local http = require "http"
local nmap = require "nmap"
local shortport = require "shortport"
local stdnse = require "stdnse"
local string = require "string"
local table = require "table"
local target = require "target"
description = [[
Retrieves information from an Apache HBase (Hadoop database) master HTTP status page.
Information gathered:
* Hbase version
* Hbase compile date
* Hbase root directory
* Hadoop version
* Hadoop compile date
* Average load
* Zookeeper quorum server
* Associated region servers
]]
---
-- @usage
-- nmap --script hbase-master-info -p 60010 host
--
-- @output
-- | hbase-master-info:
-- |   Hbase Version: 0.90.1
-- |   Hbase Compiled: Wed May 11 22:33:44 PDT 2011, bob
-- |   HBase Root Directory: hdfs://master.example.com:8020/hbase
-- |   Hadoop Version: 0.20  f415ef415ef415ef415ef415ef415ef415ef415e
-- |   Hadoop Compiled: Wed May 11 22:33:44 PDT 2011, bob
-- |   Average Load: 0.12
-- |   Zookeeper Quorum: zookeeper.example.com:2181
-- |   Region Servers:
-- |     region1.example.com:60030
-- |_    region2.example.com:60030
-- @xmloutput
-- 0.90.1
-- Wed May 11 22:33:44 PDT 2011, bob
-- hdfs://master.example.com:8020/hbase
-- 0.20  f415ef415ef415ef415ef415ef415ef415ef415e
-- Wed May 11 22:33:44 PDT 2011, bob
-- 0.12
-- zookeeper.example.com:2181
-- 
--   region1.example.com:60030
--   region2.example.com:60030
-- 
author = "John R. Bond"
license = "Simplified (2-clause) BSD license--See https://nmap.org/svn/docs/licenses/BSD-simplified"
categories = {"default", "discovery", "safe"}
portrule = function(host, port)
  -- Run for the special port number, or for any HTTP-like service that is
  -- not on a usual HTTP port.
  return shortport.port_or_service ({60010}, "hbase-master")(host, port)
    or (shortport.service(shortport.LIKELY_HTTP_SERVICES)(host, port) and not shortport.portnumber(shortport.LIKELY_HTTP_PORTS)(host, port))
end
action = function( host, port )
  local result = stdnse.output_table()
  local region_servers = {}
  local uri = "/master.jsp"
  stdnse.debug1("HTTP GET %s:%s%s", host.targetname or host.ip, port.number, uri)
  local response = http.get( host, port, uri )
  stdnse.debug1("Status %s",response['status-line'] or "No Response")
  if not (response['status-line'] and response['status-line']:match("200%s+OK") and response['body']) then
    return nil
  end
  local body = response['body']:gsub("%%","%%%%")
  stdnse.debug2("Body %s\n",body)
  if body:match("HBase%s+Version([^][<]+)") then
    local version = body:match("HBase%s+Version | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("Hbase  Version %s",version)
    result["Hbase Version"] = version
    port.version.version = version
  end
  if body:match("HBase%s+Compiled | ([^][<]+)") then
    local compiled = body:match("HBase%s+Compiled | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("Hbase Compiled %s",compiled)
    result["Hbase Compiled"] = compiled
  end
  if body:match("Directory | ([^][<]+)") then
    local compiled = body:match("Directory | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("HBase RootDirectory %s",compiled)
    result["HBase Root Directory"] = compiled
  end
  if body:match("Hadoop%s+Version | ([^][<]+)") then
    local version = body:match("Hadoop%s+Version | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("Hadoop Version %s",version)
    result["Hadoop Version"] = version
  end
  if body:match("Hadoop%s+Compiled | ([^][<]+)") then
    local compiled = body:match("Hadoop%s+Compiled | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("Hadoop Compiled %s",compiled)
    result["Hadoop Compiled"] = compiled
  end
  if body:match("average | ([^][<]+)") then
    local average = body:match("average | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("Average Load %s",average)
    result["Average Load"] = average
  end
  if body:match("Quorum | ([^][<]+)") then
    local quorum = body:match("Quorum | ([^][<]+)"):gsub("%s+", " ")
    stdnse.debug1("Zookeeper Quorum %s",quorum)
    result["Zookeeper Quorum"] = quorum
    if target.ALLOW_NEW_TARGETS then
      if quorum:match("([%w%.]+)") then
        local newtarget = quorum:match("([%w%.]+)")
        stdnse.debug1("Added target: %s", newtarget)
        local status,err = target.add(newtarget)
      end
    end
  end
  for line in string.gmatch(body, "[^\n]+") do
    stdnse.debug3("Line %s\n",line)
    if line:match("maxHeap") then
      local region_server=  line:match("\">([^][<]+)")
      stdnse.debug1("Region Server %s",region_server)
      table.insert(region_servers, region_server)
      if target.ALLOW_NEW_TARGETS then
        if region_server:match("([%w%.]+)") then
          local newtarget = region_server:match("([%w%.]+)")
          stdnse.debug1("Added target: %s", newtarget)
          local status,err = target.add(newtarget)
        end
      end
    end
  end
  if next(region_servers) then
    result["Region Servers"] = region_servers
  end
  if #result > 0 then
    port.version.name = "hbase-master"
    port.version.product = "Apache Hadoop Hbase"
    nmap.set_port_version(host, port)
  end
  return result
end |