Skip to content

Add Flowtriq DDoS Attack Status check script#315

Open
jacob-masse wants to merge 1 commit into
amidaware:mainfrom
jacob-masse:add-flowtriq-ddos-check
Open

Add Flowtriq DDoS Attack Status check script#315
jacob-masse wants to merge 1 commit into
amidaware:mainfrom
jacob-masse:add-flowtriq-ddos-check

Conversation

@jacob-masse

Copy link
Copy Markdown

Summary

  • Adds Linux_Flowtriq_DDoS_Status.sh, a TacticalRMM check script for nodes running ftagent (Flowtriq's DDoS detection agent)
  • Queries the local ftagent health endpoint (default 127.0.0.1:9100) and returns exit 1 if a DDoS attack is active or if the agent is unreachable; exit 0 when clear
  • Registers the script in community_scripts.json under TRMM (Linux):Checks
  • No external dependencies beyond curl; parses the JSON health response with standard shell tools (no jq required)

Script behaviour

Condition Exit code
No attack, agent healthy 0
Attack active 1
Agent unreachable 1
Baseline not ready (when warn_no_baseline=1) 1

Arguments

  • port=9100 - ftagent health port (default 9100)
  • timeout=5 - curl timeout in seconds
  • warn_no_baseline=0 - set to 1 to alert when baseline detection is not yet ready

Test plan

  • Run against a node with ftagent running and no attack - should exit 0
  • Run with ftagent stopped - should exit 1 with "unreachable" message
  • Run python3 -m json.tool community_scripts.json passes (JSON valid)

Linux_Flowtriq_DDoS_Status.sh queries the local ftagent health endpoint
(default port 9100) and exits 1 if a DDoS attack is active or the agent
is unreachable, exit 0 when all clear. No external dependencies beyond curl.
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.


Jacob Masse seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants