Script bash: Datos de tu servidor.
Vemos un script bash que nos aporta datos importantes de nuestro servidor o sistema.
Simple y conciso, vamos al grano.
Instalando…
yun install nmap htop
Una vez finalizada la instalación, creamos el script bash.
nano datos-server.sh
Copia y pega lo siguiente:
#!/bin/bash date; echo "uptime:" uptime echo "Currently connected:" w echo "--------------------" echo "Last logins:" last -a |head -3 echo "--------------------" echo "Disk and memory usage:" df -h | xargs | awk '{print "Free/total disk: " $11 " / " $9}' free -m | xargs | awk '{print "Free/total memory: " $17 " / " $8 " MB"}' echo "--------------------" start_log=`head -1 /var/log/messages |cut -c 1-12` oom=`grep -ci kill /var/log/messages` echo -n "OOM errors since $start_log :" $oom echo "" echo "--------------------" echo "Utilization and most expensive processes:" top -b |head -3 echo top -b |head -10 |tail -4 echo "--------------------" echo "Open TCP ports:" nmap -p- -T4 127.0.0.1 echo "--------------------" echo "Current connections:" ss -s echo "--------------------" echo "processes:" ps auxf --width=200 echo "--------------------" echo "vmstat:" vmstat 1 5
Guarda y cierra el archivo.
Lo ejecutaremos con…
bash datos-server.sh
ejemplo de salida real…
vie jun 29 20:50:46 CEST 2018 uptime: 20:50:46 up 3 days, 1:56, 1 user, load average: 0,08, 0,07, 0,12 Currently connected: 20:50:46 up 3 days, 1:56, 1 user, load average: 0,08, 0,07, 0,12 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT root pts/0 31.31.99.70 20:39 6.00s 0.07s 0.00s w -------------------- Last logins: root pts/0 Fri Jun 29 20:39 still logged in 31.31.99.70 root pts/0 Fri Jun 29 07:50 - 09:21 (01:31) 31.31.99.70 root pts/0 Thu Jun 28 06:42 - 12:28 (05:45) 31.31.118.32 -------------------- Disk and memory usage: Free/total disk: 859G / 916G Free/total memory: 1023 / 15855 MB -------------------- OOM errors since Jun 24 03:19 : 34 -------------------- Utilization and most expensive processes: top - 20:50:47 up 3 days, 1:56, 1 user, load average: 0,08, 0,07, 0,12 Tasks: 178 total, 1 running, 177 sleeping, 0 stopped, 0 zombie %Cpu(s): 0,0 us, 0,8 sy, 0,0 ni, 99,2 id, 0,0 wa, 0,0 hi, 0,0 si, 0,0 st PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 25905 root 20 0 161992 2168 1520 R 6,2 0,0 0:00.01 top 1 root 20 0 191428 4396 2600 S 0,0 0,0 1:18.22 systemd 2 root 20 0 0 0 0 S 0,0 0,0 0:00.02 kthreadd -------------------- Open TCP ports: Starting Nmap 6.40 ( http://nmap.org ) at 2018-06-29 20:50 CEST Nmap scan report for 62-210-141-204.rev.poneytelecom.eu (127.0.0.1) Host is up (0.000010s latency). Not shown: 65511 closed ports PORT STATE SERVICE XX/tcp open ftp XX/tcp open ssh XX/tcp open smtp XX/tcp open domain XXX/tcp open pop3pw XXX/tcp open pop3 XXX/tcp open rpcbind XXX/tcp open imap XXX/tcp open smtps XXX/tcp open submission XXX/tcp open spamassassin XXX/tcp open rndc XXX/tcp open imaps XXX/tcp open pop3s XXXX/tcp open ppp XXXX/tcp open mysql XXXX/tcp open sieve XXXX/tcp open empowerid XXXX/tcp open unknown XXXX/tcp open https-alt XXXX/tcp open cddbp-alt XXXX/tcp open unknown XXXXX/tcp open netbus XXXXX/tcp open unknown Nmap done: 1 IP address (1 host up) scanned in 1.22 seconds -------------------- Current connections: Total: 398 (kernel 1475) TCP: 70 (estab 8, closed 19, orphaned 1, synrecv 0, timewait 17/0), ports 0 Transport Total IP IPv6 * 1475 - - RAW 1 0 1 UDP 10 6 4 TCP 51 32 19 INET 62 38 24 FRAG 0 0 0 -------------------- processes: USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 2 0.0 0.0 0 0 ? S jun26 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? S jun26 0:02 \_ [ksoftirqd/0] root 5 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/0:0H] root 7 0.0 0.0 0 0 ? S jun26 0:00 \_ [migration/0] root 8 0.0 0.0 0 0 ? S jun26 0:00 \_ [rcu_bh] root 9 0.0 0.0 0 0 ? S jun26 3:14 \_ [rcu_sched] root 10 0.0 0.0 0 0 ? S< jun26 0:00 \_ [lru-add-drain] root 11 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/0] root 12 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/1] root 13 0.0 0.0 0 0 ? S jun26 0:01 \_ [migration/1] root 14 0.0 0.0 0 0 ? S jun26 0:03 \_ [ksoftirqd/1] root 16 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/1:0H] root 17 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/2] root 18 0.0 0.0 0 0 ? S jun26 0:00 \_ [migration/2] root 19 0.0 0.0 0 0 ? S jun26 0:01 \_ [ksoftirqd/2] root 21 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/2:0H] root 22 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/3] root 23 0.0 0.0 0 0 ? S jun26 0:01 \_ [migration/3] root 24 0.0 0.0 0 0 ? S jun26 0:04 \_ [ksoftirqd/3] root 26 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/3:0H] root 27 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/4] root 28 0.0 0.0 0 0 ? S jun26 0:00 \_ [migration/4] root 29 0.0 0.0 0 0 ? S jun26 0:01 \_ [ksoftirqd/4] root 31 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/4:0H] root 32 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/5] root 33 0.0 0.0 0 0 ? S jun26 0:01 \_ [migration/5] root 34 0.0 0.0 0 0 ? S jun26 0:03 \_ [ksoftirqd/5] root 36 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/5:0H] root 37 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/6] root 38 0.0 0.0 0 0 ? S jun26 0:00 \_ [migration/6] root 39 0.0 0.0 0 0 ? S jun26 0:01 \_ [ksoftirqd/6] root 41 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/6:0H] root 42 0.0 0.0 0 0 ? S jun26 0:00 \_ [watchdog/7] root 43 0.0 0.0 0 0 ? S jun26 0:01 \_ [migration/7] root 44 0.0 0.0 0 0 ? S jun26 0:03 \_ [ksoftirqd/7] root 46 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/7:0H] root 48 0.0 0.0 0 0 ? S jun26 0:00 \_ [kdevtmpfs] root 49 0.0 0.0 0 0 ? S< jun26 0:00 \_ [netns] root 50 0.0 0.0 0 0 ? S jun26 0:00 \_ [khungtaskd] root 51 0.0 0.0 0 0 ? S< jun26 0:00 \_ [writeback] root 52 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kintegrityd] root 53 0.0 0.0 0 0 ? S< jun26 0:00 \_ [bioset] root 54 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kblockd] root 55 0.0 0.0 0 0 ? S< jun26 0:00 \_ [md] root 56 0.0 0.0 0 0 ? S< jun26 0:00 \_ [edac-poller] root 63 0.0 0.0 0 0 ? S jun26 0:00 \_ [kswapd0] root 64 0.0 0.0 0 0 ? SN jun26 0:00 \_ [ksmd] root 65 0.0 0.0 0 0 ? SN jun26 0:00 \_ [khugepaged] root 66 0.0 0.0 0 0 ? S< jun26 0:00 \_ [crypto] root 74 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kthrotld] root 77 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kmpath_rdacd] root 78 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kaluad] root 