252 lines
7.9 KiB
Plaintext
252 lines
7.9 KiB
Plaintext
# 创建完整的修复脚本
|
||
cat > /tmp/fix_alias.sh << 'EOF'
|
||
#!/bin/bash
|
||
|
||
echo "=== 修复别名设置 ==="
|
||
|
||
# 检查脚本是否存在
|
||
SCRIPT_PATH="/root/monitor/cmd_monitor_fixed.sh"
|
||
if [ ! -f "$SCRIPT_PATH" ]; then
|
||
echo "❌ 监控脚本不存在，重新创建..."
|
||
|
||
# 创建监控目录
|
||
mkdir -p /root/monitor
|
||
|
||
# 重新创建监控脚本
|
||
cat > "$SCRIPT_PATH" << 'SCRIPT_EOF'
|
||
#!/bin/bash
|
||
|
||
INSTALL_DIR="/root/monitor"
|
||
SCRIPT_PATH="$INSTALL_DIR/cmd_monitor_fixed.sh"
|
||
LOG_DIR="/root/command_logs"
|
||
PID_FILE="/tmp/cmd_monitor.pid"
|
||
|
||
# 获取客户端IP和地理位置
|
||
get_client_ip() {
|
||
local ip="unknown"
|
||
[ -n "$SSH_CLIENT" ] && ip=$(echo "$SSH_CLIENT" | awk '{print $1}')
|
||
[ "$ip" = "unknown" ] && [ -n "$SSH_CONNECTION" ] && ip=$(echo "$SSH_CONNECTION" | awk '{print $1}')
|
||
echo "$ip"
|
||
}
|
||
|
||
get_ip_location() {
|
||
local ip="$1"
|
||
[ "$ip" = "unknown" ] && echo "unknown" && return
|
||
[ "$ip" = "127.0.0.1" ] && echo "localhost" && return
|
||
|
||
# 使用简单的地理位置查询
|
||
if [[ "$ip" =~ ^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
|
||
# 这里可以添加更复杂的地理位置查询
|
||
# 现在先用简单的方式显示IP段
|
||
echo "$(echo $ip | cut -d. -f1-2).x.x"
|
||
else
|
||
echo "unknown"
|
||
fi
|
||
}
|
||
|
||
# 检查是否已经运行
|
||
is_running() {
|
||
if [ -f "$PID_FILE" ]; then
|
||
local pid=$(cat "$PID_FILE" 2>/dev/null)
|
||
if ps -p "$pid" >/dev/null 2>&1; then
|
||
return 0
|
||
else
|
||
rm -f "$PID_FILE"
|
||
fi
|
||
fi
|
||
return 1
|
||
}
|
||
|
||
# 检查to命令
|
||
if [ "$1" = "to" ]; then
|
||
if is_running; then
|
||
echo "切换到前台显示模式..."
|
||
exec "$SCRIPT_PATH" display
|
||
else
|
||
echo "启动后台监控+前台显示模式..."
|
||
exec "$SCRIPT_PATH" both
|
||
fi
|
||
exit 0
|
||
fi
|
||
|
||
case "$1" in
|
||
both|start)
|
||
if is_running; then
|
||
echo "监控已经在运行中"
|
||
exec "$SCRIPT_PATH" display
|
||
exit 0
|
||
fi
|
||
|
||
echo "启动后台监控+前台显示模式..."
|
||
|
||
# 设置实时history
|
||
for user_dir in /home/* /root; do
|
||
[ -d "$user_dir" ] || continue
|
||
bashrc="$user_dir/.bashrc"
|
||
[ -f "$bashrc" ] || continue
|
||
if ! grep -q "PROMPT_COMMAND.*history" "$bashrc" 2>/dev/null; then
|
||
echo 'export PROMPT_COMMAND="history -a; history -c; history -r"' >> "$bashrc"
|
||
fi
|
||
done
|
||
|
||
# 启动后台监控
|
||
(
|
||
mkdir -p "$LOG_DIR"
|
||
echo "=== 后台监控启动: $(date) ===" >> "$LOG_DIR/monitor.log"
|
||
declare -A last_sizes
|
||
|
||
# 初始化文件大小
|
||
for user_dir in /home/* /root; do
|
||
[ -d "$user_dir" ] || continue
|
||
user=$(basename "$user_dir")
|
||
history_file="$user_dir/.bash_history"
|
||
[ -f "$history_file" ] && last_sizes["$user"]=$(stat -c%s "$history_file" 2>/dev/null || echo 0)
|
||
done
|
||
|
||
while true; do
|
||
for user_dir in /home/* /root; do
|
||
[ -d "$user_dir" ] || continue
|
||
user=$(basename "$user_dir")
|
||
history_file="$user_dir/.bash_history"
|
||
[ -f "$history_file" ] || continue
|
||
|
||
current_size=$(stat -c%s "$history_file" 2>/dev/null || echo 0)
|
||
last_size=${last_sizes["$user"]:-0}
|
||
|
||
if [ "$current_size" -gt "$last_size" ]; then
|
||
new_cmd=$(tail -n 1 "$history_file" 2>/dev/null | sed 's/^[ \t]*//;s/[ \t]*$//')
|
||
if [ -n "$new_cmd" ] && [ ${#new_cmd} -gt 1 ]; then
|
||
# 过滤简单命令
|
||
case "$new_cmd" in
|
||
ls|cd|pwd|ll|history|exit|clear|to|"."|"..")
