File: //usr/lib/python3.9/site-packages/fail2ban/client/__pycache__/fail2banregex.cpython-39.opt-2.pyc
a
E���V�ʎ� @ s� d Z dZdZdZddlZddlZddlZddlZddlZddl Z ddl
Z
ddl Z ddl
Z ddlZ ddlmZmZ ddlmZmZmZ zdd lmZ W n ey� dZY n0 dd
lmZmZ d d lm Z m Z m Z dd
l m Z m!Z!m"Z" ddl#m$Z$m%Z% ddl&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z, e*d�Z-d0dd�Z.dd� Z/d1dd�Z0d2dd�Z1d d � Z2d d � Z3d d!� Z4G d"d#� d#e�Z5d$d%� Z6G d&d'� d'e7�Z8G d(d)� d)e7�Z9G d*d+� d+e7�Z:d,d-� Z;d.d/� Z<dS )3z�
Fail2Ban reads log file that contains password failure report
and bans the corresponding IP addresses using firewall rules.
This tools can test regular expressions for "fail2ban".
zFail2Ban DevelopersaI Copyright (c) 2004-2008 Cyril Jaquier, 2008- Fail2Ban Contributors
Copyright of modifications held by their respective authors.
Licensed under the GNU General Public License v2 (GPL).
Written by Cyril Jaquier <cyril.jaquier@fail2ban.org>.
Many contributions by Yaroslav O. Halchenko, Steven Hiscocks, Sergey G. Brester (sebres).ZGPL� N)� OptionParser�Option)�
NoOptionError�NoSectionError�MissingSectionHeaderError� )�
FilterSystemd)�version� normVersion� )� FilterReader�
JailReader� NoJailError)�Filter�
FileContainer�MyTime)�Regex�RegexException)� str2LogLevel�getVerbosityFormat�FormatterWithTraceBack� getLogger�extractOptions�
PREFER_ENCZfail2banF�yesc C s2 t j||d�| dd�}|r"d|d< dtj�|� S )N)�useDnsZpython)�re�strZflavor�m�flagszhttps://www.debuggex.com/?)r Z_resolveHostTag�urllib�parseZ urlencode)Zsample�regex� multiliner �args� r% �A/usr/lib/python3.9/site-packages/fail2ban/client/fail2banregex.py� debuggexURL? s � r' c C s t | � d S �N)�print�r$ r% r% r& �outputH s r+ �5 c C s$ t | �|kr | d|d � d S | S )zReturn shortened string
N� �...)�len)�s�lr% r% r& �shortstrK s r2 c C s< t | �s d S |rd| }nd}t|d d�| � d � d S )Nz|- %s
� z| z
| z
`-)r/ r+ �join)r1 �headerr0 r% r% r& � pprint_listR s
r6 c c s< z |� � }W n ty" Y q Y n0 |s*q8| �|�V q d S r( )Zget_next�OSErrorZformatJournalEntry)�flt� myjournal�entryr% r% r& �journal_lines_gen[ s
r; c G s t t� � t�d� d S �Nr )r+ r
�sys�exitr* r% r% r& �dumpNormVersione s
r? c C s dt jd S )Nz(%s [OPTIONS] <LOG> <REGEX> [IGNOREREGEX]r )r= �argvr% r% r% r& �<lambda>i � rA c @ s e Zd Zdd� ZdS )�
_f2bOptParserc O s@ d| _ dt � d t d tj| g|�R i |�� d t d S )z, Overwritten format helper with full ussage.r3 zUsage: �
a�
LOG:
string a string representing a log line
filename path to a log file (/var/log/auth.log)
systemd-journal search systemd journal (systemd-python required),
optionally with backend parameters, see `man jail.conf`
for usage and examples (systemd-journal[journalflags=1]).