80 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kpsmoused] root 81 0.0 0.0 0 0 ? S< jun26 0:00 \_ [ipv6_addrconf] root 94 0.0 0.0 0 0 ? S< jun26 0:00 \_ [deferwq] root 95 0.0 0.0 0 0 ? S jun26 0:03 \_ [kworker/2:1] root 96 0.0 0.0 0 0 ? S jun26 0:03 \_ [kworker/5:1] root 124 0.0 0.0 0 0 ? S jun26 0:03 \_ [kworker/3:1] root 131 0.0 0.0 0 0 ? S jun26 0:00 \_ [kauditd] root 151 0.0 0.0 0 0 ? S jun26 0:04 \_ [kworker/4:1] root 282 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_0] root 283 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_0] root 284 0.0 0.0 0 0 ? S< jun26 0:00 \_ [fw_event_mpt2sa] root 285 0.0 0.0 0 0 ? S< jun26 0:00 \_ [ata_sff] root 298 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_1] root 299 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_1] root 300 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_2] root 301 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_2] root 302 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_3] root 303 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_3] root 304 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_4] root 305 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_4] root 306 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_5] root 307 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_5] root 308 0.0 0.0 0 0 ? S jun26 0:00 \_ [scsi_eh_6] root 309 0.0 0.0 0 0 ? S< jun26 0:00 \_ [scsi_tmf_6] root 312 0.0 0.0 0 0 ? S< jun26 0:00 \_ [ttm_swap] root 318 0.0 0.0 0 0 ? S< jun26 0:00 \_ [poll_mpt2sas0_s] root 337 0.0 0.0 0 0 ? S jun26 0:25 \_ [jbd2/sda2-8] root 338 0.0 0.0 0 0 ? S< jun26 0:00 \_ [ext4-rsv-conver] root 514 0.0 0.0 0 0 ? SN jun26 0:00 \_ [kipmi0] root 529 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kvm-irqfd-clean] root 550 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/0:1H] root 554 0.0 0.0 0 0 ? S jun26 0:00 \_ [jbd2/sda1-8] root 555 0.0 0.0 0 0 ? S< jun26 0:00 \_ [ext4-rsv-conver] root 653 0.0 0.0 0 0 ? S jun26 0:00 \_ [kworker/3:2] root 3286 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/4:1H] root 3405 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/6:1H] root 3500 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/2:1H] root 3586 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/5:1H] root 3812 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/7:1H] root 3870 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/1:1H] root 4292 0.0 0.0 0 0 ? S< jun26 0:00 \_ [kworker/3:1H] root 12969 0.0 0.0 0 0 ? S jun27 0:00 \_ [kworker/6:1] root 21948 0.0 0.0 0 0 ? S jun28 0:00 \_ [kworker/5:0] root 23785 0.0 0.0 0 0 ? S jun28 0:02 \_ [kworker/0:0] root 23807 0.0 0.0 0 0 ? S jun28 0:01 \_ [kworker/7:2] root 11270 0.0 0.0 0 0 ? S jun28 0:02 \_ [kworker/6:2] root 2977 0.0 0.0 0 0 ? S jun28 0:00 \_ [kworker/1:0] root 5643 0.0 0.0 0 0 ? S 03:36 0:00 \_ [kworker/4:0] root 4675 0.0 0.0 0 0 ? S 07:36 0:00 \_ [kworker/0:2] root 9818 0.0 0.0 0 0 ? S 07:53 0:00 \_ [kworker/2:2] root 9842 0.0 0.0 0 0 ? S 07:53 0:00 \_ [kworker/1:1] root 21949 0.0 0.0 0 0 ? S 12:36 0:00 \_ [kworker/7:1] root 31915 0.0 0.0 0 0 ? S 19:15 0:00 \_ [kworker/u16:1] root 14871 0.0 0.0 0 0 ? S 20:10 0:00 \_ [kworker/u16:0] root 24436 0.0 0.0 0 0 ? S 20:45 0:00 \_ [kworker/u16:2] root 1 0.0 0.0 191428 4396 ? Ss jun26 1:18 /usr/lib/systemd/systemd --switched-root --system --deserialize 22 root 407 0.1 0.4 137908 76940 ? Ss jun26 7:36 /usr/lib/systemd/systemd-journald root 438 0.0 0.0 116596 1256 ? Ss jun26 0:00 /usr/sbin/lvmetad -f root 446 0.0 0.0 44936 2480 ? Ss jun26 0:00 /usr/lib/systemd/systemd-udevd root 572 0.0 0.0 55508 892 ? S<sl jun26 0:01 /sbin/auditd root 599 0.0 0.0 26468 1812 ? Ss jun26 0:11 /usr/lib/systemd/systemd-logind rpc 601 0.0 0.0 69220 1060 ? Ss jun26 0:00 /sbin/rpcbind -w root 603 0.0 0.0 21656 1248 ? Ss jun26 0:18 /usr/sbin/irqbalance --foreground libstor+ 604 0.0 0.0 8576 816 ? Ss jun26 0:00 /usr/bin/lsmd -d root 607 0.0 0.0 223520 5492 ? Ss jun26 0:00 /usr/sbin/abrtd -d -s root 609 0.0 0.0 221232 4724 ? Ss jun26 0:08 /usr/bin/abrt-watch-log -F BUG: WARNING: at WARNING: CPU: INFO: possible recursive locking detected ernel BUG at list_del corruption li polkitd 612 0.0 0.0 541288 11976 ? Ssl jun26 0:02 /usr/lib/polkit-1/polkitd --no-debug dbus 614 0.0 0.0 60304 2540 ? Ss jun26 0:29 /usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation chrony 628 0.0 0.0 117752 1836 ? S jun26 0:00 /usr/sbin/chronyd root 633 0.0 0.0 13216 812 ? Ss jun26 0:55 /sbin/rngd -f root 635 0.0 0.0 24432 2256 ? Ss jun26 0:00 /usr/sbin/smartd -n -q never root 655 0.0 0.0 25904 948 ? Ss jun26 0:00 /usr/sbin/atd -f root 656 0.0 0.0 126316 1640 ? Ss jun26 0:00 /usr/sbin/crond -n root 666 0.0 0.1 357980 29000 ? Ssl jun26 0:01 /usr/bin/python -Es /usr/sbin/firewalld --nofork --nopid root 671 0.0 0.0 110088 856 tty1 Ss+ jun26 0:00 /sbin/agetty --noclear tty1 linux root 675 0.0 0.0 480608 9368 ? Ssl jun26 0:10 /usr/sbin/NetworkManager --no-daemon root 1035 0.0 0.1 573816 17204 ? Ssl jun26 0:20 /usr/bin/python -Es /usr/sbin/tuned -l -P postfix 1036 0.0 0.0 485120 5808 ? Ssl jun26 0:19 /usr/lib64/plesk-9.0/psa-pc-remote -p inet:12768@127.0.0.1 -t 7210 -P /run/psa-pc-remote.pid -u postfix -g popuser -n root 1037 0.0 0.1 716800 22364 ? Ss jun26 0:29 php-fpm: master process (/opt/plesk/php/7.2/etc/php-fpm.conf) solol 25864 4.1 0.2 731800 42496 ? S 20:50 0:00 \_ php-fpm: pool sololinux.es root 1039 0.0 0.0 1048384 7680 ? Ssl jun26 2:33 /usr/sbin/sw-collectd -f root 1041 0.0 0.0 112812 4320 ? Ss jun26 0:00 /usr/sbin/sshd -D root 22669 0.0 0.0 173980 6516 ? Ss 20:39 0:00 \_ sshd: root@pts/0 root 22717 0.0 0.0 118824 3312 pts/0 Ss 20:39 0:00 \_ -bash root 25885 0.0 0.0 113176 1432 pts/0 S+ 20:50 0:00 \_ bash server.sh root 25912 0.0 0.0 155628 2204 pts/0 R+ 20:50 0:00 \_ ps auxf --width=200 root 1042 0.0 0.0 27164 1080 ? Ss jun26 0:00 /usr/sbin/xinetd -stayalive -pidfile /var/run/xinetd.pid memcach+ 1046 0.0 0.0 443088 3952 ? Ssl jun26 0:29 /usr/bin/memcached -u memcached -p 11211 -m 264 -c 1524 -l 127.0.0.1 root 1047 0.0 0.2 712488 42864 ? Ssl jun26 3:48 /usr/sbin/rsyslogd -n root 1048 0.0 0.0 16464 1788 ? Ss jun26 0:00 /usr/sbin/dovecot -F dovecot 2616 0.0 0.0 9996 1204 ? S jun26 0:00 \_ dovecot/anvil root 2617 0.0 0.0 10128 1404 ? S jun26 0:00 \_ dovecot/log root 2632 0.0 0.0 19500 2580 ? S jun26 0:00 \_ dovecot/config dovecot 21239 0.0 0.0 9996 1208 ? S jun26 0:00 \_ dovecot/stats root 1049 0.1 0.1 691576 32224 ? Ssl jun26 6:49 /usr/bin/dockerd root 2656 0.0 0.0 801064 7816 ? Ssl jun26 3:44 \_ docker-containerd -l unix:///var/run/docker/libcontainerd/docker-containerd.sock --metrics-interval=0 --start-timeout 2m --state-di root 1073 0.0 0.2 501616 41140 ? Ss jun26 0:02 sw-engine-fpm: master process (/etc/sw-engine/sw-engine-fpm.conf) named 1100 0.1 0.9 307584 154496 ? Ssl jun26 5:59 /usr/sbin/named -u named -t /var/named/chroot -c /etc/named.conf -u named -n 2 root 1202 0.0 0.0 52436 1656 ? Ss jun26 0:00 sw-cp-server: master process /usr/sbin/sw-cp-serverd -c /etc/sw-cp-server/config sw-cp-s+ 1203 0.0 0.0 56572 5568 ? S jun26 0:05 \_ sw-cp-server: worker process root 1385 0.2 0.1 1775240 21264 ? Sl jun26 10:35 /usr/bin/python /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/run/fail2ban/fail2ban.pid -x -b mysql 2349 0.3 2.8 2949248 467944 ? Ssl jun26 16:54 /usr/sbin/mysqld root 2571 0.0 0.0 92372 2288 ? Ss jun26 0:41 /usr/libexec/postfix/master -w postfix 2576 0.0 0.0 92660 4360 ? S jun26 0:32 \_ qmgr -l -t fifo -u postfix 3553 0.0 0.0 92488 4180 ? S jun26 0:00 \_ tlsmgr -l -t unix -u postfix 16075 0.0 0.0 92476 4084 ? S 20:14 0:00 \_ pickup -l -t fifo -u postfix 25296 0.0 0.0 92468 4080 ? S 20:48 0:00 \_ anvil -l -t unix -u psaadm 2610 0.0 0.0 321852 13140 ? S jun26 0:00 sw-engine-kv drweb 2868 0.0 2.3 390008 383312 ? Ss jun26 0:25 /opt/drweb/drwebd.real --foreground=yes drweb 5750 0.0 2.3 390008 380936 ? S 03:36 0:01 \_ /opt/drweb/drwebd.real --foreground=yes root 2934 0.0 0.1 366384 21052 ? S jun26 0:03 /usr/bin/sw-engine -c /usr/local/psa/admin/conf/php.ini /usr/lib64/plesk-9.0/psa-health-monitor-notification.php root 5647 0.0 0.3 273280 59824 ? Ss 03:36 0:09 /usr/bin/spamd --pidfile /var/run/spamd.pid --create-prefs --daemonize --helper-home-dir=/var/qmail --max-children=5 --nouser-config -- popuser 5649 0.0 0.3 276648 63152 ? S 03:36 0:01 \_ spamd child popuser 5650 0.0 0.3 273280 57372 ? S 03:36 0:00 \_ spamd child root 9925 0.0 0.0 24352 1532 ? Ss 07:53 0:00 nginx: master process /usr/sbin/nginx nginx 9926 0.0 0.0 30072 7476 ? S 07:53 0:39 \_ nginx: worker process root 9943 0.0 0.0 258788 9992 ? Ss 07:53 0:01 /usr/sbin/httpd -DFOREGROUND apache 9945 0.0 0.0 259444 4980 ? S 07:53 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 9946 0.0 0.0 260756 5092 ? S 07:53 0:00 \_ /usr/sbin/httpd -DFOREGROUND apache 9947 0.0 0.1 2186100 17932 ? Sl 07:53 0:25 \_ /usr/sbin/httpd -DFOREGROUND apache 9948 0.0 0.1 2188176 19964 ? Sl 07:53 0:26 \_ /usr/sbin/httpd -DFOREGROUND apache 9969 0.0 0.1 2188176 19452 ? Sl 07:53 0:31 \_ /usr/sbin/httpd -DFOREGROUND apache 10303 0.0 0.1 2186100 19756 ? Sl 07:54 0:34 \_ /usr/sbin/httpd -DFOREGROUND root 10133 0.1 0.0 113564 1884 ? S 07:53 0:58 /bin/sh /usr/local/ddos/ddos.sh -l root 25882 0.0 0.0 107948 348 ? S 20:50 0:00 \_ sleep 5 -------------------- vmstat: procs -----------memory---------- ---swap-- -----io---- -system-- ------cpu----- r b swpd free buff cache si so bi bo in cs us sy id wa st 0 0 0 8856020 167084 5741616 0 0 4 12 2 5 1 0 99 0 0 0 0 0 8855692 167088 5741592 0 0 0 52 631 554 0 1 99 0 0 0 0 0 8852960 167088 5741592 0 0 0 52 750 883 1 1 98 0 0 0 0 0 8852960 167088 5741592 0 0 0 804 399 368 0 0 100 0 0 0 0 0 8852828 167088 5741672 0 0 0 8 948 999 0 0 100 0 0
Espero te resulte útil.