File: //usr/lib/python3.9/site-packages/fail2ban/server/__pycache__/datetemplate.cpython-39.opt-2.pyc
a
�dMfgC� @ s0 d Z dZdZddlZddlZddlmZ ddlmZm Z m
Z
dd l m Z e e
�Ze�d
�Ze�d �d fZe�d
�Ze�d�Ze�d�Ze�d�Ze�d�Ze�d�Ze�d�Ze�d�dd� fZe�d�Ze�d�Ze�d�Z e�dej �Z G dd � d e �Z G d d � d e �Z!G d d � d e �Z"G d!d"� d"e �Z#dS )#z
Cyril Jaquierz Copyright (c) 2004 Cyril JaquierZGPL� N)�abstractmethod� )�reGroupDictStrptime�timeRE�getTimePatternRE� )� getLoggerz (?<!(?:\(\?))(?<!\\)\((?!\?)z-^((?:\(\?\w+\))?\^?(?:\(\?\w+\))?)(.*?)(\$?)$z\1(\2)\3z((?:^|(?!<\\))\(\?[a-z]+\))z^\{UNB\}z
^\{\^LN-BEG\}z^\((?:\?:)?\^\|\\b\|\\W\)z\(\?=\\b\|\\W\|\$\)$z-^\(*(?:\(\?\w+\))?(?:\^|\(*\*\*|\((?:\?:)?\^)z!(?<!\\)(?:\$\)?|\\b|\\s|\*\*\)*)$z)^\(*(?:\(\?\w+\))?\(*\*\*|(?<!\\)\*\*\)*$c C s | � � �dd�S )Nz**� )�group�replace)�m� r
�@/usr/lib/python3.9/site-packages/fail2ban/server/datetemplate.py�<lambda>/ � r z(^(?:\(\?\w+\))?(?:\^|\((?:\?:)?\^(?!\|))z(?<![\\\|])(?:\$\)?)$z(?<!\%)\%[aAbBpc]z(?<!\\)\{L?EPOCH\}c @ sr e Zd ZdZdZdZdZdZdd� Zdd � Z dd d �Z
e e e
d
d�Z dd� Z
dd� Zeddd��Zedd� �ZdS )� DateTemplatez�A template which searches for and returns a date from a log line.
This is an not functional abstract class which other templates should
inherit from.
Attributes
----------
name
regex
� � r r c C s. d| _ d| _d| _d| _d| _d| _d | _d S )Nr g �?r )�nameZweight�flags�hits�time�_regex�_cRegex��selfr
r
r �__init__J s zDateTemplate.__init__c C s | j S �N)r r r
r
r �getRegexS s zDateTemplate.getRegexTc C st |� � }t�|�}|r&tjd|dd�}|o4t�|� }|oDt�|� }t�|�sdtd �td |�}d| _|r�| j|dkr�t j
nt j O _|dkr�d| }n d| }| j �
d�s�d| j | _ |r�| jt jO _|d 7 }| jt j @ �st�|��r| jt j O _| jt j@ �s.t�|��r.| jt jO _td �td |�}|�rV|�d�| }|| _t�d
d |� d | _d S )
a� Sets regex to use for searching for date in log line.
Parameters
----------
regex : str
The regex the template will use for searching for a date.
wordBegin : bool
Defines whether the regex should be modified to search at beginning of a
word, by adding special boundary r'(?=^|\b|\W)' to start of regex.
Can be disabled with specifying of ** at front of regex.
Default True.
wordEnd : bool
Defines whether the regex should be modified to search at end of a word,
by adding special boundary r'(?=\b|\W|$)' to end of regex.
Can be disabled with specifying of ** at end of regex.
Default True.
Raises
------
re.error
If regular expression fails to compile
r r )�countr �startz (?=^|\b|\W)z
^(?:\W{0,2})?z {^LN-BEG}z (?=\b|\W|$)r z constructed regex %sN)�strip�RE_GLOBALFLAGS�search�sub�RE_NO_WRD_BOUND_BEG�RE_NO_WRD_BOUND_END�
RE_GROUPED�RE_GROUPr r �
WORD_BEGIN�
LINE_BEGINr �
startswith�WORD_END�RE_LINE_BOUND_BEG�LINE_END�RE_LINE_BOUND_END�RE_DEL_WRD_BOUNDSr
r �logSys�logr )r �regex� wordBegin�wordEndZgfZ
boundBeginZboundEndr
r
r �setRegexV s:
zDateTemplate.setRegexz!Regex used to search for date.
)�docc
C sX | j sTzt�| j�| _ W n: tyR } z"t�d| j| j� |�W Y d}~n
d}~0 0 dS )z Compile regex by first usage.
z Compile %r failed, expression %rN)r �re�compiler3 � Exceptionr1 �errorr )r �er
r
r �
_compileRegex� s zDateTemplate._compileRegexc G sH | j s| �� t�dd| j� | j j|g|�R � }|rD| jd7 _|S )z1Check if regex for date matches on a log line.
r z search %sr )r r= r1 r2 r3 r# r )r �line�args� dateMatchr
r
r � matchDate� s zDateTemplate.matchDateNc C s t d��dS )aQ Abstract method, which should return the date for a log line
This should return the date for a log line, typically taking the
date from the part of the line which matched the templates regex.
This requires abstraction, therefore just raises exception.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: if no explicit time zone is present in the line
passing this will interpret it as in that time zone.
