File: //lib/python3.6/site-packages/fail2ban/server/__pycache__/datetemplate.cpython-36.pyc
3
UB(d�1 � @ s0 d Z dZdZddlZddlZddlmZ ddlmZm Z m
Z
dd l m Z e e
�Zejd
�Zejd �d fZejd
�Zejd�Zejd�Zejd�Zejd�Zejd�Zejd�Zejd�dd� fZejd�Zejd�Zejd�Z ejdej �Z G dd � d e �Z G d d � d e �Z!G d d � d e �Z"G d!d"� d"e �Z#dS )#z
Cyril Jaquierz Copyright (c) 2004 Cyril JaquierZGPL� N)�abstractmethod� )�reGroupDictStrptime�timeRE�getTimePatternRE� )� getLoggerz (?<!(?:\(\?))(?<!\\)\((?!\?)z-^((?:\(\?\w+\))?\^?(?:\(\?\w+\))?)(.*?)(\$?)$z\1(\2)\3z((?:^|(?!<\\))\(\?[a-z]+\))z^\{UNB\}z
^\{\^LN-BEG\}z^\((?:\?:)?\^\|\\b\|\\W\)z\(\?=\\b\|\\W\|\$\)$z-^\(*(?:\(\?\w+\))?(?:\^|\(*\*\*|\((?:\?:)?\^)z!(?<!\\)(?:\$\)?|\\b|\\s|\*\*\)*)$z)^\(*(?:\(\?\w+\))?\(*\*\*|(?<!\\)\*\*\)*$c C s | j � jdd�S )Nz**� )�group�replace)�m� r
�"/usr/lib/python3.6/datetemplate.py�<lambda>/ s r z(^(?:\(\?\w+\))?(?:\^|\((?:\?:)?\^(?!\|))z(?<![\\\|])(?:\$\)?)$z(?<!\%)\%[aAbBpc]z(?<!\\)\{L?EPOCH\}c @ sr e Zd ZdZdZdZdZdZdd� Zdd � Z dd d �Z
e e e
d
d�Z dd� Z
dd� Zeddd��Zedd� �ZdS )� DateTemplatez�A template which searches for and returns a date from a log line.
This is an not functional abstract class which other templates should
inherit from.
Attributes
----------
name
regex
� � r r c C s. d| _ d| _d| _d| _d| _d| _d | _d S )Nr g �?r )�nameZweight�flags�hits�time�_regex�_cRegex)�selfr
r
r �__init__J s zDateTemplate.__init__c C s | j S )N)r )r r
r
r �getRegexS s zDateTemplate.getRegexTc C sv |j � }tj|�}|r&tjd|dd�}|o4tj|� }|oDtj|� }tj|�sdtd jtd |�}d| _|r�| j|dkr�t j
nt j O _|dkr�d| }n d| }| j j
d�s�d| j | _ |r�| jt jO _|d 7 }| jt j @ o�tj|��r| jt j O _| jt j@ �r0tj|��r0| jt jO _td jtd |�}|�rX|jd�| }|| _tjd
d |� d | _d S )
a� Sets regex to use for searching for date in log line.
Parameters
----------
regex : str
The regex the template will use for searching for a date.
wordBegin : bool
Defines whether the regex should be modified to search at beginning of a
word, by adding special boundary r'(?=^|\b|\W)' to start of regex.
Can be disabled with specifying of ** at front of regex.
Default True.
wordEnd : bool
Defines whether the regex should be modified to search at end of a word,
by adding special boundary r'(?=\b|\W|$)' to end of regex.
Can be disabled with specifying of ** at end of regex.
Default True.
Raises
------
re.error
If regular expression fails to compile
r r )�countr �startz (?=^|\b|\W)z
^(?:\W{0,2})?z {^LN-BEG}z (?=\b|\W|$)r z constructed regex %sN)�strip�RE_GLOBALFLAGS�search�sub�RE_NO_WRD_BOUND_BEG�RE_NO_WRD_BOUND_END�
RE_GROUPED�RE_GROUPr r �
WORD_BEGIN�
LINE_BEGINr �
startswith�WORD_END�RE_LINE_BOUND_BEG�LINE_END�RE_LINE_BOUND_END�RE_DEL_WRD_BOUNDSr
r �logSys�logr )r �regex� wordBegin�wordEndZgfZ
boundBeginZboundEndr
r
r �setRegexV s:
zDateTemplate.setRegexz!Regex used to search for date.
)�docc C sV | j sRytj| j�| _ W n8 tk
rP } z tjd| j| j� |�W Y dd}~X nX dS )z Compile regex by first usage.
z Compile %r failed, expression %rN)r �re�compiler0 � Exceptionr. �errorr )r �er
r
r �
_compileRegex� s zDateTemplate._compileRegexc G sF | j s| j� tjdd| j� | j j|f|�� }|rB| jd7 _|S )z1Check if regex for date matches on a log line.
r z search %sr )r r: r. r/ r0 r r )r �line�args� dateMatchr
r
r � matchDate� s zDateTemplate.matchDateNc C s t d��dS )aQ Abstract method, which should return the date for a log line
This should return the date for a log line, typically taking the
date from the part of the line which matched the templates regex.
This requires abstraction, therefore just raises exception.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: if no explicit time zone is present in the line
passing this will interpret it as in that time zone.
