python/jc
1
0
Fork 0
mirror of https://github.com/kellyjonbrazil/jc.git synced 2025-07-13 01:20:24 +02:00
Code Issues Releases Activity

fix field names per ss documentation

Browse Source
This commit is contained in:
Kelly Brazil
2019-11-14 09:38:19 -08:00
parent a4cdd3378e
commit 2663ef31fb
1 changed files with 169 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

201
jc/parsers/ss.py
View File

@ -12,40 +12,92 @@ Examples:
"state": "UNCONN", "state": "UNCONN",
"recv_q": 0, "recv_q": 0,
"send_q": 0, "send_q": 0,
"local_address": "rtnl", "peer_address": "*",
"local_port": "kernel", "channel": "rtnl:kernel"
"peer_address": "*"
}, },
{ {
"netid": "nl", "netid": "nl",
"state": "UNCONN", "state": "UNCONN",
"recv_q": 0, "recv_q": 0,
"send_q": 0, "send_q": 0,
"local_address": "rtnl", "peer_address": "*",
"local_port": "systemd-resolve/893", "pid": 893,
"peer_address": "*" "channel": "rtnl:systemd-resolve"
},
{
"netid": "nl",
"state": "UNCONN",
"recv_q": 0,
"send_q": 0,
"local_address": "rtnl",
"local_port": "systemd/1",
"peer_address": "*"
}, },
... ...
{
"netid": "p_raw",
"state": "UNCONN",
"recv_q": 0,
"send_q": 0,
"peer_address": "*",
"link_layer": "LLDP",
"interface": "ens33"
},
{
"netid": "u_dgr",
"state": "UNCONN",
"recv_q": 0,
"send_q": 0,
"local_port": "93066",
"peer_address": "*",
"peer_port": "0",
"path": "/run/user/1000/systemd/notify"
},
{
"netid": "u_seq",
"state": "LISTEN",
"recv_q": 0,
"send_q": 128,
"local_port": "20699",
"peer_address": "*",
"peer_port": "0",
"path": "/run/udev/control"
},
...
{
"netid": "icmp6",
"state": "UNCONN",
"recv_q": 0,
"send_q": 0,
"local_address": "*",
"local_port": "ipv6-icmp",
"peer_address": "*",
"peer_port": "*",
"interface": "ens33"
},
{
"netid": "udp",
"state": "UNCONN",
"recv_q": 0,
"send_q": 0,
"local_address": "127.0.0.53",
"local_port": "domain",
"peer_address": "0.0.0.0",
"peer_port": "*",
"interface": "lo"
},
{ {
"netid": "tcp", "netid": "tcp",
"state": "LISTEN", "state": "LISTEN",
"recv_q": 0, "recv_q": 0,
"send_q": 128, "send_q": 128,
"local_address": "127.0.0.1", "local_address": "127.0.0.53",
"local_port": "35485", "local_port": "domain",
"peer_address": "0.0.0.0", "peer_address": "0.0.0.0",
"peer_port": "*", "peer_port": "*",
"interface": "lo" "interface": "lo"
}, },
{
"netid": "tcp",
"state": "LISTEN",
"recv_q": 0,
"send_q": 128,
"local_address": "0.0.0.0",
"local_port": "ssh",
"peer_address": "0.0.0.0",
"peer_port": "*"
},
{ {
"netid": "tcp", "netid": "tcp",
"state": "LISTEN", "state": "LISTEN",
@ -77,40 +129,92 @@ Examples:
"state": "UNCONN", "state": "UNCONN",
"recv_q": "0", "recv_q": "0",
"send_q": "0", "send_q": "0",
"local_address": "rtnl", "peer_address": "*",
"local_port": "kernel", "channel": "rtnl:kernel"
"peer_address": "*"
}, },
{ {
"netid": "nl", "netid": "nl",
"state": "UNCONN", "state": "UNCONN",
"recv_q": "0", "recv_q": "0",
"send_q": "0", "send_q": "0",
"local_address": "rtnl", "peer_address": "*",
"local_port": "systemd-resolve/893", "pid": "893",
"peer_address": "*" "channel": "rtnl:systemd-resolve"
},
{
"netid": "nl",
"state": "UNCONN",
"recv_q": "0",
"send_q": "0",
"local_address": "rtnl",
"local_port": "systemd/1",
"peer_address": "*"
}, },
... ...
{
"netid": "p_raw",
"state": "UNCONN",
"recv_q": "0",
"send_q": "0",
"peer_address": "*",
"link_layer": "LLDP",
