PluginCat: auth

#!/bin/sh
# 
# 
# Script to show auth stuff
#
# Parameters understood:
#
#       config   (required)
#       autoconf (optional - used by munin-config)
#
#
# Magic markers (optional - used by munin-config and installation
# scripts):
#
#%# family=auto
#%# capabilities=autoconf

MAXLABEL=20

if [ "$1" = "autoconf" ]; then
        echo yes
        exit 0
fi

if [ "$1" = "config" ]; then

        echo 'graph_title Auth Log Parser'
        echo 'graph_args --base 1000 -l 0'
        echo 'graph_vlabel days'
        echo 'illegal_user.label Illegal Username'
        echo 'possible_breakin.label Possible Breakin Attempt'
        echo 'authentication_failure.label Authentication Failure'
        exit 0
fi

echo -en "illegal_user.value "
echo $(grep -i "illegal user" /var/log/auth.log | grep "`date '+%b %d'`" | wc -l)
echo -n
echo -en "possible_breakin.value "
echo $(grep -i "breakin attempt" /var/log/auth.log | grep "`date '+%b %d'`" | wc -l)
echo -en "authentication_failure.value "
echo $(grep -i "authentication failure" /var/log/auth.log | grep "`date '+%b %d'`" | wc -l)