ssh_tunnel statistics: Phil-PC to zippy

Time: 2014-Aug-17 14:45:03 Sun

Current tunnel state: disabled          Current tunnel condition: DOWN

loader stats

------ loader (pid: 10212 ) ------------ (v3.31 2006-05-29) ----- State: disabled DOWN
Time:                2014-Jul-22 20:15:02 Tue
client:              Phil-PC
server:              zippy
client heartbeat:    Client Heartbeat
server heartbeat:    Server Heartbeat
server heartbeat 1:  Server Heartbeat 1
server heartbeat 2:  Server Heartbeat 2
server heartbeat 3:  Server Heartbeat 3
server heartbeat 4:  Server Heartbeat 4
Sleep time:          240
loader loop counter: 0
bad port tests:      0     last: none yet
failed file updates: 0     last: none yet
tunnels killed:      3     last: 2014-Jul-22 20:15:02 Tue
emails sent:         0     last: none yet
email addresses:     john@larsen-family.us
loader started:      YYYY-MMM-DD HH:MM:SS DOW
debug flags:         0x0

tunnel stats

------ tunnel (pid: 4552 ) ------------ (v3.31 2006-05-29) ----- State: enabled UP
Time:                2013-Jan-17 00:51:48 Thu
client:              Phil-PC
server:              zippy
client heartbeat:    Thu Jan 17 00:51:46 MST 2013
server heartbeat:    Thu Jan 17 02:47:42 EST 2013
Sleep time:          240
tunnel loop counter: 89
bad port tests:      0     last: none yet
emails sent:         1     last: 2013-Jan-16 18:59:14 Wed
email addresses:     john@larsen-family.us
tunnel started:      2013-Jan-16 18:59:46 Wed
debug flags:         0x0

Current users, uptime, and load average

 14:45:03 up 8 min,  0 users,  load average: 0.00, 0.00, 0.00
USER     TTY        LOGIN@   IDLE   JCPU   PCPU WHAT

Current processes

UID        PID  PPID  C STIME TTY          TIME CMD
jlarsen   3284     1  0 14:37 ?        00:00:00 /usr/bin/cygrunsrv
jlarsen   7632  7060  0 14:40 ?        00:00:00 
jlarsen   3312  3284  0 14:37 ?        00:00:00 /usr/sbin/cron -n
jlarsen   7644  7760  5 14:45 ?        00:00:00 
jlarsen   6708  8060  0 14:40 ?        00:00:00 sh -c /c/Windows/system32/netstat > 8060.netstat
jlarsen   7060  3312  0 14:40 ?        00:00:00 /usr/sbin/cron -n
jlarsen   4812  6708  0 14:40 ?        00:00:00 sh -c /c/Windows/system32/netstat > 8060.netstat
jlarsen   8060     1  0 14:40 ?        00:00:00 /usr/bin/perl -w /home/jlarsen/ssh_tunnel/zippy/ssh_tunnel.pl
1004      3216  3188  0 14:37 ?        00:00:00 /usr/sbin/sshd -D
jlarsen   7600  3900  0 14:45 ?        00:00:00 /usr/bin/procps -edf
jlarsen   3900     1  0 14:45 ?        00:00:00 /usr/bin/perl -w /home/jlarsen/ssh_tunnel/zippy/ssh_tunnel.pl
jlarsen   7760  3312  0 14:45 ?        00:00:00 /usr/sbin/cron -n
1004      3188     1  0 14:37 ?        00:00:00 /usr/bin/cygrunsrv

Current netstat


Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    10.0.164.231:49291     zippy:microsoft-ds     ESTABLISHED
  TCP    10.0.164.231:49326     17.167.135.119:https   CLOSE_WAIT
  TCP    10.0.164.231:49329     17.167.135.85:https    CLOSE_WAIT
  TCP    10.0.164.231:49401     74.125.22.125:5222     ESTABLISHED
  TCP    10.0.164.231:49482     64.233.171.188:5228    ESTABLISHED
  TCP    10.0.164.231:49501     snt-re3-9d:http        ESTABLISHED
  TCP    10.0.164.231:49510     lga15s35-in-f4:https   TIME_WAIT
  TCP    10.0.164.231:49511     lga15s35-in-f4:https   ESTABLISHED
  TCP    10.0.164.231:49523     lga15s35-in-f7:https   ESTABLISHED
  TCP    10.0.164.231:49525     edge-star-shv-04-lga1:https  ESTABLISHED
  TCP    10.0.164.231:49530     lga15s44-in-f1:https   TIME_WAIT
  TCP    10.0.164.231:49580     17.110.225.23:5223     ESTABLISHED
  TCP    10.0.164.231:49605     channel-proxy-shv-06-frc1:https  ESTABLISHED
  TCP    10.0.164.231:49701     lga15s44-in-f10:https  TIME_WAIT
  TCP    10.0.164.231:49726     a173-223-205-49:http   TIME_WAIT
  TCP    10.0.164.231:49727     qa-in-f191:https       TIME_WAIT
  TCP    10.0.164.231:49767     iad23s25-in-f7:https   ESTABLISHED
  TCP    10.0.164.231:49768     iad23s25-in-f7:https   ESTABLISHED
  TCP    10.0.164.231:49775     a23-220-148-40:https   ESTABLISHED
  TCP    10.0.164.231:49782     a23-218-99-115:https   CLOSE_WAIT
  TCP    10.0.164.231:49783     a23-62-96-51:http      ESTABLISHED
  TCP    10.0.164.231:49787     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49788     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49789     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49790     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49791     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49792     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49796     lga15s34-in-f9:https   ESTABLISHED
  TCP    10.0.164.231:49797     lga15s35-in-f31:http   ESTABLISHED
  TCP    10.0.164.231:49798     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49799     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49800     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49804     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49805     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49806     10.0.164.1:5431        TIME_WAIT
  TCP    10.0.164.231:49808     173-14-166-5-NewEngland:https  TIME_WAIT
  TCP    127.0.0.1:5354         Smaug:49162            ESTABLISHED
  TCP    127.0.0.1:5354         Smaug:49163            ESTABLISHED
  TCP    127.0.0.1:19872        Smaug:49487            ESTABLISHED
  TCP    127.0.0.1:27015        Smaug:49323            ESTABLISHED
  TCP    127.0.0.1:49160        Smaug:65001            ESTABLISHED
  TCP    127.0.0.1:49162        Smaug:5354             ESTABLISHED
  TCP    127.0.0.1:49163        Smaug:5354             ESTABLISHED
  TCP    127.0.0.1:49292        Smaug:65000            ESTABLISHED
  TCP    127.0.0.1:49323        Smaug:27015            ESTABLISHED
  TCP    127.0.0.1:49397        Smaug:49398            ESTABLISHED
  TCP    127.0.0.1:49398        Smaug:49397            ESTABLISHED
  TCP    127.0.0.1:49442        Smaug:49443            ESTABLISHED
  TCP    127.0.0.1:49443        Smaug:49442            ESTABLISHED
  TCP    127.0.0.1:49444        Smaug:49445            ESTABLISHED
  TCP    127.0.0.1:49445        Smaug:49444            ESTABLISHED
  TCP    127.0.0.1:49447        Smaug:49448            ESTABLISHED
  TCP    127.0.0.1:49448        Smaug:49447            ESTABLISHED
  TCP    127.0.0.1:49451        Smaug:49452            ESTABLISHED
  TCP    127.0.0.1:49452        Smaug:49451            ESTABLISHED
  TCP    127.0.0.1:49487        Smaug:19872            ESTABLISHED
  TCP    127.0.0.1:49801        Smaug:49802            ESTABLISHED
  TCP    127.0.0.1:49802        Smaug:49801            ESTABLISHED
  TCP    127.0.0.1:65000        Smaug:49292            ESTABLISHED
  TCP    127.0.0.1:65001        Smaug:49160            ESTABLISHED

crontab file

# DO NOT EDIT THIS FILE - edit the master and reinstall.
# (/tmp/crontab.vSr1HzPoDr installed on Fri Jan 11 10:17:24 2013)
# (Cron version V5.0 -- $Id: crontab.c,v 1.12 2004/01/23 18:56:42 vixie Exp $)
MAILTO=john@larsen-family.us

