3.6.1.4.1.2620.1.2.5.2.10.0 = STRING: 12
+# .1.3.6.1.4.1.2620.1.2.5.3.1.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.3.2.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.3.3.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.3.4.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.3.5.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.3.6.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.3.7.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.1.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.2.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.5.0 = STRING: 43225
+# .1.3.6.1.4.1.2620.1.2.5.4.6.0 = STRING: 54672
+# .1.3.6.1.4.1.2620.1.2.5.4.7.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.8.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.9.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.10.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.11.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.12.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.13.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.14.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.15.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.16.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.17.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.18.0 = STRING: 0
+# .1.3.6.1.4.1.2620.1.2.5.4.19.0 = STRING: 8577840
+# .1.3.6.1.4.1.2620.1.2.5.4.20.0 = STRING: 3586064
+# .1.3.6.1.4.1.2620.1.2.5.4.21.0 = STRING: "4"
+# .1.3.6.1.4.1.2620.1.2.5.4.22.0 = STRING: "4"
+# .1.3.6.1.4.1.2620.1.2.5.4.23.0 = STRING: "0"
+# .1.3.6.1.4.1.2620.1.2.5.4.24.0 = STRING: "0"
+# .1.3.6.1.4.1.2620.1.2.5.4.25.0 = STRING: "0"
+#
+# Sample info
+# [[[u'IPSec VPN\x00', u'6', u'0', u'991140008']],
+#  [[u'43225', u'54672', u'0', u'0', u'0', u'0']],
+#  [[u'11', u'10']],
+#  [[u'0', u'0', u'0', u'0', u'0', u'0', u'0']],
+#  [[u'0', u'0', u'43225', u'54672', u'0', u'0', u'0', u'0', u'0', u'0', u'0', u'0', u'0', u'0', u'0', u'0', u'8577840', u'3586064', u'4', u'4', u'0', u'0', u'0']]
+# ]
+#
+# sample info no IPSec VPN
+# [[], [], [], [], []]
+#
+#
+
+factory_settings['checkpoint_ipsecvpn_defaults'] = {
+   # 'vsType': ['virtual system', 'vsx gateway', 'virtual switch', 'virtual router']  # , 'vsx gateway', 'virtual switch', 'virtual router'
+}
+
+
+def inventory_checkpoint_ipsecvpn(info):
+    if info[0] != []:
+        if info[0][0][0].lower() == 'ipsec vpn\x00':
+            return [(None, {})]
+
+
+def check_checkpoint_ipsecvpn(item, params, info):
+    vpn, cpvgeneral, cpvsastatistics, cpvsaerrors, cpvipsecstatistics, cpvike = info
+
+    cpvprodname, cpvvermajor, cpvverminor, cpvbuild = vpn[0]
+    cpvencpackets, cpvdecpackets, cpverrout, cpverrin, cpverrike, cpverrpolicy = cpvgeneral[0]
+    cpvcurrespsasin, cpvcurrespsasout = cpvsastatistics[0]
+    cpvsadecrerr, cpvsaautherr, cpvsareplayerr, cpvsapolicyerr, cpvsaothererrin, cpvsaothererrout, cpvsaunknownspierr = cpvsaerrors[0]
+
+    cpvipsecudpespencpkts, cpvipsecudpespdecpkts, cpvipsecespencpkts, cpvipsecespdecpkts, cpvipsecdecomprbytesbefore, \
+    cpvipsecdecomprbytesafter, cpvipsecdecomproverhead, cpvipsecdecomprpkts, cpvipsecdecomprerr, cpvipseccomprbytesbefore, \
+    cpvipseccomprbytesafter, cpvipseccomproverhead, cpvipsecnoncompressiblebytes, cpvipseccompressiblepkts, \
+    cpvipsecnoncompressiblepkts, cpvipseccomprerrors, cpvipsecespencbytes, cpvipsecespdecbytes = cpvipsecstatistics[0]
+
+    cpvikecurrsas, cpvikecurrinitsas, cpvikecurrrespsas, cpviketotalfailuresinit, cpvikenoresp, cpviketotalfailuresresp = cpvike[0]
+
+    state = 0
+    infotext = ''
+    longoutput = ''
+    perfdata = []
+
+    now_time = time.time()
+
+    infotext += 'v(%s.%s), Build: %s' % (cpvvermajor, cpvverminor, cpvbuild)
+
+
+    # cpvgeneral
