#!/usr/local/bin/perl -w 

# Steps: 
# 1. login 
# 2. go to enable mode ('en') 
# 3. execute 'no pager' to disable paging 
# 4. execute 'sh access-list access-list-name'
# 5. Get hit counts 
# 6. logout 



$|++; 
use strict; 
use Net::SSH::Perl; 
use Net::SSH::Perl::Constants qw( :msg ); 
use constant SKIP_PROMPT => 1;   # pix prints login prompt twice, skip first  

my $host       = shift || die "Usage: $0 pix_name\n"; 
my $time2login = 10; 
my $time2run   = 20;

my $file = "C:\\hit_cnt.txt"; 
open (DAT, ">>$file") || die "can not open"; 

# modify these in case of prompt (hostname) changes
# assuming alphanumeric characters only:
# [a-zA-Z0-9] is actually \w, but some hosts have '_' or '-' in their names 
my $enb_prompt  = qr/(?:[a-zA-Z0-9]+#)\s*/;  # alphanumeric followed by '#'
my $reg_prompt  = qr/(?:[a-zA-Z0-9]+>)\s*/;  # alphanumeric followed by '>'
my $pass_prompt = qr/Password:\s*/;

my ($prompt_cnt,$save,$done)  = (0,0,0);
my ($ssh, @config); 

# login on the device
eval { 
   local $SIG{'ALRM'} = sub { die 'TimedouT' };
   alarm $time2login;
   $ssh = Net::SSH::Perl->new($host, protocol=>1, cipher=>'DES', port=>22);
   $ssh->login('USER-NAME','PASSWD');
   alarm 0;
};

($@)? ( die '[',scalar localtime,'] ', ($@ =~ /TimedouT/)? 
                                       "Takes too long to login on $host.\n" :
                                       "Unexpected eval err: $@.\n"  
      ) : undef;


# set up handler and intercept everything that goes to STDOUT 

$ssh->register_handler(SSH_SMSG_STDOUT_DATA, sub {
   my($ssh, $packet) = @_; 
   my $str = $packet->get_str;
   print DAT "$str"; 

   if ( $save )  {                       # reading config  

      if ( $str =~ /$enb_prompt$/ ) {    # last line of the config + prompt 
         my $packet = $ssh->packet_start(SSH_CMSG_STDIN_DATA); 
         $packet->put_str('exit ' . "\n"); 
         $packet->send; 
         $done++;
      }

      $str =~ s/\cM//g;
      chomp $str;
       
      # skip echo of the command and logout sequence
      push @config, $str unless ( $done        || $str =~ /^(\w|\s)$/ || 
                                  $str =~ /^:/ || $str eq '' ); 
    }
    else {                             # login part 
       if ($str =~ /$reg_prompt$/)  {  # go to enable mode
          $prompt_cnt++;               # pix prints login prompt twice, remember
          return unless $prompt_cnt > SKIP_PROMPT; 
          my $packet = $ssh->packet_start(SSH_CMSG_STDIN_DATA);
          $packet->put_str('enable' . "\n"); 
          $packet->send; 
          $prompt_cnt = 0;             # will resuse it in enable mode 
       } 
       elsif ( $str =~ /$pass_prompt$/ ) {  
          # going into enable mode.... 
          my $packet = $ssh->packet_start(SSH_CMSG_STDIN_DATA);
          $packet->put_str("PASSWD\n");
          $packet->send; 
       } 
       elsif ( $str =~ /$enb_prompt$/ && !$prompt_cnt ) {  
          # exec first command in enable mode 
          my $packet = $ssh->packet_start(SSH_CMSG_STDIN_DATA); 
          $packet->put_str('no pager' . "\n");
          $packet->send; 
          $prompt_cnt++; 
       } 
       elsif ( $str =~ /$enb_prompt$/ && $prompt_cnt ) { 
          # exec second command in enable mode, ready to rock 
          my $packet = $ssh->packet_start(SSH_CMSG_STDIN_DATA);
          $packet->put_str('sh access-list access-list-name' . "\n");
          $packet->send; 
          $save++; 
       }
       else {  
          # Uncomment this for debug purposes
          # print "Useless data: $str\n";
       }
   } 

});

eval {
   local $SIG{'ALRM'} = sub { die 'TimedouT' }; 
   alarm $time2run; 
   $ssh->cmd('');              # thaaaat's right, nothing at all
   alarm 0; 
};

($@)? ( die '[',scalar localtime,'] ', ($@ =~ /TimedouT/)? 
                                       "Timed out while pulling from $host.\n" :
                                       "Unexpected eval err: $@.\n" 
      ) : undef;