1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
|
<?include("include.php");?>
<html>
<center>
<img src=logo.gif>
<?
// Get variables from url
if (isset($_GET['sensor_name']) && $_GET['sensor_name'] != "none")
$sensor_name = $_GET['sensor_name'];
if (isset($_GET['interval']) && $_GET['interval'] != "none")
$interval = $_GET['interval'];
if (isset($_GET['timestamp']) && $_GET['timestamp'] != "none")
$timestamp = $_GET['timestamp'];
if (isset($_GET['subnet']) && $_GET['subnet'] != "none")
$subnet = $_GET['subnet'];
if (isset($_GET['limit']) && $_GET['limit'] != "none")
$limit = $_GET['limit'];
$db = ConnectDb();
?>
<FORM name="navigation" method=get action=<?=$PHP_SELF?>>
<table width=100% cellspacing=0 cellpadding=5 border=1>
<tr>
<td><SELECT name="sensor_name">
<OPTION value="none">--Select A Sensor--
<?
$sql = "SELECT sensor_name from sensors order by sensor_name;";
$result = pg_query($sql);
while ($r = pg_fetch_array($result))
echo "<option value=\"".$r['sensor_name']."\" ".($sensor_name==$r['sensor_name']?"SELECTED":"").">".$r['sensor_name']."\n";
?>
</SELECT>
<td><SELECT name="interval">
<OPTION value="none">--Select An Interval--
<OPTION value=<?=INT_DAILY?> <?=$interval==INT_DAILY?"SELECTED":""?>>Daily
<OPTION value=<?=INT_WEEKLY?> <?=$interval==INT_WEEKLY?"SELECTED":""?>>Weekly
<OPTION value=<?=INT_MONTHLY?> <?=$interval==INT_MONTHLY?"SELECTED":""?>>Monthly
<OPTION value=<?=INT_YEARLY?> <?=$interval==INT_YEARLY?"SELECTED":""?>>Yearly
<OPTION value=<?=24*60*60?> <?=$interval==24*60*60?"SELECTED":""?>>24hrs
<OPTION value=<?=30*24*60*60?> <?=$interval==30*24*60*60?"SELECTED":""?>>30days
</select>
<td><SELECT name="limit">
<OPTION value="none">--How Many Results--
<OPTION value=20 <?=$limit==20?"SELECTED":""?>>20
<OPTION value=50 <?=$limit==50?"SELECTED":""?>>50
<OPTION value=100 <?=$limit==100?"SELECTED":""?>>100
<OPTION value=all <?=$limit=="all"?"SELECTED":""?>>All
</select>
<td>Subnet Filter:<input name=subnet value="<?=isset($subnet)?$subnet:"0.0.0.0/0"?>">
<input type=submit value="Go">
</table>
</FORM>
<?
// Set defaults
if (!isset($interval))
$interval = DFLT_INTERVAL;
if (!isset($timestamp))
$timestamp = time() - $interval + (0.05*$interval);
if (!isset($limit))
$limit = 20;
// Validation
if (!isset($sensor_name))
exit(0);
// Print Title
if (isset($limit))
echo "<h2>Top $limit - $sensor_name</h2>";
else
echo "<h2>All Records - $sensor_name</h2>";
// Sqlize the incomming variables
if (isset($subnet))
$sql_subnet = "and ip <<= '$subnet'";
// Sql Statement
$sql = "select tx.ip, rx.scale as rxscale, tx.scale as txscale, tx.total+rx.total as total, tx.total as sent,
rx.total as received, tx.tcp+rx.tcp as tcp, tx.udp+rx.udp as udp,
tx.icmp+rx.icmp as icmp, tx.http+rx.http as http,
tx.p2p+rx.p2p as p2p, tx.ftp+rx.ftp as ftp
from
(SELECT ip, max(total/sample_duration)*8 as scale, sum(total) as total, sum(tcp) as tcp, sum(udp) as udp, sum(icmp) as icmp,
sum(http) as http, sum(p2p) as p2p, sum(ftp) as ftp
from sensors, bd_tx_log
where sensor_name = '$sensor_name'
and sensors.sensor_id = bd_tx_log.sensor_id
$sql_subnet
and timestamp > $timestamp::abstime and timestamp < ".($timestamp+$interval)."::abstime
group by ip) as tx,