REGEX:
string a string representing a 'failregex'
filter name of filter, optionally with options (sshd[mode=aggressive])
filename path to a filter file (filter.d/sshd.conf)
IGNOREREGEX:
string a string representing an 'ignoreregex'
filename path to a filter file (filter.d/sshd.conf)
z>
Report bugs to https://github.com/fail2ban/fail2ban/issues
)�usage�__doc__r � format_help�
__copyright__)�selfr$ �kwargsr% r% r& rG l s ����z_f2bOptParser.format_helpN)�__name__�
__module__� __qualname__rG r% r% r% r& rC k s rC c C sf t t� dt d�} | �tddddd�tdd d
d �td d
dd dd�tddtdd�tdddddd�tddd dd�tdd td d d �td d!d"d �td#d$d%d&d'd(�td)d*td+d,�td-d.d/d0d d1d2�td3dd0td4d5�td6d7dd8d9�td:d;dd<d9�td=d>d?d@dAd2�tdBdCddDd dEd2�tdFddGd9�tdHddId9�tdJddKd9�tdLddMd9�tdNddOd9�tdPdQddRd9�tdSddTd9�g� | S )UNz%prog )rE r z-cz--configz
/etc/fail2banz set alternate config directory)�default�helpz-dz
--datepatternz+set custom pattern used to match date/times)rO z
--timezonez--TZZstorez)set time-zone used by convert time format)�actionrN rO z-ez
--encodingz%File encoding. Default: system localez-rz--raw�
store_trueFz Raw hosts, don't resolve dnsz--usednszpDNS specified replacement of tags <HOST> in regexp ('yes' - matches all form of hosts, 'no' - IP addresses only)z-Lz
--maxlinesr z maxlines for multi-line regex.)�typerN rO z-mz--journalmatchzGjournalctl style matches overriding filter file. "systemd-journal" onlyz-lz --log-level� log_level�criticalz(Log level for the Fail2Ban logger to use)�destrN rO z-V�callbackz,get version in machine-readable short format)rP rV rO z-vz --verbose�count�verbosezIncrease verbosity)rP rU rN rO z --verbosityz'Set numerical level of verbosity (0..4))rP rU rR rO z--verbose-datez--VDz%Verbose date patterns/regex in output)rP rO z-Dz
--debuggexz-Produce debuggex.com urls for debugging therez--no-check-allZ store_false�
checkAllRegexTz Disable check for all regex'sz-oz--out�outzaSet token to print failure information only (row, id, ip, msg, host, ip4, ip6, dns, matches, ...)z--print-no-missedz Do not print any missed linesz--print-no-ignoredz Do not print any ignored linesz--print-all-matchedzPrint all matched linesz--print-all-missedz*Print all missed lines, no matter how manyz--print-all-ignoredz+Print all ignored lines, no matter how manyz-tz--log-tracebackz.Enrich log-messages with compressed tracebacksz--full-tracebackzBEither to make the tracebacks full, not compressed (as by default))rC rE r Z add_optionsr r �intr? )�pr% r% r& �get_opt_parser� s� ���
��
��
����
�
���
� ���������6r] c @ sD e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dS )� RegexStatc C s d| _ || _t� | _d S r< )�_stats�
