Table of Contents
Table of Contents |
---|
Introduction
Originally (prior to June 2018), the gathering of data from the MAs was initiated by the SLAC end.
...
- Be aware data is only kept for 4 days in anonymous incoming FTP and then is removed. The directories are preserved. One can delete files and directories by using rm and rmdir on /afs/slac/public/incoming from the unix the Unix command line (one cannot delete files and directories within ftp).
- The anonymous FTP space is not accessible for reading from outside SLAC. This prevents the bad actors from hosting illegal files here.
...
- A job at Beijing is required to do the anonymous ftp of the recent data from the Beijing MA to the incoming FTP server at SLAC. It runs at 15:05 Beijing time or 12:05am California summer time and 1:05am California standard (winter) time.
- The data then needs to be copied (by proxy.pl which takes a couple of seconds to run) from the anonymous FTP incoming space (/afs/slac/public/incoming/) to a directory accessible (see above) for reading from the ping_data.pl web CGI script that is called by wget from getdata.pl.
getdata.pl is then scheduled to run at SLAC to copy the selected data from the accessible directory /nfs/slac/g/net/pinger/pingerdata/hep/data/proxy/2001:da8:270:2018:f816:3eff:fef3:bd3/
- We want to standardize the time of the various cronjobs. 1:05am 05 am SLAC summer time is 15:05 in China, and 12:05 midnight SLAC standard (winter) localtime is also 15:05 in China. Thus to catch the Chinese data both winter and summer time summertime California, we schedule the proxy.pl cron jobs at SLAC to run at just 01just 01:20am20 am.
The various jobs have to be synchronized:
- The copying of data to the anonymous FTP server and moving from there to the PingER raw data archive needs to complete beforegetdata.pl starts at 01:32 local time each night at SLAC
- The data is copied from the MA to anonymous FTP incoming spaceat thenproxyspace at then proxy.pl, needs to be scheduled to copy the data from anonymous FTP directory to the directory accessible by the ping_data.pl CGI script.
- This also has to complete before getdata.pl is scheduled,
- proxy.pl takes < 5 seconds to execute.
- proxy.pl is therefore currently scheduled to run at01at 01:20amCalifornialocaltime
- Once the move is completed by proxy.pl then getdata.pl can be scheduled to gather and save the selected data from the MAs in the PingER raw data archive at:
/nfs/slac/g/net/pinger/pingerdata/hep/data/<host>/ping-<YYYY>-<MM>-<DD>.txt.gz
- This (getdata.pl) takes about 15 minutes.
- getdata.pl is scheduled to run at01:32amlocaltimeat 01:32 am local time.
The analysis of the hourly data by analyze-all.pl needs to start after getdata.pl has completed. Currentlyanalyze-all.pl starts as a cron job at 55 minutes past 2 am local time at SLAC each morning. The scheduling of the jobs at SLAC is shown below:
32
1
* * * /afs/slac/
package
/pinger/getdata.pl > /afs/slac/g/www/www-iepm/pinger/slaconly/getdata.err
55
2
* * * /afs/slac/
package
/pinger/analysis/analyze-all.pl --date 1days #Takes
25
:
14
10
/
20
/
2011
(
55
mins
9
/
21
/
2011
,
70
minutes
5
/
11
/
2018
)
...
This whole mechanism is also interesting since it could be extended and a step to providing support for the Android PingER project at Amity in Delhi, India which also needs a proxy.
Support for
...
ping_data.pl for debugging etc.
The CGI script ping_data.pl provides remote access to PingER information at the MA. However, it is not possible to access the Beijing web site (or a PingER Androi) from outside. Thus we need a solution to provide access to the various information that ping_data.pl provides for the MA. This includes (where for example <MA domain might be unimas.my):Besides providing access to the measured data, this also provides validation and debugging information (e.g. logging information from execution of pinger2.pl, the pinger.xml configuration file, the version of pinger2.pl running, the pinger.pl environment at the MA, etc). However, it is not possible to access the Beijing website (or a PingER Android) from outside. Thus we need a solution to provide access to the various information that ping_data.pl provides for the MA. This includes (where for example:
- The pinger.xml file
- The pinger.xml file (e.g. http://pinger.<MA domain>/cgi-bin/ping_data.pl?admin_func=pinger_xml)
- Error log from pinger2.pl (e.g. http://pinger.<MA domain>/cgi-bin/ping_data.pl?admin_func=std_cron_err)
- Progress log from pinger2.pl (e.g. http://pinger.<MA domain>2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?admin_func=stdpinger_cron_out)Beacon.txt xml) - item 5 below
- Error log from pinger2.pl (e.g. http://pinger.<MA domain>2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?admin_func=beacons)FAQ std_cron_err) - missing below
- Progress log from pinger2.pl (e.g. http://www-iepm.slac.stanford.edu/pinger/2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?admin_func=std_cron_out) - item 6 below
- Beacon.txt faq.html)Web server configuration (e.g. http://pinger.<MA domain>2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?admin_func=httpdbeacons) Help for current version of pinger2.pl being run at MA - item 1 below
- FAQ (e.g. http://www-iepm.slac.stanford.edu/pinger/faq.html) - available locally at SLAC
- Web server pinger.<MA domain>/cgi-bin/ping_data.pl?help=1)PingER configuration (e.g. http://pinger.<MA domain>2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?admin_func=fileLoghttpd)
- Plus access to the actual data for a specified time range.
