summaryrefslogtreecommitdiffstats
path: root/plugins/check_ssh.c
diff options
context:
space:
mode:
Diffstat (limited to 'plugins/check_ssh.c')
-rw-r--r--plugins/check_ssh.c523
1 files changed, 287 insertions, 236 deletions
diff --git a/plugins/check_ssh.c b/plugins/check_ssh.c
index 34ef37b7..f6c8d551 100644
--- a/plugins/check_ssh.c
+++ b/plugins/check_ssh.c
@@ -1,103 +1,107 @@
1/***************************************************************************** 1/*****************************************************************************
2* 2 *
3* Monitoring check_ssh plugin 3 * Monitoring check_ssh plugin
4* 4 *
5* License: GPL 5 * License: GPL
6* Copyright (c) 2000-2007 Monitoring Plugins Development Team 6 * Copyright (c) 2000-2024 Monitoring Plugins Development Team
7* 7 *
8* Description: 8 * Description:
9* 9 *
10* This file contains the check_ssh plugin 10 * This file contains the check_ssh plugin
11* 11 *
12* Try to connect to an SSH server at specified server and port 12 * Try to connect to an SSH server at specified server and port
13* 13 *
14* 14 *
15* This program is free software: you can redistribute it and/or modify 15 * This program is free software: you can redistribute it and/or modify
16* it under the terms of the GNU General Public License as published by 16 * it under the terms of the GNU General Public License as published by
17* the Free Software Foundation, either version 3 of the License, or 17 * the Free Software Foundation, either version 3 of the License, or
18* (at your option) any later version. 18 * (at your option) any later version.
19* 19 *
20* This program is distributed in the hope that it will be useful, 20 * This program is distributed in the hope that it will be useful,
21* but WITHOUT ANY WARRANTY; without even the implied warranty of 21 * but WITHOUT ANY WARRANTY; without even the implied warranty of
22* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 22 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
23* GNU General Public License for more details. 23 * GNU General Public License for more details.
24* 24 *
25* You should have received a copy of the GNU General Public License 25 * You should have received a copy of the GNU General Public License
26* along with this program. If not, see <http://www.gnu.org/licenses/>. 26 * along with this program. If not, see <http://www.gnu.org/licenses/>.
27* 27 *
28* 28 *
29*****************************************************************************/ 29 *****************************************************************************/
30 30
31#include "output.h"
32#include "perfdata.h"
33#include "states.h"
31const char *progname = "check_ssh"; 34const char *progname = "check_ssh";
32const char *copyright = "2000-2007"; 35const char *copyright = "2000-2024";
33const char *email = "devel@monitoring-plugins.org"; 36const char *email = "devel@monitoring-plugins.org";
34 37
35#include "./common.h" 38#include "./common.h"
36#include "./netutils.h" 39#include "./netutils.h"
37#include "utils.h" 40#include "utils.h"
41#include "./check_ssh.d/config.h"
38 42
39#ifndef MSG_DONTWAIT 43#ifndef MSG_DONTWAIT
40#define MSG_DONTWAIT 0 44# define MSG_DONTWAIT 0
41#endif 45#endif
42 46
43#define SSH_DFL_PORT 22 47#define BUFF_SZ 256
44#define BUFF_SZ 256
45
46int port = -1;
47char *server_name = NULL;
48char *remote_version = NULL;
49char *remote_protocol = NULL;
50bool verbose = false;
51 48
52int process_arguments (int, char **); 49static bool verbose = false;
53int validate_arguments (void);
54void print_help (void);
55void print_usage (void);
56 50
57int ssh_connect (char *haddr, int hport, char *remote_version, char *remote_protocol); 51typedef struct process_arguments_wrapper {
