python/jc
1
0
Fork 0
mirror of https://github.com/kellyjonbrazil/jc.git synced 2025-06-23 00:29:59 +02:00
Code Issues Releases Activity

fix udp state and udp46 entries

Browse Source
This commit is contained in:
Kelly Brazil
2020-05-20 12:02:32 -07:00
parent ce9b55059a
commit de52d84e82
1 changed files with 8 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
jc/parsers/netstat_osx.py
View File

@ -15,15 +15,11 @@ def normalize_headers(header):
def parse_item(headers, entry, kind): def parse_item(headers, entry, kind):
entry = entry.split(maxsplit=len(headers) - 1) entry = entry.split(maxsplit=len(headers) - 1)
# TODO: Fix this area
# fixup udp records with no state field entry # fixup udp records with no state field entry
if entry[0].startswith('udp'): if kind == 'network' and entry[0].startswith('udp'):
entry.insert(-1, None) entry.insert(5, None)
# if len(entry) == len(headers) - 1: if kind == 'network' and 'socket' in headers and 'udp' in str(entry):
# if len(headers) == 6: entry.insert(7, None)
# entry.insert(5, None)
# else:
# entry.insert(7, None)
output_line = dict(zip(headers, entry)) output_line = dict(zip(headers, entry))
output_line['kind'] = kind output_line['kind'] = kind
@ -50,7 +46,10 @@ def parse_post(raw_data):
if 'proto' in entry and 'kind' in entry: if 'proto' in entry and 'kind' in entry:
if entry['kind'] == 'network': if entry['kind'] == 'network':
entry['transport_protocol'] = entry['proto'][:-1] if entry['proto'] == 'udp46':
entry['transport_protocol'] = entry['proto'][:-2]
else:
entry['transport_protocol'] = entry['proto'][:-1]
if '6' in entry['proto']: if '6' in entry['proto']:
entry['network_protocol'] = 'ipv6' entry['network_protocol'] = 'ipv6'