gitlab-pygments.rb 0.3.2
Sign up to get free protection for your applications and to get access to all the features.
- data/.gitignore +6 -0
- data/Gemfile +2 -0
- data/README.md +91 -0
- data/Rakefile +78 -0
- data/bench.rb +22 -0
- data/cache-lexers.rb +8 -0
- data/lexers +0 -0
- data/lib/pygments/lexer.rb +148 -0
- data/lib/pygments/mentos.py +344 -0
- data/lib/pygments/popen.rb +389 -0
- data/lib/pygments/version.rb +3 -0
- data/lib/pygments.rb +8 -0
- data/pygments.rb.gemspec +24 -0
- data/test/test_data.c +2581 -0
- data/test/test_data.py +514 -0
- data/test/test_data_generated +2582 -0
- data/test/test_pygments.rb +276 -0
- data/vendor/custom_formatters/gitlab.py +171 -0
- data/vendor/custom_lexers/github.py +362 -0
- data/vendor/pygments-main/AUTHORS +115 -0
- data/vendor/pygments-main/CHANGES +762 -0
- data/vendor/pygments-main/LICENSE +25 -0
- data/vendor/pygments-main/MANIFEST.in +6 -0
- data/vendor/pygments-main/Makefile +59 -0
- data/vendor/pygments-main/REVISION +1 -0
- data/vendor/pygments-main/TODO +15 -0
- data/vendor/pygments-main/docs/generate.py +472 -0
- data/vendor/pygments-main/docs/pygmentize.1 +94 -0
- data/vendor/pygments-main/docs/src/api.txt +270 -0
- data/vendor/pygments-main/docs/src/authors.txt +5 -0
- data/vendor/pygments-main/docs/src/changelog.txt +5 -0
- data/vendor/pygments-main/docs/src/cmdline.txt +147 -0
- data/vendor/pygments-main/docs/src/filterdevelopment.txt +70 -0
- data/vendor/pygments-main/docs/src/filters.txt +42 -0
- data/vendor/pygments-main/docs/src/formatterdevelopment.txt +169 -0
- data/vendor/pygments-main/docs/src/formatters.txt +48 -0
- data/vendor/pygments-main/docs/src/index.txt +69 -0
- data/vendor/pygments-main/docs/src/installation.txt +71 -0
- data/vendor/pygments-main/docs/src/integrate.txt +43 -0
- data/vendor/pygments-main/docs/src/lexerdevelopment.txt +551 -0
- data/vendor/pygments-main/docs/src/lexers.txt +67 -0
- data/vendor/pygments-main/docs/src/moinmoin.txt +39 -0
- data/vendor/pygments-main/docs/src/plugins.txt +93 -0
- data/vendor/pygments-main/docs/src/quickstart.txt +202 -0
- data/vendor/pygments-main/docs/src/rstdirective.txt +22 -0
- data/vendor/pygments-main/docs/src/styles.txt +143 -0
- data/vendor/pygments-main/docs/src/tokens.txt +349 -0
- data/vendor/pygments-main/docs/src/unicode.txt +49 -0
- data/vendor/pygments-main/external/markdown-processor.py +67 -0
- data/vendor/pygments-main/external/moin-parser.py +112 -0
- data/vendor/pygments-main/external/pygments.bashcomp +38 -0
- data/vendor/pygments-main/external/rst-directive-old.py +77 -0
- data/vendor/pygments-main/external/rst-directive.py +83 -0
- data/vendor/pygments-main/ez_setup.py +276 -0
- data/vendor/pygments-main/pygmentize +7 -0
- data/vendor/pygments-main/pygments/__init__.py +91 -0
- data/vendor/pygments-main/pygments/cmdline.py +433 -0
- data/vendor/pygments-main/pygments/console.py +74 -0
- data/vendor/pygments-main/pygments/filter.py +74 -0
- data/vendor/pygments-main/pygments/filters/__init__.py +357 -0
- data/vendor/pygments-main/pygments/formatter.py +92 -0
- data/vendor/pygments-main/pygments/formatters/__init__.py +68 -0
- data/vendor/pygments-main/pygments/formatters/_mapping.py +94 -0
- data/vendor/pygments-main/pygments/formatters/bbcode.py +109 -0
- data/vendor/pygments-main/pygments/formatters/gitlab.py +171 -0
- data/vendor/pygments-main/pygments/formatters/html.py +750 -0
- data/vendor/pygments-main/pygments/formatters/img.py +553 -0
- data/vendor/pygments-main/pygments/formatters/latex.py +378 -0
- data/vendor/pygments-main/pygments/formatters/other.py +117 -0
- data/vendor/pygments-main/pygments/formatters/rtf.py +136 -0
