服務器經常使用工具說明[轉]
get_cpu_mem_info.batphp
該腳本適用於windows系統。會每10秒記錄一次當前全部進程消耗的CPU和內存使用量。能夠用於找出佔用資源異常的進程。 該腳本會將日誌記錄到腳本當前目錄下的get_cpu_mem_info.log裏。html
@rem This batch script to collect cpu and memory usage info. @rem version 1.0 time:2014-3-9 set log=get_cpu_mem_info.log set timeout=10 :check @rem "The CPUusage and Memusage" wmic path Win32_PerfFormattedData_PerfProc_Process get Name,PercentUserTime,WorkingSet >>%log% wmic os get localdatetime >>%log% ping -n %timeout% 127.0.0.1>nul goto check
get_cpu_mem_info.shlinux
該腳本適用於linux系統。會每10秒記錄一次當前全部進程消耗的CPU和內存使用量以及。能夠用於找出佔用資源異常的進程。日誌名稱和位置:/tmp/get_cpu_mem_info.sh.log。web
#!/bin/bash #When the free memory very less ,this script to collect CPU/memory usage information and dmessage information. #Version 1.0 time:2014-03-11 #Version 2.0 time:2014-12-23 #Version 3.0 time:2015-04-21 #Version 4.0 time:2015-05-07 logfile=/tmp/$0.log check_os_release() { while true do os_release=$(grep "Red Hat Enterprise Linux Server release" /etc/issue 2>/dev/null) os_release_2=$(grep "Red Hat Enterprise Linux Server release" /etc/redhat-release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "release 5" >/dev/null 2>&1 then os_release=redhat5 echo "$os_release" elif echo "$os_release"|grep "release 6" >/dev/null 2>&1 then os_release=redhat6 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep "Aliyun Linux release" /etc/issue 2>/dev/null) os_release_2=$(grep "Aliyun Linux release" /etc/aliyun-release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "release 5" >/dev/null 2>&1 then os_release=aliyun5 echo "$os_release" elif echo "$os_release"|grep "release 6" >/dev/null 2>&1 then os_release=aliyun6 echo "$os_release" elif echo "$os_release"|grep "release 7" >/dev/null 2>&1 then os_release=aliyun7 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release_2=$(grep "CentOS" /etc/*release 2>/dev/null) if [ "$os_release_2" ] then if echo "$os_release_2"|grep "release 5" >/dev/null 2>&1 then os_release=centos5 echo "$os_release" elif echo "$os_release_2"|grep "release 6" >/dev/null 2>&1 then os_release=centos6 echo "$os_release" elif echo "$os_release_2"|grep "release 7" >/dev/null 2>&1 then os_release=centos7 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep -i "ubuntu" /etc/issue 2>/dev/null) os_release_2=$(grep -i "ubuntu" /etc/lsb-release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "Ubuntu 10" >/dev/null 2>&1 then os_release=ubuntu10 echo "$os_release" elif echo "$os_release"|grep "Ubuntu 12.04" >/dev/null 2>&1 then os_release=ubuntu1204 echo "$os_release" elif echo "$os_release"|grep "Ubuntu 12.10" >/dev/null 2>&1 then os_release=ubuntu1210 echo "$os_release" elif echo "$os_release"|grep "Ubuntu 14.04" >/dev/null 2>&1 then os_release=ubuntu1204 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep -i "debian" /etc/issue 2>/dev/null) os_release_2=$(grep -i "debian" /proc/version 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "Linux 6" >/dev/null 2>&1 then os_release=debian6 echo "$os_release" elif echo "$os_release"|grep "Linux 7" >/dev/null 2>&1 then os_release=debian7 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep -i "opensuse" /etc/issue 2>/dev/null) os_release_2=$(grep -i "opensuse" /etc/*release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "openSUSE 13.1" >/dev/null 2>&1 then os_release=opensuse1301 echo "$os_release" else os_release="" echo "$os_release" fi break fi break done } rhel56_fun() { while true do vm_mem=$(free -m|grep "buffers/cache"|awk '{print $4}') cpu=$(top -bn2|grep "Cpu(s)"|awk '{print $5}'|awk -F'%' '{print $1}'|tail -n1) check_cpu=$(echo "$cpu <20" |bc) echo "======================================================" >>$logfile date >>$logfile if [[ $vm_mem -le 100 ]] then echo "======================================================" >>$logfile echo "The memory is too less." >>$logfile free -m >>$logfile echo "=======================Memory info=====================" >>$logfile (ps aux|head -1;ps aux|sort -nrk6|grep -v "RSS") >>$logfile date >>$logfile echo "=======================Dmesg info=====================" >>$logfile dmesg >>$logfile dmesg -c elif [[ $check_cpu -eq 1 ]] then echo "======================================================" >>$logfile echo "The idle cpu is too less." >>$logfile echo "=======================CPU info========================" >>$logfile (ps aux|head -1;ps aux|sort -nrk3|grep -v "RSS") >>$logfiles echo "=======================Dmesg info=====================" >>$logfile dmesg >>$logfile dmesg -c fi sleep 10 done } rhel7_fun() { while true do vm_mem=$(free -m|grep "buffers/cache"|awk '{print $4}') cpu=$(top -bn2|grep "Cpu(s)"|awk -F, '{print $4}'|awk '{print $1}'|tail -n1) check_cpu=$(echo "$cpu <20" |bc) echo "======================================================" >>$logfile date >>$logfile if [[ $vm_mem -le 100 ]] then echo "======================================================" >>$logfile echo "The memory is too less." >>$logfile free -m >>$logfile echo "=======================Memory info=====================" >>$logfile (ps aux|head -1;ps aux|sort -nrk6|grep -v "RSS") >>$logfile date >>$logfile echo "=======================Dmesg info=====================" >>$logfile dmesg >>$logfile dmesg -c elif [[ $check_cpu -eq 1 ]] then echo "======================================================" >>$logfile echo "The idle cpu is too less." >>$logfile echo "=======================CPU info========================" >>$logfile (ps aux|head -1;ps aux|sort -nrk3|grep -v "RSS") >>$logfiles echo "=======================Dmesg info=====================" >>$logfile dmesg >>$logfile dmesg -c fi sleep 10 done } debian_fun() { while true do vm_mem=$(free -m|grep "buffers/cache"|awk '{print $4}') cpu=$(top -bn2|grep "Cpu(s)"|awk '{print $8}'|awk -F'%' '{print $1}'|tail -n1) check_cpu=$(echo "$cpu <20" |bc) echo "======================================================" >>$logfile date >>$logfile if [[ $vm_mem -le 100 ]] then echo "======================================================" >>$logfile echo "The memory is too less." >>$logfile free -m >>$logfile echo "=======================Memory info=====================" >>$logfile (ps aux|head -1;ps aux|sort -nrk6|grep -v "RSS") >>$logfile date >>$logfile echo "=======================Dmesg info=====================" >>$logfile dmesg >>$logfile dmesg -c elif [[ $check_cpu -eq 1 ]] then echo "======================================================" >>$logfile echo "The idle cpu is too less." >>$logfile echo "=======================CPU info========================" >>$logfile (ps aux|head -1;ps aux|sort -nrk3|grep -v "RSS") >>$logfile echo "=======================Dmesg info=====================" >>$logfile dmesg >>$logfile dmesg -c fi sleep 10 done } check_os_release case "$os_release" in aliyun5|centos5|centos6|aliyun6) yum install bc -y rhel56_fun ;; centos7) yum install bc -y rhel7_fun ;; ubuntu10|ubuntu1204|ubuntu1210|ubuntu1404|debian6|debian7) apt-get install bc -y debian_fun ;; opensuse1301) echo "Can not support openSUSE." exit 1 ;; *) echo "Unknow OS system." exit 1 ;; esac
get_network_info.batubuntu
該腳本適用於windows系統。會每5秒鐘對目標地址進行ping檢測，有丟包或不通時會蒐集用戶本地網絡配置信息、路由表、ARP表並進行traceroute。這些信息都記錄到腳本當前目錄下的checknet.log文件裏。windows
@rem this batch script to collect network information for analysis. @rem version 2.0 time:2014-5-20 color 1f set log=checknet.log Set tm1=%time:~0,2% Set tm2=%time:~3,2% Set tm3=%time:~6,2% set /p destip=目標IP地址: :check_ping @rem Get the client network infomation. echo %date% %tm1%點%tm2%分%tm3%秒 >>%log% echo —————————————————ping infomation————————————————————>>%log% ping -n 10 -w 1 %destip% >>%log% if %ERRORLEVEL% NEQ 0 goto check_trace echo —————————————————interface infomation————————————————————>>%log% ipconfig /all >>%log% echo —————————————————route infomation————————————————————>>%log% netstat -rn >>%log% echo —————————————————arp infomation————————————————————>>%log% arp -a >>%log% :check_trace echo —————————————————trace route infomation————————————————————>>%log% tracert -d -w 2000 %destip% >>%log% ping -n 5 127.0.0.1>nul goto check_ping
check_destination_port.shcentos
該腳本適用於linux系統。該腳本每5秒檢查目標地址端口可用性，當沒法鏈接的時候蒐集網絡鏈接狀況、路由探測信息和dmesg信息並保存到日誌裏。日誌名稱和位置:/tmp/check_destination_port.sh.log。安全
#!/bin/bash #This script collect network information and check the destination port. #Version 1.0 time:2014-3-11 logfile=/tmp/$0.log dmesg_file1=/tmp/1 dmesg_file2=/tmp/2 read -p "Input the destination IP or URL: " ip read -p "Input the destination PORT: " port get_dmesg() { echo "===================dmessages info==============================" >>$logfile dmesg >$dmesg_file2 diff $dmesg_file1 $dmesg_file2 >>$logfile cat $dmesg_file2 >$dmesg_file1 } dmesg -c dmesg >$dmesg_file1 while true do if [ "X$ip" == "X" ] || [ "X$port" == "X" ] then echo "Error:The IP or URL or PORT is not define.Will exit." exit 1 else echo "===================port info==============================" >>$logfile date >>$logfile nc -vzw 2 $ip $port >>$logfile if [ "$?" -ne 0 ] then get_dmesg echo "===================network connection info==============================" >>$logfile (netstat -antlp >>$logfile) echo "===================trace route info==============================" >>$logfile (traceroute -Tnp $port $ip >>$logfile) else sleep 5 fi fi done
windows2003_drop_port.batbash
該腳本適用於windows 2003系統，主要用於在雲服務器被肉雞後禁止對外攻擊，留出時間進行分析和修復。該腳本將禁止對外發送UDP數據包和禁止對TCP的2二、80、44三、131四、330六、343三、338九、8080端口發送數據包。服務器
@rem 配置windows2003系統的IP安全策略 @rem version 3.0 time:2014-5-12 netsh ipsec static add policy name=drop netsh ipsec static add filterlist name=drop_port netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=21 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=22 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=23 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=25 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=53 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=80 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=135 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=139 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=443 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=445 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=1314 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=1433 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=1521 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=2222 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=3306 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=3433 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=3389 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=4899 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=8080 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any dstport=18186 protocol=TCP mirrored=no netsh ipsec static add filter filterlist=drop_port srcaddr=me dstaddr=any protocol=UDP mirrored=no netsh ipsec static add filteraction name=denyact action=block netsh ipsec static add rule name=kill policy=drop filterlist=drop_port filteraction=denyact netsh ipsec static set policy name=drop assign=y
windows2008_drop_port.bat
該腳本適用於windows 2008系統，主要用於在雲服務器被肉雞後禁止對外攻擊，留出時間進行分析和修復。該腳本將禁止對外發送UDP數據包和禁止對TCP的2二、80、44三、131四、330六、343三、338九、8080端口發送數據包。
@rem 配置windows2008系統的IP安全策略 @rem version 3.0 time:2014-5-12 @rem 重置防火牆使用默認規則 netsh firewall reset netsh firewall set service remotedesktop enable all @rem 配置高級windows防火牆 netsh advfirewall firewall add rule name="drop" protocol=TCP dir=out remoteport="21,22,23,25,53,80,135,139,443,445,1433,1314,1521,2222,3306,3433,3389,4899,8080,18186" action=block netsh advfirewall firewall add rule name="dropudp" protocol=UDP dir=out remoteport=any action=block
linux_drop_port.sh
該腳本適用於linux系統，主要用於在雲服務器被肉雞後禁止對外攻擊，留出時間進行分析和修復。該腳本將禁止對外發送UDP數據包和禁止對TCP的2二、80、44三、131四、330六、343三、338九、8080端口發送數據包。
#!/bin/bash ######################################### #Function: linux drop port #Usage: bash linux_drop_port.sh #Author: Customer Service Department #Company: Alibaba Cloud Computing #Version: 2.0 ######################################### check_os_release() { while true do os_release=$(grep "Red Hat Enterprise Linux Server release" /etc/issue 2>/dev/null) os_release_2=$(grep "Red Hat Enterprise Linux Server release" /etc/redhat-release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "release 5" >/dev/null 2>&1 then os_release=redhat5 echo "$os_release" elif echo "$os_release"|grep "release 6" >/dev/null 2>&1 then os_release=redhat6 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep "Aliyun Linux release" /etc/issue 2>/dev/null) os_release_2=$(grep "Aliyun Linux release" /etc/aliyun-release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "release 5" >/dev/null 2>&1 then os_release=aliyun5 echo "$os_release" elif echo "$os_release"|grep "release 6" >/dev/null 2>&1 then os_release=aliyun6 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep "CentOS release" /etc/issue 2>/dev/null) os_release_2=$(grep "CentOS release" /etc/*release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "release 5" >/dev/null 2>&1 then os_release=centos5 echo "$os_release" elif echo "$os_release"|grep "release 6" >/dev/null 2>&1 then os_release=centos6 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep -i "ubuntu" /etc/issue 2>/dev/null) os_release_2=$(grep -i "ubuntu" /etc/lsb-release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "Ubuntu 10" >/dev/null 2>&1 then os_release=ubuntu10 echo "$os_release" elif echo "$os_release"|grep "Ubuntu 12.04" >/dev/null 2>&1 then os_release=ubuntu1204 echo "$os_release" elif echo "$os_release"|grep "Ubuntu 12.10" >/dev/null 2>&1 then os_release=ubuntu1210 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep -i "debian" /etc/issue 2>/dev/null) os_release_2=$(grep -i "debian" /proc/version 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "Linux 6" >/dev/null 2>&1 then os_release=debian6 echo "$os_release" else os_release="" echo "$os_release" fi break fi os_release=$(grep "openSUSE" /etc/issue 2>/dev/null) os_release_2=$(grep "openSUSE" /etc/*release 2>/dev/null) if [ "$os_release" ] && [ "$os_release_2" ] then if echo "$os_release"|grep "13.1" >/dev/null 2>&1 then os_release=opensuse131 echo "$os_release" else os_release="" echo "$os_release" fi break fi break done } exit_script() { echo -e "\033[1;40;31mInstall $1 error,will exit.\n\033[0m" rm -f $LOCKfile exit 1 } config_iptables() { iptables -I OUTPUT 1 -p tcp -m multiport --dport 21,22,23,25,53,80,135,139,443,445 -j DROP iptables -I OUTPUT 2 -p tcp -m multiport --dport 1433,1314,1521,2222,3306,3433,3389,4899,8080,18186 -j DROP iptables -I OUTPUT 3 -p udp -j DROP iptables -nvL } ubuntu_config_ufw() { ufw deny out proto tcp to any port 21,22,23,25,53,80,135,139,443,445 ufw deny out proto tcp to any port 1433,1314,1521,2222,3306,3433,3389,4899,8080,18186 ufw deny out proto udp to any ufw status } ####################Start################### #check lock file ,one time only let the script run one time LOCKfile=/tmp/.$(basename $0) if [ -f "$LOCKfile" ] then echo -e "\033[1;40;31mThe script is already exist,please next time to run this script.\n\033[0m" exit else echo -e "\033[40;32mStep 1.No lock file,begin to create lock file and continue.\n\033[40;37m" touch $LOCKfile fi #check user if [ $(id -u) != "0" ] then echo -e "\033[1;40;31mError: You must be root to run this script, please use root to execute this script.\n\033[0m" rm -f $LOCKfile exit 1 fi echo -e "\033[40;32mStep 2.Begen to check the OS issue.\n\033[40;37m" os_release=$(check_os_release) if [ "X$os_release" == "X" ] then echo -e "\033[1;40;31mThe OS does not identify,So this script is not executede.\n\033[0m" rm -f $LOCKfile exit 0 else echo -e "\033[40;32mThis OS is $os_release.\n\033[40;37m" fi echo -e "\033[40;32mStep 3.Begen to config firewall.\n\033[40;37m" case "$os_release" in redhat5|centos5|redhat6|centos6|aliyun5|aliyun6) service iptables start config_iptables ;; debian6) config_iptables ;; ubuntu10|ubuntu1204|ubuntu1210) ufw enable <<EOF y EOF ubuntu_config_ufw ;; opensuse131) config_iptables ;; esac echo -e "\033[40;32mConfig firewall success,this script now exit!\n\033[40;37m" rm -f $LOCKfile
