#!/usr/bin/ruby # # Copyright (c) 2006 Peter Palfrader # # Permission is hereby granted, free of charge, to any person obtaining # a copy of this software and associated documentation files (the # "Software"), to deal in the Software without restriction, including # without limitation the rights to use, copy, modify, merge, publish, # distribute, sublicense, and/or sell copies of the Software, and to # permit persons to whom the Software is furnished to do so, subject to # the following conditions: # # The above copyright notice and this permission notice shall be # included in all copies or substantial portions of the Software. # # THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, # EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF # MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND # NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE # LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION # OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION # WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. require 'resolv' require 'optparse' require 'yaml' NAGIOS_STATUS = { :OK => 0, :WARNING => 1, :CRITICAL => 2, :UNKNOWN => -1 }; @verbose = 0; @additional_nameservers = [] def show_help(parser, code=0, io=STDOUT) program_name = File.basename($0, '.*') io.puts "Usage: #{program_name} [options] [ ...]" io.puts parser.summarize exit(code) end ARGV.options do |opts| opts.on_tail("-h", "--help" , "Display this help screen") { show_help(opts) } opts.on("-v", "--verbose" , String, "Be verbose") { @verbose += 1 } opts.on("-a", "--add=HOST" , String, "Also check SOA on ") { |val| @additional_nameservers << val } opts.parse! end show_help(ARGV.options, 1, STDERR) if ARGV.length == 0 warnings = [] oks = [] dns = Resolv::DNS.new ARGV.each{ |domain| serial = [] nameservers = dns.getresources(domain, Resolv::DNS::Resource::IN::NS) nameservernames = nameservers.collect{ |ns| ns.name.to_s } nameservernames = nameservernames.concat @additional_nameservers nameservernames.each{ |nameserver| puts "Testing nameserver #{nameserver} for #{domain}" if @verbose > 0 arecords = dns.getresources(nameserver, Resolv::DNS::Resource::IN::A) warnings << "Nameserver #{nameserver} for #{domain} has #{arecords.length} A records" if arecords.length != 1 arecords.each{ |a| puts " Nameserver #{nameserver} is at #{a.address}" if @verbose > 0 begin resolver = Resolv::DNS.new({:nameserver => a.address.to_s}) soas = resolver.getresources(domain, Resolv::DNS::Resource::IN::SOA) rescue SystemCallError => e warnings << "Could not resolve #{domain} on #{nameserver}: #{e.message}" else resolver.close warnings << "Nameserver #{nameserver} for #{domain} returns #{soas.length} SOAs" if soas.length != 1 soas.each{ |soa| puts " Nameserver #{nameserver} returns serial #{soa.serial} for #{domain}" if @verbose > 0 serial << soa.serial unless serial.include? soa.serial } end } } case serial.length when 0 warnings << "Found no serials for #{domain}" when 1 oks << "#{domain} is at #{serial.first}" else warnings << "Nameservers disagree on serials for #{domain}: found #{serial.join(', ')}" if serial.length != 1 end } dns.close if warnings.length > 0 puts warnings.join('; ') exit NAGIOS_STATUS[:WARNING] else puts oks.join('; ') exit NAGIOS_STATUS[:OK] end