+    cpvencpackets = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvencpackets', item), now_time, int(cpvencpackets), onwrap=SKIP)
+    cpvdecpackets = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvdecpackets', item), now_time, int(cpvdecpackets), onwrap=SKIP)
+    cpverrout     = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpverrout', item), now_time, int(cpverrout), onwrap=SKIP)
+    cpverrin      = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpverrin', item), now_time, int(cpverrin), onwrap=SKIP)
+    cpverrike     = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpverrike', item), now_time, int(cpverrike), onwrap=SKIP)
+    cpverrpolicy  = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpverrpolicy', item), now_time, int(cpverrpolicy), onwrap=SKIP)
+
+    infotext += ', packets/s (in/out): %s/%s' % (cpvencpackets, cpvdecpackets)
+
+    # cpvsastatistics
+    cpvcurrespsasin       = int(cpvcurrespsasin)
+    cpvcurrespsasout      = int(cpvcurrespsasout)
+
+    infotext += ', current SAs (in/out): %s/%s' % (cpvcurrespsasin, cpvcurrespsasout)
+
+    # cpvsaerrors
+    cpvsadecrerr       = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsadecrerr', item), now_time, int(cpvsadecrerr),  onwrap=SKIP)
+    cpvsaautherr       = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsaautherr', item), now_time, int(cpvsaautherr),  onwrap=SKIP)
+    cpvsareplayerr     = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsareplayerr', item), now_time, int(cpvsareplayerr),  onwrap=SKIP)
+    cpvsapolicyerr     = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsapolicyerr', item), now_time, int(cpvsapolicyerr),  onwrap=SKIP)
+    cpvsaothererrin    = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsaothererrin', item), now_time, int(cpvsaothererrin),  onwrap=SKIP)
+    cpvsaothererrout   = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsaothererrout', item), now_time, int(cpvsaothererrout),  onwrap=SKIP)
+    cpvsaunknownspierr = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvsaunknownspierr', item), now_time, int(cpvsaunknownspierr),  onwrap=SKIP)
+
+    # cpvipsecstatistics
+    cpvipsecudpespencpkts        = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecudpespencpkts', item), now_time, int(cpvipsecudpespencpkts),  onwrap=SKIP)
+    cpvipsecudpespdecpkts        = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecudpespdecpkts', item), now_time, int(cpvipsecudpespdecpkts),  onwrap=SKIP)
+    cpvipsecespencpkts           = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecespencpkts', item), now_time, int(cpvipsecespencpkts),  onwrap=SKIP)
+    cpvipsecespdecpkts           = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecespdecpkts', item), now_time, int(cpvipsecespdecpkts),  onwrap=SKIP)
+    cpvipsecdecomprbytesbefore   = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecdecomprbytesbefore', item), now_time, int(cpvipsecdecomprbytesbefore),  onwrap=SKIP)
+    cpvipsecdecomprbytesafter    = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecdecomprbytesafter', item), now_time, int(cpvipsecdecomprbytesafter),  onwrap=SKIP)
+    cpvipsecdecomproverhead      = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecdecomproverhead', item), now_time, int(cpvipsecdecomproverhead),  onwrap=SKIP)
+    cpvipsecdecomprpkts          = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecdecomprpkts', item), now_time, int(cpvipsecdecomprpkts),  onwrap=SKIP)
+    cpvipsecdecomprerr           = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecdecomprerr', item), now_time, int(cpvipsecdecomprerr),  onwrap=SKIP)
+    cpvipseccomprbytesbefore     = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipseccomprbytesbefore', item), now_time, int(cpvipseccomprbytesbefore),  onwrap=SKIP)
