[packages/cacti-template-synflood-defender] use ss instead of netstat
glen
glen at pld-linux.org
Thu Feb 7 16:40:22 CET 2013
commit 8f0159ad2417a15ade654a067658d8f23d6f5b9b
Author: Elan Ruusamäe <glen at delfi.ee>
Date: Thu Feb 7 17:39:31 2013 +0200
use ss instead of netstat
ss (from iproute tools) uses netlink and therefore is faster on higly
loaded servers with tcp connections
cacti-template-synflood-defender.spec | 6 ++++--
iproute.patch | 11 +++++++++++
2 files changed, 15 insertions(+), 2 deletions(-)
---
diff --git a/cacti-template-synflood-defender.spec b/cacti-template-synflood-defender.spec
index 6a9b68f..4d12925 100644
--- a/cacti-template-synflood-defender.spec
+++ b/cacti-template-synflood-defender.spec
@@ -10,6 +10,7 @@ Source0: http://synflood-defender.net/_media/download/synflooddefender-%{version
# Source0-md5: d744ae65a69edbf893c86e36498be85a
Source1: http://synflood-defender.net/_media/download/synflooddefender_cacti_tpls.tar.gz
# Source1-md5: f0002aa57955008dc5e51b11c1c3cdc6
+Patch0: iproute.patch
URL: http://synflood-defender.net/
BuildRequires: rpm-php-pearprov >= 4.4.2-11
BuildRequires: rpmbuild(macros) >= 1.554
@@ -43,8 +44,8 @@ Features:
Summary: SNMPd agent to for Synflood Defender
Group: Networking/Daemons
Requires: net-snmp
-# for netstat
-Requires: net-tools
+# for ss
+Requires: iproute2
%description -n net-snmp-agent-synflood-defender
SNMPd agent to for Synflood Defender.
@@ -52,6 +53,7 @@ SNMPd agent to for Synflood Defender.
%prep
%setup -qn synflooddefender-%{version}-linux -a1
mv synflooddefender_cacti_tpls/*.xml .
+%patch0 -p1
%install
rm -rf $RPM_BUILD_ROOT
diff --git a/iproute.patch b/iproute.patch
new file mode 100644
index 0000000..b66c705
--- /dev/null
+++ b/iproute.patch
@@ -0,0 +1,11 @@
+--- ./synflood-defender.sh~ 2011-07-09 01:27:54.000000000 +0300
++++ ./synflood-defender.sh 2013-02-07 17:38:06.912231452 +0200
+@@ -56,7 +56,7 @@
+ done <$configfile
+
+ # Current SYN queue length
+-current_synqueue=`netstat -n | egrep '(tcp|udp)' | grep SYN | wc -l`
++current_synqueue=`ss -nat | grep SYN-RECV | wc -l`
+ echo $current_synqueue
+
+ # Reading current protection mode
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/cacti-template-synflood-defender.git/commitdiff/8f0159ad2417a15ade654a067658d8f23d6f5b9b
More information about the pld-cvs-commit
mailing list