This file is indexed.

/usr/share/check_mk/checks/cisco_qos is in check-mk-server 1.1.12-1ubuntu1.

This file is owned by root:root, with mode 0o755.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
#!/usr/bin/python
# -*- encoding: utf-8; py-indent-offset: 4 -*-
# +------------------------------------------------------------------+
# |             ____ _               _        __  __ _  __           |
# |            / ___| |__   ___  ___| | __   |  \/  | |/ /           |
# |           | |   | '_ \ / _ \/ __| |/ /   | |\/| | ' /            |
# |           | |___| | | |  __/ (__|   <    | |  | | . \            |
# |            \____|_| |_|\___|\___|_|\_\___|_|  |_|_|\_\           |
# |                                                                  |
# | Copyright Mathias Kettner 2010             mk@mathias-kettner.de |
# +------------------------------------------------------------------+
#
# This file is part of Check_MK.
# The official homepage is at http://mathias-kettner.de/check_mk.
#
# check_mk is free software;  you can redistribute it and/or modify it
# under the  terms of the  GNU General Public License  as published by
# the Free Software Foundation in version 2.  check_mk is  distributed
# in the hope that it will be useful, but WITHOUT ANY WARRANTY;  with-
# out even the implied warranty of  MERCHANTABILITY  or  FITNESS FOR A
# PARTICULAR PURPOSE. See the  GNU General Public License for more de-
# ails.  You should have  received  a copy of the  GNU  General Public
# License along with GNU Make; see the file  COPYING.  If  not,  write
# to the Free Software Foundation, Inc., 51 Franklin St,  Fifth Floor,
# Boston, MA 02110-1301 USA.

# Author: Lars Michelsen <lm@mathias-kettner.de>

# Relevant SNMP OIDs:
# .1.3.6.1.4.1.9.9.166.1.1.1.1.4.144 9
# .1.3.6.1.4.1.9.9.166.1.1.1.1.4.258 16
# .1.3.6.1.4.1.9.9.166.1.1.1.1.4.400 25
#
# .1.3.6.1.4.1.9.9.166.1.6.1.1.1.3974704 "6cos"
# .1.3.6.1.4.1.9.9.166.1.6.1.1.1.6208592 "ingress-map"
#
# .1.3.6.1.4.1.9.9.166.1.7.1.1.1.1593 "class-default"
# .1.3.6.1.4.1.9.9.166.1.7.1.1.1.18785 "EF"
# .1.3.6.1.4.1.9.9.166.1.7.1.1.1.284945 "AF1"
# .1.3.6.1.4.1.9.9.166.1.7.1.1.1.284961 "AF2"
# .1.3.6.1.4.1.9.9.166.1.7.1.1.1.284977 "AF3"

# http://www.oidview.com/mibs/9/CISCO-CLASS-BASED-QOS-MIB.html

# TEST:
#
# search class table:
# .1.3.6.1.4.1.9.9.166.1.7.1.1.1.284945 "AF1"
# class_id = 284945
#
# search config table for matching value
# .1.3.6.1.4.1.9.9.166.1.5.1.1.2.144.5256 284945
# key = 144.5256
#
# search if table for matchin if_id: 144
# .1.3.6.1.4.1.9.9.166.1.1.1.1.4.144 9
# if_policy = 9
#
# get policy_id from config table using if_id.if_id 144.144
# .1.3.6.1.4.1.9.9.166.1.5.1.1.2.144.144 6208592
# policy_index = 6208592
#
# get policy name using the policy_index
# .1.3.6.1.4.1.9.9.166.1.6.1.1.1.6208592 "ingress-map"
# policy_name = "ingress-map"
#
# get post bytes using the key
# .1.3.6.1.4.1.9.9.166.1.15.1.1.9.144.5256 0
# post_bytes = 0
#
# get dropped bytes using the key
# .1.3.6.1.4.1.9.9.166.1.15.1.1.16.144.5256 0
# dropped_bytes = 0
#
# get if_name using the if_policy: 9
# .1.3.6.1.2.1.31.1.1.1.1.9 Vl1
# if_name = Vl1
#
# get if_speed using the if_policy: 9
# .1.3.6.1.2.1.2.2.1.5.9 100000000
# if_speed = 100000000
#
###
# Test to find the badwidth of the classes. Not finished...
#
# 'cbQosObjectsType' => {
#         1 => 'policymap',
#         2 => 'classmap',
#         3 => 'matchStatement',
#         4 => 'queueing',
#         5 => 'randomDetect',
#         6 => 'trafficShaping',
#         7 => 'police',
#         8 => 'set' },
#
# Index:
# .1.3.6.1.4.1.9.9.166.1.5.1.1.2.258.1244739 1608
#
# Type:
# .1.3.6.1.4.1.9.9.166.1.5.1.1.3.258.1244739 4
#
# Parent ID:
# .1.3.6.1.4.1.9.9.166.1.5.1.1.4.258.1244739 6184
#
# cbQosQueueingStatsEntry:
# .1.3.6.1.4.1.9.9.166.1.18.1.1.2.258.1244739 64
# ...