+    cpvipseccomprbytesafter      = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipseccomprbytesafter', item), now_time, int(cpvipseccomprbytesafter),  onwrap=SKIP)
+    cpvipseccomproverhead        = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipseccomproverhead', item), now_time, int(cpvipseccomproverhead),  onwrap=SKIP)
+    cpvipsecnoncompressiblebytes = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecnoncompressiblebytes', item), now_time, int(cpvipsecnoncompressiblebytes),  onwrap=SKIP)
+    cpvipseccompressiblepkts     = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipseccompressiblepkts', item), now_time, int(cpvipseccompressiblepkts),  onwrap=SKIP)
+    cpvipsecnoncompressiblepkts  = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecnoncompressiblepkts', item), now_time, int(cpvipsecnoncompressiblepkts),  onwrap=SKIP)
+    cpvipseccomprerrors          = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipseccomprerrors', item), now_time, int(cpvipseccomprerrors),  onwrap=SKIP)
+    cpvipsecespencbytes          = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecespencbytes', item), now_time, int(cpvipsecespencbytes),  onwrap=SKIP)
+    cpvipsecespdecbytes          = get_rate('checkpoint_ipsecvpn.%s.%s' % ('cpvipsecespdecbytes', item), now_time, int(cpvipsecespdecbytes),  onwrap=SKIP)
+
+    # cvpike
+    cpvikecurrsas = int(cpvikecurrsas)
+    cpvikecurrinitsas = int(cpvikecurrinitsas)
+    cpvikecurrrespsas = int(cpvikecurrrespsas)
+    cpviketotalfailuresinit = int(cpviketotalfailuresinit)
+    cpvikenoresp = int(cpvikenoresp)
+    cpviketotalfailuresresp = int(cpviketotalfailuresresp)
+
+    perfdata = [  # cpvgeneral
+                ('cpvencpackets', cpvencpackets),
+                ('cpvdecpackets', cpvdecpackets),
+                ('cpverrout', cpverrout),
+                ('cpverrin', cpverrin),
+                ('cpverrike', cpverrike),
+                ('cpverrpolicy', cpverrpolicy),
+                  # cpvsastatistics
+                ('cpvcurrespsasin', cpvcurrespsasin),
+                ('cpvcurrespsasout', cpvcurrespsasout),
+                  # cpvsaerrors
+                ('cpvsadecrerr', cpvsadecrerr),
+                ('cpvsaautherr', cpvsaautherr),
+                ('cpvsareplayerr', cpvsareplayerr),
+                ('cpvsapolicyerr', cpvsapolicyerr),
+                ('cpvsaothererrin', cpvsaothererrin),
+                ('cpvsaothererrout', cpvsaothererrout),
+                ('cpvsaunknownspierr', cpvsaunknownspierr),
+                  # cpvipsecstatistics
+                ('cpvipsecudpespencpkts', cpvipsecudpespencpkts),
+                ('cpvipsecudpespdecpkts', cpvipsecudpespdecpkts),
+                ('cpvipsecespencpkts', cpvipsecespencpkts),
+                ('cpvipsecespdecpkts', cpvipsecespdecpkts),
+                ('cpvipsecdecomprbytesbefore', cpvipsecdecomprbytesbefore),
+                ('cpvipsecdecomprbytesafter', cpvipsecdecomprbytesafter),
+                ('cpvipsecdecomproverhead', cpvipsecdecomproverhead),
+                ('cpvipsecdecomprpkts', cpvipsecdecomprpkts),
+                ('cpvipsecdecomprerr', cpvipsecdecomprerr),
+                ('cpvipseccomprbytesbefore', cpvipseccomprbytesbefore),
+                ('cpvipseccomprbytesafter', cpvipseccomprbytesafter),
+                ('cpvipseccomproverhead', cpvipseccomproverhead),
+                ('cpvipsecnoncompressiblebytes', cpvipsecnoncompressiblebytes),
+                ('cpvipseccompressiblepkts', cpvipseccompressiblepkts),
+                ('cpvipsecnoncompressiblepkts', cpvipsecnoncompressiblepkts),
+                ('cpvipseccomprerrors', cpvipseccomprerrors),
+                ('cpvipsecespencbytes', cpvipsecespencbytes),
+                ('cpvipsecespdecbytes', cpvipsecespdecbytes),