_failregex�list�_ipList)rI � failregexr% r% r& �__init__� s zRegexStat.__init__c C s d| j | j| j| jf S )Nz%s(%r) %d failed: %s)� __class__r` r_ rb �rI r% r% r& �__str__� s �zRegexStat.__str__c C s | j d7 _ d S �Nr �r_ rf r% r% r& �inc� s z
RegexStat.incc C s | j S r( ri rf r% r% r& �getStats� s zRegexStat.getStatsc C s | j S r( )r` rf r% r% r& � getFailRegex� s zRegexStat.getFailRegexc C s | j �|� d S r( )rb �append)rI �valuer% r% r& �appendIP� s zRegexStat.appendIPc C s | j S r( )rb rf r% r% r& � getIPList� s zRegexStat.getIPListN)
rK rL rM rd rg rj rk rl ro rp r% r% r% r& r^ � s r^ c @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) � LineStatsz(Just a convenience container for stats
c C sF d | _ | _g | _d| _g | _d| _g | _|jrBg | _g | _ g | _
d S r< ) �tested�matched�
matched_lines�missed� missed_lines�ignored�
ignored_linesZdebuggex�matched_lines_timeextracted�missed_lines_timeextracted�ignored_lines_timeextracted)rI �optsr% r% r& rd � s zLineStats.__init__c C s d| S )NzM%(tested)d lines, %(ignored)d ignored, %(matched)d matched, %(missed)d missedr% rf r% r% r& rg � s zLineStats.__str__c C s t | |�rt| |�S dS )Nr3 )�hasattr�getattr)rI �keyr% r% r& � __getitem__� s zLineStats.__getitem__N)rK rL rM rF rd rg r� r% r% r% r& rq � s rq c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z d dd�Z dd� Z
dd� Zdd� Zd d � Zd d � ZdS )!�
Fail2banRegexc C sN | j �tdd� |j �� D ��� || _d| _d| _d | _t� | _t d �| _
d| _ t � | _
t � | _t � | _d | _t|�| _|jr�| �|j� nd| _|jd ur�| �t�|j�� |jr�| j
�|j� d| j
_ t � d� ddl m } |� |j!r�| �"|j!� |j#�r| j
�$|j#� |j%| j
_&|j'�o&|j( | j
_'t)|j(�| j
_*| j+| j
_,d| _-d S ) Nc s s | ]\}}d | |fV qdS )�_Nr% )�.0�o�vr% r% r& � <genexpr>� rB z)Fail2banRegex.__init__.<locals>.<genexpr>Fr � r )�
_updateTimeRE�auto).�__dict__�update�dict�items�_opts�
_maxlines_set�_datepattern_set�
_journalmatch� share_configr �_filter�_prefREMatchedra �
_prefREGroups� _ignoreregexr` �
_time_elapsedrq � _line_stats�maxlines� setMaxLines� _maxlines� journalmatch�setJournalMatch�shlex�split�timezoneZsetLogTimeZoneZ
checkFindTimer ZsetAlternateNowZserver.strptimer� � datepattern�setDatePattern�usednsZ setUseDns�rawZ
returnRawHostrY rZ �boolZ
ignorePending�_onIgnoreRegexZ
onIgnoreRegex�_backend)rI r| r� r% r% r& rd � sB
zFail2banRegex.__init__c C s | j jst|� d S r( )r� rZ r+ �rI �liner% r% r& r+ ! s zFail2banRegex.outputc C s |� | jd�S )N�ignore)�encode� _encodingr� r% r% r& � encode_line$ s zFail2banRegex.encode_linec C s@ | j s<| j�|� d| _ |d ur<| �d|| j�� d f � d S )NTz Use datepattern : %s : %sr )r� r� r� r+ ZgetDatePattern)rI �patternr% r% r& r� ' s �z Fail2banRegex.setDatePatternc C s4 | j s0| j�t|�� d| _ | �d| j�� � d S )NTzUse maxlines : %d)r� r� r� r[ r+ � getMaxLines�rI r� r% r% r& r� / s zFail2banRegex.setMaxLinesc C s