|
||
continue
|
||
;;
|
||
*)
|
||
client_ip=$(get_client_ip)
|
||
location=$(get_ip_location "$client_ip")
|
||
timestamp=$(date '+%Y-%m-%d %H:%M:%S')
|
||
log_entry="[$timestamp] 用户:$user | 命令:$new_cmd | 来源IP:$client_ip | 位置:$location"
|
||
echo "$log_entry" >> "$LOG_DIR/monitor.log"
|
||
# 同时输出到前台
|
||
echo "$log_entry" > /tmp/cmd_monitor.last_cmd
|
||
;;
|
||
esac
|
||
fi
|
||
last_sizes["$user"]=$current_size
|
||
fi
|
||
done
|
||
sleep 2
|
||
done
|
||
) &
|
||
|
||
echo $! > "$PID_FILE"
|
||
echo "✅ 后台监控已启动 (PID: $!)"
|
||
|
||
# 启动前台显示
|
||
echo "🔍 启动前台显示..."
|
||
exec "$SCRIPT_PATH" display
|
||
;;
|
||
|
||
display|foreground)
|
||
echo "🔍 前台显示模式启动..."
|
||
echo "💡 后台监控持续运行中"
|
||
echo "💡 输入 'to' 退出显示（后台继续运行）"
|
||
echo "⏹️ 按 Ctrl+C 停止显示"
|
||
echo "================================"
|
||
|
||
# 显示最后几条记录
|
||
if [ -f "$LOG_DIR/monitor.log" ]; then
|
||
echo "最近记录:"
|
||
tail -5 "$LOG_DIR/monitor.log" | while read line; do
|
||
echo " 📌 $line"
|
||
done
|
||
echo "------------------------"
|
||
fi
|
||
|
||
# 设置信号处理
|
||
trap 'echo -e "\n🛑 停止前台显示（后台监控继续运行）"; exit 0' INT TERM
|
||
|
||
# 实时显示新命令
|
||
while true; do
|
||
# 检测to命令输入
|
||
if read -t 1 -n 2 input 2>/dev/null; then
|
||
if [ "$input" = "to" ]; then
|
||
echo "🔄 退出前台显示..."
|
||
echo "✅ 后台监控继续运行中"
|
||
exit 0
|
||
fi
|
||
fi
|
||
|
||
# 显示新命令
|
||
if [ -f /tmp/cmd_monitor.last_cmd ]; then
|
||
echo "🆕 $(cat /tmp/cmd_monitor.last_cmd)"
|
||
rm -f /tmp/cmd_monitor.last_cmd
|
||
fi
|
||
done
|
||
;;
|
||
|
||
stop)
|
||
if [ -f "$PID_FILE" ]; then
|
||
pid=$(cat "$PID_FILE")
|
||
if ps -p "$pid" >/dev/null 2>&1; then
|
||
kill "$pid" 2>/dev/null
|
||
rm -f "$PID_FILE"
|
||
rm -f /tmp/cmd_monitor.last_cmd
|
||
echo "✅ 监控已停止 (PID: $pid)"
|
||
else
|
||
rm -f "$PID_FILE"
|
||
echo "⚠️ 监控进程不存在，已清理"
|
||
fi
|
||
else
|
||
echo "ℹ️ 监控未运行"
|
||
fi
|
||
;;
|
||
|
||
status)
|
||
if is_running; then
|
||
pid=$(cat "$PID_FILE")
|
||
echo "✅ 监控运行中 (PID: $pid)"
|
||
echo "📝 日志文件: $LOG_DIR/monitor.log"
|
||
else
|
||
echo "❌ 监控未运行"
|
||
fi
|
||
;;
|
||
|
||
*)
|
||
echo "命令监控系统"
|
||
echo "使用方法: $0 {both|display|stop|status|to}"
|
||
echo ""
|
||
echo "示例:"
|
||
echo " to - 启动/切换模式"
|
||
echo " $0 both - 后台监控+前台显示"
|
||
echo " $0 display - 仅前台显示"
|
||
echo " $0 stop - 停止监控"
|
||
;;
|
||
esac
|
||
SCRIPT_EOF
|
||
|
||
chmod +x "$SCRIPT_PATH"
|
||
echo "✅ 监控脚本已创建: $SCRIPT_PATH"
|
||
fi
|
||
|
||
# 修复别名
|
||
echo "修复别名设置..."
|
||
# 删除所有旧的to别名
|
||
sed -i '/alias to=/d' ~/.bashrc
|
||
|
||
# 添加新的别名
|
||
echo 'alias to="/root/monitor/cmd_monitor_fixed.sh to"' >> ~/.bashrc
|
||
|
||
# 重新加载bash配置
|
||
source ~/.bashrc
|
||
|
||
echo ""
|
||
echo "✅ 修复完成！"
|
||
echo "测试命令:"
|
||
echo " to # 启动监控"
|
||
echo " 或者直接运行: /root/monitor/cmd_monitor_fixed.sh both"
|
||
EOF
|
||
|
||
chmod +x /tmp/fix_alias.sh
|
||
/tmp/fix_alias.sh
|