(SELECT ip, max(total/sample_duration)*8 as scale, sum(total) as total, sum(tcp) as tcp, sum(udp) as udp, sum(icmp) as icmp,
sum(http) as http, sum(p2p) as p2p, sum(ftp) as ftp
from sensors, bd_rx_log
where sensor_name = '$sensor_name'
and sensors.sensor_id = bd_rx_log.sensor_id
$sql_subnet
and timestamp > $timestamp::abstime and timestamp < ".($timestamp+$interval)."::abstime
group by ip) as rx
where tx.ip = rx.ip
order by total desc;";
//echo "</center><pre>$sql</pre><center>"; exit(0);
pg_query("SET sort_mem TO 30000;");
$result = pg_query($sql);
pg_query("set sort_mem to default;");
if ($limit == "all")
$limit = pg_num_rows($result);
echo "<table width=100% border=1 cellspacing=0><tr><td>Ip<td>Name<td>Total<td>Sent<td>Received<td>tcp<td>udp<td>icmp<td>http<td>p2p<td>ftp";
if (!isset($subnet)) // Set this now for total graphs
$subnet = "0.0.0.0/0";
// Output Total Line
echo "<TR><TD><a href=Total>Total</a><TD>$subnet";
foreach (array("total", "sent", "received", "tcp", "udp", "icmp", "http", "p2p", "ftp") as $key)
{
for($Counter=0, $Total = 0; $Counter < pg_num_rows($result); $Counter++)
{
$r = pg_fetch_array($result, $Counter);
$Total += $r[$key];
}
echo fmtb($Total);
}
echo "\n";
// Output Other Lines
for($Counter=0; $Counter < pg_num_rows($result) && $Counter < $limit; $Counter++)
{
$r = pg_fetch_array($result, $Counter);
echo "<tr><td><a href=#".$r['ip'].">";
echo $r['ip']."<td>".gethostbyaddr($r['ip']);
echo "</a>";
echo fmtb($r['total']).fmtb($r['sent']).fmtb($r['received']).
fmtb($r['tcp']).fmtb($r['udp']).fmtb($r['icmp']).fmtb($r['http']).
fmtb($r['p2p']).fmtb($r['ftp'])."\n";
}
echo "</table></center>";
// Output Total Graph
for($Counter=0, $Total = 0; $Counter < pg_num_rows($result); $Counter++)
{
$r = pg_fetch_array($result, $Counter);
$scale = max($r['txscale'], $scale);
$scale = max($r['rxscale'], $scale);
}
if ($subnet == "0.0.0.0/0")
$total_table = "bd_tx_total_log";
else
$total_table = "bd_tx_log";
echo "<a name=Total><h3><a href=details.php?sensor_name=$sensor_name&ip=$subnet>";
echo "Total - Total of $subnet</h3>";
echo "</a>";
echo "Send:<br><img src=graph.php?ip=$subnet&interval=$interval&sensor_name=".$sensor_name."&table=$total_table><br>";
echo "<img src=legend.gif><br>\n";
if ($subnet == "0.0.0.0/0")
$total_table = "bd_rx_total_log";
else
$total_table = "bd_rx_log";
echo "Receive:<br><img src=graph.php?ip=$subnet&interval=$interval&sensor_name=".$sensor_name."&table=$total_table><br>";
echo "<img src=legend.gif><br>\n";
// Output Other Graphs
for($Counter=0; $Counter < pg_num_rows($result) && $Counter < $limit; $Counter++)
{
$r = pg_fetch_array($result, $Counter);
echo "<a name=".$r['ip']."><h3><a href=details.php?sensor_name=$sensor_name&ip=".$r['ip'].">";
if ($r['ip'] == "0.0.0.0")
echo "Total - Total of all subnets</h3>";
else
echo $r['ip']." - ".gethostbyaddr($r['ip'])."</h3>";
echo "</a>";
echo "Send:<br><img src=graph.php?ip=".$r['ip']."&interval=$interval&sensor_name=".$sensor_name."&table=bd_tx_log&yscale=".(max($r['txscale'], $r['rxscale']))."><br>";
echo "<img src=legend.gif><br>\n";
echo "Receive:<br><img src=graph.php?ip=".$r['ip']."&interval=$interval&sensor_name=".$sensor_name."&table=bd_rx_log&yscale=".(max($r['txscale'], $r['rxscale']))."><br>";
echo "<img src=legend.gif><br>\n";
}
include('footer.php');
|
