|
Server : Apache System : Linux 182.49.167.72.host.secureserver.net 4.18.0-553.92.1.el8_10.x86_64 #1 SMP Wed Jan 14 06:31:58 EST 2026 x86_64 User : kikai ( 1014) PHP Version : 8.3.30 Disable Function : NONE Directory : /lib/fm-agent/library/__pycache__/ |
Upload File : |
3
,`riC � $ @ s0 d dl m Z d dlZd dlZd dlZd dlZd dlZd dlZy d dlZW n d dlj ZY nX y d dl
Z
W n dZ
Y nX y d dl Z W n dZ Y nX y d dl Z W n: e
k
r� y d dlZ W n e
k
r� dZ Y nX Y nX dd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Zdd� ZG dd� de�ZdS )� )�datetimeNc c s@ t jd dkrt}nt}x"|d�D ]}| d@ V | dL } q"W d S )Nr � � � � )�sys� version_infoZxrange�range)�n�rng�i� r
�&/usr/lib/fm-agent/library/inspector.py�mac_address_octets% s
r c C s dd� t | �D �}djt|��S )zw
Expresses a decimal integer in standard MAC address format
ex:
7267271067680 -> '06:9c:0b:1c:48:20'
c S s g | ] }d | �qS )z%02xr
)�.0�ar
r
r �
<listcomp>7 s z&int_to_mac_address.<locals>.<listcomp>�:)r �join�reversed)r
�valuesr
r
r �int_to_mac_address1 s r c C s, t j� } dtjkr(| j� jd�r(t j� } | S )N�darwinz.arpa)�socket�getfqdnr �platform�lower�endswith� gethostname)�hostnamer
r
r �get_fqdn; s
r c
C sH dt jkrd S y*tjddd�} tjdj| ��\}}|j� S d S d S )Nr ZscutilT)�excz{} --get ComputerName)r r �
agent_util�which�execute_command�format�strip)Zsc_util�_�outputr
r
r �get_server_nameH s
r) c C s� t jd�} tjj� }dtjj� i}d|kr�y\tjd�}tjdj|��\}}d|krt|j � j
d�d j � j d �|d
< n| j d j|�� W n6 t k
r� } z| j
d jt|��� W Y d d }~X nX |S )
N� Inspectorr r Zioregz6{} -d2 -c IOPlatformExpertDevice | grep IOPlatformUUIDr �=� �"�uuidzioreg error: {}zGather UUID failure: {})�logging� getLoggerr r r r" r# r$ r% r& �split�error� Exception�info�str)�logZ my_platform�rvZ ioreg_bin�rcr( �er
r
r �get_platform_uuidsX s
"r: c c sR t rNxHt j� j� D ]8\} }x.|D ]&}|jt jkr2q |jdkr>q |jV q W qW d S )Nz00:00:00:00:00:00)�psutilZ net_if_addrs�items�familyZAF_LINK�address)Ziface�addrs�addrr
r
r �mac_address_iterq s
rA c C s� dg i} y dd l }t|j� �| d< W n6 tk
rZ } ztj|� tjd� W Y d d }~X nX y*x$tt� �D ]\}}| d j |� qjW W nR t
k
r� tjd� Y n6 tk
r� } ztj|� tjd� W Y d d }~X nX | S )NZ
macaddressr Z uuid_getnodezCUnable to import uuid module. Skipping MAC address fact collection.z=Unable to import psutil, skipping MAC address fact collectionz+Unknown error during MAC address collection) r. r Zgetnoder3 r/ �warningr4 � enumeraterA �append� ImportError)�factsr. �errr Zmac_addrr
r
r �get_mac_addresses| s"
rH c @ s� e Zd ZddgZdZdd� Zd!dd�Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z dd� Z dd� Z
dd� Zdd� Zd"dd �Zd d � Zd d � ZdS )#r* z/etc/apt/sources.listz /etc/yum.repos.d/panopta.repoz http://packages.panopta.com/c C s
|| _ d S )N)�agent)�selfrI r
r
r �__init__� s zInspector.__init__Nc C s� i }t jd�}y�|j| j� � |j| j� � |j| j� � |jt� � |j| j� � |j| j� � |j| j � � |j| j
� � |j| j � � |j| j |�� |j| j
� � tjdkr�|j| j� � W n2 tk
r� } z|jdj|�� W Y d d }~X nX |S )Nr* r r r zget_all facts: {})r r r )r/ r0 �update�get_agent_facts�get_python_facts�get_process_factsrH �get_hardware_facts�get_time_facts� get_hostname�get_platform_facts�get_machine_facts�get_wifi_facts�get_dem_network_factsr r �get_cloud_factsr3 r4 r% )rJ � wifi_inforF r6 r9 r
r
r �
get_all_facts� s&
"zInspector.get_all_factsc C sL i }dt jkrHy,tjd�\}}|jd�d j� }||d< W n Y nX |S )Nr z sw_vers | grep ProductVersionr r, Z MacOSVersion)r r r" r$ r1 r& )rJ rF r' r( �pvr
r
r rS � s
z Inspector.get_platform_factsc C s i }t � |d< |S )Nr )r )rJ rF r
r
r rR � s
zInspector.get_hostnamec
C sd i }y6t jd�\}}dj|j� jd�dd � �}||d< W n$ tj| jj�}|j d� Y nX |S )Nzls -l /etc/localtime�/r �timezonezUnable to get Time Zone���)
r" r$ r r& r1 r/ r0 � __class__�__name__� exception)rJ rF �retcoder( r\ r6 r
r
r rQ � s zInspector.get_time_factsc
C sR di i}dt jj� kr�yjtjd�\}}xV|j� jd�D ]D}y0|j� jdd�\}}|dkrh|j� |d |< W q6 w6Y q6X q6W W n$ tj| j j
�}|j d � Y nX y$t j
d
�t j
d � }||d d < W n$ tj| j j
�}|j d
� Y nX �nZy�tjd�\}}xr|j� jd�D ]`}y|j� jdd�\}}W n �wY nX |j� j� jdd�jdd�}|j� }||d |< �qW W n$ tj| j j
�}|j d � Y nX y�tjd�\}}xt|j� jd�D ]b}|j� j� } | d j� jd��r�t| d �|d d < | d j� jd��r�t| d �|d d< �q�W W n$ tj| j j
�}|j d
� Y nX |S )z=
Gather CPU and memory specs for the machine
�hardwarer z sysctl -a | grep machdep.cpu�
r r, �machdep.cpu.brand_string�machdep.cpu.core_countz Unable to get CPU hardware facts�
SC_PHYS_PAGES� SC_PAGE_SIZEZ mem_totalz#Unable to get memory hardware factsZlscpuz(s)� � r' zfree -mr ZmemZswapZ
swap_total)rd re )r r r r" r$ r& r1 r/ r0 r^ r_ r` �os�sysconf�replace�
startswith�int)
rJ rF ra r( �line�key�valuer6 Z total_memZfieldsr
r
r rP � s`
z Inspector.get_hardware_factsc
C s� i }t jjt jjt��|d< t jj| jj�|d< d|d< xX| jD ]N}t jj|�r@y0t |�}| j
|j � k|d< |j � |d r~P W q@ Y q@X q@W d}dt
jks�t jjd�r�d}||d < |S )
NZinstalled_timeZ
used_manifestFZinstalled_from_repoZpanoptar z
/etc/fm-agentZ fortimonitorZ agent_brand)rj �path�getctime�abspath�__file__�existsrI �
manifest_file�SOURCE_LIST_PATHS�open� PANOPTA_REPO�read�closer r )rJ rF Zsource_list_pathZ source_list�brandr
r
r rM s&
zInspector.get_agent_factsc C s� di i}t j � |d d< t j� |d d< t j� |d d< t j� |d d< yt j� |d d< W n. tk
r� tr�djtj� �|d d< Y nX t j |d d< |S ) N�pythonr � processor�version�uname�distri Z sys_platform)
r r �python_versionr� r� �AttributeError�distror �linux_distributionr )rJ rF r
r
r rN , s zInspector.get_python_factsc C sr i }y�d}t jddd�}dtd�i}|jdd|d � |j� }|jd
kr\|j� j� }d |i}nd }|rv|jd d
|d � n |jd d
� |j� }|jd
kr�tj |j� �}d|d< |d |d< ||d< |S W n Y nX �yddi}t jddd�}|jd d|d � |j� }|jd
k�r�tj |j� �}d|d< |d |d< d|k�rB|d= x6|j
di �j � D ]"\}}|d(k�rT|d j |� �qTW ||d< y*| j
j� } | j
d d �d!k}
|
|d d < W n. tk
�r� tj| jj�} | jd"� Y nX |S W n Y nX ypd#d!i}t jddd�}|jd d$|d � |j� }|jd
k�r^tj |j� �}d%|d< |d& d' |d< ||d< |S W n Y nX i S ))Nrh z169.254.169.254� )�timeoutz$X-aws-ec2-metadata-token-ttl-secondsi`T �PUTz/latest/api/token)�headers�� zX-aws-ec2-metadata-token�GETz*/latest/dynamic/instance-identity/documentZawsZcloud_providerZ
instanceIdZcloud_instance_idZcloud_metadatazMetadata-FlavorZGooglezmetadata.google.internalz,/computeMetadata/v1/instance/?recursive=trueZgcp�idZserviceAccounts�
attributes�
/attribute�/sshkeys�
/vmdnssetting�/enable-osloginrI Zenable_gcp_attributes�truezBUnable to parse manifest file to determine gcp attributes actions.ZMetadataz)/metadata/instance?api-version=2017-04-02ZazureZcomputeZvmId)r� r� r� r� )�httplib�HTTPConnectionr5 �request� getresponse�statusr{ �decode�json�loads�getr< �poprI � get_manifestr3 r/ r0 r^ r_ r` ) rJ rF �token�hr� �r�datarp rq �manifestZenabled_gcp_attributesr6 r
r
r rW > s�
zInspector.get_cloud_factsc C sF i }t d kr|S t� }x t j� D ]}|j|j� � q W t|�|d< |S )N� processes)r; �setZ process_iter�add�name�list)rJ rF r� �procr
r
r rO � s zInspector.get_process_factsc C sv i }dt jkr|S d|i}yBd}| j|�}|rZ|| d }|jdd�|d< |jdd�|d < W n |j� Y nX |S )
Nr Zmachine_descriptionZSPHardwareDataTyper Z
serial_numberrh �serialZ
machine_modelZmodel)r r �query_system_profilerr� �clear)rJ �mdrF �tkr� r4 r
r
r rT � s
zInspector.get_machine_factsc C s� i }d|i}yT|j dd�|d< |j dd�|d< |j dd�|d< |j dd�|d < |j d
d�|d < W n |j� Y nX tj� j� |d < |S )
NZ DEMWifiInfoZSSIDrh ZssidZBSSIDZbssidZchannelz link authZsecurity_algorithmZNSSZnss� timestamp)r� r� r �utcnowr� )rJ rX r� rF r
r
r rU � s zInspector.get_wifi_factsc C s� dt jkri S g }d|i}y�d}| j|�}|r�|j|g �}x�|D ]x}|jdi �jdd �}|s^q@|jd�|jd�g |gd�}|j|� |jd d �} | r@x"| jd
g �D ]}
|d j|
� q�W q@W W n tjd � |j� Y nX |S )
Nr Z!DEMNetworkInterfaceConfigurationsZSPNetworkDataTypeZIPv4ZRouter�_namerb )r� � description� dns_serversZgateways�DNSZServerAddressesr� rV )r r r� r� rD r/ r` r� ) rJ r� rF r� r4 Z
network_infosZniZrouter�itemZdns_info�sar
r
r rV � s4
z Inspector.get_dem_network_factsc
C sZ y@t jd�}ddlm}m} ||d|g|d�}tj|jj� �}|S t j
d� d S d S )NZsystem_profilerr )�Popen�PIPEz-json)�stdoutr� ) r" r# �
subprocessr� r� r� r� r� r{ r/ r` )rJ Z info_type�spr� r� �dr� r
r
r r� � s
z Inspector.query_system_profiler)N)N)r_ �
__module__� __qualname__rx rz rK rY rS rR rQ rP rM rN rW rO rT rU rV r� r
r
r
r r* � s
<!b
r* )r r" r rj r r/ r r� � http.client�clientr; r� r� rE �
simplejsonr r r r) r: rA rH �objectr* r
r
r
r �<module> sB
XYZEAZ - Cyber Alpha Wolf © All Rights Reserved