blob: 1c607d33544d869e1474bda1300ca6767e8cdf86 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
|
#!/usr/bin/env python
# -*- coding: utf-8 -*-
# @Time : 2024/1/17 14:20
# @author : yinjinagyi
# @File : geckovpn_serverip.py
# @Function:
import pandas as pd
from vpn_detector import VpnDetector
class GeckovpnServerip(VpnDetector):
"""
This class is used to detect geckovpn server ip
"""
def __init__(self, start_time, end_time):
super().__init__(start_time, end_time)
self.plugin_config = self.load_config()['geckovpn_serverip']
self.plugin_id = self.plugin_config['plugin_id']
self.plugin_name = self.plugin_config['plugin_name']
self.object_type = self.plugin_config['object_type']
self.vpn_service_name = self.plugin_config['vpn_service_name']
self.confidence = self.plugin_config['confidence']
self.output_file_name = self.plugin_name + '_' + str(self.start_time).replace(' ', '_').replace(':', '')[:13] + '.csv'
self.start_time = start_time
self.end_time = end_time
self.sql = self.plugin_config['sql']
def find_server(self):
"""
Get geckovpn server ip from clickhouse database
:return: geckovpn server ip list
"""
self.logger.info('Start to query geckovpn server ip from session records')
# construct query sql
TIME_FILTER_PATTERN = self.config['common']['time_filter_pattern'].replace('recv_time_columnname', self.config['common']['recv_time_columnname'])
time_filter = TIME_FILTER_PATTERN.replace("{$start_time}", str(self.start_time)).replace("{$end_time}", str(
self.end_time)).replace("{$time_zone}", self.time_zone)
self.sql = self.sql.replace("{$db_name}", self.dbname).replace("{$table_name}", self.table_name)
self.sql = self.sql.replace("{$time_filter}", time_filter)
self.logger.info("Sql for {}: {}".format(self.plugin_name, self.sql))
# query data from clickhouse database
try:
geckovpn_serverip_df = pd.DataFrame(self.client.execute(self.sql))
finally:
self.client.disconnect()
if geckovpn_serverip_df.empty:
self.logger.info('No geckovpn server ip found from session records')
return []
geckovpn_serverip_list = geckovpn_serverip_df[0].drop_duplicates().tolist()
self.logger.info('Query geckovpn server ip from session records successfully. {} items found'
.format(len(geckovpn_serverip_list)))
return geckovpn_serverip_list
|