- - missing below
- Help for the current version of pinger2.pl being run at MA (e.g. http://2001:da8:270:2018:f816:3eff:fef3:bd3?help=1) - item 4 below
- PingER configuration (e.g. http://2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?admin_func=fileLog) - missing below
- Plus access to the actual data for a specified time range.
We address items 1 thru 8 by Beijing copying the files to anonymous incoming FTP at SLAC on a daily basis at the same time the actual data is copied. Thus the files (updated as of the previous night) would be available for review. Since Bejing has a copy of ping_data.pl is used to access the files so they can be copied.
- The FTP files are located in: /afs/slac/public/incoming/pinger/proxy/2001:da8:270:2018:f816:3eff:fef3:bd3/web
The NFS files are located in: /nfs/slac/g/net/pinger/pingerdata/hep/data/proxy/2001:da8:270:2018:f816:3eff:fef3:bd3/web/
Code Block [cottrell@pinger ~]$ ls -l /nfs/slac/g/net/pinger/pingerdata/hep/data/proxy/2001:da8:270:2018:f816:3eff:fef3:bd3/web total 288 -rw-rw-r-- 1 cottrell iepm 16844 Sep 21 01:05 beacons.txt #item 4 above -rw-rw-r-- 1 cottrell iepm 15101 Sep 21 01:05 cgi-lib.pl #missing above, not needed -rw-rw-r-- 1 cottrell iepm 51968 Sep 21 01:05 ping_data.pl #missing above, not needed -rw-rw-r-- 1 cottrell iepm 40625 Sep 21 01:05 pinger.xml #item 1 above -rw-rw-r-- 1 cottrell iepm 63779 Sep 21 01:05 pinger2.pl #item 7 above -rw-rw-r-- 1 cottrell iepm 924 Sep 21 01:05 pingerCronStat.stdout #item 3 above
Extension to Android PingER
The Androids do not have a web server so using ping_data.pl to remotely look at the information in the MNA is not going to work. Thus we cannit use ping_data.pl in the process to copy the relevant information to the proxy, so some new code would be needed to copy the files to the proxy. To simplify this we note below the locations of various files in the table below.
- NFS web/directory = /nfs/slac/g/net/pinger/pingerdata/hep/data/proxy/2001:da8:270:2018:f816:3eff:fef3:bd3/web/
- The ping_data.pl URl is prefixed by http://2001:da8:270:2018:f816:3eff:fef3:bd3/cgi-bin/ping_data.pl?
Purpose | Primary location at MA | Alternative location | ping_data.pl URL | NFS web/location at SLAC | |
---|---|---|---|---|---|
List of beacons | /usr/local/share/pinger/beacons.txt | admin_func=beacons | beacons | ||
PingER configuration | Generated by ping_data.pl on demand | admin_func=fileLog | fileLog | ||
httpd | /etc/httpd/conf/httpd.conf | admin_func=httpd | httpd | ||
ping_data.pl | /usr/local/share/pinger/ping_data.pl | N/A | ping_data.pl | ||
pinger2.pl | /usr/local/share/pinger/pinger2.pl | N/A | pinger2.pl | ||
pinger.xml | /usr/local/share/pinger/pinger.xml | admin_func=pinger.xml | pinger_xml | ||
pinger2.pl error log | /usr/local/share/pinger/pingerCronStat.stderr | admin_func=std_cron_err | std_cron_err | ||
pinger2.pl execution log | /usr/local/share/pinger/pingerCronStat.stdout | admin_func=std_cron_out | std_cron_out |
A possible way to address items 1 thru 8 for Beijing might be to copy the files to anonymous incoming FTP at SLAC on a daily basis at the same time the actual data is copied. Thus the files (updated as of the previous night) would be available for review. Since Bejing has a copy of ping_data.pl this could be used to acces the files so they could be copied. For the Android some new code would be needed to copy the files to SLAC.
...
'* If an anonymous ftp server allows anonymous upload, and also world read access, it quickly becomes a haven for stolen software distribution
...