"interface": "ens33"
},
{
"netid": "u_dgr",
"state": "UNCONN",
"recv_q": "0",
"send_q": "0",
"local_port": "93066",
"peer_address": "*",
"peer_port": "0",
"path": "/run/user/1000/systemd/notify"
},
{
"netid": "u_seq",
"state": "LISTEN",
"recv_q": "0",
"send_q": "128",
"local_port": "20699",
"peer_address": "*",
"peer_port": "0",
"path": "/run/udev/control"
},
...
{
"netid": "icmp6",
"state": "UNCONN",
"recv_q": "0",
"send_q": "0",
"local_address": "*",
"local_port": "ipv6-icmp",
"peer_address": "*",
"peer_port": "*",
"interface": "ens33"
},
{
"netid": "udp",
"state": "UNCONN",
"recv_q": "0",
"send_q": "0",
"local_address": "127.0.0.53",
"local_port": "domain",
"peer_address": "0.0.0.0",
"peer_port": "*",
"interface": "lo"
},
{ {
"netid": "tcp", "netid": "tcp",
"state": "LISTEN", "state": "LISTEN",
"recv_q": "0", "recv_q": "0",
"send_q": "128", "send_q": "128",
"local_address": "127.0.0.1", "local_address": "127.0.0.53",
"local_port": "35485", "local_port": "domain",
"peer_address": "0.0.0.0", "peer_address": "0.0.0.0",
"peer_port": "*", "peer_port": "*",
"interface": "lo" "interface": "lo"
}, },
{
"netid": "tcp",
"state": "LISTEN",
"recv_q": "0",
"send_q": "128",
"local_address": "0.0.0.0",
"local_port": "ssh",
"peer_address": "0.0.0.0",
"peer_port": "*"
},
{ {
"netid": "tcp", "netid": "tcp",
"state": "LISTEN", "state": "LISTEN",
@ -161,12 +265,18 @@ def process(proc_data):
"peer_address": string, "peer_address": string,
"peer_port": string, "peer_port": string,
"peer_port_num": integer, "peer_port_num": integer,
"interface": string "interface": string,
"link_layer" string,
"channel": string,
"path": string,
"pid": integer
} }
] ]
Information from https://www.cyberciti.biz/files/ss.html used to define field names
""" """
for entry in proc_data: for entry in proc_data:
int_list = ['recv_q', 'send_q'] int_list = ['recv_q', 'send_q', 'pid']
for key in int_list: for key in int_list:
if key in entry: if key in entry:
try: try:
@ -252,11 +362,30 @@ def parse(data, raw=False, quiet=False):
output_line = dict(zip(header_list, entry_list)) output_line = dict(zip(header_list, entry_list))
# some post processing to pull out fields: interface, link_layer, path, pid, channel
# Information from https://www.cyberciti.biz/files/ss.html used to define field names
if '%' in output_line['local_address']: if '%' in output_line['local_address']:
i_field = output_line['local_address'].rsplit('%', maxsplit=1) i_field = output_line['local_address'].rsplit('%', maxsplit=1)
output_line['local_address'] = i_field[0] output_line['local_address'] = i_field[0]
output_line['interface'] = i_field[1] output_line['interface'] = i_field[1]
if output_line['netid'] == 'nl':
channel = output_line.pop('local_address')
channel = channel + ':' + output_line.pop('local_port')
if '/' in channel:
pid = channel.rsplit('/', maxsplit=1)[1]
channel = channel.rsplit('/', maxsplit=1)[0]
output_line['pid'] = pid
output_line['channel'] = channel
if output_line['netid'] == 'p_raw':
output_line['link_layer'] = output_line.pop('local_address')
output_line['interface'] = output_line.pop('local_port')
if output_line['netid'] not in contains_colon:
output_line['path'] = output_line.pop('local_address')
raw_output.append(output_line) raw_output.append(output_line)
if raw: if raw: