File: //usr/lib/python3.9/site-packages/fail2ban/server/__pycache__/datedetector.cpython-39.pyc
a
j_�{�Ԅ� @ s� d Z dZdZddlZddlZddlmZ ddlmZm Z m
Z
m Z m Z m
Z
ddlmZ dd lmZ d
d lmZ ee�Zd Ze�d
ej�Zejddd�Zd dd�Z dd� fdd�Z G dd� de �Z G dd� de �Z G dd � d e �Z!dS ) z'Cyril Jaquier and Fail2Ban Contributorsz Copyright (c) 2004 Cyril Jaquier�GPL� N)�Lock� )�re� DateTemplate�DatePatternRegex�
DateTai64n� DateEpoch�RE_EPOCH_PATTERN)�validateTimeZone)�Utils� )� getLogger� z(?<!\\)\{DATE\}i� i )ZmaxCountZmaxTimec C s� |d u r | }d| vr | � � }t�|�}|s�d|v r~t�| �rNt| d|v d�}n0|dv rft|dkd�}n|dv r~t|dkdd �}|d u r�|d
v r�t|d kr�d nd
d�}nt| �}t�||� |S )N�%�EPOCH�LEPOCH)�pattern�longFrm)r z{^LN-BEG}EPOCHz^EPOCH)�
lineBeginOnly)r z{^LN-BEG}LEPOCHz^LEPOCHT)r r )�TAI64Nz{^LN-BEG}TAI64Nz^TAI64Nr �startF)Z wordBegin) �upper�DD_patternCache�getr
�searchr r r �set)r �key�template� r �@/usr/lib/python3.9/site-packages/fail2ban/server/datedetector.py�_getPatternTemplate, s&
r! c C s d| S �N� {^LN-BEG}r ��sr r r �<lambda>D � r& c C sb || j �}t�|�}|s^|t| d| j��}t| d�r>t�|�}|s^t| d�sVt|�}nt|�}|S )Nr )�namer r �getattr�regex�hasattrr! )r �wrapr( � template2r* r r r �_getAnchoredTemplateD s
r. c @ sH e Zd ZdZdd� Zedd� �Zdd� Zg d�Zed d
� �Z d d � Z
d
S )�DateDetectorCachez7Implements the caching of the default templates list.
c C s t � | _t� | _d S �N)r �_DateDetectorCache__lock�list� _DateDetectorCache__templates��selfr r r �__init__\ s zDateDetectorCache.__init__c C s^ | j r | j S | j�8 | j r.| j W d � S | �� | j W d � S 1 sP0 Y dS )�6List of template instances managed by the detector.
N)r3 r1 �_addDefaultTemplater4 r r r � templates` s zDateDetectorCache.templatesc C s` |j }|�d�sL|�d�sLt|d�rLt|�}|j |krLd|_| jd �|� | jd �|� dS )z&Cache Fail2Ban's default template.
r# �^r* g Y@r r N)r( �
startswithr+ r. �weight� _DateDetectorCache__tmpcache�append)r5 r r( r- r r r �_cacheTemplatel s
z DateDetectorCache._cacheTemplate)zF%ExY(?P<_sep>[-/.])%m(?P=_sep)%d(?:T| ?)%H:%M:%S(?:[.,]%f)?(?:\s*%z)?z)(?:%a )?%b %d %k:%M:%S(?:\.%f)?(?: %ExY)?z$(?:%a )?%b %d %ExY %k:%M:%S(?:\.%f)?z1%d(?P<_sep>[-/])%m(?P=_sep)(?:%ExY|%Exy) %k:%M:%Sz=%d(?P<_sep>[-/])%b(?P=_sep)%ExY[ :]?%H:%M:%S(?:\.%f)?(?: %z)?z%m/%d/%ExY:%H:%M:%Sz %m-%d-%ExY %k:%M:%S(?:\.%f)?r z{^LN-BEG}%H:%M:%Sz^<%m/%d/%Exy@%H:%M:%S>z%Exy%Exm%Exd ?%H:%M:%Sz%b %d, %ExY %I:%M:%S %pz^%b-%d-%Exy %k:%M:%Sz6%ExY%Exm%Exd(?:T| ?)%ExH%ExM%ExS(?:[.,]%f)?(?:\s*%z)?z1(?:%Z )?(?:%a )?%b %d %k:%M:%S(?:\.%f)?(?: %ExY)?z1(?:%z )?(?:%a )?%b %d %k:%M:%S(?:\.%f)?(?: %ExY)?r c C s< t tjd t�r6ttj�D ]\}}t|�}|tj|< qtjS )Nr )�
isinstancer/ �DEFAULT_TEMPLATES�str� enumerater! )r5 �i�dtr r r �defaultTemplates� s
z"DateDetectorCache.defaultTemplatesc C s> g g f| _ | jD ]}| �|� q| j d | j d | _| ` dS )z<Add resp. cache Fail2Ban's default set of date templates.
r r N)r= rF r? r3 )r5 rE r r r r8 � s
z%DateDetectorCache._addDefaultTemplateN) �__name__�
__module__� __qualname__�__doc__r6 �propertyr9 r? rA rF r8 r r r r r/ Y s
5
r/ c @ s0 e Zd ZdZdZdd� Zedd� �Zdd� Zd S )
�DateDetectorTemplateztUsed for "shallow copy" of the template object.