# Index:
# .1.3.6.1.4.1.9.9.166.1.5.1.1.2.258.6184 18785
# Type:
# .1.3.6.1.4.1.9.9.166.1.5.1.1.3.258.6184 2
# Parent ID:
# .1.3.6.1.4.1.9.9.166.1.5.1.1.4.258.6184 258

# post_warn, post_crit, drop warn, drop crit
cisco_qos_default_levels = (None, None, 0.01, 0.01)

def cisco_qos_get_ifs_by_class_id(config, class_id):
    return [ if_index.split('.') for if_index, value in config.iteritems() if value == class_id ]

def inventory_cisco_qos(info):
    if len(info) == 8:
        ifs = dict(info[0])
        config = dict([ ('.'.join(oid.split('.')[-2:]), value) for oid, value in info[3] ])
        if_names = dict(info[6])

        # Find all interfaces for each class and create one service for each pair
        items = []
        for class_id, class_name in info[2]:
            # Get interface ids which use this qos class
            for policy_if_id, policy_if_id2 in cisco_qos_get_ifs_by_class_id(config, class_id):
                if_name = if_names[ifs[policy_if_id]]
                items += [ ('%s: %s' % (if_name, class_name), 'cisco_qos_default_levels') ]

        return items

def check_cisco_qos(item, params, info):
    post_warn, post_crit, drop_warn, drop_crit = params

    # Load values and format them
    ifs = dict(info[0])
    policies= dict(info[1])
    classes = dict(info[2])
    config = dict([ ('.'.join(oid.split('.')[-2:]), value) for oid, value in info[3] ])
    post_bytes = dict([ ('.'.join(oid.split('.')[-2:]), value) for oid, value in info[4] ])
    drop_bytes = dict([ ('.'.join(oid.split('.')[-2:]), value) for oid, value in info[5] ])
    if_names = dict(info[6])
    if_speeds = dict(info[7])

    if_name, class_name = item.split(': ')

    # Gather the class id by class_name
    class_id = None
    for cid, cname in classes.iteritems():
        if class_name == cname:
            class_id = cid
            break

    # Gather the interface id by class_name
    if_id = None
    for iid, iid2 in ifs.iteritems():
        if if_name == if_names[iid2]:
            if_id = iid2
            break

    if not if_id or not class_id:
        return (3, "UNKNOWN - QoS class not found for that interface")

    # Gather information for this object
    policy_if_id, policy_if_id2 = cisco_qos_get_ifs_by_class_id(config, class_id)[0]
    policy_id   = config[policy_if_id+'.'+policy_if_id]
    policy_name = policies[policy_id]
    post_b      = post_bytes[policy_if_id+'.'+policy_if_id2]
    drop_b      = drop_bytes[policy_if_id+'.'+policy_if_id2]
    speed       = saveint(if_speeds[if_id])
    # Bandwidth needs to be in bytes for later calculations
    bw          = speed / 8.0

    # Handle counter values
    state = 0
    infotext = ''
    this_time = time.time()
    rates = []
    wrapped = False
    perfdata = []
    for name, counter, warn, crit, min, max in [ ( "post", post_b, post_warn, post_crit, 0, bw),
                                                 ( "drop", drop_b, drop_warn, drop_crit, 0, bw) ]:

        try:
            timedif, rate = get_counter("cisco_qos.%s.%s" % (name, item), this_time, saveint(counter))
            rates.append(rate)
            perfdata.append( (name, rate, warn, crit, min, max) )
        except MKCounterWrapped, e:
            wrapped = True

    # if at least one counter wrapped, we do not handle the counters at all
    if wrapped:
        perfdata = []
    else:
        post_rate, drop_rate = rates
        for what, rate, warn, crit in [ ("post",  rates[0], post_warn, post_crit),
                                        ("drop",  rates[1], drop_warn, drop_crit) ]:
            infotext += ', %s: %s/s' % (what, get_bytes_human_readable(rate))
            if crit is not None and rate >= crit:
                state = 2
                infotext += '(!!)'
            elif warn is not None and rate >= warn:
                state = 1
                infotext += '(!)'

    infotext += ', Policy-Name: %s, Int-Bandwidth: %sits/s' % (policy_name, get_bytes_human_readable(speed, 1000))
    return (state, "%s - %s" % (nagios_state_names[state], infotext.lstrip(', ')), perfdata)

check_info['cisco_qos'] = (check_cisco_qos, "QoS %s", 1,  inventory_cisco_qos)
snmp_info['cisco_qos']  = [ ( '.1.3.6.1.4.1.9.9.166.1', [ OID_END,    '1.1.1.4' ] ),   # qosIfIndex
                            ( '.1.3.6.1.4.1.9.9.166.1', [ OID_END,    '6.1.1.1' ] ),   # qosPolicies
                            ( '.1.3.6.1.4.1.9.9.166.1', [ OID_END,    '7.1.1.1' ] ),   # qosClasses
                            ( '.1.3.6.1.4.1.9.9.166.1', [ OID_STRING, '5.1.1.2' ] ),   # qosConfig
                            ( '.1.3.6.1.4.1.9.9.166.1', [ OID_STRING, '15.1.1.9' ] ),  # qosPostBytes
                            ( '.1.3.6.1.4.1.9.9.166.1', [ OID_STRING, '15.1.1.16' ] ), # qosDropBytes
                            ( '.1.3.6.1.2.1.2.2.1',     [ OID_END,    '2' ]),          # ifNames
                            ( '.1.3.6.1.2.1.2.2.1',     [ OID_END,    '5' ]),          # ifSpeeds
                          ]
snmp_scan_functions['cisco_qos'] = lambda oid: "cisco" in oid(".1.3.6.1.2.1.1.1.0").lower() and \
                                   oid(".1.3.6.1.4.1.9.9.166.1.1.1.1.4.*")