+                # cvpike
+                ('cpvikecurrsas', cpvikecurrsas),
+                ('cpvikecurrinitsas', cpvikecurrinitsas),
+                ('cpvikecurrrespsas', cpvikecurrrespsas),
+                ('cpviketotalfailuresinit', cpviketotalfailuresinit),
+                ('cpvikenoresp', cpvikenoresp),
+                ('cpviketotalfailuresresp', cpviketotalfailuresresp),
+                ]
+    return state, infotext + longoutput, perfdata
+
+check_info['checkpoint_ipsecvpn'] = {
+    'check_function'     : check_checkpoint_ipsecvpn,
+    'inventory_function' : inventory_checkpoint_ipsecvpn,
+    'service_description': 'IPSec VPN',
+    'has_perfdata'       : True,
+    'group'              : 'checkpoint_ipsecvpn',
+    'default_levels_variable': 'checkpoint_ipsecvpn_defaults',
+    'snmp_scan_function' : lambda oid: (oid('.1.3.6.1.2.1.1.2.0').startswith('.1.3.6.1.4.1.2620.1.6.123') or
+                                        oid('.1.3.6.1.2.1.1.2.0') in ['.1.3.6.1.4.1.8072.3.2.10']),  # Virtual System (Linux)
+    'snmp_info'          : [('.1.3.6.1.4.1.2620.1.2', [  # CHECKPOINT-MIB::vpn
+                             '1',   # cpvProdName
+                             '2',   # cpvVerMajor
+                             '3',   # cpvVerMinor
+                             '11',  # cpvBuild
+                             ]),
+                            ('.1.3.6.1.4.1.2620.1.2.4', [  # CHECKPOINT-MIB::cpvGeneral
+                             '1.1',  # cpvEncPackets
+                             '1.2',  # cpvDecPackets
+                             '2.1',  # cpvErrOut
+                             '2.2',  # cpvErrIn
+                             '2.3',  # cpvErrIke
+                             '2.4',  # cpvErrPolicy
+                             ]),
+                            ('.1.3.6.1.4.1.2620.1.2.5.2', [  # CHECKPOINT-MIB::cpvSaStatistics
+                             '1',   # cpvCurrEspSAsIn
+                             '3',   # cpvCurrEspSAsOut
+                             ]),
+                            ('.1.3.6.1.4.1.2620.1.2.5.3', [  # CHECKPOINT-MIB::cpvSaErrors
+                             '1',  # cpvSaDecrErr
+                             '2',  # cpvSaAuthErr
+                             '3',  # cpvSaReplayErr
+                             '4',  # cpvSaPolicyErr
+                             '5',  # cpvSaOtherErrIn
+                             '6',  # cpvSaOtherErrOut
+                             '7',  # cpvSaUnknownSpiErr
+                             ]),
+                            ('.1.3.6.1.4.1.2620.1.2.5.4', [  # CHECKPOINT-MIB::cpvIpsecStatistics
+                             '1',   # cpvIpsecUdpEspEncPkts
+                             '2',   # cpvIpsecUdpEspDecPkts
+                             '5',   # cpvIpsecEspEncPkts
+                             '6',   # cpvIpsecEspDecPkts
+                             '7',   # cpvIpsecDecomprBytesBefore
+                             '8',   # cpvIpsecDecomprBytesAfter
+                             '9',   # cpvIpsecDecomprOverhead
+                             '10',  # cpvIpsecDecomprPkts
+                             '11',  # cpvIpsecDecomprErr
+                             '12',  # cpvIpsecComprBytesBefore
+                             '13',  # cpvIpsecComprBytesAfter
+                             '14',  # cpvIpsecComprOverhead
+                             '15',  # cpvIpsecNonCompressibleBytes
+                             '16',  # cpvIpsecCompressiblePkts
+                             '17',  # cpvIpsecNonCompressiblePkts
+                             '18',  # cpvIpsecComprErrors
+                             '19',  # cpvIpsecEspEncBytes
+                             '20',  # cpvIpsecEspDecBytes
+                             ]),