- data/vendor/pygments-main/pygments/formatters/svg.py +154 -0
- data/vendor/pygments-main/pygments/formatters/terminal.py +112 -0
- data/vendor/pygments-main/pygments/formatters/terminal256.py +222 -0
- data/vendor/pygments-main/pygments/lexer.py +697 -0
- data/vendor/pygments-main/pygments/lexers/__init__.py +229 -0
- data/vendor/pygments-main/pygments/lexers/_asybuiltins.py +1645 -0
- data/vendor/pygments-main/pygments/lexers/_clbuiltins.py +232 -0
- data/vendor/pygments-main/pygments/lexers/_luabuiltins.py +249 -0
- data/vendor/pygments-main/pygments/lexers/_mapping.py +298 -0
- data/vendor/pygments-main/pygments/lexers/_phpbuiltins.py +3787 -0
- data/vendor/pygments-main/pygments/lexers/_postgres_builtins.py +232 -0
- data/vendor/pygments-main/pygments/lexers/_scilab_builtins.py +29 -0
- data/vendor/pygments-main/pygments/lexers/_vimbuiltins.py +3 -0
- data/vendor/pygments-main/pygments/lexers/agile.py +1803 -0
- data/vendor/pygments-main/pygments/lexers/asm.py +360 -0
- data/vendor/pygments-main/pygments/lexers/compiled.py +2891 -0
- data/vendor/pygments-main/pygments/lexers/dotnet.py +636 -0
- data/vendor/pygments-main/pygments/lexers/functional.py +1832 -0
- data/vendor/pygments-main/pygments/lexers/github.py +362 -0
- data/vendor/pygments-main/pygments/lexers/hdl.py +356 -0
- data/vendor/pygments-main/pygments/lexers/jvm.py +847 -0
- data/vendor/pygments-main/pygments/lexers/math.py +1072 -0
- data/vendor/pygments-main/pygments/lexers/other.py +3339 -0
- data/vendor/pygments-main/pygments/lexers/parsers.py +695 -0
- data/vendor/pygments-main/pygments/lexers/shell.py +361 -0
- data/vendor/pygments-main/pygments/lexers/special.py +100 -0
- data/vendor/pygments-main/pygments/lexers/sql.py +559 -0
- data/vendor/pygments-main/pygments/lexers/templates.py +1631 -0
- data/vendor/pygments-main/pygments/lexers/text.py +1753 -0
- data/vendor/pygments-main/pygments/lexers/web.py +2864 -0
- data/vendor/pygments-main/pygments/plugin.py +74 -0
- data/vendor/pygments-main/pygments/scanner.py +104 -0
- data/vendor/pygments-main/pygments/style.py +117 -0
- data/vendor/pygments-main/pygments/styles/__init__.py +70 -0
- data/vendor/pygments-main/pygments/styles/autumn.py +65 -0
- data/vendor/pygments-main/pygments/styles/borland.py +51 -0
- data/vendor/pygments-main/pygments/styles/bw.py +49 -0
- data/vendor/pygments-main/pygments/styles/colorful.py +81 -0
- data/vendor/pygments-main/pygments/styles/default.py +73 -0
- data/vendor/pygments-main/pygments/styles/emacs.py +72 -0
- data/vendor/pygments-main/pygments/styles/friendly.py +72 -0
- data/vendor/pygments-main/pygments/styles/fruity.py +42 -0
- data/vendor/pygments-main/pygments/styles/manni.py +75 -0
- data/vendor/pygments-main/pygments/styles/monokai.py +106 -0
- data/vendor/pygments-main/pygments/styles/murphy.py +80 -0
- data/vendor/pygments-main/pygments/styles/native.py +65 -0
- data/vendor/pygments-main/pygments/styles/pastie.py +75 -0
- data/vendor/pygments-main/pygments/styles/perldoc.py +69 -0
- data/vendor/pygments-main/pygments/styles/rrt.py +33 -0
- data/vendor/pygments-main/pygments/styles/tango.py +141 -0
- data/vendor/pygments-main/pygments/styles/trac.py +63 -0
- data/vendor/pygments-main/pygments/styles/vim.py +63 -0
- data/vendor/pygments-main/pygments/styles/vs.py +38 -0
- data/vendor/pygments-main/pygments/token.py +195 -0
- data/vendor/pygments-main/pygments/unistring.py +130 -0
- data/vendor/pygments-main/pygments/util.py +232 -0
- data/vendor/pygments-main/scripts/check_sources.py +242 -0
- data/vendor/pygments-main/scripts/detect_missing_analyse_text.py +30 -0
- data/vendor/pygments-main/scripts/epydoc.css +280 -0
- data/vendor/pygments-main/scripts/find_codetags.py +205 -0
- data/vendor/pygments-main/scripts/find_error.py +171 -0
- data/vendor/pygments-main/scripts/get_vimkw.py +43 -0
- data/vendor/pygments-main/scripts/pylintrc +301 -0
- data/vendor/pygments-main/scripts/reindent.py +291 -0
- data/vendor/pygments-main/scripts/vim2pygments.py +933 -0
- data/vendor/pygments-main/setup.cfg +6 -0
- data/vendor/pygments-main/setup.py +88 -0
- data/vendor/pygments-main/tests/dtds/HTML4-f.dtd +37 -0
- data/vendor/pygments-main/tests/dtds/HTML4-s.dtd +869 -0
- data/vendor/pygments-main/tests/dtds/HTML4.dcl +88 -0
- data/vendor/pygments-main/tests/dtds/HTML4.dtd +1092 -0
- data/vendor/pygments-main/tests/dtds/HTML4.soc +9 -0
- data/vendor/pygments-main/tests/dtds/HTMLlat1.ent +195 -0
- data/vendor/pygments-main/tests/dtds/HTMLspec.ent +77 -0
- data/vendor/pygments-main/tests/dtds/HTMLsym.ent +241 -0
- data/vendor/pygments-main/tests/examplefiles/ANTLRv3.g +608 -0
- data/vendor/pygments-main/tests/examplefiles/AcidStateAdvanced.hs +209 -0
- data/vendor/pygments-main/tests/examplefiles/AlternatingGroup.mu +102 -0
- data/vendor/pygments-main/tests/examplefiles/CPDictionary.j +611 -0
- data/vendor/pygments-main/tests/examplefiles/Constants.mo +158 -0
- data/vendor/pygments-main/tests/examplefiles/DancingSudoku.lhs +411 -0
- data/vendor/pygments-main/tests/examplefiles/Errors.scala +18 -0
- data/vendor/pygments-main/tests/examplefiles/File.hy +174 -0
- data/vendor/pygments-main/tests/examplefiles/Intro.java +1660 -0
- data/vendor/pygments-main/tests/examplefiles/Makefile +1131 -0
- data/vendor/pygments-main/tests/examplefiles/Object.st +4394 -0
- data/vendor/pygments-main/tests/examplefiles/OrderedMap.hx +584 -0
- data/vendor/pygments-main/tests/examplefiles/SmallCheck.hs +378 -0
- data/vendor/pygments-main/tests/examplefiles/Sorting.mod +470 -0
- data/vendor/pygments-main/tests/examplefiles/Sudoku.lhs +382 -0
- data/vendor/pygments-main/tests/examplefiles/addressbook.proto +30 -0
- data/vendor/pygments-main/tests/examplefiles/antlr_throws +1 -0
- data/vendor/pygments-main/tests/examplefiles/apache2.conf +393 -0
- data/vendor/pygments-main/tests/examplefiles/as3_test.as +143 -0
- data/vendor/pygments-main/tests/examplefiles/as3_test2.as +46 -0
- data/vendor/pygments-main/tests/examplefiles/as3_test3.as +3 -0
- data/vendor/pygments-main/tests/examplefiles/aspx-cs_example +27 -0
- data/vendor/pygments-main/tests/examplefiles/badcase.java +2 -0
- data/vendor/pygments-main/tests/examplefiles/batchfile.bat +49 -0
- data/vendor/pygments-main/tests/examplefiles/boot-9.scm +1557 -0
- data/vendor/pygments-main/tests/examplefiles/cells.ps +515 -0
- data/vendor/pygments-main/tests/examplefiles/ceval.c +2604 -0
- data/vendor/pygments-main/tests/examplefiles/cheetah_example.html +13 -0
- data/vendor/pygments-main/tests/examplefiles/classes.dylan +40 -0
- data/vendor/pygments-main/tests/examplefiles/condensed_ruby.rb +10 -0
- data/vendor/pygments-main/tests/examplefiles/coq_RelationClasses +447 -0
- data/vendor/pygments-main/tests/examplefiles/database.pytb +20 -0
- data/vendor/pygments-main/tests/examplefiles/de.MoinMoin.po +2461 -0
- data/vendor/pygments-main/tests/examplefiles/demo.ahk +181 -0
- data/vendor/pygments-main/tests/examplefiles/demo.cfm +38 -0
- data/vendor/pygments-main/tests/examplefiles/django_sample.html+django +68 -0
- data/vendor/pygments-main/tests/examplefiles/dwarf.cw +17 -0
- data/vendor/pygments-main/tests/examplefiles/erl_session +10 -0
- data/vendor/pygments-main/tests/examplefiles/escape_semicolon.clj +1 -0
- data/vendor/pygments-main/tests/examplefiles/evil_regex.js +48 -0
- data/vendor/pygments-main/tests/examplefiles/example.c +2080 -0
