JezK
Edit File: net.cpython-311.pyc
� �s ,�+� � � d dl Z d dlZd dlZd dlmZmZmZmZmZm Z m Z d dl m Z m Z mZ d dlZd dlmZ d dlmZmZmZmZ d dlmZmZ e j e� � Z ej dej � � Z d\ Z Z!eee f Z"d Z#dd e e fd �Z$d e eeef fd �Z%d� Z&dZ'd� Z(de)fd�Z*d� Z+de)de)de)d e"fd�Z,de-d edee f fd�Z.dS )� N)� IPV4LENGTH� IPV6LENGTH� IPv4Address� IPv4Network� IPv6Address� IPv6Network� ip_network)�Iterable�Optional�Union)�get_kernel_module_parameter)�IN�OUT�TCP�pack_ip_network)�IP� IPVersions ^nameserver ([\w.:]+))�udp�allz/etc/resolv.conf� ip_versionc # � K � t t d� � 5 }|� � � }d d d � � n # 1 swxY w Y n# t $ r g cY S w xY wt � |� � D ]K}|� d� � }t j |� � r | �t j |� � | k s| �|V � �Ld S )N�rb�ascii) �open�RESOLV_CONF_FILE�read�OSError�DNS_IP_TEMPLATE�findall�decoder � is_valid_ip�type_of)r �f�content�ips �D/opt/imunify360/venv/lib/python3.11/site-packages/im360/utils/net.py�local_dns_from_resolv_confr' % s � � � �� �"�D� )� )� �Q��f�f�h�h�G� � � � � � � � � � � ���� � � � ��� � � � �� � � ����� �%�%�g�.�.� � �� �Y�Y�w� � �� �>�"� � � ��&�2�:�b�>�>�Z�+G�+G��#������ � s. �A �:� A �>�A �>�A � A�A�returnc # �H K � t j � � � � � D ]y} | D ]t}|j t j k rt |j � � V � �.|j t j k r1t |j � dd�� � d � � V � �u�zdS )z8Return a list of IP address assigned to local interfaces�%� )�maxsplitr N) �psutil� net_if_addrs�values�family�socket�AF_INETr �address�AF_INET6r �split)�ipsr% s r& �local_ip_addressesr7 5 s� � � � ��"�$�$�+�+�-�-� H� H��� H� H�B��y�F�N�*�*�!�"�*�-�-�-�-�-�-���f�o�-�-� "�"�*�"2�"2�3��"2�"C�"C�A�"F�G�G�G�G�G�� H�H� H� c � � | t t fv sJ �| t k rd}nd}t d� t j |� � D � � � � S )zZ Return listening ports for ipv4 services :param proto: tcp/udp :return: �tcp4�udp4c 3 �| K � | ]7}|j d dk �|j t j k �(|j d V � �8dS )r z 127.0.0.1r+ N)�laddr�statusr- � CONN_LISTEN)�.0�cs r& � <genexpr>z"listening_ports.<locals>.<genexpr>N sT � � � � � � � �G�A�J�+� %� %�!�(�f�6H�*H�*H� ��� �*H�*H�*H�*H�� r8 )r �UDP�setr- �net_connections)�proto�kinds r& �listening_portsrH A sg � � �S�#�J� � � � � ��|�|������ � � ��'��-�-�� � � � � r8 z(/proc/sys/net/ipv6/conf/all/disable_ipv6c � � t dd�� � } | dk rdS n2# t $ r%}t � |� � Y d}~dS d}~ww xY w t t � � 5 }|� � � � � � dk r ddd� � dS ddd� � n # 1 swxY w Y n# t $ r Y nw xY wdS ) a` Checks whether IPv6 is enabled at the kernel level. Returns False when either: - the ipv6 module parameter ``disable`` is set to ``1`` (boot-time), - the sysctl ``net.ipv6.conf.all.disable_ipv6`` is ``1`` (runtime), or - the ipv6 kernel module is absent. No @lru_cache: admins toggle the sysctl at runtime, and a stale cached result would cause generated firewall rules to diverge from kernel state until the agent process restarts. The module-param read shells out via get_kernel_module_parameter (~tens of ms), but in practice this function is called rarely. �ipv6�disable)� module_name� parameter�0FN�1T) r � ValueError�logger�warningr �_SYSCTL_DISABLE_IPV6r �stripr )rK �er# s r& �is_ipv6_enabledrV X sP � � �-� �)� � � �� �c�>�>��5� �� � � � ����q�����u�u�u�u�u��������� � �&� '� '� �1��v�v�x�x�~�~� � �3�&�&� � � � � � � � � �&� � � � � � � � � � � ���� � � � ��� � � � � �� ���� �4sP � � A �A�A �B5 �#,B)� B5 � B5 �)B-�-B5 �0B-�1B5 �5 C�Cr% c �h � t � | � ddd�� � dd�� � S )N� �bigT)�signedF)�int� from_bytes�to_bytes�r% s r& �_signed_to_unsignedr_ � s6 � � �>�>� � � �A�u�T� �*�*�E�%� � � � r8 c � � | dk r|}n)t || | dz z � � � � � }||z }| |z }d|z dz }||k r/|dz }| � |d� � }d}t ||z � � �|S )a( Return prefix length from the bitwise netmask. Copied from ipaddress private method Args: ip_int: An integer, the netmask in expanded bitwise format Returns: An integer, the prefix length. Raises: ValueError: If the input intermingles zeroes & ones r r+ rX rY z&Netmask pattern %r mixes zeroes & ones)�min� bit_lengthr] rP ) �ip_int�prefix_maxlength�trailing_zeroes� prefixlen� leading_ones�all_ones�byteslen�details�msgs r& �_prefix_from_maskrl � s� � � ��{�{�*��� � ��w�&�1�*� 5� A� A� C� C� � �� !�?�2�I��_�,�L��Y��!�#�H��x� � �#�q�(���/�/�(�E�2�2��6����w� �'�'�'� �r8 �net�mask�versionc �� � |dk rJt | � � dz } t |� � dz }t |t � � }t | |f� � S t |t � � }t | |f� � S )N� �@ )r_ rl r r r r )rm rn ro �prefixs r& �unpack_ip_networkrt � sq � ��!�|�|�!�#�&�&�"�,��"�4�(�(�B�.��"�4��4�4���C��=�)�)�)�"�4��4�4���C��=�)�)�)r8 c �D � t | � � S # t $ r Y d S w xY w�N)r rP r^ s r& �is_netrw � s5 � ���"�~�~� �� � � � ��t�t����s � � � rv )/�logging�rer1 � ipaddressr r r r r r r �typingr r r r- �defence360agent.utilsr �defence360agent.utils.netr r r r � defence360agent.utils.validater r � getLogger�__name__rQ �compile�Mr rC �ALL� IPNetworkr r' r7 rH rS rV r[ r_ rl rt �strrw � r8 r& �<module>r� s_ �� ���� � � � � � � � �� � � � � � � � � � � � � � � � � � -� ,� ,� ,� ,� ,� ,� ,� ,� ,� � � � � =� =� =� =� =� =�� � � � � � � � � � � � 9� 8� 8� 8� 8� 8� 8� 8� �� �8� $� $�� �"�*� 6���=�=�� ���S� �+�{�*� +� �%� � � �8�I�+>� � � � � H�H�U�;� �+C�%D� E� H� H� H� H�� � �( B� �&� &� &�R�C� � � � � � � �>*�3� *�c� *�C� *�I� *� *� *� *��s� �u�T�;� � ;�<� � � � � � r8