File: //usr/lib/python3.9/site-packages/fail2ban/server/__pycache__/datetemplate.cpython-39.pyc
a
�dMfgC� @ s0 d Z dZdZddlZddlZddlmZ ddlmZm Z m
Z
dd l m Z e e
�Ze�d
�Ze�d �d fZe�d
�Ze�d�Ze�d�Ze�d�Ze�d�Ze�d�Ze�d�Ze�d�dd� fZe�d�Ze�d�Ze�d�Z e�dej �Z G dd � d e �Z G d d � d e �Z!G d d � d e �Z"G d!d"� d"e �Z#dS )#z
Cyril Jaquierz Copyright (c) 2004 Cyril Jaquier�GPL� N)�abstractmethod� )�reGroupDictStrptime�timeRE�getTimePatternRE� )� getLoggerz (?<!(?:\(\?))(?<!\\)\((?!\?)z-^((?:\(\?\w+\))?\^?(?:\(\?\w+\))?)(.*?)(\$?)$z\1(\2)\3z((?:^|(?!<\\))\(\?[a-z]+\))z^\{UNB\}z
^\{\^LN-BEG\}z^\((?:\?:)?\^\|\\b\|\\W\)z\(\?=\\b\|\\W\|\$\)$z-^\(*(?:\(\?\w+\))?(?:\^|\(*\*\*|\((?:\?:)?\^)z!(?<!\\)(?:\$\)?|\\b|\\s|\*\*\)*)$z)^\(*(?:\(\?\w+\))?\(*\*\*|(?<!\\)\*\*\)*$c C s | � � �dd�S )Nz**� )�group�replace)�m� r �@/usr/lib/python3.9/site-packages/fail2ban/server/datetemplate.py�<lambda>/ � r z(^(?:\(\?\w+\))?(?:\^|\((?:\?:)?\^(?!\|))z(?<![\\\|])(?:\$\)?)$z(?<!\%)\%[aAbBpc]z(?<!\\)\{L?EPOCH\}c @ sr e Zd ZdZdZdZdZdZdd� Zdd � Z dd d �Z
e e e
d
d�Z dd� Z
dd� Zeddd��Zedd� �ZdS )� DateTemplatez�A template which searches for and returns a date from a log line.
This is an not functional abstract class which other templates should
inherit from.
Attributes
----------
name
regex
� � r r c C s. d| _ d| _d| _d| _d| _d| _d | _d S )Nr
g �?r )�nameZweight�flags�hits�time�_regex�_cRegex��selfr r r �__init__J s zDateTemplate.__init__c C s | j S �N)r r r r r �getRegexS s zDateTemplate.getRegexTc C st |� � }t�|�}|r&tjd|dd�}|o4t�|� }|oDt�|� }t�|�sdtd �td |�}d| _|r�| j|dkr�t j
nt j O _|dkr�d| }n d| }| j �
d�s�d| j | _ |r�| jt jO _|d 7 }| jt j @ �st�|��r| jt j O _| jt j@ �s.t�|��r.| jt jO _td �td |�}|�rV|�d�| }|| _t�d
d |� d | _d S )
a� Sets regex to use for searching for date in log line.
Parameters
----------
regex : str
The regex the template will use for searching for a date.
wordBegin : bool
Defines whether the regex should be modified to search at beginning of a
word, by adding special boundary r'(?=^|\b|\W)' to start of regex.
Can be disabled with specifying of ** at front of regex.
Default True.
wordEnd : bool
Defines whether the regex should be modified to search at end of a word,
by adding special boundary r'(?=\b|\W|$)' to end of regex.
Can be disabled with specifying of ** at end of regex.
Default True.
Raises
------
re.error
If regular expression fails to compile
r
r )�countr �startz (?=^|\b|\W)z
^(?:\W{0,2})?z {^LN-BEG}z (?=\b|\W|$)r z constructed regex %sN)�strip�RE_GLOBALFLAGS�search�sub�RE_NO_WRD_BOUND_BEG�RE_NO_WRD_BOUND_END�
RE_GROUPED�RE_GROUPr r �
WORD_BEGIN�
LINE_BEGINr �
startswith�WORD_END�RE_LINE_BOUND_BEG�LINE_END�RE_LINE_BOUND_END�RE_DEL_WRD_BOUNDSr r �logSys�logr )r �regex� wordBegin�wordEndZgfZ
boundBeginZboundEndr r r �setRegexV s:
zDateTemplate.setRegexz!Regex used to search for date.
)�docc
C sX | j sTzt�| j�| _ W n: tyR } z"t�d| j| j� |�W Y d}~n
d}~0 0 dS )z Compile regex by first usage.
z Compile %r failed, expression %rN)r �re�compiler4 � Exceptionr2 �errorr )r �er r r �
_compileRegex� s zDateTemplate._compileRegexc G sH | j s| �� t�dd| j� | j j|g|�R � }|rD| jd7 _|S )z1Check if regex for date matches on a log line.
r z search %sr )r r> r2 r3 r4 r$ r )r �line�args� dateMatchr r r � matchDate� s zDateTemplate.matchDateNc C s t d��dS )aQ Abstract method, which should return the date for a log line
This should return the date for a log line, typically taking the
date from the part of the line which matched the templates regex.
This requires abstraction, therefore just raises exception.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: if no explicit time zone is present in the line
passing this will interpret it as in that time zone.