Raises
------
NotImplementedError
Abstract method, therefore always returns this.
zgetDate() is abstractN)�NotImplementedError)r r; r= �
default_tzr
r
r �getDate� s zDateTemplate.getDatec C s$ t jdtjdtjdtjd| ����S )Nr )�RE_EXEANC_BOUND_BEGr! �RE_EXSANC_BOUND_BEG�RE_EXLINE_BOUND_BEG�RE_EXLINE_NO_BOUNDS)�patternr
r
r �unboundPattern� s zDateTemplate.unboundPattern)TT)NN)�__name__�
__module__� __qualname__�__doc__r' r+ r& r) r r r3 �propertyr0 r: r> r rA � staticmethodrG r
r
r
r r 9 s
@ r c @ s$ e Zd ZdZddd�Zd dd�ZdS )
� DateEpochz�A date template which searches for Unix timestamps.
This includes Unix timestamps which appear at start of a line, optionally
within square braces (nsd), or on SELinux audit log lines.
Attributes
----------
name
regex
FNc s� t j| � |sdn|| _|| _d| _d� |r>|s4dn|| _d� |rpdtj� fdd�|� d }d
| _| j|� n4|s�d � }| j|d d
� nd� }| j|ddd� d S )NZEpochr z\d{10,11}\b(?:\.\d{3,6})?Z LongEpochz'\d{10,11}(?:\d{3}(?:\.\d{1,6}|\d{3})?)?�(c s d� S )Nz(%s)r
)�v)�epochREr
r r � s z$DateEpoch.__init__.<locals>.<lambda>�)r zf((?:^|(?P<square>(?<=^\[))|(?P<selinux>(?<=\baudit\()))%s)(?:(?(selinux)(?=:\d+\)))|(?(square)(?=\])))F)r1 z*((?P<square>(?<=^\[))?%s)(?(square)(?=\]))r T)r1 r2 )r r r �_longFrm�_grpIdx�RE_EPOCH_PATTERNr! r3 )r Z
lineBeginOnlyrF ZlongFrmr0 r
)rQ r r � s"
zDateEpoch.__init__c C sn |s| j |�}|rj|j| j�}| jr^t|�dkr^t|�dkrRd|krRt|�d }n t|�d }t|�|fS dS )ax Method to return the date for a log line.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: ignored, Unix timestamps are time zone independent
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
�
� �.i@B i� N)r> r
rT rS �len�float)r r; r= r@ rP r
r
r rA � s
zDateEpoch.getDate)FNF)NN)rH rI rJ rK r rA r
r
r
r rN � s
rN c sh e Zd ZdZe� \ZZeje�Zd
� fdd� Z e
dd� �Z e j dd� �Z d� fd d
� Z
dd d �Z� ZS )�DatePatternRegexz�Date template, with regex/pattern
Parameters
----------
pattern : str
Sets the date templates pattern.
Attributes
----------
name
regex
pattern
Nc s. t t| �j� d | _|d k r*| j|f|� d S )N)�superr[ r �_patternr3 )r rF �kwargs)� __class__r
r r s zDatePatternRegex.__init__c C s | j S )aV The pattern used for regex with strptime "%" time fields.
This should be a valid regular expression, of which matching string
will be extracted from the log line. strptime style "%" fields will
be replaced by appropriate regular expressions, or custom regex
groups with names as per the strptime fields can also be used
instead.
)r] )r r
r
r rF % s
zDatePatternRegex.patternc C s | j |� d S )N)r3 )r rF r
r
r rF 1 s Tc s� || _ tj|�r$tjd|�}d }}|rBtj|�rBtjd|�}d}yL| jjd|�}|| j | _|t }t j|�rxd| }t
t | �j |||� W n2 t
k
r� } ztd||f ��W Y d d }~X nX d S )Nr Fr z%(\1)sz(?iu)zWFailed to set datepattern '%s' (may be an invalid format or unescaped percent char): %s)r] rE r r! rD �
_patternRE� _patternNamer r �RE_ALPHA_PATTERNr\ r[ r3 r7 � TypeError)r rF r1 r2 Zfmtr0 r9 )r_ r
r r3 5 s
zDatePatternRegex.setRegexc C s* |s| j |�}|r&t|j� |d�|fS dS )a� Method to return the date for a log line.
This uses a custom version of strptime, using the named groups
from the instances `pattern` property.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: optionally used to correct timezone
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
)r@ N)r> r � groupdict)r r; r= r@ r
r
r rA L s
zDatePatternRegex.getDate)N)TT)NN)rH rI rJ rK r r` ra r5 r6 r rL rF �setterr3 rA �
__classcell__r
r
)r_ r r[
s
r[ c @ s$ e Zd ZdZddd�Zd dd�ZdS )
�
DateTai64nz`A date template which matches TAI64N formate timestamps.
Attributes
----------
name
regex
Fc C s" t j| � d| _| jd|d� d S )NZTAI64Nz
@[0-9a-f]{24})r1 )r r r r3 )r r1 r
r
r r n s
zDateTai64n.__init__Nc C s: |s| j |�}|r6|jd�}|dd� }t|d�|fS dS )aq Method to return the date for a log line.
Parameters
----------
line : str
Log line, of which the date should be extracted from.
default_tz: ignored, since TAI is time zone independent
Returns
-------
(float, str)
Tuple containing a Unix timestamp, and the string of the date
which was matched and in turned used to calculated the timestamp.
r r � rW N)r> r
�int)r r; r= r@ �valueZseconds_since_epochr
r
r rA t s
zDateTai64n.getDate)F)NN)rH rI rJ rK r rA r
r
r
r rg e s
rg )$�
__author__Z
__copyright__Z __license__r5 r �abcr Zstrptimer r r Zhelpersr rH r. r6 r$ r% r rE rD rC rB r" r# r- r* r, rb �
IGNORECASErU �objectr rN r[ rg r
r
r
r �<module> s6
=X