zwitschi
9f8ab0f61c
- Implemented a new utility for querying WHOIS information and consolidating IP addresses by subnet. - Added caching mechanism for WHOIS responses to improve performance. - Introduced functions for loading and saving the WHOIS cache, querying subnets, and consolidating IPs based on a threshold. feat: create Flask web UI for intrusion detection system - Developed a Flask web application to manage the intrusion detection system. - Implemented routes for scanning, reports, blocklist management, and firewall configuration. - Added helper functions for reading files and handling requests. feat: define routes for web UI - Registered routes for various web pages and API endpoints in the Flask application. - Implemented functionality for scanning, reporting, blocklist management, and firewall state retrieval. feat: implement background scan runner for web UI - Created a background scan runner to handle scan jobs in a separate thread. - Managed an in-memory job store for tracking scan jobs and their statuses. - Added persistence for scan jobs to maintain state across application restarts. chore: update start script for Flask application - Enhanced the PowerShell start script to check for the existence of the virtual environment. - Added comments and structured the script for better readability and usability.
36 lines
1.4 KiB
Python
36 lines
1.4 KiB
Python
#!/usr/bin/env python3
|
|
"""Shared core for the local-dev intrusion-detection scripts.
|
|
|
|
`copyparty.py` and `npm.py` are thin adapters. They only provide:
|
|
|
|
* a log-file matcher (glob-ish pattern / suffixes)
|
|
* a line parser producing `Request` objects
|
|
* a flagging rule (which IPs look hostile)
|
|
* column definitions for their CSV output
|
|
|
|
Everything else -- IP aggregation, whitelisting, console + file reports,
|
|
MikroTik RouterOS export -- lives in this module.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
|
|
from .constants import DEFAULT_TOP
|
|
|
|
|
|
def arg_parser(description: str, default_log_path: str,
|
|
default_report_dir: str) -> argparse.ArgumentParser:
|
|
p = argparse.ArgumentParser(description=description)
|
|
p.add_argument("--log-path", default=default_log_path,
|
|
help=f"log directory (default: {default_log_path})")
|
|
p.add_argument("--report-dir", default=default_report_dir,
|
|
help=f"report output dir (default: {default_report_dir})")
|
|
p.add_argument("--top", type=int, default=DEFAULT_TOP,
|
|
help=f"rows in the top-IP table (default: {DEFAULT_TOP})")
|
|
p.add_argument("--quiet", action="store_true",
|
|
help="write files, print nothing but the paths")
|
|
p.add_argument("--no-rsc", action="store_true",
|
|
help="skip MikroTik .rsc generation")
|
|
return p
|