52 int errorcode;
53 check_ssh_config config;
54} process_arguments_wrapper;
58 55
56static process_arguments_wrapper process_arguments(int /*argc*/, char ** /*argv*/);
57static void print_help(void);
58void print_usage(void);
59 59
60int 60static int ssh_connect(mp_check *overall, char *haddr, int hport, char *remote_version,
61main (int argc, char **argv) 61 char *remote_protocol);
62{
63 int result = STATE_UNKNOWN;
64 62
65 setlocale (LC_ALL, ""); 63int main(int argc, char **argv) {
66 bindtextdomain (PACKAGE, LOCALEDIR); 64 setlocale(LC_ALL, "");
67 textdomain (PACKAGE); 65 bindtextdomain(PACKAGE, LOCALEDIR);
66 textdomain(PACKAGE);
68 67
69 /* Parse extra opts if any */ 68 /* Parse extra opts if any */
70 argv=np_extra_opts (&argc, argv, progname); 69 argv = np_extra_opts(&argc, argv, progname);
71 70
72 if (process_arguments (argc, argv) == ERROR) 71 process_arguments_wrapper tmp_config = process_arguments(argc, argv);
73 usage4 (_("Could not parse arguments"));
74 72
75 /* initialize alarm signal handling */ 73 if (tmp_config.errorcode == ERROR) {
76 signal (SIGALRM, socket_timeout_alarm_handler); 74 usage4(_("Could not parse arguments"));
75 }
77 76
78 alarm (socket_timeout); 77 check_ssh_config config = tmp_config.config;
78
79 mp_check overall = mp_check_init();
80 if (config.output_format_is_set) {
81 mp_set_format(config.output_format);
82 }
83
84 /* initialize alarm signal handling */
85 signal(SIGALRM, socket_timeout_alarm_handler);
86 alarm(socket_timeout);
79 87
80 /* ssh_connect exits if error is found */ 88 /* ssh_connect exits if error is found */
81 result = ssh_connect (server_name, port, remote_version, remote_protocol); 89 ssh_connect(&overall, config.server_name, config.port, config.remote_version,
90 config.remote_protocol);
82 91
83 alarm (0); 92 alarm(0);
84 93
85 return (result); 94 mp_exit(overall);
86} 95}
87 96
88 97#define output_format_index CHAR_MAX + 1
89 98
90/* process command-line arguments */ 99/* process command-line arguments */
91int 100process_arguments_wrapper process_arguments(int argc, char **argv) {
92process_arguments (int argc, char **argv)
93{
94 int c;
95
96 int option = 0;
97 static struct option longopts[] = { 101 static struct option longopts[] = {
98 {"help", no_argument, 0, 'h'}, 102 {"help", no_argument, 0, 'h'},
99 {"version", no_argument, 0, 'V'}, 103 {"version", no_argument, 0, 'V'},
100 {"host", required_argument, 0, 'H'}, /* backward compatibility */ 104 {"host", required_argument, 0, 'H'}, /* backward compatibility */
101 {"hostname", required_argument, 0, 'H'}, 105 {"hostname", required_argument, 0, 'H'},
102 {"port", required_argument, 0, 'p'}, 106 {"port", required_argument, 0, 'p'},
103 {"use-ipv4", no_argument, 0, '4'}, 107 {"use-ipv4", no_argument, 0, '4'},
@@ -106,39 +110,52 @@ process_arguments (int argc, char **argv)
106 {"verbose", no_argument, 0, 'v'}, 110 {"verbose", no_argument, 0, 'v'},
107 {"remote-version", required_argument, 0, 'r'}, 111 {"remote-version", required_argument, 0, 'r'},
108 {"remote-protocol", required_argument, 0, 'P'}, 112 {"remote-protocol", required_argument, 0, 'P'},
109 {0, 0, 0, 0} 113 {"output-format", required_argument, 0, output_format_index},
114 {0, 0, 0, 0}};
115
116 process_arguments_wrapper result = {
117 .config = check_ssh_config_init(),
118 .errorcode = OK,
110 }; 119 };
111 120
112 if (argc < 2) 121 if (argc < 2) {
113 return ERROR; 122 result.errorcode = ERROR;
123 return result;
124 }
114 125
115 for (c = 1; c < argc; c++) 126 for (int i = 1; i < argc; i++) {
116 if (strcmp ("-to", argv[c]) == 0) 127 if (strcmp("-to", argv[i]) == 0) {
117 strcpy (argv[c], "-t"); 128 strcpy(argv[i], "-t");
129 }
130 }