+                            ('.1.3.6.1.4.1.2620.1.2.9', [  # CHECKPOINT-MIB::cpvIKE
+                             '1.1',  # cpvIKECurrSAs
+                             '1.2',  # cpvIKECurrInitSAs
+                             '1.3',  # cpvIKECurrRespSAs
+                             '2.1',  # cpvIKETotalFailuresInit
+                             '2.2',  # cpvIKENoResp
+                             '2.3',  # cpvIKETotalFailuresResp
+                            ]),
+                            ]
+}

packages/checkpoint_ipsecvpn

+{'author': u'Th.L. (thl-cmk[at]outlook[dot]com)',
+ 'description': u'Monitor Check Point Firewall IPSec VPN statistics.',
+ 'download_url': 'https://thl-cmk.hopto.org',
+ 'files': {'checks': ['checkpoint_ipsecvpn'],
+           'web': ['plugins/metrics/checkpoint_ipsecvpn.py']},
+ 'name': 'checkpoint_ipsecvpn',
+ 'num_files': 2,
+ 'title': u'Check Point IPSec VPN',
+ 'version': '20181125.v.0.0.1',
+ 'version.min_required': '1.2.8b8',
+ 'version.packaged': '1.4.0p35'}
\ No newline at end of file

web/plugins/metrics/checkpoint_ipsecvpn.py

+#!/usr/bin/python
+# -*- encoding: utf-8; py-indent-offset: 4 -*-
+#
+# Check Point Firewall ipsecvpn metrics plugins
+# checkpoint_ipsecvpn
+
+#
+# Author: Th.L.
+# Date  : 2018-11-22
+#
+
+#####################################################################################################################
+#
+# define units for perfdata
+#
+#####################################################################################################################
+
+#####################################################################################################################
+#
+# define metrics for perfdata
+#
+#####################################################################################################################
+
+# cpvsastatistics
+metric_info['checkpoint_ipsecvpn_cpvcurrespsasin'] = {
+    'title': _('Current ESP SAs in'),
+    'unit': 'count',
+    'color': '26/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvcurrespsasout'] = {
+    'title': _('Current ESP SAs out'),
+    'unit': 'count',
+    'color': '16/a',
+}
+
+# cpvgeneral
+metric_info['checkpoint_ipsecvpn_cpvdecpackets'] = {
+    'title': _('Packets/s in'),
+    'unit': '1/s',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvencpackets'] = {
+    'title': _('Packets/s out'),
+    'unit': '1/s',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpverrike'] = {
+    'title': _('IKE errors/s'),
+    'unit': '1/s',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpverrin'] = {
+    'title': _('in errors/s'),
+    'unit': '1/s',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpverrout'] = {
+    'title': _('out errors/s'),
+    'unit': '1/s',
+    'color': '13/a',
+}
+metric_info['checkpoint_ipsecvpn_cpverrpolicy'] = {
+    'title': _('policy errors/s'),
+    'unit': '1/s',
+    'color': '14/a',
+}
+
+# cpvsaerrors
+metric_info['checkpoint_ipsecvpn_cpvsaautherr'] = {
+    'title': _('Authentication errors/s'),
+    'unit': '1/s',
+    'color': '15/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvsadecrerr'] = {
+    'title': _('SA encryption errors/s'),
+    'unit': '1/s',
+    'color': '16/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvsaothererrin'] = {
+    'title': _('SA other in errors/s'),
+    'unit': '1/s',
+    'color': '21/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvsaothererrout'] = {
+    'title': _('SA other out errors/s'),
+    'unit': '1/s',
+    'color': '22/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvsapolicyerr'] = {
+    'title': _('SA policy errors/s'),
+    'unit': '1/s',
+    'color': '23/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvsareplayerr'] = {
+    'title': _('SA replay errors/s'),
