From e6362e6fa85ea6f12dbee670b74f3a43c35c9543 Mon Sep 17 00:00:00 2001
From: Mike D'Morto <mikedmorto@gmail.com>
Date: Mon, 23 Feb 2026 19:41:26 +0700
Subject: [PATCH] v 3.3 test

---
 sevpn/test.sh | 477 ++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 477 insertions(+)
 create mode 100755 sevpn/test.sh

diff --git a/sevpn/test.sh b/sevpn/test.sh
new file mode 100755
index 0000000..e96e99e
--- /dev/null
+++ b/sevpn/test.sh
@@ -0,0 +1,477 @@
+#!/bin/bash
+# ABOUT softether vpn for zabbix
+# author mikedmorto 2026 year
+export LC_ALL=""
+export LANG="en_US.UTF-8"
+version="3.3"
+
+. /etc/zabbix/scripts/sevpn3.cfg
+
+JSON=""
+##### PARAMETERS#####
+METRIC="$1"
+ITEM="$2"
+
+API_URL="https://${URL}/api/"
+CURL_OPTS="-s -k"
+[ "$API_INSECURE" = "1" ] && CURL_OPTS="$CURL_OPTS -k"
+
+api_call() {
+    local method=$1
+    local params=$2
+    [ -z "$params" ] && params="{}"
+    local id="1"
+    local data=$(cat <<EOF
+{
+  "jsonrpc": "2.0",
+  "id": "$id",
+  "method": "$method",
+  "params": $params
+}
+EOF
+)
+    curl $CURL_OPTS -X POST "$API_URL" \
+        -H "X-VPNADMIN-HUBNAME: " \
+        -H "X-VPNADMIN-PASSWORD: $PWD" \
+        -H "Content-Type: application/json" \
+        -d "$data" 2>/dev/null
+}
+
+
+case "$METRIC" in
+
+discovery)
+    hubs_json=$(api_call "EnumHub")
+    # ... проверка ошибок
+    hubs=$(echo "$hubs_json" | jq -r '.result.HubList[].HubName_str' 2>/dev/null)
+
+    JSON='{"data":['
+
+    first_hub=1
+    for hub in $hubs; do
+        # Добавляем сам хаб
+        if [ $first_hub -eq 1 ]; then first_hub=0; else JSON="${JSON},"; fi
+        JSON="${JSON}{\"{#HUB_NAME}\":\"$hub\"}"
+
+        # Пользователи хаба
+        users_json=$(api_call "EnumUser" "{\"HubName_str\":\"$hub\"}")
+        if ! echo "$users_json" | jq -e '.error' >/dev/null 2>&1; then
+            users=$(echo "$users_json" | jq -r '.result.UserList[].Name_str' 2>/dev/null)
+            for user in $users; do
+                JSON="${JSON},{\"{#HUB_USER_NAME}\":\"$hub,$user\"}"
+            done
+        fi
+
+        # Каскады хаба
+        links_json=$(api_call "EnumLink" "{\"HubName_str\":\"$hub\"}")
+        if ! echo "$links_json" | jq -e '.error' >/dev/null 2>&1; then
+            links=$(echo "$links_json" | jq -r '.result.LinkList[].AccountName_utf' 2>/dev/null)
+            for link in $links; do
+                JSON="${JSON},{\"{#HUB_CASCADE_NAME}\":\"$hub,$link\"}"
+            done
+        fi
+    done
+
+    # --- Локальные мосты (один раз после цикла по хабам) ---
+    bridges_json=$(api_call "EnumLocalBridge")
+    if ! echo "$bridges_json" | jq -e '.error' >/dev/null 2>&1; then
+        while IFS= read -r bridge_entry; do
+            # bridge_entry имеет формат "hub,device"
+            JSON="${JSON},{\"{#HUB_BRIDGE_NAME}\":\"$bridge_entry\"}"
+        done < <(echo "$bridges_json" | jq -r '.result.LocalBridgeList[] | "\(.HubNameLB_str),\(.DeviceName_str)"' 2>/dev/null)
+    fi
+
+    JSON="${JSON}]}"
+    echo "$JSON"
+    ;;
+
+
+script.version)
+        echo ${version}
+;;
+
+srv.uptime)
+    resp=$(api_call "GetServerStatus")
+    # Проверка на ошибку API
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    # Извлекаем дату запуска из поля StartTime_dt
+    start_date_iso=$(echo "$resp" | jq -r '.result.StartTime_dt' 2>/dev/null)
+    if [ -z "$start_date_iso" ] || [ "$start_date_iso" = "null" ]; then
+        echo 0
+        exit 1
+    fi
+    # Преобразуем ISO8601 в timestamp
+    start_ts=$(date -d "$start_date_iso" +%s 2>/dev/null)
+    if [ -z "$start_ts" ]; then
+        echo 0
+        exit 1
+    fi
+    now=$(date +%s)
+    uptime=$((now - start_ts))
+    echo "$uptime"
+    ;;
+
+srv.number_of_users)
+    resp=$(api_call "GetServerStatus")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    # Извлекаем количество пользователей (поле Users)
+    users=$(echo "$resp" | jq -r '.result.NumUsers_u32' 2>/dev/null)
+    # Если поле отсутствует или null, выводим 0
+    if [ -z "$users" ] || [ "$users" = "null" ]; then
+        echo 0
+    else
+        echo "$users"
+    fi
+    ;;
+
+srv.number_of_ip_address_tables)
+    resp=$(api_call "GetServerStatus")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    echo "$resp" | jq -r '.result.NumIpTables_u32' 2>/dev/null || echo 0
+    ;;
+
+srv.number_of_mac_address_tables)
