Exemplo n.º 1
0
 def to_fortinet(self, dev, commands=None, extra=None):
     self.creds=get_device_password('fortinet')
     commands = [b'diagnose sys session filter src 10.65.64.1',
                 b'diagnose sys session filter dst 8.8.8.8',
                 ] #proto_state for tcp 1 established, 2 syn sent, 3 syn/ack, 5 time wait, 6 close
     # first digit is server second is client
     return commands
Exemplo n.º 2
0
    def to_adtran(self, dev, commands=None, extra=None):
        cmds = [b'show running-config']
        self.timeout = 300
        if dev.deviceType == 'OLT':
            self.creds = get_device_password('olt')

        return cmds
Exemplo n.º 3
0
 def to_fortinet(self, dev, commands=None, extra=None):
     self.creds = get_device_password('fortinet')
     commands = [
         'get router info routing-table database',
         'diagnose sys sdwan health-check',  #check sdwan ip sla probess\
         'get router info kernel 17'
     ]  #show sdwan ip sla routes
     return commands
Exemplo n.º 4
0
def pty_connect(device, action, creds=None, display_banner=None,
                ping_test=False, init_commands=None):
    """
    Connect to a device and log in.  Use SSHv2 or telnet as appropriate.

    :param device: A :class:`~trigger.netdevices.NetDevice` object.

    :param action: A Protocol object (not class) that will be activated when
    the session is ready.

    :param creds: is a 2-tuple (username, password). By default, .tacacsrc AOL
    credentials will be used. Override that here.

    :param display_banner: Will be called for SSH pre-authentication banners.
    It will receive two args, 'banner' and 'language'.  By default,
    nothing will be done with the banner.

    :param ping_test: If set, the device is pinged and succeed in order to
    proceed.

    :param init_commands: A list of commands to execute upon logging into
    the device.
    """
    d = defer.Deferred()

    # Only proceed if ping succeeds
    if ping_test:
        log.msg('Pinging %s' % device, debug=True)
        if not ping(device.nodeName):
            log.msg('Ping to %s failed' % device, debug=True)
            return None

    # SSH?
    log.msg('SSH TYPES: %s' % settings.SSH_TYPES, debug=True)
    if device.manufacturer in settings.SSH_TYPES:
        if hasattr(sys, 'ps1') or not sys.stderr.isatty() \
         or not sys.stdin.isatty() or not sys.stdout.isatty():
            # Shell not in interactive mode.
            pass

        else:
            if not creds and device.is_firewall():
                creds = tacacsrc.get_device_password(str(device))

        factory = TriggerSSHPtyClientFactory(d, action, creds, display_banner,
                                             init_commands)
        log.msg('Trying SSH to %s' % device, debug=True)
        reactor.connectTCP(device.nodeName, 22, factory)

    # or Telnet?
    else:
        factory = TriggerTelnetClientFactory(d, action, creds,
                                             init_commands=init_commands)
        log.msg('Trying telnet to %s' % device, debug=True)
        reactor.connectTCP(device.nodeName, 23, factory)

    return d
Exemplo n.º 5
0
    def to_fortinet(self, dev, commands=None, extra=None):
        cmds = [
            #'config vdom',
            #'edit ESNH-ICN',
            'get system interface'
        ]

        self.creds = get_device_password('esnh-icn-fwl')
        return cmds
Exemplo n.º 6
0
 def to_fortinet(self, dev, commands=None, extra=None):
     self.creds = get_device_password('fortinet')
     commands = [
         b'diagnose sniffer packet <interface> "<filter>" <verbosity> <count> <time> <size>'
     ]
     """
     verbosity 4: shows interface
               3,6: show payload
     """
     return commands
Exemplo n.º 7
0
def generate_endpoint(device):
    """Generate Trigger endpoint for a given device.

    The purpose of this function is to generate endpoint clients for use by a `~trigger.netdevices.NetDevice` object.

    :param device: `~trigger.netdevices.NetDevice` object
    """
    creds = tacacsrc.get_device_password(device.nodeName)
    return TriggerSSHShellClientEndpointBase.newConnection(
        reactor, creds.username, device, password=creds.password)
Exemplo n.º 8
0
    def to_fortinet(self, dev, commands=None, extra=None):
        self.creds=get_device_password('fortinet')
        commands = [b'diagnose debug enable', #disable
                    b'diagnose debug flow filter addr 220.233.199.237',
                    #b'diagnose debug flow filter port 4443',
                    b'diagnose debug flow trace start 100',
                    b'diagnose debug flow trace stop',

        ]
        return commands
Exemplo n.º 9
0
 def to_fortinet(self, dev, commands=None, extra=None):
     self.creds = get_device_password('fortinet')
     commands = [
         b'config log memory setting', b'set status enable', b'end',
         b'get log memory filter', b'config log memory filter',
         b'set severity information', b'end',
         b'execute log filter field srcip ' + sys.argv[1].encode('utf-8'),
         b'execute log display'
     ]
     return commands
Exemplo n.º 10
0
def generate_endpoint(device):
    """Generate Trigger endpoint for a given device.