|| _ d S r( )r� r� r% r% r& r� 5 s z Fail2banRegex.setJournalMatchc s� i }� � � }t� t�r$� fdd�}n � jr8� fdd�}ndd� }ddgt|�� � D ]8}z ||v rj|| n||�||< W qT ty� Y qT0 qT| �d| � d S )Nc s � � d| �S �NZ
Definition)�get��k��readerr% r& rA < rB z0Fail2banRegex._dumpRealOptions.<locals>.<lambda>c s � j �d| �S r� )�filterr� r� r� r% r& rA > rB c S s d S r( r% r� r% r% r& rA @ rB Zlogtyper� zReal filter options : %r)Z getCombined�
isinstancer r� ra �keysr r+ )rI r� �fltOptZrealoptsZcomboptsZ_get_optr� r% r� r& �_dumpRealOptions8 s
z Fail2banRegex._dumpRealOptionsc C s> |dv s J �|d }| j j}|}d }i }d }|dk�r�t�d|��r��zt|�\}}t�d|�s�z t|d| j|d�}|�� W n ty� d }Y n0 d|d d � v r�|f} n||d
|d f} | D ]�}t j
� |�d kr�t j
� ||�}nJd
|v�r&t j
�
|�d k�rt j
� ||�}nt j
� |d |�}n t j
� |�}t j
�|��rF �qLd }q�W nT t�y� }
z:tdt|
�f � td|f � | j�r�|
�W Y d }
~
dS d }
~
0 0 d } |�rD| �dd|f � |�r�| �d| � |�s�i }| j|d< |j|d�} | �s td|f � dS | jdk�s(t�� tjk�r4| �||� |jdd�} �n�|d u�r�|| j jk�s�t j
�
|�d k�s�d|d d � v�r�d
|v�r�t j
�
|�d k�r�t j
� |�}t j
�t j
�
|��d }| �dd||f � n0| �d d|f � d }t j
� |��st j
� |�}|�r| �d | � t |d || j|d �}
d } z*|d u�rH|
�� } n|
� d � |
� � } W nD t�y� }
z*td t|
�f � | j�r�|
�W Y d }
~
n
d }
~
0 0 | �s�td!| � dS |
�!| j� |
�d � | jdk�s�t�� tjk�r�| �|
|� |
�� } | �r�i }| D �]�}|d d"k�r*|d# }n |d d$k�r |d#d � }n�q �z,|d% d&k�rt|D ]}|| j"_#�q`�n|d% d'k�r�|�$d�}|�s�t%� }|d< |D ]}|�&t'|�� �q�n�|d% d(k�r|�$d)�}|�s�t%� }|d)< |D ]}|�&t'|�� �q�nr|d% d*k�r*|D ]}| �(|� �qnL|d% d+k�rP|D ]}| �)|� �q<n&|d% d,k�rv| j j*d u �rv| �+|� W nB t,�y� }
z(td-|d% |||
f � W Y d }
~
dS d }
~
0 0 �q n$| �d.|t-|�f � |t'|�gi}|�.� D ]J\}}|d }t/| d/| |� |D ]"}t0| j"d0|�1� �|�2� � �q�q�dS )1N)�failr� r" r� z"(?ms)^/{0,3}[\w/_\-.]+(?:\[.*\])?$z (?ms)(?:/|\.(?:conf|local)$)T)Z force_enabler� �basedir�.i����z.confz.localzfilter.d�/z'ERROR: Wrong filter name or options: %sz while parsing: %sFzUse %11s jail : %sr3 zUse jail/flt options : %r�backend)ZaddOptsz ERROR: Failed to get jail for %rr )Zallow_no_filesr z Use %11s file : %s, basedir: %sr� zUse %11s file : %szUse filter options : %rzfail2ban-regex-jail)r� r� zWrong config file: %sz ERROR: failed to load filter %sz multi-setr- �setr Z prefregexZ addfailregexZaddignoreregexr� r� r� Zaddjournalmatchz1ERROR: Invalid value for %s (%r) read from %s: %szUse %11s line : %sr� z
add%sRegex)3r� Zconfigr �searchr r
r� �readr �os�path�dirnamer4 �basename�isfile� Exceptionr+ r �_verboser� Z
getOptions�logSys�getEffectiveLevel�logging�DEBUGr� �convert�splitext�isabs�abspathr Z