#* * * * * echo "testing ssmtp"; echo `date` > /home/jlarsen/crontest.txt

# Run the backups
14 21 * * * /home/jlarsen/backup/backup.cron
#11 18 * * * /home/jlarsen/backup/backup.cron

# Kill the sophos client firewall if it is running
#00,10,20,30,40,50 * * * * /home/jlarsen/bin/kill_scf.pl

# Make sure the SSH tunnel is still working
0,5,10,15,20,25,30,35,40,45,50,55 * * * * /home/jlarsen/ssh_tunnel/zippy/ssh_tunnel.pl

loader.conf file

# Filename:  loader.conf
# Description:  This is the configuration file for the loader portion of the 
# ssh_tunnel program.  Once configured the contents of this file never change.  
# This insures that the loader will always operate.  It is important not to 
# change the formatting of this file because it is read by the ssh_tunnel and 
# processed using perl which is expecting things to be in certain locations.
#
# loader.conf has two sections:
# 1. Configuration information such as the names of the ssh and sshd
#    hosts, the working directories on each host, and other data as needed.
# 2. The ssh host configuration for the loader program is in this file.
#    That configuration should never change.  It needs to be at the end
#    of the file because ssh uses everything between "Host" entries as
#    configuration.  There is only one Host section in this file.
#
########################################################################
# The following section contains host information 
# SSH_CLIENT      Phil-PC
# SSH_CLIENT_DIR  /home/jlarsen/ssh_tunnel/zippy
# SSH_SERVER      zippy
# SSH_SERVER_DIR  /home/tunnels/ssh_tunnel/Phil-PC
#
########################################################################
# The following section is the ssh config file for the loader program.
# IMPORTANT!  The path on the client MUST have the SSH_SERVER name in
# it.  The script uses this name is search strings and it MUST be there.
Host loader
HostName larsen-family.us
Port = 443
UserKnownHostsFile = /home/jlarsen/ssh_tunnel/zippy/known_hosts
User = tunnels
IdentityFile = /home/jlarsen/ssh_tunnel/zippy/id_rsa.phillip