    The purpose of this function is to generate endpoint clients for use by a `~trigger.netdevices.NetDevice` object.

    :param device: `~trigger.netdevices.NetDevice` object
    """
    creds = tacacsrc.get_device_password(device.nodeName)
    return TriggerSSHShellClientEndpointBase.newConnection(
        reactor, creds.username, device, password=creds.password
    )
Exemplo n.º 11
0
def test_trigger():
    from twisted.internet import reactor

    nd = NetDevices()
    dev = nd.find('fortinet')
    d = defer.Deferred()
    creds = tacacsrc.get_device_password(dev.nodeName)
    factory = TriggerSSHPtyClientFactory(d,
                                         Interactor(),
                                         creds,
                                         display_banner=None,
                                         init_commands=None,
                                         device=dev)
    reactor.connectTCP(dev.nodeName, 22, factory)
    d.addCallback(lambda x: stop_reactor())
    cli.setup_tty_for_pty(reactor.run)
Exemplo n.º 12
0
    def __init__(self, deferred, creds=None, init_commands=None):
        self.d = deferred
        self.tcrc = tacacsrc.Tacacsrc()
        if creds is None:
            log.msg('creds not defined, fetching...', debug=True)
            realm = settings.DEFAULT_REALM
            creds = self.tcrc.creds.get(realm, tacacsrc.get_device_password(realm))
        self.creds = creds

        self.results = None
        self.err = None

        # Setup and run the initial commands
        if init_commands is None:
            init_commands = [] # We need this to be a list
        self.init_commands = init_commands
        log.msg('INITIAL COMMANDS: %r' % self.init_commands, debug=True)
        self.initialized = False
Exemplo n.º 13
0
def execute_netscreen(device, commands, creds=None, incremental=None,
                      with_errors=False, timeout=settings.DEFAULT_TIMEOUT):
    """
    Connect to a NetScreen device. See execute_junoscript().
    """
    assert device.manufacturer in ('JUNIPER', 'NETSCREEN TECHNOLOGIES')
    assert device.is_firewall()

    if not creds:
        creds = tacacsrc.get_device_password(str(device))

    d = defer.Deferred()
    channel = TriggerSSHNetscreenChannel
    factory = TriggerSSHChannelFactory(d, commands, creds, incremental,
                                      with_errors, timeout, channel)

    log.msg('Trying Netscreen SSH to %s' % device, debug=True)
    reactor.connectTCP(device.nodeName, 22, factory)
    return d
Exemplo n.º 14
0
 def to_fortinet(self, dev, commands=None, extra=None):
     self.creds=get_device_password('fortinet')
     commands = [b'diagnose ip address list']
     return commands
Exemplo n.º 15
0
    def to_fortinet(self, dev, commands=None, extra=None):
        cmds = [b'show']
        self.timeout = 300
        self.creds = get_device_password('fortinet')

        return cmds
Exemplo n.º 16
0
 def to_juniper(self, dev, commands=None, extra=None):
     cmds = [b'show system users']
     self.creds = creds = get_device_password('tor')
     return cmds
Exemplo n.º 17
0
 def to_adtran(self, dev, commands=None, extra=None):
     cmds = [b'show users']
     if dev.deviceType == 'OLT':
         self.creds = get_device_password('olt')
     return cmds
Exemplo n.º 18
0
nothing more than device type and credentials this can provide extremely
helpful to just build a quick NetDevices CSV and gather a bunch of info
quickly. For example::
"""

import os
from trigger import tacacsrc
from trigger.conf import settings
from trigger.netdevices import NetDevices
from trigger.contrib.commando.plugins import gather_info


settings.NETDEVICES_SOURCE = os.path.abspath('het-netdevices.json')
settings.DEFAULT_REALM = 'het'
os.environ['TRIGGER_ENABLEPW'] = \
    tacacsrc.get_device_password(settings.DEFAULT_REALM).password

device_list = NetDevices()
gi = GatherInfo(devices=device_list)
gi.run()

print(gi.results)

gi = GatherInfo(devices='hsc-hmg-uu-gw')
gi.run()

print(gi.results)

from trigger.netdevices import NetDevices
from trigger.contrib.commando.plugins import gather_info
nd = NetDevices()
Exemplo n.º 19
0
    def to_juniper(self, dev, commands=None, extra=None):
        cmds = ['show vlans brief']
        self.creds = creds = get_device_password('esnh-swt-00')

        return cmds
Exemplo n.º 20
0
import pwd
import socket
import sys

from trigger.tacacsrc import Tacacsrc, get_device_password, convert_tacacsrc
from trigger.utils.cli import yesno

if not yesno('This will overwrite your .tacacsrc.gpg and all gnupg configuration, are you sure?'):
    sys.exit(1)

