Skip to content

Instantly share code, notes, and snippets.

@mikluko
mikluko / traffic-report.py
Created March 2, 2011 15:21
traffic reports out of ulog-acctd logs
#!/usr/bin/env python
'''
/etc/shorewall/rules::
SECTION ESTABLISHED
LOG:ULOG loc net
LOG:ULOG net loc
SECTION RELATED
LOG:ULOG loc net
from functools import partial
from multiprocessing import Pool
import sys
def power(x, pwr=2):
return x**pwr
def uncurry(r):
return power(r[0], **r[1])
@mikluko
mikluko / traffic-report.py
Created March 11, 2011 08:03
multiprocess version of ulog-acctd logs parser
#!/usr/bin/env python
'''
/etc/shorewall/rules::
SECTION ESTABLISHED
LOG:ULOG all net
LOG:ULOG net all
SECTION RELATED
LOG:ULOG all net
@mikluko
mikluko / zz-backup
Created April 6, 2011 12:59
duplicity wrapper
#!/bin/bash
export AWS_ACCESS_KEY_ID=
export AWS_SECRET_ACCESS_KEY=
export PASSPHRASE=
LOCATION=
BACKUP_OPTIONS="
--exclude=**/.cache \
--include=/etc \
We couldn’t find that file to show.
try:
LOCAL_INSTALLED_APPS = LOCAL_MIDDLEWARE_CLASSES = tuple()
from local_settings import * # pylint: disable=W0401,W0614
INSTALLED_APPS += LOCAL_INSTALLED_APPS
MIDDLEWARE_CLASSES += LOCAL_MIDDLEWARE_CLASSES
except ImportError:
pass
@mikluko
mikluko / .vimrc
Created May 26, 2011 19:00
simple vimrc
if !exists("syntax_on")
syntax on
endif
set number
set tabstop=4
set softtabstop=4
set expandtab
@mikluko
mikluko / logcheck_duplicity
Created January 19, 2012 08:40
duplicity logcheck rules
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: Last full backup is too old, forcing full backup$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: Local and Remote metadata are synchronized, no sync needed\.$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: No old backup sets found, nothing deleted\.$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: No extraneous files found, nothing deleted in cleanup\.$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: Last full backup date: \w{3} \w{3} [ :[:digit:]]{16}$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: --------------\[ Backup Statistics \]--------------$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: -------------------------------------------------$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ duplicity: (StartTime|EndTime|ElapsedTime|SourceFiles|SourceFileSize|NewFiles|NewFileSize|DeletedFiles|ChangedFiles|ChangedFileSize|ChangedDeltaSize|DeltaEntries|RawDeltaSize|TotalDestinationSizeChange) .+$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+
@mikluko
mikluko / logcheck_ssh
Created January 19, 2012 12:55
ssh logcheck rules (LogLevel VERBOSE)
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Set /proc/self/oom_adj to [[:digit:]]+$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection from [:[:xdigit:].]+ port [[:digit:]]{1,5}$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Found matching (RSA|DSA) key: [[:xdigit:]:]{47}$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Failed publickey for [[:alnum:]]+ from [:[:xdigit:].]+ port [[:digit:]]{1,5} ssh2$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Read error from remote host [.[:xdigit:]:]+: Connection timed out$
^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: User child is on pid [[:digit:]]{1,5}$
@mikluko
mikluko / etc_monit_conf.d_local
Created May 21, 2012 11:12
Monit config to monitor and keep alive ppp connection
set mailserver localhost
set daemon 120 with start delay 240
set logfile syslog facility log_daemon
set httpd port 2812
allow localhost
set alert noreply@example.com
check host internet with address 80.254.111.254
if failed icmp type echo count 5 with timeout 30 seconds