+    'unit': '1/s',
+    'color': '24/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvsaunknownspierr'] = {
+    'title': _('SA unknown SPI errors/s'),
+    'unit': '1/s',
+    'color': '25/a',
+}
+
+# cpvipsecstatistics
+metric_info['checkpoint_ipsecvpn_cpvipseccomprbytesafter'] = {
+    'title': _('bytes after compression/s'),
+    'unit': '1/s',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipseccomprbytesbefore'] = {
+    'title': _('bytes before compression/s'),
+    'unit': '1/s',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipseccomprerrors'] = {
+    'title': _('compression errors/s'),
+    'unit': '1/s',
+    'color': '13/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipseccompressiblepkts'] = {
+    'title': _('packes compressed/s'),
+    'unit': '1/s',
+    'color': '14/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipseccomproverhead'] = {
+    'title': _('compression overhead/s'),
+    'unit': '1/s',
+    'color': '15/a',
+}
+
+metric_info['checkpoint_ipsecvpn_cpvipsecdecomprbytesafter'] = {
+    'title': _('bytes after decompression/s'),
+    'unit': '1/s',
+    'color': '16/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecdecomprbytesbefore'] = {
+    'title': _('bytes before decompression/s'),
+    'unit': '1/s',
+    'color': '21/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecdecomprerr'] = {
+    'title': _('decompression errors/s'),
+    'unit': '1/s',
+    'color': '22/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecdecomproverhead'] = {
+    'title': _('decompression overhead/s'),
+    'unit': '1/s',
+    'color': '23/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecdecomprpkts'] = {
+    'title': _('packets decompressed/s'),
+    'unit': '1/s',
+    'color': '24/a',
+}
+
+metric_info['checkpoint_ipsecvpn_cpvipsecespdecbytes'] = {
+    'title': _('ESP decapsulated bytes/s'),
+    'unit': '1/s',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecespencbytes'] = {
+    'title': _('ESP encapsulated bytes/s'),
+    'unit': '1/s',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecespdecpkts'] = {
+    'title': _('ESP decapsulated packets/s'),
+    'unit': '1/s',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecespencpkts'] = {
+    'title': _('ESP encapsulated packets/s'),
+    'unit': '1/s',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecnoncompressiblebytes'] = {
+    'title': _('bytes noncompressible/s'),
+    'unit': '1/s',
+    'color': '13/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecnoncompressiblepkts'] = {
+    'title': _('packets noncompressible/s'),
+    'unit': '1/s',
+    'color': '14/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecudpespdecpkts'] = {
+    'title': _('ESP UDP decapsulated packets/s'),
+    'unit': '1/s',
+    'color': '15/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvipsecudpespencpkts'] = {
+    'title': _('ESP UDP encapsulated packets/s'),
+    'unit': '1/s',
+    'color': '16/a',
+}
+
+# cpvike
+metric_info['checkpoint_ipsecvpn_cpvikecurrsas'] = {
+    'title': _('Current IKE SAs'),
+    'unit': 'count',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvikecurrinitsas'] = {
+    'title': _('Current IKE SAs init'),
+    'unit': 'count',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvikecurrrespsas'] = {
+    'title': _('Current IKE SAs response'),
+    'unit': 'count',
+    'color': '13/a',
+}
+metric_info['checkpoint_ipsecvpn_cpviketotalfailuresinit'] = {
+    'title': _('Total IKE failures init'),
+    'unit': 'count',
+    'color': '11/a',
+}
+metric_info['checkpoint_ipsecvpn_cpvikenoresp'] = {
+    'title': _('IKE no respnse'),
+    'unit': 'count',
+    'color': '12/a',
+}
+metric_info['checkpoint_ipsecvpn_cpviketotalfailuresresp'] = {
+    'title': _('Total IKE failures reponse'),