Raises
------
NotImplementedError
Abstract method, therefore always returns this.
zgetDate() is abstractN)�NotImplementedError�r r> r@ �
default_tzr
r
r �getDate� s zDateTemplate.getDatec
C s$ t �dt�dt�dt�d| ����S )Nr )�RE_EXEANC_BOUND_BEGr$ �RE_EXSANC_BOUND_BEG�RE_EXLINE_BOUND_BEG�RE_EXLINE_NO_BOUNDS)�patternr
r
r �unboundPattern� s
��zDateTemplate.unboundPattern)TT)NN)�__name__�
__module__� __qualname__�__doc__r* r. r) r, r r r6 �propertyr3 r= rA r rE � staticmethodrK r
r
r
r r 9 s"
@� r c @ s$ e Zd ZdZddd�Zd dd�ZdS )
� DateEpochz�A date template which searches for Unix timestamps.
This includes Unix timestamps which appear at start of a line, optionally
within square braces (nsd), or on SELinux audit log lines.
Attributes
----------
name
regex
FNc s� t �| � |sdn|| _|| _d| _d� |r>|s4dn|| _d� |r~t�� fdd�|�}t�|�sld| d }d
| _| � |� n4|s�d � }| j |d d
� nd� }| j |ddd� d S )NZEpochr z\d{10,11}\b(?:\.\d{3,6})?Z LongEpochz'\d{10,11}(?:\d{3}(?:\.\d{1,6}|\d{3})?)?c s d� S )Nz(%s)r
)�v�ZepochREr
r r � r z$DateEpoch.__init__.<locals>.<lambda>�(�)r zf((?:^|(?P<square>(?<=^\[))|(?P<selinux>(?<=\baudit\()))%s)(?:(?(selinux)(?=:\d+\)))|(?(square)(?=\])))F�r4 z*((?P<square>(?<=^\[))?%s)(?(square)(?=\]))r T)r4 r5 )
r r r �_longFrm�_grpIdx�RE_EPOCH_PATTERNr$ r' r# r6 )r Z
lineBeginOnlyrJ ZlongFrmr3 r
rT r r � s&
zDateEpoch.__init__c C sn |s| � |�}|rj|�| j�}| jr^t|�dkr^t|�dkrRd|vrRt|�d }n t|�d }t|�|fS dS )ax Method to return the date for a log line.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: ignored, Unix timestamps are time zone independent
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
�
� �.i@B i� N)rA r
rY rX �len�float)r r> r@ rD rS r
r
r rE � s
zDateEpoch.getDate)FNF)NN�rL rM rN rO r rE r
r
r
r rR � s
rR c sh e Zd ZdZe� \ZZe�e�Zd
� fdd� Z e
dd� �Z e j dd� �Z d� fd d
� Z
dd d �Z� ZS )�DatePatternRegexz�Date template, with regex/pattern
Parameters
----------
pattern : str
Sets the date templates pattern.
Attributes
----------
name
regex
pattern
Nc s2 t t| ��� d | _|d ur.| j|fi |�� d S r )�superra r �_patternr6 )r rJ �kwargs�� __class__r
r r ! s zDatePatternRegex.__init__c C s | j S )aV The pattern used for regex with strptime "%" time fields.
This should be a valid regular expression, of which matching string
will be extracted from the log line. strptime style "%" fields will
be replaced by appropriate regular expressions, or custom regex
groups with names as per the strptime fields can also be used
instead.
)rc r r
r
r rJ ' s
zDatePatternRegex.patternc C s | � |� d S r )r6 )r rJ r
r
r rJ 3 s Tc
s� || _ t�|�r$t�d|�}d }}|rBt�|�rBt�d|�}d}zL| j�d|�}|| j | _|t }t �|�rxd| }t
t | �� |||� W n4 t
y� } z td||f ��W Y d }~n
d }~0 0 d S )Nr Fr z%(\1)sz(?iu)zWFailed to set datepattern '%s' (may be an invalid format or unescaped percent char): %s)rc rI r# r$ rH �
_patternRE� _patternNamer r �RE_ALPHA_PATTERNrb ra r6 r: � TypeError)r rJ r4 r5 Zfmtr3 r< re r
r r6 7 s
zDatePatternRegex.setRegexc C s* |s| � |�}|r&t|�� |d�|fS dS )a� Method to return the date for a log line.
This uses a custom version of strptime, using the named groups
from the instances `pattern` property.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: optionally used to correct timezone
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
)rD N)rA r � groupdictrC r
r
r rE N s
�zDatePatternRegex.getDate)N)TT)NN)rL rM rN rO r rg rh r8 r9 r rP rJ �setterr6 rE �
__classcell__r
r
re r ra s
ra c @ s$ e Zd ZdZddd�Zd dd�ZdS )
�
DateTai64nz_A date template which matches TAI64N format timestamps.
Attributes
----------
name
regex
Fc C s" t �| � d| _| jd|d� d S )NZTAI64Nz
@[0-9a-f]{24}rW )r r r r6 )r r4 r
r
r r p s
zDateTai64n.__init__Nc C s: |s| � |�}|r6|�d�}|dd� }t|d�|fS dS )aq Method to return the date for a log line.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: ignored, since TAI is time zone independent
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
r r � r\ N)rA r
�int)r r> r@ rD �valueZseconds_since_epochr
r
r rE v s
zDateTai64n.getDate)F)NNr` r
r
r
r rn g s
rn )$�
__author__Z
__copyright__Z __license__r8 r �abcr �strptimer r r Zhelpersr rL r1 r9 r' r( r" rI rH rG rF r% r& r0 r- r/ ri �
IGNORECASErZ �objectr rR ra rn r
r
r
r �<module> s8
�
?X