#!/usr/bin/perl

##############################################################################

#

# cisco_ip_acc_collect.pl 

# (c) 1999 by Dolphins Network Systems, Matthias Cramer <cramer@dolphins.ch>

#

# Licence: LGPL

#

##############################################################################

#

# This Script is very loosly based on whodo from Tony Farr

#

# This Script gets IP-accounting data from a Cisco Router

# In the network file you can define networks which you like to analyse.

#

# Special modules : Net::Netmask, SNMP_util

#

##############################################################################

#

# Version History

#  V0.9            First Public Release

#

##############################################################################

use Getopt::Std;

use File::Basename;

use Net::Netmask;

use strict;

use Socket;

# Adjust this path to where you MRTG resides, so that SNMP_util

# can be found.

use lib "/usr/local/mrtg";

use SNMP_util;

#

# Some variables to adjust.

#

# The write community of your router

my $HOST= 'writecommunity@router';

# Where is your network file

my $NETWORK = "/usr/local/mrtg/cisco_ipaccounting/networks";

# Where to write the accounting info

my $OUTDIR  = "/usr/local/mrtg/cisco_ipaccounting/";

# Below here you should have to be changed

my %network;

my %in;

my %out;

open (NET, $NETWORK);

my $line;

my $block;

while ($line = <NET>) {

  $line =~ /(.+?)[\s]+(.+)/;

  my $name = $2;

  $block=new Net::Netmask($1);

  $block->storeNetblock();

  $in{$block->base()}=0;

  $out{$block->base()}=0;

  $network{$name} .= $block->base() . ":";

}

&checkpoint_stats($HOST);

&get_stats($HOST);

# print "Base       \tIn\tOut\n";

#   print "$base\t$in{$base}\t$out{$base}\n";

foreach my $k_network (keys %network) {

   my @base = split(/:/, $network{$k_network});

   my $base_in = 0;

   my $base_out = 0;

   foreach my $i_base (@base) {

     $base_in  += $in{$i_base};

     $base_out += $out{$i_base};

   }

   open(OUT, ">$OUTDIR"."log_"."$k_network");

   print OUT "$base_in\n";

   print OUT "$base_out\n";

   print OUT "\n";

   print OUT "$k_network\n";

   close (OUT);

}

sub checkpoint_stats {

# Take a checkpoint on IP accounting on the given router & return the duration

# The checkpoint is done by doing a get  then a set on actCheckPoint

        my ($age);

        # Find how long since the last checkpoint

        ($age) = snmpget ($_[0], '1.3.6.1.4.1.9.2.4.8.0');

        warn "No actAge returned.\n" unless $age;

        # Check to see if we've lost any data

        ($_) = snmpget ($_[0], '1.3.6.1.4.1.9.2.4.6.0');

        warn "Accounting table overflow - $_ bytes lost.\n" if $_ > 0;

        # Do a new checkpoint

        ($_) = snmpget ($_[0], '1.3.6.1.4.1.9.2.4.11.0');

        die "No actCheckPoint returned.\n" unless defined;

        snmpset ($_[0], '1.3.6.1.4.1.9.2.4.11.0', 'integer', $_);

        $age;

}

sub get_stats {

# Summarise the checkpoint by destination network (not host).

# Summary is placed into %traffictab - a hash of hashes indexed by

# source device & destination network.

	my($src, $dst,$traffic);

	my @response = snmpwalk ($_[0], '1.3.6.1.4.1.9.2.4.9.1.4' );

	foreach $_ (@response) {

		/(\d+\.\d+\.\d+\.\d+)\.(\d+\.\d+\.\d+\.\d+):(\d+)/ ||

			die "Cannot parse response from walk.\n";

		$dst=$2;

		$src=$1;

		$traffic=$3;

		$block = findNetblock($src);

		if ($block) {

                   $out{$block->base()} += $traffic;

                }

		$block = findNetblock($dst);

		if ($block) {

                   $in{$block->base()} += $traffic;

                }

	}

}