+    'unit': 'count',
+    'color': '13/a',
+}
+
+######################################################################################################################
+#
+# map perfdata to metric
+#
+######################################################################################################################
+
+
+check_metrics['check_mk-checkpoint_ipsecvpn'] = {
+    'cpvcurrespsasin': {'name': 'checkpoint_ipsecvpn_cpvcurrespsasin'},
+    'cpvcurrespsasout': {'name': 'checkpoint_ipsecvpn_cpvcurrespsasout'},
+    'cpvdecpackets': {'name': 'checkpoint_ipsecvpn_cpvdecpackets'},
+    'cpvencpackets': {'name': 'checkpoint_ipsecvpn_cpvencpackets'},
+    'cpverrike': {'name': 'checkpoint_ipsecvpn_cpverrike'},
+    'cpverrin': {'name': 'checkpoint_ipsecvpn_cpverrin'},
+    'cpverrout': {'name': 'checkpoint_ipsecvpn_cpverrout'},
+    'cpverrpolicy': {'name': 'checkpoint_ipsecvpn_cpverrpolicy'},
+    'cpvipseccomprbytesafter': {'name': 'checkpoint_ipsecvpn_cpvipseccomprbytesafter'},
+    'cpvipseccomprbytesbefore': {'name': 'checkpoint_ipsecvpn_cpvipseccomprbytesbefore'},
+    'cpvipseccomprerrors': {'name': 'checkpoint_ipsecvpn_cpvipseccomprerrors'},
+    'cpvipseccompressiblepkts': {'name': 'checkpoint_ipsecvpn_cpvipseccompressiblepkts'},
+    'cpvipseccomproverhead': {'name': 'checkpoint_ipsecvpn_cpvipseccomproverhead'},
+    'cpvipsecdecomprbytesafter': {'name': 'checkpoint_ipsecvpn_cpvipsecdecomprbytesafter'},
+    'cpvipsecdecomprbytesbefore': {'name': 'checkpoint_ipsecvpn_cpvipsecdecomprbytesbefore'},
+    'cpvipsecdecomprerr': {'name': 'checkpoint_ipsecvpn_cpvipsecdecomprerr'},
+    'cpvipsecdecomproverhead': {'name': 'checkpoint_ipsecvpn_cpvipsecdecomproverhead'},
+    'cpvipsecdecomprpkts': {'name': 'checkpoint_ipsecvpn_cpvipsecdecomprpkts'},
+    'cpvipsecespdecbytes': {'name': 'checkpoint_ipsecvpn_cpvipsecespdecbytes'},
+    'cpvipsecespdecpkts': {'name': 'checkpoint_ipsecvpn_cpvipsecespdecpkts'},
+    'cpvipsecespencbytes': {'name': 'checkpoint_ipsecvpn_cpvipsecespencbytes'},
+    'cpvipsecespencpkts': {'name': 'checkpoint_ipsecvpn_cpvipsecespencpkts'},
+    'cpvipsecnoncompressiblebytes': {'name': 'checkpoint_ipsecvpn_cpvipsecnoncompressiblebytes'},
+    'cpvipsecnoncompressiblepkts': {'name': 'checkpoint_ipsecvpn_cpvipsecnoncompressiblepkts'},
+    'cpvipsecudpespdecpkts': {'name': 'checkpoint_ipsecvpn_cpvipsecudpespdecpkts'},
+    'cpvipsecudpespencpkts': {'name': 'checkpoint_ipsecvpn_cpvipsecudpespencpkts'},
+    'cpvsaautherr': {'name': 'checkpoint_ipsecvpn_cpvsaautherr'},
+    'cpvsadecrerr': {'name': 'checkpoint_ipsecvpn_cpvsadecrerr'},
+    'cpvsaothererrin': {'name': 'checkpoint_ipsecvpn_cpvsaothererrin'},
+    'cpvsaothererrout': {'name': 'checkpoint_ipsecvpn_cpvsaothererrout'},
+    'cpvsapolicyerr': {'name': 'checkpoint_ipsecvpn_cpvsapolicyerr'},
+    'cpvsareplayerr': {'name': 'checkpoint_ipsecvpn_cpvsareplayerr'},
+    'cpvsaunknownspierr': {'name': 'checkpoint_ipsecvpn_cpvsaunknownspierr'},
+    'cpvikecurrsas': {'name': 'checkpoint_ipsecvpn_cpvikecurrsas'},
+    'cpvikecurrinitsas': {'name': 'checkpoint_ipsecvpn_cpvikecurrinitsas'},
+    'cpvikecurrrespsas': {'name': 'checkpoint_ipsecvpn_cpvikecurrrespsas'},
+    'cpviketotalfailuresinit': {'name': 'checkpoint_ipsecvpn_cpviketotalfailuresinit'},
+    'cpvikenoresp': {'name': 'checkpoint_ipsecvpn_cpvikenoresp'},
+    'cpviketotalfailuresresp': {'name': 'checkpoint_ipsecvpn_cpviketotalfailuresresp'},
+}
+
+######################################################################################################################
+#
+# how to graph perdata
+#
+######################################################################################################################
+
+graph_info.append({