118 131
119 while (1) { 132 int option_char;
120 c = getopt_long (argc, argv, "+Vhv46t:r:H:p:P:", longopts, &option); 133 while (true) {
134 int option = 0;
135 option_char = getopt_long(argc, argv, "+Vhv46t:r:H:p:P:", longopts, &option);
121 136
122 if (c == -1 || c == EOF) 137 if (option_char == -1 || option_char == EOF) {
123 break; 138 break;
139 }
124 140
125 switch (c) { 141 switch (option_char) {
126 case '?': /* help */ 142 case '?': /* help */
127 usage5 (); 143 usage5();
128 case 'V': /* version */ 144 case 'V': /* version */
129 print_revision (progname, NP_VERSION); 145 print_revision(progname, NP_VERSION);
130 exit (STATE_UNKNOWN); 146 exit(STATE_UNKNOWN);
131 case 'h': /* help */ 147 case 'h': /* help */
132 print_help (); 148 print_help();
133 exit (STATE_UNKNOWN); 149 exit(STATE_UNKNOWN);
134 case 'v': /* verbose */ 150 case 'v': /* verbose */
135 verbose = true; 151 verbose = true;
136 break; 152 break;
137 case 't': /* timeout period */ 153 case 't': /* timeout period */
138 if (!is_integer (optarg)) 154 if (!is_intpos(optarg)) {
139 usage2 (_("Timeout interval must be a positive integer"), optarg); 155 usage2(_("Timeout interval must be a positive integer"), optarg);
140 else 156 } else {
141 socket_timeout = atoi (optarg); 157 socket_timeout = (unsigned int)atoi(optarg);
158 }
142 break; 159 break;
143 case '4': 160 case '4':
144 address_family = AF_INET; 161 address_family = AF_INET;
@@ -147,139 +164,153 @@ process_arguments (int argc, char **argv)
147#ifdef USE_IPV6 164#ifdef USE_IPV6
148 address_family = AF_INET6; 165 address_family = AF_INET6;
149#else 166#else
150 usage4 (_("IPv6 support not available")); 167 usage4(_("IPv6 support not available"));
151#endif 168#endif
152 break; 169 break;
153 case 'r': /* remote version */ 170 case 'r': /* remote version */
154 remote_version = optarg; 171 result.config.remote_version = optarg;
155 break; 172 break;
156 case 'P': /* remote version */ 173 case 'P': /* remote version */
157 remote_protocol = optarg; 174 result.config.remote_protocol = optarg;
158 break; 175 break;
159 case 'H': /* host */ 176 case 'H': /* host */
160 if (!is_host (optarg)) 177 if (!is_host(optarg)) {
161 usage2 (_("Invalid hostname/address"), optarg); 178 usage2(_("Invalid hostname/address"), optarg);
162 server_name = optarg; 179 }
180 result.config.server_name = optarg;
163 break; 181 break;
164 case 'p': /* port */ 182 case 'p': /* port */
165 if (is_intpos (optarg)) { 183 if (is_intpos(optarg)) {
166 port = atoi (optarg); 184 result.config.port = atoi(optarg);
185 } else {
186 usage2(_("Port number must be a positive integer"), optarg);
167 } 187 }
168 else { 188 break;
169 usage2 (_("Port number must be a positive integer"), optarg); 189 case output_format_index: {
190 parsed_output_format parser = mp_parse_output_format(optarg);
191 if (!parser.parsing_success) {
192 // TODO List all available formats here, maybe add anothoer usage function
193 printf("Invalid output format: %s\n", optarg);
194 exit(STATE_UNKNOWN);
170 } 195 }
196
197 result.config.output_format_is_set = true;
198 result.config.output_format = parser.output_format;
199 break;
200 }
171 } 201 }
172 } 202 }
173 203
174 c = optind; 204 option_char = optind;
175 if (server_name == NULL && c < argc) { 205 if (result.config.server_name == NULL && option_char < argc) {
176 if (is_host (argv[c])) { 206 if (is_host(argv[option_char])) {
177 server_name = argv[c++]; 207 result.config.server_name = argv[option_char++];
178 } 208 }
179 } 209 }
180 210
181 if (port == -1 && c < argc) { 211 if (result.config.port == -1 && option_char < argc) {
182 if (is_intpos (argv[c])) { 212 if (is_intpos(argv[option_char])) {
