python 监控服务端口并发送钉钉和邮件v1.0
基本逻辑
- 把ip+ports定义到json文件
- 加载json文件
- 循环json文件里面定义的多主机端口
- 开启socket线程监测端口是否监听
- 异常时直接通知钉钉同时把异常ip+port写入文件
- 邮件附件发送异常文件
说明
本脚本只是能监测服务端口是否开启，无法监测服务是否健康。只能做个简单的监控。
文件目录介绍
目录/opt/tools/monitoring/
[root@localhost rc]# tree -L 1
.
├── crontab.sh #定时任务脚本
├── ip_port.json # 定义主机和端口（多台服务器）
├── jk002.py #python 脚本
└── temp # 异常端口和ip写入temp目录下的文件，邮件附件发送
1 directory, 3 files
[root@localhost rc]#
crontab.sh 源码
#!/bin/bash
cd /opt/tools/monitoring/
python jk002.py
ip_ports.json 文件定义
{
"rlszw_dev": {
"10.21.22.102": {
"ssh": 22,
"mysql": 3306,
"show": 8099,
"appInterface": 8098,
"mis": 8097,
"ass": 8096,
"share": 8095,
"ddm": 8094,
"dctrl": 8093,
"cas_server": 8092,
"integration": 8091,
"lszw_nginx": 8180,
"cas_nginx": 8181,
"dcmqttd": 18700,
"acadgrpc": 18600
}
}
jk002.py源码
# -*- coding:utf8 -*-
import socket
import time
import os
import thread
import json
import urllib2
import sys
import smtplib
from email.mime.text import MIMEText
from email.header import Header
from email.mime.multipart import MIMEMultipart
reload(sys)
sys.setdefaultencoding('utf-8')
socket.setdefaulttimeout(1)
date = time.strftime("%Y%d%m%H%M")
file = './temp/'+date+'result.'+'txt'
def dingding(tokenid, subject, message):
url = "https://oapi.dingtalk.com/robot/send?access_token=" + tokenid
header = {
"Content-Type": "application/json",
"charset": "utf-8"
}
data = {
"msgtype": "text",
"text": {
"content": subject + '\n' + message
},
"at": {
"atMobiles": [
"1518*****"
# "1352*****"
# "1519*****",
# "1510*****",
# "1833*****"
],
"isAtAll": False
}
}
sendData = json.dumps(data)
request = urllib2.Request(url, data=sendData, headers=header)
urlopen = urllib2.urlopen(request)
return urlopen.read()
def socket_port(ip, port):
"""
输入IP和端口号，扫描判断端口是否开放
"""
try:
if port >= 65535:
print u'端口扫描结束'
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
result = s.connect_ex((ip, port))
message = str(port)
if result == 0:
lock.acquire()
print ip, u':', port, u'端口开放'
# write_result(ip.encode("utf-8")+':'+message+'端口开放')
lock.release()
else:
lock.acquire()
print ip, u':', port, u'端口异常，开始发送钉钉通知'
tokenid = "************" #钉钉机器人tokenid
subject = ip.encode('utf-8')+'主机'
message = str(port).encode('utf-8')+'端口异常'
dingding(tokenid, subject, message)
write_result(ip.encode("utf-8")+':'+message+'端口异常')
lock.release()
s.close()
except Exception, e:
print str(e)
def ip_scan(ip, ports):
"""
输入IP，扫描IP的0-65534端口情况
"""
try:
print u'开始扫描 %s' % ip
start_time = time.time()
for i in ports:
# print i
# print type(i)
thread.start_new_thread(socket_port, (ip, i))
time.sleep(2)
print u'扫描端口完成，总共用时 ：%.2f' % (time.time() - start_time)
# raw_input("Press Enter to Exit")
except Exception, e:
print str(e)
def send_mail():
# 第三方 SMTP 服务
mail_host = "smtp.163.com" # 设置服务器
mail_user = "******@163.com" # 用户名
mail_pass = "**********" # 口令
sender = '*************@163.com'
receivers = ['********@qq.com','*******@qq.com'] # 接收邮件，可设置为你的QQ邮箱或者其他邮箱
message = MIMEMultipart()
# message = MIMEText('我们的工作基本一致', 'plain', 'utf-8')
message.attach(MIMEText('服务端口监控', 'plain', 'utf-8'))
message['From'] = sender
message['To'] = ','.join(receivers)
subject = '服务端口监控'
message['Subject'] = Header(subject, 'utf-8')
# 附件
# 构造附件1，传送当前目录下的 test.txt 文件
att1 = MIMEText(open(file, 'rb').read(), 'base64', 'utf-8')
att1["Content-Type"] = 'application/octet-stream'
# 这里的filename可以任意写，写什么名字，邮件中显示什么名字
att1["Content-Disposition"] = 'attachment; filename="result.txt"'
message.attach(att1)
# # 构造附件2，传送当前目录下的 runoob.txt 文件
# att2 = MIMEText(open('runoob.txt', 'rb').read(), 'base64', 'utf-8')
# att2["Content-Type"] = 'application/octet-stream'
# att2["Content-Disposition"] = 'attachment; filename="runoob.txt"'
# message.attach(att2)
try:
smtpObj = smtplib.SMTP()
smtpObj.connect(mail_host, 25) # 25 为 SMTP 端口号
smtpObj.login(mail_user, mail_pass)
smtpObj.sendmail(sender, receivers, message.as_string())
print "邮件发送成功"
except Exception, e:
print str(e)
def write_result(result):
# print file
with open(file, 'a') as f:
f.write(result+'\n')
if __name__ == '__main__':
# url = raw_input('Input the ip you want to scan:\n')
lock = thread.allocate_lock()
# port = [3389, 22, 43, 135, 137]
# ip = "127.0.0.1"
with open("./ip_port.json", 'r') as f:
data = json.load(f)
for env_key in data:
for ip_key in data[env_key]:
ip = ip_key
ports = data[env_key][ip_key]
key_list = list(ports.keys())
val_list = list(ports.values())
ip_scan(ip, val_list)
if os.path.exists(file):
send_mail()
#
维护定时任务
crontab -e
输入 0 */1 * * * sh /opt/monitoring/crontab.sh
阿里云ecs服务器需要修改mail发送端口为ssl类型
采用vpc网络时，默认防火墙禁止25端口通信
try:
# smtpObj = smtplib.SMTP()
smtpObj=smtplib.SMTP_SSL(mail_host, 994)
# smtpObj.connect(mail_host, 25) # 25 为 SMTP 端口号
smtpObj.login(mail_user, mail_pass)
smtpObj.sendmail(sender, receivers, message.as_string())
print "邮件发送成功"
smtpObj.quit()
except Exception, e:
print "邮件发送失败"
print str(e)
