Эĺ d dl Z d dlZd dlZd dlmZ d dlmZmZmZm Z m
Z
m Z m Z d dl
mZmZmZmZ d dlZd dlmZ d dlmZmZ e j e Z ej dej Z d\ Z Z Z d \ Z!Z"ee e f Z#d
Z$d d ee fd Z%d
eeee
f fdZ&d Z'dZ( ed d Z)de*fdZ+d Z,deee
f fdZ-dee e f d
ee*e*e*f fdZ.de*d e*d e*d
e#fd Z/de0d
ede e f fd Z1dS )! N) lru_cache)
IPV4LENGTH
IPV6LENGTH IPv4Address IPv4Network IPv6Address IPv6Network
ip_network)IterableOptionalTupleUnion)get_kernel_module_parameter)IP IPVersions ^nameserver ([\w.:]+))tcpudpall)inoutz/etc/resolv.conf
ip_versionc # K t t d 5 }| }d d d n # 1 swxY w Y n# t $ r g cY S w xY wt | D ]K}| d }t j | r | t j | | k s| |V Ld S )Nrbascii)
openRESOLV_CONF_FILEreadOSErrorDNS_IP_TEMPLATEfindalldecoder is_valid_iptype_of)r fcontentips D/opt/imunify360/venv/lib/python3.11/site-packages/im360/utils/net.pylocal_dns_from_resolv_confr( ! s
"D
)
) QffhhG %%g..
YYw
>" &2:b>>Z+G+G#
s. A : A >A >A AAreturnc # H K t j D ]y} | D ]t}|j t j k rt
|j V .|j t j k r1t |j
dd d V uzdS )z8Return a list of IP address assigned to local interfaces% )maxsplitr N) psutil net_if_addrsvaluesfamilysocketAF_INETr addressAF_INET6r split)ipsr& s r' local_ip_addressesr8 1 s "$$++-- H H H HByFN**!"*------fo-- ""*"2"23"2"C"CA"FGGGGG
HH H c | t t fv sJ | t k rd}nd}t d t j | D S )zZ
Return listening ports for ipv4 services
:param proto: tcp/udp
:return:
tcp4udp4c 3 | K | ]7}|j d dk |j t j k (|j d V 8dS )r z 127.0.0.1r, N)laddrstatusr. CONN_LISTEN).0cs r' z"listening_ports..J sT
GAJ+ % %!(f6H*H*H
*H*H*H*H r9 )TCPUDPsetr. net_connections)protokinds r' listening_portsrJ = sg S#J || '-- r9 z(/proc/sys/net/ipv6/conf/all/disable_ipv6r, )maxsizec t dd } | dk rdS n2# t $ r%}t | Y d}~dS d}~ww xY w t t
5 }| dk r ddd dS ddd n # 1 swxY w Y n# t $ r Y nw xY wdS ) a
Checks whether IPv6 is enabled at the kernel level.
Returns False when either:
- the ipv6 module parameter ``disable`` is set to ``1`` (boot-time),
- the sysctl ``net.ipv6.conf.all.disable_ipv6`` is ``1`` (runtime), or
- the ipv6 kernel module is absent.
ipv6disable) module_name parameter0FN1T) r
ValueErrorloggerwarningr _SYSCTL_DISABLE_IPV6r stripr )rN er$ s r' is_ipv6_enabledrY T sP - )
c>>5 quuuuu
&
'
' 1vvxx~~ 3&& &
4sP
A AA B5 #,B) B5 B5 )B--B5 0B-1B5 5
CCr& c h t | ddd dd S )N bigTsignedF)int
from_bytesto_bytesr& s r' _signed_to_unsignedrc x s6 >>
AuT **E% r9 c | dk r|}n)t || | dz
z }||z
}| |z }d|z dz
}||k r/|dz }| |d }d}t ||z |S )a( Return prefix length from the bitwise netmask.
Copied from ipaddress private method
Args:
ip_int: An integer, the netmask in expanded bitwise format
Returns:
An integer, the prefix length.
Raises:
ValueError: If the input intermingles zeroes & ones
r r, r[ r\ z&Netmask pattern %r mixes zeroes & ones)min
bit_lengthra rS ) ip_intprefix_maxlengthtrailing_zeroes prefixlen leading_onesall_onesbyteslendetailsmsgs r' _prefix_from_maskrp ~ s {{* w&1* 5 A A C C
!?2I_,LY!#Hx #q(//(E226w ''' r9
ip_addressc | j dk r*t | j d d dd S t | S )N r[ r\ Tr] )versionr_ r` packed)rq s r' pack_ip_addressrv s@ Q ~~j / 3U4~HHH: r9 r
c f t | j }t | j }||| j fS N)rv network_addressnetmaskrt )r
netmasks r' pack_ip_networkr} s4 *4
5
5C :- . .D j( ((r9 r{ r| rt c |dk rJt | dz } t | dz }t |t }t | |f S t |t }t | |f S )Nrs @ )rc rp r r r r )r{ r| rt prefixs r' unpack_ip_networkr sq !||!#&&","4((B."444C=)))"444C=)))r9 c D t | S # t $ r Y d S w xY wrx )r
rS rb s r' is_netr s5 "~~ tts
rx )2loggingrer2 functoolsr ipaddressr r r r r r r
typingr r r
r r. defence360agent.utilsr defence360agent.utils.validater r getLogger__name__rT compileMr rD rE ALLINOUT IPNetworkr r( r8 rJ rV rY r_ rc rp rv r} r strr r9 r' r s
4 3 3 3 3 3 3 3 3 3 3 3
= = = = = = 8 8 8 8 8 8 8 8 8 $ $ "* 6==#
S#
C +{* + %
8I+>
HHU; +C%D E H H H H ( B 1 FC > k;&> ? )k;./)
3S=) ) ) )*3 *c *C *I * * * *s uT; ;< r9