Raises
------
NotImplementedError
Abstract method, therefore always returns this.
zgetDate() is abstractN)�NotImplementedError�r r? rA �
default_tzr r r �getDate� s zDateTemplate.getDatec
C s$ t �dt�dt�dt�d| ����S )Nr
)�RE_EXEANC_BOUND_BEGr% �RE_EXSANC_BOUND_BEG�RE_EXLINE_BOUND_BEG�RE_EXLINE_NO_BOUNDS)�patternr r r �unboundPattern� s
��zDateTemplate.unboundPattern)TT)NN)�__name__�
__module__� __qualname__�__doc__r+ r/ r* r- r r r7 �propertyr4 r> rB r rF � staticmethodrL r r r r r 9 s"
@� r c @ s$ e Zd ZdZddd�Zd dd�ZdS )
� DateEpochz�A date template which searches for Unix timestamps.
This includes Unix timestamps which appear at start of a line, optionally
within square braces (nsd), or on SELinux audit log lines.
Attributes
----------
name
regex
FNc s� t �| � |sdn|| _|| _d| _d� |r>|s4dn|| _d� |r~t�� fdd�|�}t�|�sld| d }d
| _| � |� n4|s�d � }| j |d d
� nd� }| j |ddd� d S )NZEpochr z\d{10,11}\b(?:\.\d{3,6})?Z LongEpochz'\d{10,11}(?:\d{3}(?:\.\d{1,6}|\d{3})?)?c s d� S )Nz(%s)r )�v�ZepochREr r r � r z$DateEpoch.__init__.<locals>.<lambda>�(�)r zf((?:^|(?P<square>(?<=^\[))|(?P<selinux>(?<=\baudit\()))%s)(?:(?(selinux)(?=:\d+\)))|(?(square)(?=\])))F�r5 z*((?P<square>(?<=^\[))?%s)(?(square)(?=\]))r! T)r5 r6 )
r r r �_longFrm�_grpIdx�RE_EPOCH_PATTERNr% r( r$ r7 )r Z
lineBeginOnlyrK ZlongFrmr4 r rU r r � s&
zDateEpoch.__init__c C sn |s| � |�}|rj|�| j�}| jr^t|�dkr^t|�dkrRd|vrRt|�d }n t|�d }t|�|fS dS )ax Method to return the date for a log line.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: ignored, Unix timestamps are time zone independent
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
�
� �.i@B i� N)rB r rZ rY �len�float)r r? rA rE rT r r r rF � s
zDateEpoch.getDate)FNF)NN�rM rN rO rP r rF r r r r rS � s
rS c sh e Zd ZdZe� \ZZe�e�Zd
� fdd� Z e
dd� �Z e j dd� �Z d� fd d
� Z
dd d �Z� ZS )�DatePatternRegexz�Date template, with regex/pattern
Parameters
----------
pattern : str
Sets the date templates pattern.
Attributes
----------
name
regex
pattern
Nc s2 t t| ��� d | _|d ur.| j|fi |�� d S r )�superrb r �_patternr7 )r rK �kwargs�� __class__r r r ! s zDatePatternRegex.__init__c C s | j S )aV The pattern used for regex with strptime "%" time fields.
This should be a valid regular expression, of which matching string
will be extracted from the log line. strptime style "%" fields will
be replaced by appropriate regular expressions, or custom regex
groups with names as per the strptime fields can also be used
instead.
)rd r r r r rK ' s
zDatePatternRegex.patternc C s | � |� d S r )r7 )r rK r r r rK 3 s Tc
s� || _ t�|�r$t�d|�}d }}|rBt�|�rBt�d|�}d}zL| j�d|�}|| j | _|t }t �|�rxd| }t
t | �� |||� W n4 t
y� } z td||f ��W Y d }~n
d }~0 0 d S )Nr
Fr! z%(\1)sz(?iu)zWFailed to set datepattern '%s' (may be an invalid format or unescaped percent char): %s)rd rJ r$ r% rI �
_patternRE� _patternNamer r �RE_ALPHA_PATTERNrc rb r7 r; � TypeError)r rK r5 r6 �fmtr4 r= rf r r r7 7 s
zDatePatternRegex.setRegexc C s* |s| � |�}|r&t|�� |d�|fS dS )a� Method to return the date for a log line.
This uses a custom version of strptime, using the named groups
from the instances `pattern` property.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: optionally used to correct timezone
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
)rE N)rB r � groupdictrD r r r rF N s
�zDatePatternRegex.getDate)N)TT)NN)rM rN rO rP r rh ri r9 r: r rQ rK �setterr7 rF �
__classcell__r r rf r rb s
rb c @ s$ e Zd ZdZddd�Zd dd�ZdS )
�
DateTai64nz_A date template which matches TAI64N format timestamps.
Attributes
----------
name
regex
Fc C s" t �| � d| _| jd|d� d S )NZTAI64Nz
@[0-9a-f]{24}rX )r r r r7 )r r5 r r r r p s
zDateTai64n.__init__Nc C s: |s| � |�}|r6|�d�}|dd� }t|d�|fS dS )aq Method to return the date for a log line.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: ignored, since TAI is time zone independent
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
r r � r] N)rB r �int)r r? rA rE �valueZseconds_since_epochr r r rF v s
zDateTai64n.getDate)F)NNra r r r r rp g s
rp )$�
__author__�
__copyright__� __license__r9 r �abcr �strptimer r r Zhelpersr rM r2 r: r( r) r# rJ rI rH rG r& r' r1 r. r0 rj �
IGNORECASEr[ �objectr rS rb rp r r r r �<module> s8
�
?X