OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	03/17/2025 09:32:20 AM	rwxr-xr-x
📄 __init__.py	6.26 KB	08/15/2022 08:07:50 PM	rw-r--r--
📁 __pycache__	-	03/17/2025 09:32:20 AM	rwxr-xr-x
📄 hostname_parser.py	3.42 KB	08/15/2022 08:07:50 PM	rw-r--r--
📄 ip_parser.py	1.59 KB	08/15/2022 08:07:50 PM	rw-r--r--
📄 keyword_parser.py	1.62 KB	08/15/2022 08:07:50 PM	rw-r--r--
📄 mac_parser.py	2.57 KB	11/21/2024 02:52:56 PM	rw-r--r--
📄 username_parser.py	2.08 KB	08/15/2022 08:07:50 PM	rw-r--r--

Editing: ip_parser.py

# This file is part of the sos project: https://github.com/sosreport/sos
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# version 2 of the GNU General Public License.
#
# See the LICENSE file in the source distribution for further information.

from sos.cleaner.parsers import SoSCleanerParser
from sos.cleaner.mappings.ip_map import SoSIPMap

class SoSIPParser(SoSCleanerParser):
    """Handles parsing for IP addresses"""

name = 'IP Parser'
    regex_patterns = [
        # IPv4 with or without CIDR
        r'((?<!(-|\.|\d))([0-9]{1,3}\.){3}([0-9]){1,3}(\/([0-9]{1,2}))?)'
    ]
    skip_line_patterns = [
        # don't match package versions recorded in journals
        r'.*dnf\[.*\]:'
    ]

skip_files = [
        # skip these as version numbers will frequently look like IP addresses
        # when using regex matching
        'installed-debs',
        'installed-rpms',
        'sos_commands/dpkg',
        'sos_commands/python/pip_list',
        'sos_commands/rpm',
        'sos_commands/yum/.*list.*',
        'sos_commands/snappy/snap_list_--all',
        'sos_commands/vulkan/vulkaninfo',
        'var/log/.*dnf.*',
        'var/log/.*packag.*',  # get 'packages' and 'packaging' logs
        '.*(version|release)(\\.txt)?$',  # obvious version files
    ]

map_file_key = 'ip_map'
    compile_regexes = False

def __init__(self, config):
        self.mapping = SoSIPMap()
        super(SoSIPParser, self).__init__(config)