#!/usr/bin/python
# -*- encoding: utf-8; py-indent-offset: 4 -*-
# +------------------------------------------------------------------+
# |             ____ _               _        __  __ _  __           |
# |            / ___| |__   ___  ___| | __   |  \/  | |/ /           |
# |           | |   | '_ \ / _ \/ __| |/ /   | |\/| | ' /            |
# |           | |___| | | |  __/ (__|   <    | |  | | . \            |
# |            \____|_| |_|\___|\___|_|\_\___|_|  |_|_|\_\           |
# |                                                                  |
# | Copyright Mathias Kettner 2016             mk@mathias-kettner.de |
# +------------------------------------------------------------------+
#
# This file is part of Check_MK.
# The official homepage is at http://mathias-kettner.de/check_mk.
#
# check_mk is free software;  you can redistribute it and/or modify it
# under the  terms of the  GNU General Public License  as published by
# the Free Software Foundation in version 2.  check_mk is  distributed
# in the hope that it will be useful, but WITHOUT ANY WARRANTY;  with-
# out even the implied warranty of  MERCHANTABILITY  or  FITNESS FOR A
# PARTICULAR PURPOSE. See the  GNU General Public License for more de-
# ails.  You should have  received  a copy of the  GNU  General Public
# License along with GNU Make; see the file  COPYING.  If  not,  write
# to the Free Software Foundation, Inc., 51 Franklin St,  Fifth Floor,
# Boston, MA 02110-1301 USA.


# .1.3.6.1.4.1.25597.11.5.1.5.0 456.180 --> FE-FIREEYE-MIB::feSecurityContentVersion.0
# .1.3.6.1.4.1.25597.11.5.1.6.0 1 --> FE-FIREEYE-MIB::feLastContentUpdatePassed.0
# .1.3.6.1.4.1.25597.11.5.1.7.0 2016/02/26 15:42:06 --> FE-FIREEYE-MIB::feLastContentUpdateTime.0


def check_fireeye_content(_no_item, _no_params, info):
    content, update_passed, last_update_time = info[0]
    state = 0
    now = time.time()
    last_update_seconds = \
        time.mktime(time.strptime(last_update_time, '%Y/%m/%d %H:%M:%S'))
    infotext = "Security version: %s, Last update: %s (%s ago)" % \
               (content, last_update_time,
                get_age_human_readable(now - last_update_seconds))

    if update_passed != '1':
        state = 1
        infotext += ', Update passed: failed'

    return state, infotext


check_info["fireeye_content"] = {
    "inventory_function"  : lambda info: inventory_fireeye_generic(info, False),
    "check_function"      : check_fireeye_content,
    "service_description" : "Security content",
    "snmp_info"           : (".1.3.6.1.4.1.25597.11.5.1", [
                                "5",    # FE-FIREEYE-MIB::feSecurityContentVersion
                                "6",    # FE-FIREEYE-MIB::feLastContentUpdatePassed
                                "7",    # FE-FIREEYE-MIB::feLastContentUpdateTime
                            ]),
    "snmp_scan_function"  : scan_fireeye,
    "includes"            : [ "fireeye.include" ]
}