tunnel.conf file

# Filename:  tunnel.conf
#
# Description:  This is the configuration file for the tunnel and pulse sections of the 
# ssh_tunnel program.  The contents of this file can be changed during program execution.
# It is important not to change the formatting of the file because it is processed
# using perl which is expecting things to be in certain locations.
#
# tunnel.conf has three sections:
# 1. Configuration information such as email addresses and thresholds.
# 2. The ssh host configuration for the tunnel.  This consists of two
#    host definitions, tunnel and heartbeat.  The tunnel is the permanent
#    connection and defines port forwarding.  The heartbeat uses one of 
#    the forwarded ports to write and copy heartbeat files between the
#    ssh client and the ssh server.  Changing heartbeats indicate that the
#    tunnel is functioning.
# 3. The webpage configuration section as described below.  This has the
#    ssh host configuration for updating a webpage on a webserver.
#
################################################################################
# The following section contains configuration information.  DON'T REMOVE the
# leading pound sign (#).  The lines must be commented or the files won't work
# for ssh.
#
# The tunnel is either "enabled" or "disabled" based on the value given
# below.  If disabled, then no processes are running on either the
# client or the server.  A cron job on the client runs ssh_tunnel.pl periodically
# to check if tunnel.conf has changed on the server.  If a change is detected
# then the new tunnel.conf file is transfered over.  If the tunnel state
# becomes "enabled" then the tunnel is activated.
# TUNNEL_STATE disabled
#
# The email addresses below receive diagnostic messages.  Separate
# multiple addresses with commas and no white space.  The word "none"
# turns off email sending and is the default.  The same email address
# is used by cron, loader, tunnel, and pulse.
# EMAIL_ADDRESS     john@larsen-family.us
#
# The threshold defined below is how many port failures are required
# before an email is sent.  Set this to "none" to turn this off.  If
# the ssh_server's ssh port isn't accessible then the loader kills 
# the tunnel.  This periodic email serves as a reminder that the tunnel
# is enabled but down.
# EMAIL_THRESHOLD   50
#
# The loader, tunnel, and pulse programs all have the same sleep value.
# The sleep time can be changed here.  It should be in the range of
# 60 to 3600 seconds.  Shorter sleep times increase system loading.
# The sleep time must be less than half the crontab time for ssh_tunnel.pl.
# SLEEP_TIME        240
#
#
################################################################################
# The following section is the ssh config file for the tunnel program.
# IMPORTANT!  The path on the client MUST have the SSH_SERVER name in
# it.  The script uses this name is search strings and it MUST be there.
#
# The ssh_server must be configured to allow remote port forwarding.  This 
# is normally off by default in the ssh_server's sshd_config file.  
# Set "GatewayPorts yes" in sshd_config.
#
# Important info about port numbers used in the "ssh_tunnel" and "heartbeat"
# sections below.  The "heartbeat" Port number must be the same as the last
# two port numbers in the "ssh_tunnel" section.  In this example 50022 is
# used.  The port number used must be unused by anything else on the two
# machines.  If you have multiple tunnels connecting to a single ssh_server
# be sure to use different port numbers.  The last two lines both use the
# name "localhost".  You could put the actual names of the ssh server and
# client instead, but using localhost is safest. If the machine's name
# were changed the tunnel would no longer work.  Using "localhost" guarantees
# the forwarding will work even if the machine's name changes.  The other 
# RemoteForward lines forward ports on the ssh server to ports on machines 
# on the LAN where the ssh client resides. These aren't required and should 
# be removed if not needed.
#
Host tunnel
HostName larsen-family.us
Port = 443
UserKnownHostsFile = /home/jlarsen/ssh_tunnel/zippy/known_hosts
User = tunnels
IdentityFile = /home/jlarsen/ssh_tunnel/zippy/id_rsa.phillip
Compression = yes
LocalForward = 25 localhost:25
RemoteForward = 24995 localhost:5900
RemoteForward = 24522 localhost:22
LocalForward = 24522 localhost:22

################################################################################
Host heartbeat
HostName localhost
Port = 24522
UserKnownHostsFile = /home/jlarsen/ssh_tunnel/zippy/known_hosts
User = tunnels
IdentityFile = /home/jlarsen/ssh_tunnel/zippy/id_rsa.phillip

################################################################################
Host pulse
HostName localhost
Port = 24522
UserKnownHostsFile = /home/tunnels/ssh_tunnel/Phil-PC/known_hosts
User = jlarsen
IdentityFile = /home/tunnels/ssh_tunnel/Phil-PC/id_rsa.phillip

################################################################################
# Note: This section must be last in tunnel.conf.
# A webpage will be copied to the directory set by WEBSERVER_DIR below.  The
# default value "none" turns this feature off.  Change "none" to the directory
# path where the webpage should be copied.  The "webpage" host information 
# below must also be changed to valid values to make this work.
# WEBSERVER_DIR     /home/tunnels/ssh_tunnel_html
#
# The filename of the webpage copied to the webserver defaults to
# SSH_CLIENT_to_SSH_SERVER.html.  To choose a different name replace the
# word "default" on the line below with the desired name.
# WEBPAGE_FILENAME  default
#
# A copy of the webpage can be put in the directory define by WEBPAGE_LOCAL_DIR.
# Change "none" to a valid directory to enable this feature.
# WEBPAGE_LOCAL_DIR  /home/jlarsen/ssh_tunnel/zippy
#
# The webpage update rate defaults to once per sleep time. Change the value below
# to select a different rate.  The update rate is the number of times through the
# loader while loop before updating the webpage.  This value is ignored when events
# occur such as the tunnel going down or during startup.  The webpage is updated
# for all non normal runtime events.
# WEBPAGE_UPDATE_RATE   1
#
Host webpage
HostName larsen-family.us
Port = 443
UserKnownHostsFile = /home/jlarsen/ssh_tunnel/zippy/known_hosts
User = tunnels
IdentityFile = /home/jlarsen/ssh_tunnel/zippy/id_rsa.phillip