setBaseDirZ readexplicitZapplyAutoOptionsr� � prefRegexr� ra rm r^ r� r� r� r� �
ValueErrorr2 r� �setattrr~ �titlerl )rI rn Z regextyper" r� ZfltNameZfltFiler� ZjailZtryNames�eZreadercommands�retr� Z regex_values�optZoptvalZstorr% r% r& � readRegexK s
�
��� �
"
�
�� zFail2banRegex.readRegexc C s d| _ | j| �� d S )NT)� _lineIgnoredr� rj )rI �idxZ ignoreRegexr% r% r& r� � s z Fail2banRegex._onIgnoreRegexNc C s� | j j}| j �� dkr"|d d � }t|�| j �� k}d }| _�z| j �||�}g }g }|D ]\} | jjs�| �t|�dk� | j | d }
|
�
� |
� | � | d � d�s�|�| � q\d}q\| jjr�d |d fW S | j j
�rB| j j
} | �� �rB| jd7 _| j�rBt| j�| jk �r$| j�| �� � n t| j�| jk�rB| j�d� W n4 t�yx } ztd| � W Y d } ~ d S d } ~ 0 0 | j �� dk�rt|t|�d � D ]�}
|
| j jv�r�zR| jj�| jj�d
�|
��� | j �r�| jj �| jj �d
�|
d d d � ��� W n t �y Y n0 | j �rP| j �s:| jj �d
�|
�� n|�|
d |
d � | j j!d7 _!| j j"d8 _"�q�|�r�|�| j �#� � d �|�}|||�p�| jfS )
Nr Fr r- ZnofailTr. � ERROR: %s)Nr Nr3 r rD )$r� Z_Filter__lineBufferr� r/ r� Z processLiner� rZ rm r` rj ro r� r� Z
hasMatchedr� r� r� r� Z getGroupsr r+ r[ r� rv �pop�indexr4 � _debuggexrz r� �_print_all_matchedrt rs ru Z
processedLine)rI r� �dateZ
orgLineBufferZ
fullBuffer�
is_ignored�found�linesr� �matchr" �prer� ZbufLiner% r% r& � testRegex� sr
���
zFail2banRegex.testRegexc s� | j j��dv rdd� }n|�dkr,dd� }nj�dkr>dd� }nX�dkrPd d� }nFd
�vrf�fd d�}n0d d
lm� m�m� dd� �� ����fdd�}|S )zOPrepares output- and fetch-function corresponding given '--out' option (format))�idZfidc S s | D ]}t |d � qd S rh )r+ �r� �rr% r% r& �_out/ s z+Fail2banRegex._prepaireOutput.<locals>._out�ipc S s& | D ] }t |d �d|d �� qd S )Nr- r� r �r+ r� r� r% r% r& r� 3 s �msgc S sH | D ]>}|d � d�D ]*}t|t�s8d�dd� |D ��}t|� qqd S )Nr- �matchesr3 c s s | ]
}|V qd S r( r% �r� r� r% r% r& r� ; rB �>Fail2banRegex._prepaireOutput.<locals>._out.<locals>.<genexpr>)r� r� r r4 r+ r� r% r% r& r� 7 s
�rowc S s> | D ]4}t d|d |d tdd� |d �� D ��f � qd S )Nz
[%r, %r, %r],r r c s s" | ]\}}|d kr||fV qdS )r� Nr% )r� r� r� r% r% r& r� @ rB r� r- )r+ r� r� r� r% r% r& r� > s �<c s | D ]}t |d �� �� qd S )Nr- r� r� )�ofmtr% r& r� B s r )�Actions�
CommandAction� BanTicketc S s | dvr|� dd�S |S )N)r� � z\x00)�replace)�tr� r% r% r& �_escOutG s z.Fail2banRegex._prepaireOutput.<locals>._escOutc s� g }ddi�| D ]n� �� d � d � d d�}�� |�}� �fdd�}||d < �j�|�d
�}�d rv|�� |f� qt|� q|D ]N\� }� d �d �D ]6� t� t�s�d �d
d� � D ��� |�d� �� t� � q�q�d S )N�NLr r r r- )�time�datac s8 �d s(t � d �dg ��dkr(| d S d�d< dS d S )Nr� r- r� r � msg )r/ r� rf �r� Zwrapr% r& �_get_msgS s z=Fail2banRegex._prepaireOutput.<locals>._out.<locals>._get_msgr� )Z escapeValr� r3 c s s | ]