183 port = atoi (argv[c++]); 213 result.config.port = atoi(argv[option_char++]);
184 } 214 } else {
185 else { 215 print_usage();
186 print_usage (); 216 exit(STATE_UNKNOWN);
187 exit (STATE_UNKNOWN);
188 } 217 }
189 } 218 }
190 219
191 return validate_arguments (); 220 if (result.config.server_name == NULL) {
192} 221 result.errorcode = ERROR;
222 return result;
223 }
193 224
194int 225 return result;
195validate_arguments (void)
196{
197 if (server_name == NULL)
198 return ERROR;
199 if (port == -1) /* funky, but allows -p to override stray integer in args */
200 port = SSH_DFL_PORT;
201 return OK;
202} 226}
203 227
204
205/************************************************************************ 228/************************************************************************
206* 229 *
207* Try to connect to SSH server at specified server and port 230 * Try to connect to SSH server at specified server and port
208* 231 *
209*-----------------------------------------------------------------------*/ 232 *-----------------------------------------------------------------------*/
210
211
212int
213ssh_connect (char *haddr, int hport, char *remote_version, char *remote_protocol)
214{
215 int sd;
216 int result;
217 int len = 0;
218 ssize_t recv_ret = 0;
219 char *version_control_string = NULL;
220 char *buffer = NULL;
221 char *ssh_proto = NULL;
222 char *ssh_server = NULL;
223 static char *rev_no = VERSION;
224 struct timeval tv;
225 double elapsed_time;
226 233
234int ssh_connect(mp_check *overall, char *haddr, int hport, char *desired_remote_version,
235 char *desired_remote_protocol) {
236 struct timeval tv;
227 gettimeofday(&tv, NULL); 237 gettimeofday(&tv, NULL);
228 238
229 result = my_tcp_connect (haddr, hport, &sd); 239 int socket;
240 int result = my_tcp_connect(haddr, hport, &socket);
230 241
231 if (result != STATE_OK) 242 mp_subcheck connection_sc = mp_subcheck_init();
243 if (result != STATE_OK) {
244 connection_sc = mp_set_subcheck_state(connection_sc, STATE_CRITICAL);
245 xasprintf(&connection_sc.output,
246 "Failed to establish TCP connection to Host %s and Port %d", haddr, hport);
247 mp_add_subcheck_to_check(overall, connection_sc);
232 return result; 248 return result;
249 }
233 250
234 char *output = (char *) calloc (BUFF_SZ + 1, sizeof(char)); 251 char *output = (char *)calloc(BUFF_SZ + 1, sizeof(char));
235 252 char *buffer = NULL;
236 unsigned int iteration = 0; 253 ssize_t recv_ret = 0;
237 ssize_t byte_offset = 0; 254 char *version_control_string = NULL;
238 255 size_t byte_offset = 0;
239 while ((version_control_string == NULL) && (recv_ret = recv(sd, output+byte_offset, BUFF_SZ - byte_offset, 0) > 0)) { 256 while ((version_control_string == NULL) &&
257 (recv_ret = recv(socket, output + byte_offset, (unsigned long)(BUFF_SZ - byte_offset),
258 0) > 0)) {
240 259
241 if (strchr(output, '\n')) { /* we've got at least one full line, start parsing*/ 260 if (strchr(output, '\n')) { /* we've got at least one full line, start parsing*/
242 byte_offset = 0; 261 byte_offset = 0;
243 262
244 char *index = NULL; 263 char *index = NULL;
245 while ((index = strchr(output+byte_offset, '\n')) != NULL) { 264 while ((index = strchr(output + byte_offset, '\n')) != NULL) {
246 /*Partition the buffer so that this line is a separate string, 265 /*Partition the buffer so that this line is a separate string,
247 * by replacing the newline with NUL*/ 266 * by replacing the newline with NUL*/
248 output[(index - output)] = '\0'; 267 output[(index - output)] = '\0';
249 len = strlen(output + byte_offset); 268 size_t len = strlen(output + byte_offset);
250 269
251 if ((len >= 4) && (strncmp (output+byte_offset, "SSH-", 4) == 0)) { 270 if ((len >= 4) && (strncmp(output + byte_offset, "SSH-", 4) == 0)) {
