403Webshell
Server IP : 162.241.203.86  /  Your IP : 216.73.216.183
Web Server : Apache
System : Linux br1002.hostgator.com.br 5.14.0-687.36.1.el9_8.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Aug 7 05:40:49 EDT 2026 x86_64
User : luxlic01 ( 6532)
PHP Version : 8.3.33
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : ON
Directory :  /usr/libexec/kcare/python/kcarectl/__pycache__/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /usr/libexec/kcare/python/kcarectl/__pycache__/anomaly.cpython-39.pyc
a

��;j��@s�ddlZddlZddlmZmZmZmZej
ejd�dd��Zdd�Z
ej
ejd�dd	��Zej
ejd
d�dd
��Zedkr�ei�dS)�N)�delivery_kit�kcare�	log_utils�utils)�loggercCs|��S)aSend the DataPackage archive to the patch server.

    Upload errors are logged and swallowed (catch_errors), preserving
    the historical kernel-anomaly behavior.

    :param data_package: DataPackage instance to send
    :return: Upload name (package identifier)
    )�send)�data_package�r	�-/usr/libexec/kcare/python/kcarectl/anomaly.py�send_data_packagesrcCsRt��}t�|�D]:\}}||dkr*qNd�||�dd��}|j||d�qdS)zZadds recent files for the last hour to the given data package starting from the newest oneiz{0}/{1}�/�_�Zsrc_pathN)�timerZsort_files_by_ctime�format�replace�add_file)�filesrZarchive_prefix�now�path�ctimeZarcnamer	r	r
�copy_recent_filessrcCs.t��}|��
tj�d�r(|�dd�tj�d�r@|�dd�|�dd�|�d	d	�|�d
d�tj�d�s|tj�d
�r�d}n$tj�d�r�d}|jddd�nd}|�d|�td��(}|jdt�	|�
��d�Wd�n1s�0Ytd��(}|jdt�	|�
��d�Wd�n1�s*0Y|jddd�|�d|�|jddd�|�d d!�t
����ztt
��|d"�Wn6t�y�}z|�d#�|��WYd}~n
d}~00ztt
��|d$�Wn6t�y}z|�d%�|��WYd}~n
d}~00Wd�n1�s 0Y|S)&Nz/var/log/messages�messagesztail -n10000 /var/log/messagesz/var/log/syslogZsyslogztail -n10000 /var/log/syslogzkcarectl.logz"tail -n10000 /var/log/kcarectl.logZdmesgZls_var_cache_kcarezls -lR /var/cache/kcare/z/usr/bin/rpmz/bin/rpmzFrpm -q -a --queryformat="%{N}|%{V}-%{R}|%{arch}|%{INSTALLTIME:date}\n"z
/usr/bin/dpkgzJ/usr/bin/dpkg-query -W -f "${binary:Package}|${Version}|${Architecture}\n"zdpkg.logz/var/log/dpkg.logrzecho "unknown package manager"z
packages.listz
/proc/versionZproc_version)Z
data_bytesz
/proc/modulesZproc_modulesz
kcare.confz/etc/sysconfig/kcare/kcare.confzserver_info.jsonz
kdump.confz/etc/kdump.confZls_kdumpz
ls -lR {0}Zkdumpzfailed to copy kdumps:
{0}Z
crashreporterz+failed to copy crashreporter artifacts:
{0})rZKernelAnomalyPackage�osr�existsZ
add_stdoutr�openr�bstr�readZadd_jsonrrZget_kdump_rootrZlist_kdump_txt_files�	ExceptionZ	log_errorZlist_crashreporter_log_files)�server_inforZpackages_cmd�f�er	r	r
�prepare_kernel_anomaly_report*sB
6
8&Fr"F)rZdefault_returnc
Cs|d}t|d�}t|�d�p"d�}t|d�}|d}zt|dd�}Wntttfyjd}Yn0||||||g}t|�s�d	Sd	}d	}	d	}
|d
kr�|dkr�d}|||kr�||d
kr�nn|dkr�d}	||kr�d}
||	|
g}t|��rt�d�|��dSd	S)z3taken from eportal - anomalies::detect_agent_reboot�reason�uptime�patch_levelz-1�	last_stop�ts�staterFi,���Ti�updatezAgent anomaly detected: {0})	�int�get�KeyError�	TypeError�
ValueError�allr�loginfor)rr#r$r%r&r'Zstate_ts�fieldsZ first_update_after_reboot_markerZcrash_soon_after_update_markerZno_proper_shutdown_marker�markersr	r	r
�detect_anomaly_s:
,�
r4�__main__)rr�kcarectlrrrr�Any�Dict�ListZcatch_errors�logwarnrrr"r4�__name__r	r	r	r
�<module>s


4
,

Youez - 2016 - github.com/yon3zu
LinuXploit