Admin: 2 revisions imported

2016-04-06T20:27:17Z

2 revisions imported

New page

'''Introduction'''

This is a very basic and minimal php script I wrote to output the logins captured in syslog. It just dumps it to screen but you can redirect the output to a file also.

RT Login Stats for 2/9/2005
eranam,1
wildmanj,6
garcial,3
timm,5
reillyj,4
JenningsR,1
veaziec,2
vongleichr,1
lewisd,1

'''Requirements'''

I wrote this on PHP4 with PEAR::Date used. You'll have to change the file location of the pear lib to where yours resides.

'''Caveat Emptor'''

This script is provided with no warranties expressed or implied. Use your own risk. Milage may vary.

'''TODO'''

* Make a cron version
* Have script store to RRD
* Have summary e-mailed

<nowiki>#!/usr/bin/php -q
<?php
//
// RTLogins.php
//
// parses syslog for RT Login information
// returns username,#logins

// You're going to want to re-point this to where pear is on your machine
include_once("/var/www/tikiwiki/lib/pear/Date/Calc.php");

$date_calc = new Date_Calc;

// $logpath = "/var/log/";
$logfile = "";
$buffer = "";
$meDebug = False;
$debug_routine_name = "main";
$login_regex = 'Successful login';
$counter = 0;
$res_summary = array();

// What's in argv[1]?
if (strlen($argv[1] < 2)){
$logfile = $argv[1];
} else {
$logfile = "syslog";
}

// is this a debug session?
if (debug_set($argv[1])){
$meDebug = True;
}

// open the file for reading
if(! $handle=openFile($logfile)){
if ($meDebug){echo $debug_routine_name . ": Premature Termination.\n";}
die;
}

// Loop through logfile
while (!feof($handle)) {

$buffer = fgets($handle, 4096);

// Match for Login Success
$foundLogin = strpos($buffer,$login_regex);
if ($meDebug){echo $buffer . " Match to " . $login_regex . " \n";}

$counter++;

// Is current line a match?
if($foundLogin >= 1){

if ($meDebug){echo $counter . " : Found a match \n";}
list($month,
$nonce3,
$day,
$time,
$server,
$app,
$result1,
$result2,
$nonce1,
$user,
$nonce2,
$client,
$func_str)=explode(" ",$buffer);

if ($meDebug){
echo "Month is " . $month . "\n";
echo "Day is " . $day . "\n";
echo "Time is " . $time . "\n";
echo "Server is " . $server . "\n";
echo "App is " . $app . "\n";
echo "result1 is " . $result1 . "\n";
echo "result2 is " . $result2 . "\n";
echo "Nonce1 is " . $nonce1 . "\n";
echo "Client is " . $client . "\n";
echo "Nonce2 is " . $func_str . "\n";
}

// If the users array key has not been set, go set it
if (! isset($res_array[$user])){
$res_array[$user] = array();
$res_array[$user]['Times']=array();
}

$month = $date_calc->getMonthFromFullName($month);
//$time = str_replace(":","",$time);
$res_array[$user]['Times'][] = substr(100+$day,1) . "/" . substr(100+$month,1) . "/2005 " . $time;

}

}

// Dump result
echo "RT Login Stats for " . $day . "/" . $month . "/2005\n";
dumpResult($res_array);
echo "\n";

function dumpResult($result){

foreach($result as $name => $times){

echo $name . "," . count($result[$name]["Times"]);
echo "\n";

}

return True;
}

function openFile($fn){

$logfile = $fn;

// echo "Opening the File $logfile \n";

if(! $handle = fopen($logfile, "r")){
echo "Couldn't open logfile for reading!\n";
die;
}
return $handle;
}

function debug_set($isDebug){
$isDebug=strtolower($isDebug);
// echo "In the debug setting\nValue is $isDebug\n\n";
if($isDebug=='y'){
Return True;
}
}

?>

</nowiki>

[[MichaelErana]] <u>g33k (at) efamilynj.org</u>

RTLogins - Revision history

Admin: 2 revisions imported