252 /*if the string starts with SSH-, this _should_ be a valid version control string*/ 271 /*if the string starts with SSH-, this _should_ be a valid version control
253 version_control_string = output+byte_offset; 272 * string*/
254 break; 273 version_control_string = output + byte_offset;
274 break;
255 } 275 }
256 276
257 /*the start of the next line (if one exists) will be after the current one (+ NUL)*/ 277 /*the start of the next line (if one exists) will be after the current one (+ NUL)*/
258 byte_offset += (len + 1); 278 byte_offset += (len + 1);
259 } 279 }
260 280
261 if(version_control_string == NULL) { 281 if (version_control_string == NULL) {
262 /* move unconsumed data to beginning of buffer, null rest */ 282 /* move unconsumed data to beginning of buffer */
263 memmove((void *)output, (void *)output+byte_offset+1, BUFF_SZ - len+1); 283 memmove((void *)output, (void *)(output + byte_offset), BUFF_SZ - byte_offset);
264 memset(output+byte_offset+1, 0, BUFF_SZ-byte_offset+1);
265 284
266 /*start reading from end of current line chunk on next recv*/ 285 /*start reading from end of current line chunk on next recv*/
267 byte_offset = strlen(output); 286 byte_offset = strlen(output);
287
288 /* NUL the rest of the buffer */
289 memset(output + byte_offset, 0, BUFF_SZ - byte_offset);
268 } 290 }
269 } else { 291 } else {
270 byte_offset += recv_ret; 292 byte_offset += (size_t)recv_ret;
271 } 293 }
272 } 294 }
273 295
274 if (recv_ret < 0) { 296 if (recv_ret < 0) {
275 printf("SSH CRITICAL - %s", strerror(errno)); 297 connection_sc = mp_set_subcheck_state(connection_sc, STATE_CRITICAL);
276 exit(STATE_CRITICAL); 298 xasprintf(&connection_sc.output, "%s - %s", "SSH CRITICAL - ", strerror(errno));
299 mp_add_subcheck_to_check(overall, connection_sc);
300 return OK;
277 } 301 }
278 302
279 if (version_control_string == NULL) { 303 if (version_control_string == NULL) {
280 printf("SSH CRITICAL - No version control string received"); 304 connection_sc = mp_set_subcheck_state(connection_sc, STATE_CRITICAL);
281 exit(STATE_CRITICAL); 305 xasprintf(&connection_sc.output, "%s", "SSH CRITICAL - No version control string received");
306 mp_add_subcheck_to_check(overall, connection_sc);
307 return OK;
282 } 308 }
309
310 connection_sc = mp_set_subcheck_state(connection_sc, STATE_OK);
311 xasprintf(&connection_sc.output, "%s", "Initial connection succeeded");
312 mp_add_subcheck_to_check(overall, connection_sc);
313
283 /* 314 /*
284 * "When the connection has been established, both sides MUST send an 315 * "When the connection has been established, both sides MUST send an
285 * identification string. This identification string MUST be 316 * identification string. This identification string MUST be
@@ -287,10 +318,12 @@ ssh_connect (char *haddr, int hport, char *remote_version, char *remote_protocol
287 * SSH-protoversion-softwareversion SP comments CR LF" 318 * SSH-protoversion-softwareversion SP comments CR LF"
288 * - RFC 4253:4.2 319 * - RFC 4253:4.2
289 */ 320 */
290 strip (version_control_string); 321 strip(version_control_string);
291 if (verbose) 322 if (verbose) {
292 printf ("%s\n", version_control_string); 323 printf("%s\n", version_control_string);
293 ssh_proto = version_control_string + 4; 324 }
325
326 char *ssh_proto = version_control_string + 4;
294 327
295 /* 328 /*
296 * We assume the protoversion is of the form Major.Minor, although 329 * We assume the protoversion is of the form Major.Minor, although
@@ -308,7 +341,8 @@ ssh_connect (char *haddr, int hport, char *remote_version, char *remote_protocol
308 * "1.x" (e.g., "1.5" or "1.3")." 341 * "1.x" (e.g., "1.5" or "1.3")."
