1

from twisted.internet import protocol, reactor

     2

from twisted.python import log

     3

import socket, os, time

     4

     5

import _utmp, api, sys

     6

     7

POLL_INTERVAL = 5

     8

     9

def getPidCmd (pid) :

    10

    try :

    11

        fh = open("/proc/%d/cmdline" % pid, "r")

    12

        cmdline = fh.read()

    13

        fh.close()

    14

    15

        return repr("%d:%s" % (pid, cmdline))

    16

    except IOError, OSError :

    17

        return "[%d]" % pid

    18

    19

class WtmpEntry (object) :

    20

    _ATTRS = (

    21

        "type", "pid", "line", "id", "user", "host", "exit", "session", "tv", "addr"

    22

    )

    23

    24

    @staticmethod

    25

    def fromFile (file) :

    26

        bytes = file.read(_utmp.size())

    27

    28

        if not bytes :

    29

            return

    30

    31

        result = _utmp.parse(bytes)

    32

    33

        wtmp = WtmpEntry()

    34

    35

        for name, field in zip(wtmp._ATTRS, result) :

    36

            if isinstance(field, str) and name not in ("addr", ) :

    37

                field = field.rstrip("\0")

    38

    39

            setattr(wtmp, name, field)

    40

    41

        # convert the address

    42

        family = socket.AF_INET

    43

        addr = wtmp.addr[0:4]

    44

        for byte in wtmp.addr[4:] :

    45

            if byte :

    46

                family = socket.AF_INET6

    47

                addr = wtmp.addr

    48

                break

    49

    50

        wtmp.addr = socket.inet_ntop(family, addr)

    51

        wtmp.pid = getPidCmd(wtmp.pid)

    52

    53

        return wtmp

    54

    55

    def __str__ (self) :

    56

        return " ".join("%s=%s" % (key, getattr(self, key)) for key in self._ATTRS)

    57

    58

class WtmpFile (object) :

    59

    def __init__ (self, path="/var/log/wtmp") :

    60

        self.path = path

    61

        self.file = open(path)

    62

        self.file.seek(0, os.SEEK_END)

    63

    64

    def tryRead (self) :

    65

        return WtmpEntry.fromFile(self.file)

    66

    67

def read_entries (file) :

    68

    while True :

    69

        wtmp = read_entry(file)

    70

    71

        if wtmp :

    72

            yield wtmp

    73

        else :

    74

            return

    75

    76

def follow_main () :

    77

    wtmp = WtmpFile()

    78

    79

    while True :

    80

        item = wtmp.tryRead()

    81

    82

        if item :

    83

            print item

    84

        else :

    85

            time.sleep(2)

    86

    87

def test_main () :

    88

    fh = open("/var/log/wtmp", "r")

    89

    90

    for item in read_entries(fh) :

    91

        print item

    92

    93

class WtmpModule (api.Module) :

    94

    name = "wtmp"

    95

    version = 0x0001

    96

    97

    event_types = [

    98

        "wtmp",

    99

    ]

   100

   101

    def handleConnect (self) :

   102

        log.msg("Following default wtmp file...")

   103

   104

        self.wtmp = WtmpFile()

   105

   106

        log.msg("Starting poll timer")

   107

   108

        self.poll()

   109

   110

        log.msg("Running")

   111

   112

    def poll (self) :

   113

   114

        while True :

   115

            item = self.wtmp.tryRead()

   116

   117

            if item :

   118

                log.msg(" -- %s" % item)

   119

                self.sendEvent("wtmp", str(item))

   120

            else :

   121

                return reactor.callLater(POLL_INTERVAL, self.poll)

   122

   123

if __name__ == '__main__' :

   124

    WtmpModule().run()

   125