+    resp=$(api_call "GetServerStatus")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    echo "$resp" | jq -r '.result.NumMacTables_u32' 2>/dev/null || echo 0
+    ;;
+
+srv.number_of_sessions)
+    resp=$(api_call "GetServerStatus")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    echo "$resp" | jq -r '.result.NumSessionsTotal_u32' 2>/dev/null || echo 0
+    ;;
+
+srv.number_of_virtual_hubs)
+    resp=$(api_call "GetServerStatus")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    echo "$resp" | jq -r '.result.NumHubTotal_u32' 2>/dev/null || echo 0
+    ;;
+
+srv.number_of_active_sockets)
+    resp=$(api_call "GetServerStatus")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    echo "$resp" | jq -r '.result.NumTcpConnections_u32' 2>/dev/null || echo 0
+    ;;
+
+srv.l2tp_status)
+        echo `$VCMD /SERVER ${URL} /PASSWORD:${PWD} /CMD IPsecGet | grep "L2TP over IPsec Server Function Enabled" | awk -F"|" '{print $2}'`
+;;
+
+srv.openvpn_status)
+        echo `$VCMD /SERVER ${URL} /PASSWORD:${PWD} /CMD openvpnget | grep "OpenVPN Clone Server Enabled" | awk -F"|" '{print $2}'`
+;;
+
+
+
+srv.version)
+    resp=$(api_call "GetServerInfo")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        $VCMD /SERVER ${URL} /PASSWORD:${PWD} /CMD ServerStatusGet | awk 'FNR==3'
+    else
+        version=$(echo "$resp" | jq -r '.result.ServerVersionString_str' 2>/dev/null)
+        [ -n "$version" ] && [ "$version" != "null" ] && echo "$version" || $VCMD /SERVER ${URL} /PASSWORD:${PWD} /CMD ServerStatusGet | awk 'FNR==3'
+    fi
+    ;;
+
+# hub.if.out.broad
+hub.if.out.broad)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result."Send.BroadcastBytes_u64"' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.if.in.broad
+hub.if.in.broad)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result."Recv.BroadcastBytes_u64"' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.if.out.uni
+hub.if.out.uni)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result."Send.UnicastBytes_u64"' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.if.in.uni
+hub.if.in.uni)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result."Recv.UnicastBytes_u64"' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.sessions-bridge
+hub.sessions-bridge)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result.NumSessionsBridge_u32' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.sessions-client
+hub.sessions-client)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result.NumSessionsClient_u32' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.sessions-all
+hub.sessions-all)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result.NumSessions_u32' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+# hub.securenat
+hub.securenat)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo "false"
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result.SecureNATEnabled_bool' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo "false"
+    else
+        # Приводим к строке true/false (Zabbix ожидает строку)
+        echo "$val"
+    fi
+    ;;
+
+# hub.type
+hub.type)
+    resp=$(api_call "GetHubStatus" "{\"HubName_str\":\"$ITEM\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        echo 0
+        exit 1
+    fi
+    val=$(echo "$resp" | jq -r '.result.HubType_u32' 2>/dev/null)
+    if [ -z "$val" ] || [ "$val" = "null" ]; then
+        echo 0
+    else
+        echo "$val"
+    fi
+    ;;
+
+
+# br.status
+br.status)
+    HUB=${ITEM%,*}
+    BR=${ITEM##*,}
+    resp=$(api_call "EnumLocalBridge")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        # Fallback на старый метод
+        $VCMD /SERVER ${URL} /PASSWORD:${PWD} /adminhub:${HUB} /CMD bridgelist | tr -d ' ' | awk '-F|' -v VH="${HUB}" -v VB="${BR}" '{if ($2==VH && $3==VB) print $4}'
+    else
+        # Ищем в списке мостов запись с нужным хабом и именем устройства
+        status=$(echo "$resp" | jq -r --arg hub "$HUB" --arg br "$BR" '.result.LocalBridgeList[] | select(.HubNameLB_str == $hub and .DeviceName_str == $br) | .Online_bool' 2>/dev/null | head -1)
+        if [ -n "$status" ] && [ "$status" != "null" ]; then
+            # Выводим true/false (оригинал выводил то же)
+            echo "$status"
+        else
+            # Если не нашли, пробуем старый метод