309 * - RFC 4253:5 342 * - RFC 4253:5
310 */ 343 */
311 ssh_server = ssh_proto + strspn (ssh_proto, "0123456789.") + 1; /* (+1 for the '-' separating protoversion from softwareversion) */ 344 char *ssh_server = ssh_proto + strspn(ssh_proto, "0123456789.") +
345 1; /* (+1 for the '-' separating protoversion from softwareversion) */
312 346
313 /* If there's a space in the version string, whatever's after the space is a comment 347 /* If there's a space in the version string, whatever's after the space is a comment
314 * (which is NOT part of the server name/version)*/ 348 * (which is NOT part of the server name/version)*/
@@ -316,88 +350,105 @@ ssh_connect (char *haddr, int hport, char *remote_version, char *remote_protocol
316 if (tmp) { 350 if (tmp) {
317 ssh_server[tmp - ssh_server] = '\0'; 351 ssh_server[tmp - ssh_server] = '\0';
318 } 352 }
353
354 mp_subcheck protocol_validity_sc = mp_subcheck_init();
319 if (strlen(ssh_proto) == 0 || strlen(ssh_server) == 0) { 355 if (strlen(ssh_proto) == 0 || strlen(ssh_server) == 0) {
320 printf(_("SSH CRITICAL - Invalid protocol version control string %s\n"), version_control_string); 356 protocol_validity_sc = mp_set_subcheck_state(protocol_validity_sc, STATE_CRITICAL);
321 exit (STATE_CRITICAL); 357 xasprintf(&protocol_validity_sc.output, "Invalid protocol version control string %s",
358 version_control_string);
359 mp_add_subcheck_to_check(overall, protocol_validity_sc);
360 return OK;
322 } 361 }
323 ssh_proto[strspn (ssh_proto, "0123456789. ")] = 0; 362
324 363 protocol_validity_sc = mp_set_subcheck_state(protocol_validity_sc, STATE_OK);
325 xasprintf (&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, rev_no); 364 xasprintf(&protocol_validity_sc.output, "Valid protocol version control string %s",
326 send (sd, buffer, strlen (buffer), MSG_DONTWAIT); 365 version_control_string);
327 if (verbose) 366 mp_add_subcheck_to_check(overall, protocol_validity_sc);
328 printf ("%s\n", buffer); 367
329 368 ssh_proto[strspn(ssh_proto, "0123456789. ")] = 0;
330 if (remote_version && strcmp(remote_version, ssh_server)) { 369
331 printf 370 static char *rev_no = VERSION;
332 (_("SSH CRITICAL - %s (protocol %s) version mismatch, expected '%s'\n"), 371 xasprintf(&buffer, "SSH-%s-check_ssh_%s\r\n", ssh_proto, rev_no);
333 ssh_server, ssh_proto, remote_version); 372 send(socket, buffer, strlen(buffer), MSG_DONTWAIT);
334 close(sd); 373 if (verbose) {
335 exit (STATE_CRITICAL); 374 printf("%s\n", buffer);
336 } 375 }
337 376
338 if (remote_protocol && strcmp(remote_protocol, ssh_proto)) { 377 if (desired_remote_version && strcmp(desired_remote_version, ssh_server)) {
339 printf 378 mp_subcheck remote_version_sc = mp_subcheck_init();
340 (_("SSH CRITICAL - %s (protocol %s) protocol version mismatch, expected '%s' | %s\n"), 379 remote_version_sc = mp_set_subcheck_state(remote_version_sc, STATE_CRITICAL);
341 ssh_server, ssh_proto, remote_protocol, fperfdata("time", elapsed_time, "s", 380 xasprintf(&remote_version_sc.output, _("%s (protocol %s) version mismatch, expected '%s'"),
342 false, 0, false, 0, true, 0, true, (int)socket_timeout)); 381 ssh_server, ssh_proto, desired_remote_version);
343 close(sd); 382 close(socket);
344 exit (STATE_CRITICAL); 383 mp_add_subcheck_to_check(overall, remote_version_sc);
384 return OK;
345 } 385 }
346 elapsed_time = (double)deltime(tv) / 1.0e6;
347
348 printf
349 (_("SSH OK - %s (protocol %s) | %s\n"),
350 ssh_server, ssh_proto, fperfdata("time", elapsed_time, "s",
