log

$\_$

analyzer.py

import re

from datetime import datetime

import csv

class LogEntry:

$$ def

$\_$

$\_$

init

$\_$

$\_$

$($

self

$,$

$$event

$\_$

time, internal

$\_$

ip

$,$

$$port

$\_$

number, protocol, action, rule

$\_$

id

$,$

$$source

$\_$

ip

$,$

$$country$,$ country

$\_$

name

$)$

:

$$ self.event

$\_$

time

$=$

$$datetime$.$strptime

$($

event

$\_$

time,

$\text{'}$

$\%$

Y

$-$

$\%$

m

$-$

$\%$

d

$\%$

H:

$\%$

M:

$\%$

S

$\%$

Z

$\text{'}$

$)$

$$ self.internal

$\_$

ip

$=$

$$internal

$\_$

ip

$$ self.port

$\_$

number

$=$

$$port

$\_$

number

$$ self.protocol

$=$

$$protocol

$$ self.action

$=$

$$action

$$ self.rule

$\_$

id

$=$

$$rule

$\_$

id

$$ self.source

$\_$

ip

$=$

$$source

$\_$

ip

$$ self.country

$=$

$$country

$$ self.country

$\_$

name

$=$

$$country

$\_$

name

$$

$$ @property

$$ def ipv

$4$

$\_$

class

$($

self

$)$

:

$$ first

$\_$

octet

$=$

$$int

$($

self

$.$

source

$\_$

ip

$.$

split

$($

$\text{'}$

$.$

$\text{'}$

$)$

$[$

$0$

$]$

$)$

$$ if

$1$

$<$

$=$

$$first

$\_$

octet

$<$

$=$

$1$

$2$

$6$

:

$$ return

$\text{'}$

A

$\text{'}$

$$ elif

$1$

$2$

$8$

$<$

$=$

$$first

$\_$

octet

$<$

$=$

$1$

$9$

$1$

:

$$ return

$\text{'}$

B

$\text{'}$

$$ elif

$1$

$9$

$2$

$<$

$=$

$$first

$\_$

octet

$<$

$=$

$2$

$2$

$3$

:

$$ return

$\text{'}$

C

$\text{'}$

$$ elif

$2$

$2$

$4$

$<$

$=$

$$first

$\_$

octet

$<$

$=$

$2$

$3$

$9$

:

$$ return

$\text{'}$

D

$\text{'}$

$$ else:

$$ return 'Unknown'

test

$\_$

log

$\_$

analyzer.py

import unittest

from log

$\_$

analyzer import LogEntry

class TestLogEntry

$($

unittest

$.$

TestCase

$)$

:

$$ def test

$\_$

event

$\_$

time

$\_$

conversion

$($

self

$)$

:

$$ log

$\_$

entry

$=$

$$LogEntry

$($

event

$\_$

time

$=$

$"$

$2$

$0$

$2$

$2$

$-$

$0$

$1$

$-$

$0$

$1$

$0$

$8$

:

$2$

$9$

:

$2$

$5$

$$UTC$",$ internal

$\_$

ip

$=$

$"$

$1$

$9$

$2$

$.$

$1$

$6$

$8$

$.$

$1$

$.$

$1$

$"$

$,$

$$port

$\_$

number

$=$

$"$

$2$

$2$

$"$

$,$

$$protocol

$=$

$"$

TCP

$"$

$,$

$$

$$ action

$=$

$"$ALLOW$",$ rule

$\_$

id

$=$

$"$

$1$

$0$

$0$

$1$

$"$

$,$

$$source

$\_$

ip

$=$

$"$

$1$

$9$

$2$

$.$

$1$

$6$

$8$

$.$

$1$

$.$

$1$

$0$

$0$

$"$

$,$

$$country

$=$

$"$

US

$"$

$,$

$$country

$\_$

name

$=$

$"$United States"

$)$

$$ self.assertEqual

$($

log

$\_$

entry.event

$\_$

time.month,

$1$

$)$

$$ self.assertEqual

$($

log

$\_$

entry.event

$\_$

time.hour,

$8$

$)$

$$ def test

$\_$

ipv

$4$

$\_$

class

$($

self

$)$

:

$$ log

$\_$

entry

$\_$

a

$=$

$$LogEntry

$($

$"$

$2$

$0$

$2$

$2$

$-$

$0$

$1$

$-$

$0$

$1$

$0$

$8$

:

$2$

$9$

:

$2$

$5$

$$UTC$",$

$"$

$1$

$9$

$2$

$.$

$1$

$6$

$8$

$.$

$1$

$.$

$1$

$"$

$,$

$"$

$2$

$2$

$"$

$,$

$"$

TCP

$"$

$,$

$"$ALLOW$",$

$"$

$1$

$0$

$0$

$1$

$"$

$,$

$"$

$1$

$0$

$.$

$0$

$.$

$0$

$.$

$1$

$"$

$,$

$"$

US

$"$

$,$

$"$United States"

$)$

$$ log

$\_$

entry

$\_$

b

$=$

$$LogEntry

$($

$"$

$2$

$0$

$2$

$2$

$-$

$0$

$1$

$-$

$0$

$1$

$0$

$8$

:

$2$

$9$

:

$2$

$5$

$$UTC$",$

$"$

$1$

$9$

$2$

$.$

$1$

$6$

$8$

$.$

$1$

$.$

$1$

$"$

$,$

$"$

$2$

$2$

$"$

$,$

$"$

TCP

$"$

$,$

$"$ALLOW$",$

$"$

$1$

$0$

$0$

$1$

$"$

$,$

$"$

$1$

$2$

$8$

$.$

$0$

$.$

$0$

$.$

$1$

$"$

$,$

$"$

US

$"$

$,$

$"$United States"

$)$

$$ log

$\_$

entry

$\_$

c

$=$

Step by Step Solution

There are 3 Steps involved in it

1 Expert Approved Answer

Step: 1 Unlock

Question Has Been Solved by an Expert!

Get step-by-step solutions from verified subject matter experts

Step: 2 Unlock

Step: 3 Unlock

Students Have Also Explored These Related Databases Questions!

Q:

I have this code and i am trying to fix it so that the output of the time will be in the format " YYYY - MM - DD HH:MM:SS \ pm HHMM " , which includes the timezone offset. here" is my code log _...

Q:

I have a problem with my code and here is my code: log _ analyzer.py import re from datetime import datetime import csv import pytz class LogEntry: def _ _ init _ _ ( self , event _ time, internal _...

Q:

Enhance the functionality of the firewall (below). The controller may no longer install default flows as soon as a new switch makes a connection, instead the flows will be added (and removed)...

Q:

Given sample log data from a firewall, create a program that prepares the data for analysis. Make a LogEntry Class: Make a new file named log _ analyzer.py in the directory you created for this...

Q:

I wrote the code for these two programs and I keep getting name error for both. Don't understand what I am doing wring. Part B The dataset file in assets/grades.txt contains a line separated list of...

Q:

I"M TRYING TO FIGURE OUT HOW TO LOG ALL THE FULLPATHS, FILESIZE, MODTIMES, ACCTIME, CRETIME, & HASHES OF **WHATEVER FULL_PATH IS ENTERED*** INTO A LOG FILE CALLED, "Log.txt." I WANT MY LOG TO CONTAIN...

Q:

I"M TRYING TO FIGURE OUT HOW TO LOG ALL THE FULLPATHS, FILESIZE, MODTIME, ACCTIME, CRETIME, & HASHES OF *** EVERY FILE IN THE ENTERED PATH *** INTO A LOG FILE CALLED, "Log.txt." I WANT MY LOG TO...

Q:

Im attaching script here import copy from typing import List import re import csv import subprocess import os import json from pylint.lint import Run import urllib import sys from...

Q:

Currently the script associated with Example 5 in Week 5 shows a list of how many unique IP addresses are present in the log. However, such list may not be sufficient without a count associated with...

Q:

i keep having this error in my code here's my code: import re import datetime from csv import DictReader, DictWriter class LogEntry: def _ _ init _ _ ( self , event _ time, internal _ ip , port _...

Q:

Suppose now a different experiment was conducted to examine the effect of a set of 6 treatments on subjects. Suppose each of the treatment, labelled A, B, C, D, E and F, is independently implemented...

Q:

Suppose an economy begins in steady state. By what proportion does per capita GDP change in the long run in response to each of the following changes? (a) The investment rate doubles. (b) The...

Q:

Exercise 6.4 Ultimately, storage system design requires consideration of usage scenarios as well as disk parameters. Different situations require different metrics. Lets try to systematically...

Q:

QUESTION 4 a) Both Bond A and Bond B have 8% coupon rate. Bond A has 4 years to maturity, while Bond B is 14 years to maturity. Both bonds have 10% yield to maturity (YTM), and make semi-annually...

Q:

What is the default Aggregation Method in SQL Server Analysis Services in Cube Processing? What are the other options?

Q:

What is the default Aggregation Method in SQL Server Analysis Services in Cube Processing? What are the other standard optional methods?

Q:

Before starting an SQL Server Analysis Services Multidimensional Modeling Project, why is identification of a Data Source important?

Previous Question Next Question