
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
µtornadomon is a library designed to be used with Tornado web applications. It adds an endpoint
(/mutornadomon
) to HTTP servers which outputs application statistics for use with standard metric
collectors.
The monitor is initialized using mutornadomon.config.initialize_mutornadomon
.
If you only pass a tornado web application, it will include request/response statistics, and expose an HTTP endpoint for polling by external processes:
from mutornadomon.config import initialize_mutornadomon
import signal
[...]
application = tornado.web.Application(...)
monitor = initialize_mutornadomon(application)
def shut_down(*args):
monitor.stop()
some_other_application_stop_function()
tornado.ioloop.IOLoop.current().stop()
for sig in (signal.SIGQUIT, signal.SIGINT, signal.SIGTERM):
signal.signal(sig, shut_down)
This will add a /mutornadomon
endpoint to the web application.
Here is an example request to that endpoint:
$ curl http://localhost:8080/mutornadomon
{"process": {"uptime": 38.98995113372803, "num_fds": 8, "meminfo": {"rss_bytes": 14020608, "vsz_bytes": 2530562048}, "cpu": {"num_threads": 1, "system_time": 0.049356776, "user_time": 0.182635456}}, "max_gauges": {"ioloop_pending_callbacks": 0, "ioloop_handlers": 2, "ioloop_excess_callback_latency": 0.0006290912628173773}, "min_gauges": {"ioloop_pending_callbacks": 0, "ioloop_handlers": 2, "ioloop_excess_callback_latency": -0.004179096221923834}, "gauges": {"ioloop_pending_callbacks": 0, "ioloop_handlers": 2, "ioloop_excess_callback_latency": 0.0006290912628173773}, "counters": {"callbacks": 388, "requests": 6, "localhost_requests": 6, "private_requests": 6}}
If you want to add your own metrics, you can do so by calling the .kv()
or
.count()
methods on the monitor object at any time.
The HTTP endpoint is restricted to only respond to request from loopback.
Alternatively, instead of polling the HTTP interface, you can pass in a publisher
callback:
import pprint
def publisher(metrics):
pprint.pprint(metrics)
monitor = initialize_mutornadomon(application, publisher=publisher)
By default, this will call the publisher callback every 10 seconds.
To override this pass the publish_interval
parameter (in miliseconds).
If you don't pass an application object, other stats can still be collected:
import pprint
def publisher(metrics):
pprint.pprint(metrics)
monitor = initialize_mutornadomon(publisher=publisher)
This only works with the publisher callback interface.
FAQs
Library of standard monitoring hooks for the Tornado framework
We found that mutornadomon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.