}|V qd S r( r% r� r% r% r& r� d rB r� r ) Z
ActionInfoZreplaceDynamicTagsrm r+ r� r� r r4 r� )r� ZrowsZticketZaInfor r� �r� r� r� r� r� r r& r� L s$
)r� rZ Zserver.actionsr� r� r� )rI r� r% r r& �_prepaireOutput+ s
z Fail2banRegex._prepaireOutputc C s� t � � }| jjr| �� }|D �]�}t|t�rV| �|d |d �\}}}d�|d �}n*|�d�}|� d�s |spq | �|�\}}}| jjr�t
|�dkr |s ||� q |r�| j j d7 _ | j
s�| js�| j j | jd kr�| j j�|� | jr�| j j�|� n�t
|�dk�rD| j jd7 _| j�r�| j j�|� | j�r�| j j�|� nX| j jd7 _| j�s�| j�sx| j j| jd k�r�| j j�|� | j�r�| j j �|� | j j d7 _ q t � � | | _ d S )Nr r r3 z
�#) r� r� rZ r r� �tupler� r4 �rstrip�
startswithr/ r� rw �_print_no_ignoredZ_print_all_ignoredr� rx rm r� r{ rs r� rt ry ru �_print_no_missedZ_print_all_missedrv rz rr r� )rI �
test_linesZt0rZ r� Zline_datetimestrippedr� r� r% r% r& �processj sB
$zFail2banRegex.processc sN �j }|j|j|j|j ks"J �|| }||d }�j�� dk�|�rJd|�� f }�j�r|dksp|dkrx�j }n�j
}||d }|�j k s�t �d| �r�g g}||fD ]� � fdd �|D �}q���fd
d �|D �}t
d d � |D �|� ntd |||f � nD|�j k �s"t �d| ��r8t
d
d � |D �|� ntd |||f � d S )NZ_linesr z %s line(s):ru rs Z_lines_timeextractedZ _print_all_c s g | ]}� D ]}||g �q qS r% r% )r� �x�y)�argr% r& �
<listcomp>� rB z,Fail2banRegex.printLines.<locals>.<listcomp>c sL g | ]D}|d d |d � � d t��|d �|d � � � �jj� �qS )r z | r z | )rl r' r� r� r� )r� �a)r# rI r% r& r � s ���c S s g | ] }|� � �qS r% �r �r� r
r% r% r& r � rB z?%s too many to print. Use --print-all-%s to print all %d linesc S s g | ] }|� � �qS r% r r r% r% r& r � rB )r� ru rr rs rw r� r� �
capitalizer� r` r� r� r~ r6 r+ ) rI ZltypeZlstatsr� r1 r5 Z regexlistZans�br% )r r# rI r& �
printLines� s8 �� �zFail2banRegex.printLinesc
s� � j jr dS td� td� td� � fdd�}� jjr�� jj}|�� g}� jrl� jD ]}|�d|f � qVtdd � j f � t
|� |d
� j �}|d � j �}� jj
d u�r4td � g }� jj
jD ]f}� js�|jr�|�d
|j|jf � � jr�|�d|j|jjt|dd�f � |�dt|dd�f � q�t
|d� td� j � � jd u�r\td� j � td� � j�rv� �d� � j�s�� �d� � j�s�� �d� dS )NTr3 ZResultsz=======c
s� dg }}t |�D ]�\}}|�� }||7 }|s4� jrP|�d|d ||�� f � � jrt|�� �r|�� D ]B}t�|d �}t� d|�} |�d|d | |d r�dp�d f � qjqt
d
| |f � t |d � |S ) Nr z %2d) [%d] %sr r z%a %b %d %H:%M:%S %Yz %s %s%s���z (multiple regex matched)r3 �
%s: %d totalz" #) [# of hits] regular expression) � enumeraterk r� rm rl r/ rp r� � localtime�strftimer+ r6 )
r� Z failregexes�totalrZ Zcntrc r� r� Z timeTupleZ
timeStringrf r% r& �print_failregexes� s(
��
z3Fail2banRegex.printStats.<locals>.print_failregexesz %sr Z PrefregexZ FailregexZ Ignoreregexz
Date template hits:z[%d] %sz& # weight: %.3f (%.3f), pattern: %sr� z # regex: %sr" z[# of hits] date formatz
Lines: %sz[processed in %.2f sec]rs rw ru )r� rZ r+ r� r� ZgetRegexr� r� rm r� r6 r` r� Z dateDetectorZ templates�hits�nameZ
