System monitor

This is a simple system monitor that checks various things

  • Logged in users that aren't normally logged in
  • Processes ran by remote/compromisable users
  • Top five processes from top(1)
  • Memory, CPU and disk usage
  • Temperature
  • Fail2ban and current connections to my SSH ports
Last modified
Lines 67

Parent directory Download CGIread sitemap Main page

Quick links: (none) 

  1. #!/bin/sh
    3. 
    
  3. cat > /dev/null << __EOF__
    4. 
    
  4. <description>
    5. 
    
  5. Keep an eye of:
    6. 
    
  6. *processes ran by "remote" users,
    7. 
    
  7. *temperature and load average,
    8. 
    
  8. *free memory and
    9. 
    
  9. *SSH break-in attempts
    10. 
    
  10. </description>
    11. 
    
  11. <long-description>
    12. 
    
  12.     <p>This is a simple system monitor that checks various things</p>
    13. 
    
  13.     <ul>
    14. 
    
  14.         <li>Logged in users that aren't normally logged in</li>
    15. 
    
  15.         <li>Processes ran by remote/compromisable users</li>
    16. 
    
  16.         <li>Top five processes from <code>top(1)</code></li>
    17. 
    
  17.         <li>Memory, CPU and disk usage</li>
    18. 
    
  18.         <li>Temperature</li>
    19. 
    
  19.         <li>Fail2ban and current connections to my SSH ports</li>
    20. 
    
  20.     </ul>
    21. 
    
  21. </long-description>
    22. 
    
  22. __EOF__
    23. 
    
    24. 
    
  24. touch tmp.monitor
    25. 
    
  25. chmod 0600 tmp.monitor || exit
    26. 
    
  26. while :
    27. 
    
  27. do
    28. 
    
  28.     clear
    29. 
    
  29.     cat tmp.monitor
    30. 
    
  30.     
    31. 
    
  31.     echo "    **Procs**" > tmp.monitor
    32. 
    
  32.     top -bn1 | grep -E '(sshguest|www-data|agnes|COMMAND)' >> tmp.monitor
    33. 
    
  33.     N_PROCS=5
    34. 
    
  34.     top -bn1 | head -n $(($N_PROCS + 7)) | tail -n $(($N_PROCS)) >> tmp.monitor
    35. 
    
  35.     
    36. 
    
  36.     echo '    **who**' >> tmp.monitor
    37. 
    
  37.     #who | grep -vE '^oskar +(:0|tty[0-9])|^guest +tty[0-9]' >> tmp.monitor
    38. 
    
  38.     who >>tmp.monitor
    39. 
    
  39.     
    40. 
    
  40.     echo '    **uptime**' >> tmp.monitor
    41. 
    
  41.     uptime >> tmp.monitor
    42. 
    
  42.     
    43. 
    
  43.     echo '    **Fail2ban**' >> tmp.monitor
    44. 
    
  44.     today=`date +%Y-%m-%d`
    45. 
    
  45.     lines=5
    46. 
    
  46.     f="/var/log/fail2ban.log"
    47. 
    
  47.     echo Unban $(grep $today $f | grep Unban | wc -l) >> tmp.monitor
    48. 
    
  48.     grep $today $f | grep Unban | tail -n $lines >> tmp.monitor
    49. 
    
  49.     echo Ban $(grep $today $f | grep Ban | wc -l) >> tmp.monitor
    50. 
    
  50.     grep $today $f | grep Ban | tail -n $lines >> tmp.monitor
    51. 
    
  51.     
    52. 
    
  52.     echo '    **SSH**' >> tmp.monitor
    53. 
    
  53.     # 62.72.235.216
    54. 
    
  54.     netstat --inet -W -n  | grep -E '83\.245\.206\.247:22(22)? +[0-9]' | grep ESTABLISHED >> tmp.monitor
    55. 
    
  55.     
    56. 
    
  56.     echo '    **free**' >> tmp.monitor
    57. 
    
  57.     free -m >> tmp.monitor
    58. 
    
  58.     
    59. 
    
  59.     echo '    **Temp**' >> tmp.monitor
    60. 
    
  60.     sensors coretemp-isa-0000 | grep '°C' >> tmp.monitor
    61. 
    
  61.     
    62. 
    
  62.     echo '    **Disk space**' >> tmp.monitor
    63. 
    
  63.     df -H | grep -vE ' /(run|dev|sys)(/.*)?' >> tmp.monitor
    64. 
    
  64.     
    65. 
    
  65.     sleep 5
    66. 
    
  66. done
    67. 
    
    68.