+            $VCMD /SERVER ${URL} /PASSWORD:${PWD} /adminhub:${HUB} /CMD bridgelist | tr -d ' ' | awk '-F|' -v VH="${HUB}" -v VB="${BR}" '{if ($2==VH && $3==VB) print $4}'
+        fi
+    fi
+    ;;
+
+
+
+
+usr.if.out.broad)
+    HUB=${ITEM%,*}
+    USER=${ITEM##*,}
+    resp=$(api_call "GetUser" "{\"HubName_str\":\"$HUB\",\"Name_str\":\"$USER\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        $VCMD /SERVER ${URL} /PASSWORD:${PWD} /adminhub:${HUB} /CMD UserGet ${USER} | grep "Outgoing Broadcast Total Size" | sed -e 's/[^0-9]//g'
+    else
+        val=$(echo "$resp" | jq -r '.result."Send.BroadcastBytes_u64"' 2>/dev/null)
+        echo "${val:-0}"
+    fi
+    ;;
+
+# usr.if.in.broad
+usr.if.in.broad)
+    HUB=${ITEM%,*}
+    USER=${ITEM##*,}
+    resp=$(api_call "GetUser" "{\"HubName_str\":\"$HUB\",\"Name_str\":\"$USER\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        $VCMD /SERVER ${URL} /PASSWORD:${PWD} /adminhub:${HUB} /CMD UserGet ${USER} | grep "Incoming Broadcast Total Size" | sed -e 's/[^0-9]//g'
+    else
+        val=$(echo "$resp" | jq -r '.result."Recv.BroadcastBytes_u64"' 2>/dev/null)
+        echo "${val:-0}"
+    fi
+    ;;
+
+# usr.if.out.uni
+usr.if.out.uni)
+    HUB=${ITEM%,*}
+    USER=${ITEM##*,}
+    resp=$(api_call "GetUser" "{\"HubName_str\":\"$HUB\",\"Name_str\":\"$USER\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        $VCMD /SERVER ${URL} /PASSWORD:${PWD} /adminhub:${HUB} /CMD UserGet ${USER} | grep "Outgoing Unicast Total Size" | sed -e 's/[^0-9]//g'
+    else
+        val=$(echo "$resp" | jq -r '.result."Send.UnicastBytes_u64"' 2>/dev/null)
+        echo "${val:-0}"
+    fi
+    ;;
+
+# usr.if.in.uni
+usr.if.in.uni)
+    HUB=${ITEM%,*}
+    USER=${ITEM##*,}
+    resp=$(api_call "GetUser" "{\"HubName_str\":\"$HUB\",\"Name_str\":\"$USER\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        $VCMD /SERVER ${URL} /PASSWORD:${PWD} /adminhub:${HUB} /CMD UserGet ${USER} | grep "Incoming Unicast Total Size" | sed -e 's/[^0-9]//g'
+    else
+        val=$(echo "$resp" | jq -r '.result."Recv.UnicastBytes_u64"' 2>/dev/null)
+        echo "${val:-0}"
+    fi
+    ;;
+
+# usr.lastlogin
+usr.lastlogin)
+    HUB=${ITEM%,*}
+    USER=${ITEM##*,}
+    resp=$(api_call "GetUser" "{\"HubName_str\":\"$HUB\",\"Name_str\":\"$USER\"}")
+    if echo "$resp" | jq -e '.error' >/dev/null 2>&1; then
+        $VCMD /SERVER ${URL} /adminhub:"$HUB" /PASSWORD:"${PWD}" /CMD UserGet "${USER}" | grep "Updated on" | awk -F"|" '{print $2}'
+    else
+        updated=$(echo "$resp" | jq -r '.result.UpdatedTime_dt' 2>/dev/null)
+        if [ -n "$updated" ] && [ "$updated" != "null" ]; then
+            # Преобразуем ISO дату в timestamp
+            ts=$(date -d "$updated" +%s 2>/dev/null)
+            echo "${ts:-0}"
+        else
+            echo 0
+        fi
+    fi
+    ;;
+
+
+
+help)
+echo "please use these params 
+{
+discovery                               
+srv.uptime                              
+srv.number_of_users                     
+srv.number_of_ip_address_tables         
+srv.number_of_mac_address_tables        
+srv.number_of_sessions                  
+srv.number_of_virtual_hubs              
+srv.number_of_active_sockets            
+srv.l2tp_status                         
+srv.openvpn_status                      
+srv.version                             
+hub.if.out.broad                        
+hub.if.in.broad                         
+hub.if.out.uni                          
+hub.if.in.uni                           
+hub.sessions-bridge                     
+hub.sessions-client                     
+hub.sessions-all                        
+hub.securenat                           
+hub.type                                
+cas.status                              
+cas.if.in.broad                         
+cas.if.out.broad                        
+cas.if.out                              
+cas.if.in                               
+cas.if.in.uni                           
+cas.if.out.uni                          
+br.status                               
+usr.lastlogin                           
+usr.if.out.broad                        
+usr.if.in.broad                         
+usr.if.in.uni                           
+usr.if.out.uni
+script.version                      
+}"        
+;;
+
+
+*)
+        echo ""
+;;
+esac
+
+