#!/usr/bin/perl -w # # v1.0 Dec 31, 1999 Leif Sawyer # A quick hack to find a IP/MAC pair from the DHCP server # via WWW interface. # # v1.5 Jan 3, 2000 Jason Richards # Added support for compressed log files # # v2.0 Jan 4, 2000 Leif Sawyer # Added code to 'subtract a day' so that logs are parsed # for the correct date, not the day-behind that logs normally are. # Also color-coded the dhcp status for each entry so that problems # are easily found. We're treating DHCPDISCOVER's as unnecessary info. use Compress::Zlib; use Time::Local; $CurLogFile = "/var/log/dhcpd.log"; $OldLogDir = "/var/log/old"; @months=(Jan,Feb,Mar,Apr,May,Jun,Jul,Aug,Sep,Oct,Nov,Dec); print "Content-type: text/html\n\n"; print "\n"; &ReadParse; if (! keys %in) { &Form; } @required_fields = ("host", "date", "search", split(/\s*,\s*|\000/, $in{'required_fields'})); @missing_fields = grep ($in{$_} !~ /\S/, @required_fields); if (@missing_fields) { $errormessage = "You did not provide sufficient information.\nYou are required to fill out the following:\n\n

", "", @missing_fields); $errormessage .= "\n

\n\nPlease go back and fill out the form again.\n"; &Exit("Insufficient Information", $errormessage); } # Untaint so we don't get nasty shell metacharacters. $myhost = $in{"host"}; $host_orig = $myhost; $myhost =~ /^([\w\:\.]*)$/; $myhost = $1; # Untaint it $myhost =~ s/^\s+//; s/\s+$//; &Exit("Warning: Illegal usage.", "Illegal characters found in \"host\" variable.") if ($myhost ne $host_orig); print qq|\n|; if ($in{"search"} eq "exact") { $search = "\\b" . $myhost . "\\W"; } else { $search = $myhost; } $unknown_color = "7f7f7f"; $ack_color = "A0FFA0"; $nack_color = "FFA0A0"; $request_color = "A0F0F0"; $offer_color = "A0A0F0"; $release_color = "FFA0FF"; $date = $in{"date"}; print "\n"; ##### # # Read and parse the logfile. # my($v) = 0; if ($date == "Current") { open(DATA,"<$CurLogFile") || &Exit("Fatal Error", "Can't open logfile $logfile!
Contact root\@gci.net"); while() { if ( /$search/ ) { next if m/DHCPDISCOVER/i; my($month,$day,$time,$hostname,$service,$action,$verb1,$hostip,$verb2,$hostmac,$how,$relay) = split /\s+/,$_; $data{$v}{"date"} = $month . " " . $day; $data{$v}{"time"} = $time; $data{$v}{"hostip"} = $hostip; $data{$v}{"hostmac"} = $hostmac; $data{$v}{"type"} = $unknown_color; # print "\n"; if ($action eq "DHCPACK") { $data{$v}{"type"} = "$ack_color"; } elsif ($action eq "DHCPNAK") { $data{$v}{"type"} = "$nack_color"; } elsif ($action eq "DHCPREQUEST") { $data{$v}{"type"} = "$request_color"; } elsif ($action eq "DHCPOFFER") { $data{$v}{"type"} = "$offer_color"; } elsif ($action eq "DHCPRELEASE") { $data{$v}{"type"} = "$release_color"; } $v++; } } close (DATA); } else { $logfile = $OldLogDir . "/dhcpd.log-" . $date . ".gz"; $gz = gzopen($logfile, "rb") || &Exit("Fatal Error", "Can't open logfile $logfile: $gzerrno
Contact root\@gci.net"); while($gz->gzreadline($_) > 0) { if (/$myhost/) { next if m/DHCPDISCOVER/i; my($month,$day,$time,$hostname,$service,$action,$verb1,$hostip,$verb2,$hostmac,$how,$relay) = split /\s+/,$_; $data{$v}{"date"} = $month . " " . $day; $data{$v}{"time"} = $time; $data{$v}{"hostip"} = $hostip; $data{$v}{"hostmac"} = $hostmac; $data{$v}{"type"} = $unknown_color; # print "\n"; if ($action eq "DHCPACK") { $data{$v}{"type"} = "$ack_color"; } elsif ($action eq "DHCPNAK") { $data{$v}{"type"} = "$nack_color"; } elsif ($action eq "DHCPREQUEST") { $data{$v}{"type"} = "$request_color"; } elsif ($action eq "DHCPOFFER") { $data{$v}{"type"} = "$offer_color"; } elsif ($action eq "DHCPRELEASE") { $data{$v}{"type"} = "$release_color"; } $v++; } } $gz->gzclose(); } $| = 1; print qq| DHCP Host info for: $myhost

DHCP Host info for: $myhost

Server Offer		Client Request
Server ACK		Client/Server NACK
Client Release		Unknown DHCP action

|; foreach $v ( sort bynum keys %data ) { # Post Processing the data... print qq| |; } print qq|

Mon/Day	Time	IP Address	MAC Address
$data{$v}{"date"}	$data{$v}{"time"}	$data{$v}{"hostip"}	$data{$v}{"hostmac"}

\n\n |; exit 0; ##### End of Main Program ######################################################################## sub ReadParse { local (*in) = @_ if @_; local ($i, $key, $val); # Read in text if ($ENV{'REQUEST_METHOD'} eq "GET") { $in = $ENV{'QUERY_STRING'}; } elsif ($ENV{'REQUEST_METHOD'} eq "POST") { read(STDIN,$in,$ENV{'CONTENT_LENGTH'}); } @in = split(/&/,$in); foreach $i (0 .. $#in) { # Convert plus's to spaces $in[$i] =~ s/\+/ /g; # Split into key and value. ($key, $val) = split(/=/,$in[$i],2); # splits on the first =. # Convert %XX from hex numbers to alphanumeric $key =~ s/%(..)/pack("c",hex($1))/ge; $val =~ s/%(..)/pack("c",hex($1))/ge; # Associate key and value $in{$key} .= "\000" if (defined($in{$key})); # \0 is the multiple separator $in{$key} .= $val; } return 1; # just for fun } sub Exit { local($errorheader) = shift(@_); print "findhost: $errorheader\n"; print ""; print "

$errorheader

\n"; print @_; print "

Unable to complete action.\n"; exit(2); } sub Form { print qq| DHCP Host info finder

DHCP Host info finder

Please enter an IP address or MAC address, then click on the submit button!
You may also choose to search historical data by selecting a date from the dropbox.

IP Addresses should be of the form: 192.168.22.1
MAC Addresses should be of the form: ab:00:1d:0e:ff:c7