351 false, 0, false, 0, true, 0, true, (int)socket_timeout));
352 close(sd);
353 exit (STATE_OK);
354}
355 386
387 double elapsed_time = (double)deltime(tv) / 1.0e6;
388 mp_perfdata time_pd = perfdata_init();
389 time_pd.value = mp_create_pd_value(elapsed_time);
390 time_pd.label = "time";
391 time_pd.max_present = true;
392 time_pd.max = mp_create_pd_value(socket_timeout);
393
394 mp_subcheck protocol_version_sc = mp_subcheck_init();
395 mp_add_perfdata_to_subcheck(&protocol_version_sc, time_pd);
396
397 if (desired_remote_protocol && strcmp(desired_remote_protocol, ssh_proto)) {
398 protocol_version_sc = mp_set_subcheck_state(protocol_version_sc, STATE_CRITICAL);
399 xasprintf(&protocol_version_sc.output,
400 _("%s (protocol %s) protocol version mismatch, expected '%s'"), ssh_server,
401 ssh_proto, desired_remote_protocol);
402 } else {
403 protocol_version_sc = mp_set_subcheck_state(protocol_version_sc, STATE_OK);
404 xasprintf(&protocol_version_sc.output, "SSH server version: %s (protocol version: %s)",
405 ssh_server, ssh_proto);
406 }
356 407
408 mp_add_subcheck_to_check(overall, protocol_version_sc);
409 close(socket);
410 return OK;
411}
357 412
358void 413void print_help(void) {
359print_help (void)
360{
361 char *myport; 414 char *myport;
362 xasprintf (&myport, "%d", SSH_DFL_PORT); 415 xasprintf(&myport, "%d", default_ssh_port);
363 416
364 print_revision (progname, NP_VERSION); 417 print_revision(progname, NP_VERSION);
365 418
366 printf ("Copyright (c) 1999 Remi Paulmier <remi@sinfomic.fr>\n"); 419 printf("Copyright (c) 1999 Remi Paulmier <remi@sinfomic.fr>\n");
367 printf (COPYRIGHT, copyright, email); 420 printf(COPYRIGHT, copyright, email);
368 421
369 printf ("%s\n", _("Try to connect to an SSH server at specified server and port")); 422 printf("%s\n", _("Try to connect to an SSH server at specified server and port"));
370 423
371 printf ("\n\n"); 424 printf("\n\n");
372 425
373 print_usage (); 426 print_usage();
374 427
375 printf (UT_HELP_VRSN); 428 printf(UT_HELP_VRSN);
376 printf (UT_EXTRA_OPTS); 429 printf(UT_EXTRA_OPTS);
377 430
378 printf (UT_HOST_PORT, 'p', myport); 431 printf(UT_HOST_PORT, 'p', myport);
379 432
380 printf (UT_IPv46); 433 printf(UT_IPv46);
381 434
382 printf (UT_CONN_TIMEOUT, DEFAULT_SOCKET_TIMEOUT); 435 printf(UT_CONN_TIMEOUT, DEFAULT_SOCKET_TIMEOUT);
383 436
384 printf (" %s\n", "-r, --remote-version=STRING"); 437 printf(" %s\n", "-r, --remote-version=STRING");
385 printf (" %s\n", _("Alert if string doesn't match expected server version (ex: OpenSSH_3.9p1)")); 438 printf(" %s\n",
439 _("Alert if string doesn't match expected server version (ex: OpenSSH_3.9p1)"));
386 440
387 printf (" %s\n", "-P, --remote-protocol=STRING"); 441 printf(" %s\n", "-P, --remote-protocol=STRING");
388 printf (" %s\n", _("Alert if protocol doesn't match expected protocol version (ex: 2.0)")); 442 printf(" %s\n", _("Alert if protocol doesn't match expected protocol version (ex: 2.0)"));
443 printf(UT_OUTPUT_FORMAT);
389 444
390 printf (UT_VERBOSE); 445 printf(UT_VERBOSE);
391 446
392 printf (UT_SUPPORT); 447 printf(UT_SUPPORT);
393} 448}
394 449
395 450void print_usage(void) {
396 451 printf("%s\n", _("Usage:"));
397void 452 printf("%s [-4|-6] [-t <timeout>] [-r <remote version>] [-p <port>] --hostname <host>\n",
398print_usage (void) 453 progname);
399{
400 printf ("%s\n", _("Usage:"));
401 printf ("%s [-4|-6] [-t <timeout>] [-r <remote version>] [-p <port>] <host>\n", progname);
402} 454}
403