In addition to gather how many times signatures are created per key in a zone, also count how many of those signature creations are because of DNSSEC maintenance. These maintenance counters are incremented if a signature is refreshed (but the RRset did not changed), when the DNSKEY RRset is changed, and when that leads to additional RRset / RRSIG updates (for example SOA, NSEC).
36 lines
1.1 KiB
Perl
36 lines
1.1 KiB
Perl
#!/usr/bin/perl
|
|
#
|
|
# Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
#
|
|
# This Source Code Form is subject to the terms of the Mozilla Public
|
|
# License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
#
|
|
# See the COPYRIGHT file distributed with this work for additional
|
|
# information regarding copyright ownership.
|
|
|
|
# zones-json.pl:
|
|
# Parses the JSON version of the dnssec sign stats for the
|
|
# "dnssec" zone in the default view into a normalized format.
|
|
|
|
use JSON;
|
|
|
|
my $file = $ARGV[0];
|
|
open(INPUT, "<$file");
|
|
my $text = do{local$/;<INPUT>};
|
|
close(INPUT);
|
|
|
|
my $ref = decode_json($text);
|
|
|
|
|
|
my $dnssecsign = $ref->{views}->{_default}->{zones}[0]->{"dnssec-sign"};
|
|
my $type = "dnssec-sign operations ";
|
|
foreach $key (keys %{$dnssecsign}) {
|
|
print $type . $key . ": ". $dnssecsign->{$key} ."\n";
|
|
}
|
|
my $dnssecrefresh = $ref->{views}->{_default}->{zones}[0]->{"dnssec-refresh"};
|
|
my $type = "dnssec-refresh operations ";
|
|
foreach $key (keys %{$dnssecrefresh}) {
|
|
print $type . $key . ": ". $dnssecrefresh->{$key} ."\n";
|
|
}
|