_verbose_dateZweight�templater~ r� r� r� r r r
)rI r r� rZ �grpr r� r r% rf r& �
printStats� sN
�
zFail2banRegex.printStatsc
C sx |d d� \}}|� d�r d| _z8| �|d�s4W dS t|�dkrV| �|d d�sVW dS W n2 ty� } ztd| � W Y d }~dS d }~0 0 tj�|��rz2t || j
d d
�}| �d | � | �d | j
� W n0 t � y� } zt|� W Y d }~dS d }~0 0 �nP|� d��r�t �s td
� dS | �d� | �d | j
� t
|�\}}t di |��}|�| j
� |�� } | j}
| �d � |
�r�|�|
� | �dd�|
� � t|| �}n�| j�� dk�r�d|v�r�| �dt|�dd�� � |g}nn|�d�}| �dt|� � t|�D ]>\} } | dk�r*| �d� �qH| �d| d t| �f � �q| �d� | �d� | �|� | � � �stdS d S ) Nr zsystemd-journalZsystemdr� Fr- r� r� T)ZdoOpenzUse log file : %szUse encoding : %sz,Error: systemd library not found. Exiting...zUse systemd journalzUse journal match : %s� r rD zUse single line : %sz\nz Use multi line : %s line(s)� z| ...z | %2.2s: %sz`-r3 )N) r r� r� r/ r r+ r� r� r� r r� �IOErrorr r ZsetLogEncodingZgetJournalReaderr� r� ZaddJournalMatchr4 r; r� r� r2 r� r� r r r" )
rI r$ Zcmd_logZ cmd_regexr� r r� ZbeArgsr8 r9 r� �ir1 r% r% r& �start� sd
zFail2banRegex.start)N)rK rL rM rd r+ r� r� r� r� r� r� r� r� r r r r" r' r% r% r% r& r� � s *
@?) Hr� c C s6 | t kr| tks|jdkr(t�| ||�S t�d� d S )N� r )�BrokenPipeErrorr% �errnor= �__excepthook__r> )�exctypern � tracebackr% r% r& �_loc_except_hook; s r. c
G s� t t_dt_t� }|j| � \}} g }|jr:|jr:|� d� |j
rP|j rP|� d� t | �dvrf|� d� |r�|�
� tj�dd�|� d � t�d� |js�td� td � td
� td� t|j�|_t�|j� t�tj�}|jd kr�d nd
}|j�rt }|j �r d�pd| }ntj }|� |t |j|��� t�!|� z t"|�}W nd t#�y� } zJ|j�srt�$� tj%k�r�tj&|dd� n td| � t�d� W Y d }~n
d }~0 0 |�'| ��s�t�d� d S )NTzGERROR: --print-no-missed and --print-all-missed are mutually exclusive.zIERROR: --print-no-ignored and --print-all-ignored are mutually exclusive.)r r- z&ERROR: provide both <LOG> and <REGEX>.rD � r3 z
Running testsz
=============r z %(levelname)-1.1s: %(message)sz %(message)sz %(tb)sz %(tbc)s)�exc_infor� )(r. r= �
excepthookr� Z
exitOnIOErrorr] �
parse_argsZprint_no_missedZprint_all_missedrm Zprint_no_ignoredZprint_all_ignoredr/ Z
print_help�stderr�writer4 r> rZ r+ r rS r� ZsetLevelZ
StreamHandler�stdoutrX Z
log_tracebackr Zfull_traceback� FormatterZ setFormatterr Z
addHandlerr� r� r� r� rT r' ) r$ �parserr| �errorsr5 Zfmtr6 Z
fail2banRegexr� r% r% r& �exec_command_lineA sN
r9 )Fr )r, )N)=rF �
__author__rH Z __license__Zgetoptr� r r� r� r= r� Zurllib.requestr Z urllib.parseZ urllib.errorZoptparser r Z configparserr r r Zserver.filtersystemdr � ImportErrorr r
Z
jailreaderr r
r Z
server.filterr r r Zserver.failregexr r Zhelpersr r r r r r r� r' r+ r2 r6 r; r? rE rC r] �objectr^ rq r� r. r9 r% r% r% r& �<module> sR
? J