Initial version

This commit is contained in:
Benjamin Renard 2021-05-12 11:23:30 +02:00
commit 205277d08e
3 changed files with 125 additions and 0 deletions

2
.gitignore vendored Normal file
View file

@ -0,0 +1,2 @@
*~
.*.swp

47
README.md Normal file
View file

@ -0,0 +1,47 @@
# Icinga/Nagios plugin to check Clamav daemon
This script could be used as Icinga/Nagios check plugin to check Clamav daemon status.
This script use *clamdscan* utility to check a file and verify Clamav daemon status.
## Installation
```
apt-get install clamdscan
git clone https://gogs.zionetrix.net/bn8/check_clamd.git /usr/local/src/check_clamd
mkdir -p /usr/local/lib/nagios/plugins
ln -s /usr/local/src/check_mdb/check_clamd /usr/local/lib/nagios/plugins/
echo "command[check_clamd]=/usr/local/lib/nagios/plugins/check_clamd" > /etc/nagios/nrpe.d/clamd.cfg
service nagios-nrpe-server reload
```
## Usage
```
Usage : check_clamd [-d] [-h] [options]
-c Path to clamdscan (Default : auto-detected)
-f Path of the file to check with clamdscan (Default : /etc/mtab)
-d Debug mode
-h Show this message
```
## Copyright
Copyright (c) 2021 Benjamin Renard
## License
This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License version 3
as published by the Free Software Foundation.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

76
check_clamd Executable file
View file

@ -0,0 +1,76 @@
#!/bin/bash
#
# Nagios plugin to check clamav daemon status
#
# Author : Benjamin Renard <brenard@easter-eggs.com>
# Date : Wed, 12 Jun 2019 13:15:33 +0200
# Source : http://gogs.zionetrix.net/check_clamd
#
CLAMDSCAN=clamdscan
FILE_TO_CHECK="/etc/mtab"
DEBUG=0
function debug() {
if [ $DEBUG -eq 1 ]
then
>&2 echo -e "[DEBUG] $1"
fi
}
function usage() {
cat << EOF
Usage : $0 [-d] [-h] [options]
-c Path to clamdscan (Default : auto-detected)
-f Path of the file to check with clamdscan (Default : $FILE_TO_CHECK)
-d Debug mode
-h Show this message
EOF
}
while getopts "hf:c:n:d" OPTION
do
case $OPTION in
f)
FILE_TO_CHECK=$OPTARG
;;
c)
CLAMDSCAN=$OPTARG
;;
d)
DEBUG=1
;;
h)
usage
exit 0
;;
*)
echo "Unkown option '$OPTION'"
usage
exit 1
esac
done
CMD="$CLAMDSCAN --stream --stdout --infected --no-summary $FILE_TO_CHECK"
debug "clamdscan command = '$CMD'"
ERRORS=$( $CMD 2>&1 )
EXITCODE=$?
debug "clamdscan exit code = $EXITCODE"
debug "clamdscan output =\n$ERRORS"
if [ $EXITCODE -ne 0 ]
then
echo "CRITICAL - clamdscan exit with $EXITCODE"
[ -n "$ERRORS" ] && echo -e "clamdscan return:\n$ERRORS"
exit 2
elif [ -z "$ERRORS" ]
then
echo "OK - Clamav daemon is running and answer to scan request"
exit 0
else
echo "WARNING - clamdscan return some errors checking $FILE_TO_CHECK file"
echo -e "$ERRORS"
exit 1
fi