+    'title': _('Check Point IKE SAs'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvikecurrinitsas', 'stack'),
+        ('checkpoint_ipsecvpn_cpvikecurrrespsas', 'stack'),
+        ('checkpoint_ipsecvpn_cpvikecurrsas', 'line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IKE errors'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpviketotalfailuresinit', 'line'),
+        ('checkpoint_ipsecvpn_cpviketotalfailuresresp', 'line'),
+        ('checkpoint_ipsecvpn_cpvikenoresp', 'line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec SAs'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvcurrespsasin', 'line'),
+        ('checkpoint_ipsecvpn_cpvcurrespsasout', 'line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec packets'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvdecpackets', 'line'),
+        ('checkpoint_ipsecvpn_cpvencpackets', 'line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec compression bytes'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvipseccomprbytesbefore', 'line'),
+        ('checkpoint_ipsecvpn_cpvipseccomprbytesafter', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecdecomprbytesbefore', '-line'),
+        ('checkpoint_ipsecvpn_cpvipsecdecomprbytesafter', '-line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec Compression'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvipseccomprerrors', 'line'),
+        ('checkpoint_ipsecvpn_cpvipseccomproverhead', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecdecomprerr', '-line'),
+        ('checkpoint_ipsecvpn_cpvipsecdecomproverhead', '-line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec packets'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvipsecespencpkts', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecudpespencpkts', 'line'),
+        ('checkpoint_ipsecvpn_cpvipseccompressiblepkts', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecnoncompressiblepkts', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecespdecpkts', '-line'),
+        ('checkpoint_ipsecvpn_cpvipsecudpespdecpkts', '-line'),
+        ('checkpoint_ipsecvpn_cpvipsecdecomprpkts', '-line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec bytes'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpvipsecespencbytes', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecnoncompressiblebytes', 'line'),
+        ('checkpoint_ipsecvpn_cpvipsecespdecbytes', '-line'),
+    ],
+})
+
+graph_info.append({
+    'title': _('Check Point IPSec errors'),
+    'metrics': [
+        ('checkpoint_ipsecvpn_cpverrike', 'line'),
+        ('checkpoint_ipsecvpn_cpverrin', 'line'),
+        ('checkpoint_ipsecvpn_cpverrout', 'line'),
+        ('checkpoint_ipsecvpn_cpverrpolicy', 'line'),
+        ('checkpoint_ipsecvpn_cpvsaautherr', 'line'),
+        ('checkpoint_ipsecvpn_cpvsadecrerr', 'line'),
+        ('checkpoint_ipsecvpn_cpvsaothererrin', 'line'),
+        ('checkpoint_ipsecvpn_cpvsaothererrout', 'line'),
+        ('checkpoint_ipsecvpn_cpvsapolicyerr', 'line'),
+        ('checkpoint_ipsecvpn_cpvsareplayerr', 'line'),
+        ('checkpoint_ipsecvpn_cpvsaunknownspierr', 'line'),
+    ],
+})
+
+
+######################################################################################################################
+#
+# define perf-o-meter
+#
+######################################################################################################################
+
+
+# perfometer_info.append(('stacked', [
+#     {
+#         'type': 'logarithmic',
+#         'metric': 'checkpoint_connections_connections',
+#         'half_value': 100000.0,
+#         'exponent': 2,
+#     },
+#     {
+#         'type': 'logarithmic',
+#         'metric': 'checkpoint_connections_fwconnections',
+#         'half_value': 1000.0,
+#         'exponent': 2,
+#     },
+# ]))