Prevents collectively usage of hits/lastUsed in cached templates
�r �hits�lastUsed�distancec C s || _ d| _d| _d| _d S )Nr ��rM )r5 r r r r r6 � s z DateDetectorTemplate.__init__c C s | j | jj td| j� S )Nr )rN r r< �maxrP r4 r r r r< � s zDateDetectorTemplate.weightc C s t | j|�S )zF Returns attribute of template (called for parameters not in slots)
)r) r )r5 r( r r r � __getattr__� s z DateDetectorTemplate.__getattr__N) rG rH rI rJ � __slots__r6 rK r< rS r r r r rL � s
rL c @ sz e Zd ZdZe� Zdd� Zddd�Zdd� Zdd d �Z e
d
d� �Z dd� Z e
dd� �Z
e
jdd� �Z
ddd�Zdd� Zd S )� DateDetectorzjManages one or more date templates to find a date within a log line.
Attributes
----------
templates
c C s> t � | _t� | _d| _d| _d| _d| _d| _d | _ d | _
d S )Ni, )r N)rQ NrQ r ) r2 �_DateDetector__templatesr �_DateDetector__known_names�_DateDetector__unusedTime�_DateDetector__lastPos�_DateDetector__lastEndPos�_DateDetector__lastTemplIdx�_DateDetector__firstUnusedZ_DateDetector__preMatch�_DateDetector__default_tzr4 r r r r6 � s zDateDetector.__init__Fc C sD |j }|| jv r$|rd S td| ��| j�|� | j�t|�� d S )Nz(There is already a template with name %s)r( rW �
ValueError�addrV r> rL )r5 r � ignoreDupr( r r r �_appendTemplate� s
� z DateDetector._appendTemplatec s� t |t�r�| � }d|vr"|�� � t�� �}|s�� dv rR� fdd�}| �|� dS d� v rl| j|dd� dS � d kr�td
� �}n
t|� �}t�� |� | �|� t �
d t |d d
�|j � t �
dt |d d
�|j� dS )a� Add a date template to manage and use in search of dates.
Parameters
----------
template : DateTemplate or str
Can be either a `DateTemplate` instance, or a string which will
be used as the pattern for the `DatePatternRegex` template. The
template will then be added to the detector.
Raises
------
ValueError
If a template already exists with the same name.
r )r# z {DEFAULT}c s � dkr| j tj@ S d S r" )�flagsr �
LINE_BEGIN)r �r r r r& r' z-DateDetector.appendTemplate.<locals>.<lambda>Nz{DATE}F)�preMatch� allDefaultsz{NONE}z{UNB}^z date pattern `%r`: `%s`r � z date pattern regex for %r: %s)r@ rB r r r �addDefaultTemplater! r ra �logSys�infor) r( �debugr* )r5 r r Zfltr rd r �appendTemplate s2
�
��zDateDetector.appendTemplateNTc sh t | j�dk}|rtjjntjjD ]@}|dur8||�s8q"� durTt|� fdd�d�}| j||d� q"dS )z0Add Fail2Ban's default set of date templates.
r Nc s t �� fdd���S )Nc s
t �� �S r0 )r ZunboundPattern)�mr$ r r r& 7 r' zCDateDetector.addDefaultTemplate.<locals>.<lambda>.<locals>.<lambda>)�RE_DATE_PREMATCH�subr$ �re r$ r r& 7 r' z1DateDetector.addDefaultTemplate.<locals>.<lambda>)r, )r` )�lenrV rU � _defCacher9 rF r. ra )r5 ZfilterTemplatere rf r` r r rp r rh * s �
�z DateDetector.addDefaultTemplatec C s | j S )r7 )rV r4 r r r r9 ; s zDateDetector.templatesc
C s� t | j�s| �� t�� tkr$tjndd� }|td d|� d}d}d}| j}|t | j�k �rd| j| }|j}|j t
j t
j B @ r�|td d|� |�
|�}|}�n4| jd | jd } }
|td d
|| |
|| d | � | jd || |
� ||
|
d � | jd �
|| d | � | jd k�sJ|| | d � | jd k�r�| jd �� �s�||
|
d � | jd k�s�||
d |
� | jd k�r�| jd �� �s�|td d || |
� � |�
|| |
�}n |td d
� |�
|�}|}|�rZ|�� } |�� }
t | j�dk�s0|j t
j t
j B @ �s0| | jd k�r>|
| jd k�r>|td|� n|td� || |
|f}d}n
|td� |�s�|tdt | j�� d }| jD �]2}||k�r�|d7 }�q�|td d||j� |j}|�
|�}|�r�|�� } |�� }
|td|| |j| jd |j� |d t | j�k�r �q�|j t
j t
j B @ �r. �q�| d k�rZ|j�rZ| j|d jj�sZ �q�| |jk�sv| | jd k�r�|td� | |d k �r�|| |
|f}d}|d7 }�q� �q�|d7 }�q�|�s�|d �r�|\}} }
}|td|� | j| }|j}|�r�| jd7 _t�� |_| |_| j|k�r2| jd7 _| || d | � || f| _|
||
d ||
|
d � f| _|�r�|| jk�r�| �|�}|| _||fS |td� dS )a� Attempts to find date on a log line using templates.