(username, err, uid, gid, name, homedir, shell) = pwd.getpwuid(os.getuid())

print '''
======== [ READ ME READ ME READ ME READ ME ] ================
The following settings must be configured:

Real name: %s
Email Address: %s@%s
Comment: First Last
=============================================================
''' % (username, username, socket.getfqdn())

os.system('gpg --gen-key')

if yesno('Would you like to convert your OLD tacacsrc configuration file to your new one?')
        and os.path.isfile(homedir+'/.tacacsrc')
    convert_tacacsrc()
else:
    print "Old tacacsrc not converted."
    get_device_password()
Exemplo n.º 21
0
 def to_juniper(self, dev, commands=None, extra=None):
     cmds = ['show ethernet-switching table | match ' + self.commands]
     self.creds = creds = get_device_password('tor')
     return cmds
Exemplo n.º 22
0
 def to_adtran(self, dev, commands=None, extra=None):
     cmds = ['show mac address-table | include ' + self.commands]
     if dev.deviceType == 'OLT':
         self.creds = get_device_password('olt')
     return cmds
Exemplo n.º 23
0
 def to_fortinet(self, dev, commands=None, extra=None):
     cmds = ['get system arp | grep ' + self.commands]
     self.creds = get_device_password('fortinet')
     return cmds
Exemplo n.º 24
0
    def to_juniper(self, dev, commands=None, extra=None):
        return self.commands
    

def printResults(cmd):
    for c_id, c_info in cmd.results.items():
        for key in c_info:
            print("DEV: {}   CMD: {}\n{}".format(c_id,
                                                 key,
                                                 c_info[key].decode('utf-8')))


    
if __name__ == '__main__':
        
    tor1 = ['tor1', 'tor', 'tor2']
    c_tor1 = Tor1(tor1, creds=get_device_password('tor'), )
    instances = [c_tor1]

    deferreds = []
    for i in instances:
        deferreds.append(i.run())

    d = defer.DeferredList(deferreds)

    d.addBoth(stop_reactor)
    reactor.run()
    
    for i in instances:
        printResults(i)
Exemplo n.º 25
0
    def to_juniper(self, dev, commands=None, extra=None):
        cmds = [b'show configuration | display set']
        self.timeout = 300
        self.creds = creds = get_device_password('tor')

        return cmds
Exemplo n.º 26
0
    def to_juniper(self, dev, commands=None, extra=None):
        return self.commands


def printResults(cmd):
    for c_id, c_info in cmd.results.items():
        for key in c_info:
            print("DEV: {}   CMD: {}\n{}".format(c_id, key,
                                                 c_info[key].decode('utf-8')))


if __name__ == '__main__':

    c_tor1 = Tor1(
        ['tor1'],
        creds=get_device_password('tor'),
    )
    c_tor2 = Tor2(
        ['tor2'],
        creds=get_device_password('tor'),
    )

    instances = [c_tor1, c_tor2]

    deferreds = []
    for i in instances:
        deferreds.append(i.run())

    d = defer.DeferredList(deferreds)

    d.addBoth(stop_reactor)
Exemplo n.º 27
0
    def to_fortinet(self, dev, commands=None, extra=None):
        commands = ['get system admin list']
        self.creds = get_device_password('fortinet')

        return commands
Exemplo n.º 28
0
    print('Result:')
    print(data)


if __name__ == '__main__':
    # Replace these with real device IPs/hostnames in your network
    devices = ['olt']

    # nd = NetDevices()
    # dev = nd.find('svp00c')
    # async = dev.execute(['show clock'])
    # async.addCallback(print_me)

    c1 = showSessionList(
        devices,
        creds=get_device_password('olt'),
    )

    instances = [c1]

    # Once every task has returned a result, stop the reactor
    deferreds = []
    for i in instances:
        deferreds.append(i.run())

    d = defer.DeferredList(deferreds)

    d.addBoth(stop_reactor)
    reactor.run()

    for c_id, c_info in c1.results.items():
Exemplo n.º 29
0
 def to_fortinet(self, dev, commands=None, extra=None):
     self.creds = get_device_password('fortinet')
     commands = [b'get sys session list', b'diag sys session stat']
     return commands