discover-api.py

#!/usr/bin/env python
# Icinga 2 | (c) 2012 Icinga GmbH | GPLv2+

import sys
import subprocess
import socket
import urlparse
import requests
import json
from xml.dom.minidom import parse

api_url = "https://localhost:5665/"
api_user = "root"
api_password = "root"

if len(sys.argv) < 2:
    print "Syntax: %s <xml-file> [<xml-file> ...]" % (sys.argv[0])
    sys.exit(1)

tcp_service_commands = {
  'ssh': 'ssh',
  'http': 'http',
  'smtp': 'smtp',
  'ssmtp': 'ssmtp'
}

udp_service_commands = {
  'ntp': 'ntp_time',
  'snmp': 'snmp-uptime'
}

hosts = {}

def process_host(host_element):
    global hosts

    status = "down"

    for status_element in host_element.getElementsByTagName("status"):
        status = status_element.getAttribute("state")

    if status != "up":
        return

    for address_element in host_element.getElementsByTagName("address"):
        if not address_element.getAttribute("addrtype") in [ "ipv4", "ipv6" ]:
            continue

        address = address_element.getAttribute("addr")
        break

    name = address

    for hostname_element in host_element.getElementsByTagName("hostname"):
        name = hostname_element.getAttribute("name")

    try:
        services = hosts[name]["services"]
    except:
        services = {}

    for port_element in host_element.getElementsByTagName("port"):
        state = "closed"

        for state_element in port_element.getElementsByTagName("state"):
            state = state_element.getAttribute("state")

        if state != "open":
            continue

        port = int(port_element.getAttribute("portid"))
        protocol = port_element.getAttribute("protocol")

        try:
            serv = socket.getservbyport(port, protocol)
        except:
            serv = str(port)

        try:
            if protocol == "tcp":
                command = tcp_service_commands[serv]
            elif protocol == "udp":
                command = udp_service_commands[serv]
            else:
                raise "Unknown protocol."
        except:
            command = protocol

        if command == "udp":
            continue

        services[serv] = { "command": command, "port": port }

    hosts[name] = { "name": name, "address": address, "services": services }

def create_host(host):
    global api_url, api_user, api_password

    req = {
      "templates": [ "discovered-host" ],
      "attrs": {
        "address": host["address"]
      }
    }

    headers = {"Accept": "application/json"}
    url = urlparse.urljoin(api_url, "v1/objects/hosts/%s" % (host["name"]))
    requests.put(url, headers=headers, auth=(api_user, api_password), data=json.dumps(req), verify=False)

    for serv, service in host["services"].iteritems():
        req = {
          "templates": [ "discovered-service" ],
          "attrs": {
            "vars.%s_port" % (service["command"]): service["port"],
            "check_command": service["command"],
          }
        }
    
        headers = {"Accept": "application/json"}
        url = urlparse.urljoin(api_url, "v1/objects/services/%s!%s" % (host["name"], serv))
        requests.put(url, headers=headers, auth=(api_user, api_password), data=json.dumps(req), verify=False)

for arg in sys.argv[1:]:
    # Expects XML output from 'nmap -oX'
    dom = parse(arg)

    for host in dom.getElementsByTagName("host"):
        process_host(host)

for host in hosts.values():
    create_host(host)