This uses the templates' `matchDate` method in an attempt to find
a date. It also increments the match hit count for the winning
template.
Parameters
----------
line : str
Line which is searched by the date templates.
Returns
-------
re.MatchObject, DateTemplate
The regex match returned from the first successfully matched
template.
c W s d S r0 r )�argsr r r r& V r' z(DateDetector.matchTime.<locals>.<lambda>r z"try to match time for line: %.120sN)NrQ rQ ���rQ z/ try to match last anchored template #%02i ...r zJ try to match last template #%02i (from %r to %r): ...%r==%r %s %r==%r...r
z+ boundaries are correct, search in part %rz, boundaries show conflict, try whole searchz" matched last time template #%02izB ** last pattern collision - pattern change, reserve & search ...z8 ** last pattern not found - pattern change, search ...z search template (%i) ...z try template #%02i: %sz2 matched time template #%02i (at %r <= %r, %r) %sz1 ** distance collision - pattern change, reservez use best time template #%02iz
no template.)NN)rq rV rh ri �getEffectiveLevel�logLevel�logr[ r rb r rc ZLINE_ENDZ matchDaterY rZ �isalnumr �endr( rP rN �timerO r\ �_reorderTemplate) r5 �linerw �match�foundZignoreBySearchrD �ddtemplr rP �endposr r r � matchTimeA s�
��� ��� �
�� � �
�&
zDateDetector.matchTimec C s | j S r0 )r] r4 r r r �
default_tz� s zDateDetector.default_tzc C s t |�| _d S r0 )r r] )r5 �valuer r r r� � s c C s� |du r| � |�}|d }|dur�zV|j||d | jd�}|durvt�� tkrpt�td|d |d �d�|j� |W S W n t y� Y n0 dS )a Attempts to return the date on a log line using templates.
This uses the templates' `getDate` method in an attempt to find
a date.
For the faster usage, always specify a parameter timeMatch (the previous tuple result
of the matchTime), then this will work without locking and without cycle over templates.
Parameters
----------
line : str
Line which is searched by the date templates.
Returns
-------
float
The Unix timestamp returned from the first successfully matched
template or None if not found.
Nr r )r� z& got time %f for %r using template %s)
r� ZgetDater] ri ru rv rw �groupr( r^ )r5 r| Z timeMatchr �dater r r �getTime� s
�
zDateDetector.getTimec s� �r�| j ��� � t�� tkr0t�td�� j� � j| j �� j�| j �k rR| j n�d �� �����fdd�}|� s���d kr��S �d �|� s��S ��= � g��d�< | j t
��k rֈ| j jr�| j d7 _ q�t�� tkr�t�td��� �S �S )z�Reorder template (bubble up) in template list if hits grows enough.
Parameters
----------
num : int
Index of template should be moved.
z% -> reorder template #%02i, hits: %rr
c sL �� j } t�� tkr6t�td���| � j�� j� �| kpJ��� jkS )NzE -> compare template #%02i & #%02i, weight %.3f > %.3f, hits %r > %r)r< ri ru rv rw rN rO )Zpweight�r �num�posr9 Zuntimer< r r � _moveable
s
�z0DateDetector._reorderTemplate.<locals>._moveabler r z" -> moved template #%02i -> #%02i) rV ri ru rv rw rN rO rX r< r\ rq )r5 r� r� r r� r r{ � s. z DateDetector._reorderTemplate)F)NNT)N)rG rH rI rJ r/ rr r6 ra rl rh rK r9 r� r� �setterr� r{ r r r r rU � s
*
$rU )N)"�
__author__�
__copyright__� __license__�copyrz � threadingr Z datetemplater r r r r r
�strptimer �utilsr Zhelpersr rG ri rv �compile�
IGNORECASErn �Cacher r! r. �objectr/ rL rU r r r r �<module> s$
n