[packages/cacti-template-synflood-defender] use ss instead of netstat

glen glen at pld-linux.org
Thu Feb 7 16:40:22 CET 2013


commit 8f0159ad2417a15ade654a067658d8f23d6f5b9b
Author: Elan Ruusamäe <glen at delfi.ee>
Date:   Thu Feb 7 17:39:31 2013 +0200

    use ss instead of netstat
    
    ss (from iproute tools) uses netlink and therefore is faster on higly
    loaded servers with tcp connections

 cacti-template-synflood-defender.spec |  6 ++++--
 iproute.patch                         | 11 +++++++++++
 2 files changed, 15 insertions(+), 2 deletions(-)
---
diff --git a/cacti-template-synflood-defender.spec b/cacti-template-synflood-defender.spec
index 6a9b68f..4d12925 100644
--- a/cacti-template-synflood-defender.spec
+++ b/cacti-template-synflood-defender.spec
@@ -10,6 +10,7 @@ Source0:	http://synflood-defender.net/_media/download/synflooddefender-%{version
 # Source0-md5:	d744ae65a69edbf893c86e36498be85a
 Source1:	http://synflood-defender.net/_media/download/synflooddefender_cacti_tpls.tar.gz
 # Source1-md5:	f0002aa57955008dc5e51b11c1c3cdc6
+Patch0:		iproute.patch
 URL:		http://synflood-defender.net/
 BuildRequires:	rpm-php-pearprov >= 4.4.2-11
 BuildRequires:	rpmbuild(macros) >= 1.554
@@ -43,8 +44,8 @@ Features:
 Summary:	SNMPd agent to for Synflood Defender
 Group:		Networking/Daemons
 Requires:	net-snmp
-# for netstat
-Requires:	net-tools
+# for ss
+Requires:	iproute2
 
 %description -n net-snmp-agent-synflood-defender
 SNMPd agent to for Synflood Defender.
@@ -52,6 +53,7 @@ SNMPd agent to for Synflood Defender.
 %prep
 %setup -qn synflooddefender-%{version}-linux -a1
 mv synflooddefender_cacti_tpls/*.xml .
+%patch0 -p1
 
 %install
 rm -rf $RPM_BUILD_ROOT
diff --git a/iproute.patch b/iproute.patch
new file mode 100644
index 0000000..b66c705
--- /dev/null
+++ b/iproute.patch
@@ -0,0 +1,11 @@
+--- ./synflood-defender.sh~	2011-07-09 01:27:54.000000000 +0300
++++ ./synflood-defender.sh	2013-02-07 17:38:06.912231452 +0200
+@@ -56,7 +56,7 @@
+ done <$configfile
+ 
+ # Current SYN queue length
+-current_synqueue=`netstat -n | egrep '(tcp|udp)' | grep SYN | wc -l`
++current_synqueue=`ss -nat | grep SYN-RECV | wc -l`
+ echo $current_synqueue
+ 
+ # Reading current protection mode
================================================================

---- gitweb:

http://git.pld-linux.org/gitweb.cgi/packages/cacti-template-synflood-defender.git/commitdiff/8f0159ad2417a15ade654a067658d8f23d6f5b9b



More information about the pld-cvs-commit mailing list