weblogcheckutf8.sh & weblogcheckgbk.sh
該腳本適用於linux系統，用於分析web日誌信息，詳細用法見下面連接裏的說明文檔《web日誌分析腳本.docx》，腳本分爲utf8和gbk編碼。
#!/bin/bash ############################################ # web日誌分析腳本 # #2013-12-30 by 金象 #version:1.0 #使用方法： #./weblogcheck.sh [-c n] [-t n] -f FILE # #選項說明： #-c(選填):設置IP、資源TOP榜顯示量，默認顯示前5名，參數需填寫整數 #-t(選填):設置日誌統計時段，默認統計最後6個時段，參數需填寫整數 #-f(必填):指定日誌文件，若是腳本與日誌文件不在同一目錄需填寫絕對路徑 #例： #./weblogcheck.sh -f /alidata/log/httpd/access/phpwind.log #./weblogcheck.sh -c 3 -t 3 -f /alidata/log/httpd/access/phpwind.log ############################################ ##使用幫助 usage() { echo -e "\nUsage:\n$0 [-c n] [-t n] -f FILE\n" echo -e "選項說明:" echo -e "-c(選填):設置IP、資源TOP榜顯示量，默認顯示前5名，參數需填寫整數" echo -e "-t(選填):設置日誌統計時段，默認統計最後6個時段，參數需填寫整數" echo -e "-f(必填):指定日誌文件，若是腳本與日誌文件不在同一目錄需填寫絕對路徑" echo -e "\n例：\n$0 -f /alidata/log/httpd/access/phpwind.log" echo -e "或：\n$0 -c 3 -t 3 -f /alidata/log/httpd/access/phpwind.log\n" exit } ##華麗的分割線 split_line="--------------------------------------------------" clear ##審覈選項 while getopts ":hc:t:f:" script_opt do case ${script_opt} in h) time_hz=half ;; c) if [[ ${OPTARG} =~ ^[1-9][0-9]*$ ]];then ip_row=${OPTARG} else echo -e "\033[31mErr: -c選項請填寫整數TOP榜顯示行\033[0m" usage fi ;; t) if [[ ${OPTARG} =~ ^[1-9][0-9]*$ ]];then log_time=${OPTARG} else echo -e "\033[31mErr: -t選項請填寫整數時段\033[0m" usage fi ;; f) if [ -e "${OPTARG}" ];then log_path=${OPTARG} else echo -e "\033[31mErr: ${OPTARG}日誌文件不存在，請覈實！\033[0m" usage fi ;; :) echo -e "\033[31mErr: -${OPTARG}選項缺乏參數，請覈實！\033[0m" usage ;; ?) echo -e "\033[31mErr: 沒法識別的選項，請覈實！\033[0m" usage ;; esac done ##檢測日誌文件是否可用 if [ -z "${log_path}" ];then echo -e "\033[31mErr: 請填寫日誌路徑\033[0m" usage fi ##檢測日誌文件大小 log_size=$(du -m "${log_path}"|awk '{print $1}') if [ "${log_size}" -gt 50 ];then echo -e "日誌文件:${log_path}\t大小:${log_size}MB\n日誌文件體積較大，分析時間較長，是否繼續?" read -p"yes[y] or no[n]:" -n 1 check_size if [ "${check_size}" = "y" ];then echo -e "\n正在分析，請稍等..." else echo -e "\n終止日誌分析" exit fi elif [ "${log_size}" -eq 0 ];then echo -e "日誌文件:${log_path}\t大小:${log_size}MB\n\033[31m日誌文件爲空，請選擇其餘日誌\033[0m" usage fi ##設置時間分隔點 time_mark=$(awk '{print $4}' "${log_path}"|cut -c 2-16|uniq|tail -n ${log_time:-6}) ##日誌分析 for mark in ${time_mark} do time_format=$(echo $mark|awk 'BEGIN {FS="[/|:]"} {print $3"/"$2"/"$1"\t"$4":00-"$4":59"}') net_size=$(grep $mark "${log_path}"|awk '{if($10 ~ /[0-9]/) sum += $10} END {printf("%0.2f\n",sum/1024/1024)}') top_ip=$(grep $mark "${log_path}"| awk '{print $1}' |sort |uniq -c|sort -rn|head -n ${ip_row:-5}) top_page=$(grep $mark "${log_path}"|awk '{if($10>0 )print $7}'|sort|uniq -c|sort -rn|head -n ${ip_row:-5}) echo -e "${split_line}\n${time_format} 本時段流量:${net_size} MB" echo -e " 次數 訪問者IP" echo -e "${top_ip}" echo -e " 次數 訪問資源" echo -e "${top_page}" done
#!/bin/bash ############################################ # web日誌分析腳本 # #2013-12-30 by 金象 #version:1.0 #使用方法： #./weblogcheck.sh [-c n] [-t n] -f FILE # #選項說明： #-c(選填):設置IP、資源TOP榜顯示量，默認顯示前5名，參數需填寫整數 #-t(選填):設置日誌統計時段，默認統計最後6個時段，參數需填寫整數 #-f(必填):指定日誌文件，若是腳本與日誌文件不在同一目錄需填寫絕對路徑 #例： #./weblogcheck.sh -f /alidata/log/httpd/access/phpwind.log #./weblogcheck.sh -c 3 -t 3 -f /alidata/log/httpd/access/phpwind.log ############################################ ##使用幫助 usage() { echo -e "\nUsage:\n$0 [-c n] [-t n] -f FILE\n" echo -e "選項說明:" echo -e "-c(選填):設置IP、資源TOP榜顯示量，默認顯示前5名，參數需填寫整數" echo -e "-t(選填):設置日誌統計時段，默認統計最後6個時段，參數需填寫整數" echo -e "-f(必填):指定日誌文件，若是腳本與日誌文件不在同一目錄需填寫絕對路徑" echo -e "\n例：\n$0 -f /alidata/log/httpd/access/phpwind.log" echo -e "或：\n$0 -c 3 -t 3 -f /alidata/log/httpd/access/phpwind.log\n" exit } ##華麗的分割線 split_line="--------------------------------------------------" clear ##審覈選項 while getopts ":hc:t:f:" script_opt do case ${script_opt} in h) time_hz=half ;; c) if [[ ${OPTARG} =~ ^[1-9][0-9]*$ ]];then ip_row=${OPTARG} else echo -e "\033[31mErr: -c選項請填寫整數TOP榜顯示行\033[0m" usage fi ;; t) if [[ ${OPTARG} =~ ^[1-9][0-9]*$ ]];then log_time=${OPTARG} else echo -e "\033[31mErr: -t選項請填寫整數時段\033[0m" usage fi ;; f) if [ -e "${OPTARG}" ];then log_path=${OPTARG} else echo -e "\033[31mErr: ${OPTARG}日誌文件不存在，請覈實！\033[0m" usage fi ;; :) echo -e "\033[31mErr: -${OPTARG}選項缺乏參數，請覈實！\033[0m" usage ;; ?) echo -e "\033[31mErr: 沒法識別的選項，請覈實！\033[0m" usage ;; esac done ##檢測日誌文件是否可用 if [ -z "${log_path}" ];then echo -e "\033[31mErr: 請填寫日誌路徑\033[0m" usage fi ##檢測日誌文件大小 log_size=$(du -m "${log_path}"|awk '{print $1}') if [ "${log_size}" -gt 50 ];then echo -e "日誌文件:${log_path}\t大小:${log_size}MB\n日誌文件體積較大，分析時間較長，是否繼續?" read -p"yes[y] or no[n]:" -n 1 check_size if [ "${check_size}" = "y" ];then echo -e "\n正在分析，請稍等..." else echo -e "\n終止日誌分析" exit fi elif [ "${log_size}" -eq 0 ];then echo -e "日誌文件:${log_path}\t大小:${log_size}MB\n\033[31m日誌文件爲空，請選擇其餘日誌\033[0m" usage fi ##設置時間分隔點 time_mark=$(awk '{print $4}' "${log_path}"|cut -c 2-16|uniq|tail -n ${log_time:-6}) ##日誌分析 for mark in ${time_mark} do time_format=$(echo $mark|awk 'BEGIN {FS="[/|:]"} {print $3"/"$2"/"$1"\t"$4":00-"$4":59"}') net_size=$(grep $mark "${log_path}"|awk '{if($10 ~ /[0-9]/) sum += $10} END {printf("%0.2f\n",sum/1024/1024)}') top_ip=$(grep $mark "${log_path}"| awk '{print $1}' |sort |uniq -c|sort -rn|head -n ${ip_row:-5}) top_page=$(grep $mark "${log_path}"|awk '{if($10>0 )print $7}'|sort|uniq -c|sort -rn|head -n ${ip_row:-5}) echo -e "${split_line}\n${time_format} 本時段流量:${net_size} MB" echo -e " 次數 訪問者IP" echo -e "${top_ip}" echo -e " 次數 訪問資源" echo -e "${top_page}" done
config_ntpclient.bat
該腳本適用於windows系統，將ntp時鐘服務器配置爲阿里雲內部時鐘源並將同步頻率改成300秒。
@rem This batch script to config ntpclient. @rem version 1.0 time:2014-6-5 @echo off REG ADD HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient /v SpecialPollInterval /t REG_DWORD /d 300 /f w32tm /config /manualpeerlist:"ntp1.aliyun.com,0x1 ntp2.aliyun.com,0x1 ntp3.aliyun.com,0x1" /syncfromflags:manual /reliable:yes /update net stop w32time net start w32time
轉自：http://www.hellyhua.com/xuexi/server/893.html
相關文章
- 1. 經常使用工具說明--Java的經常使用工具
- 2. 經常使用服務器工具
- 3. 服務器導表工具使用說明
- 4. 【轉】JRXlsExporter.setParameter經常使用參數說明
- 5. 【轉】ORATOP工具使用說明
- 6. echarts經常使用說明
- 7. TIFF工具使用說明
- 8. IDEA工具使用說明
- 9. BurpSuite工具使用說明
- 10. CocosBuilder工具使用說明！！！
- 更多相關文章...
- • PHP EOF(heredoc) 使用說明 - PHP教程
- • MySQL客戶端和服務器端工具集 - MySQL教程
- • PHP開發工具
- • Spring Cloud 微服務實戰(三) - 服務註冊與發現
相關標籤/搜索
每日一句
-
每一个你不满意的现在，都有一个你没有努力的曾经。
歡迎關注本站公眾號,獲取更多信息
相關文章