SFFCHECK

sffcheck

This program checks Fip-type network connections

There are several different options:
	- input switch -r :	test all REDUN connections
	- input switch -d :	test all DEST_REDUN connections and show primary servers
	- input switch -D :	show only DEST_REDUN primary servers
	- input switch -b :	test all BALANCE connections
	- no input switch :	test all connections specified in sys/CHECK.FIP

For the first 3 options, the hostname and port are resolved (unless the -R do
NOT resolve is also specified), connected to and a small handshake takes place
to check if the relevant program on the remote server is running.

For the last option, a parameter file is used to specify which
connections/hosts to test - default is tables/sys/CHECK.FIP

In each case hostname can be the name or IP address of the server

Syntax
	; comment line

	fipnet:(hostname) [(optional port)]
		Check ip2net/ipxnet connection to port 9001

	balance:(hostname) [(optional port)]
		Check ipbalan/ipsvrd connection to port 9140

	w4:(hostname) [(optional port)]
		Check w4 web wires connection to port 80

	w4s:(hostname) [(optional port)]
		Check w4 web wires secure connection to port 443
		** only of SSL is functional on your system

	formd:(hostname) [(optional port)]
		Check sffsvrd connection to port 80

	smtp:(hostname) [(optional port)]
		Check smtp connection to port 25

	tcp:(hostname) (port)
		Check raw tcp connection to port specified

	udp:(hostname) (port)
		Check raw udp connection to port specified

	http:(hostname) [(optional port)]
		Check default apache/IIS connection to port 80

	https:(hostname) [(optional port)]
		Check default apache/IIS secure connection to port 443
		** only of SSL is functional on your system

	http-proxy-host: Hostname of Proxy HTTP server. default: direct connection

	http-proxy-port: Port Number of Proxy server.   default: direct connection

	proxy-is-squid: (yes/no) Use squid style HTTP syntax for traversing a
squid-like proxy server default: no

	http-proxy-logon: This is the logon and password to get thru the firewall
		if required. The format is (logon) (colon) (password) and is
		converted to base 64.
		http-proxy-logon:Y2hyaXMuaHVnaGpvbmVzOnBhbnRoZXIK=

		To generate (use 'type' on Winnt and just 'echo' for other Unix) :
			echo -n "logon:password" | sffb64 -i
		eg	echo -n "chris:sleekpanther" | sffb64 -i
		gives   progs.Y2hyaXM6c2xlZWtwYW50aGVy
			http-proxy-logon:Y2hyaXM6c2xlZWtwYW50aGVy=

	http-header: Extra header information in progs.FipSeq
		default: http-header:Accept: * / *\nAccept-Language: en\nUser-Agent: Fippo
(webwire)\n

	ssl-method: (1,2,3,23,999)
		Version number to use for TLS/SSL		default: 999 for current default (2 or 3)
	ssl-password: (password)
	ssl-passwd: (password)				  default: none
		Optional password if the handshake requires a shared secret
	ssl-cert: (name of a PEM certificate file)		default: none
	ssl-root-cert: (name of a root PEM certificate file)	defaunt: none
		Optional certificates - held in tables/ssl

Input Parameters are :
All are Optional
	-b : list and test all hosts in sys/BALANCE	default: no
	-c : Timeout for TCP connections (balance etc)	default: 4 secs
	-C : Timeout for UDP connections (redun etc)	default: 4 secs
	-d : list and resolve all hosts in sys/DEST_REDUN default: no
		and check primaries
	-D : check which servers are primary in  DEST_REDUN default: no
	-o : output file for results			default: none
	-r : list and resolve all hosts in sys/REDUN	default: no
	-R : do NOT resolve hostsnames via DNS		default: resolve
	-y : no of retries for TCP connections		default: 3
	-Y : no of retries for UDP connections		default: 3
	-z : Parameter file				default: sys/CHECK.FIP
	-v : print version no and exit

Version Control
;000h6	 7apr08 chj original version ;6 8jan10 ssl redo


(copyright) 2011 and previous years progs.FingerPost Ltd.

Notes

SFFCHECK questions?