Creating a script to run netstat on remote servers and return results

madpear · 10-27-2009, 03:33 PM

I would like to write a script that can run a "netstat -aa | grep [subnet]" command on a known list of servers identified by their IPs, then return the output back to the machine that is calling the script. My first goal is to get this working for all the remote servers running Linux, though eventually I hope to make it work with Windows Servers also. I have been able to find a few different strategies for this type of thing, but I am not certain which will work best.

Please let me know of what you think may be the best solution for this script.

TBKDan · 10-27-2009, 07:38 PM

I would use SSH to connect and execute the commands on the Linux servers and something like winexe (part of the samba project - see here) to run the commands on the Windows servers.

Linux - put all the linux servers in a file called linux_list and set up key-based SSH authentication.

Code:

for SERVER in `cat linux_list`
do
ssh user@${SERVER} "netstat -aa" >> ${SERVER}.txt
done

Windows - create a user that can access each of the systems remotely and turn on administrative shares if not already enabled. Put all servers in windows_list

Code:

for SERVER in `cat windows_list`
do
winexe -U DOMAIN\\user //${SERVER} "netstat -aa" >> ${SERVER}.txt
done

madpear · 10-28-2009, 10:01 AM

An important feature I failed to mention, the script should be written for Windows. I've read something about being able to use Putty for this purpose (plink?), but I can't seem to find a place that can state the basics of sending commands via this and receiving back their output.

TBKDan · 10-29-2009, 09:44 AM

Quote:

Originally Posted by madpear

An important feature I failed to mention, the script should be written for Windows. I've read something about being able to use Putty for this purpose (plink?), but I can't seem to find a place that can state the basics of sending commands via this and receiving back their output.

Well that changes things a bit... you'll need to get plink and psexec (from the pstools package) and modify the paths below.

Linux

Code:

for /F %S IN (linux_list.txt) DO "c:\program files (x86)\putty\plink.exe" user@%S "netstat -aa" >> %S.txt

Windows

Code:

for /F %S IN (windows_list.txt) DO "c:\pstools\psexec.exe" \\%S %windir%\system32\netstat.exe -aa >> %S.txt