- data/vendor/pygments-main/tests/examplefiles/example.cls +15 -0
- data/vendor/pygments-main/tests/examplefiles/example.cpp +2363 -0
- data/vendor/pygments-main/tests/examplefiles/example.gs +106 -0
- data/vendor/pygments-main/tests/examplefiles/example.gst +7 -0
- data/vendor/pygments-main/tests/examplefiles/example.kt +47 -0
- data/vendor/pygments-main/tests/examplefiles/example.lua +250 -0
- data/vendor/pygments-main/tests/examplefiles/example.moo +26 -0
- data/vendor/pygments-main/tests/examplefiles/example.moon +629 -0
- data/vendor/pygments-main/tests/examplefiles/example.nim +1010 -0
- data/vendor/pygments-main/tests/examplefiles/example.ns2 +69 -0
- data/vendor/pygments-main/tests/examplefiles/example.p +34 -0
- data/vendor/pygments-main/tests/examplefiles/example.pas +2708 -0
- data/vendor/pygments-main/tests/examplefiles/example.rb +1852 -0
- data/vendor/pygments-main/tests/examplefiles/example.rhtml +561 -0
- data/vendor/pygments-main/tests/examplefiles/example.sh-session +19 -0
- data/vendor/pygments-main/tests/examplefiles/example.sml +156 -0
- data/vendor/pygments-main/tests/examplefiles/example.snobol +15 -0
- data/vendor/pygments-main/tests/examplefiles/example.tea +34 -0
- data/vendor/pygments-main/tests/examplefiles/example.u +548 -0
- data/vendor/pygments-main/tests/examplefiles/example.weechatlog +9 -0
- data/vendor/pygments-main/tests/examplefiles/example.xhtml +376 -0
- data/vendor/pygments-main/tests/examplefiles/example.yaml +302 -0
- data/vendor/pygments-main/tests/examplefiles/example2.aspx +29 -0
- data/vendor/pygments-main/tests/examplefiles/example_elixir.ex +363 -0
- data/vendor/pygments-main/tests/examplefiles/example_file.fy +128 -0
- data/vendor/pygments-main/tests/examplefiles/firefox.mak +586 -0
- data/vendor/pygments-main/tests/examplefiles/flipflop.sv +19 -0
- data/vendor/pygments-main/tests/examplefiles/foo.sce +6 -0
- data/vendor/pygments-main/tests/examplefiles/format.ml +1213 -0
- data/vendor/pygments-main/tests/examplefiles/fucked_up.rb +77 -0
- data/vendor/pygments-main/tests/examplefiles/function.mu +1 -0
- data/vendor/pygments-main/tests/examplefiles/functional.rst +1472 -0
- data/vendor/pygments-main/tests/examplefiles/genclass.clj +510 -0
- data/vendor/pygments-main/tests/examplefiles/genshi_example.xml+genshi +193 -0
- data/vendor/pygments-main/tests/examplefiles/genshitext_example.genshitext +33 -0
- data/vendor/pygments-main/tests/examplefiles/glsl.frag +7 -0
- data/vendor/pygments-main/tests/examplefiles/glsl.vert +13 -0
- data/vendor/pygments-main/tests/examplefiles/html+php_faulty.php +1 -0
- data/vendor/pygments-main/tests/examplefiles/http_request_example +14 -0
- data/vendor/pygments-main/tests/examplefiles/http_response_example +27 -0
- data/vendor/pygments-main/tests/examplefiles/import.hs +4 -0
- data/vendor/pygments-main/tests/examplefiles/intro.ik +24 -0
- data/vendor/pygments-main/tests/examplefiles/ints.php +10 -0
- data/vendor/pygments-main/tests/examplefiles/intsyn.fun +675 -0
- data/vendor/pygments-main/tests/examplefiles/intsyn.sig +286 -0
- data/vendor/pygments-main/tests/examplefiles/irb_heredoc +8 -0
- data/vendor/pygments-main/tests/examplefiles/irc.lsp +214 -0
- data/vendor/pygments-main/tests/examplefiles/java.properties +16 -0
- data/vendor/pygments-main/tests/examplefiles/jbst_example1.jbst +28 -0
- data/vendor/pygments-main/tests/examplefiles/jbst_example2.jbst +45 -0
- data/vendor/pygments-main/tests/examplefiles/jinjadesignerdoc.rst +713 -0
- data/vendor/pygments-main/tests/examplefiles/lighttpd_config.conf +13 -0
- data/vendor/pygments-main/tests/examplefiles/linecontinuation.py +47 -0
- data/vendor/pygments-main/tests/examplefiles/ltmain.sh +2849 -0
- data/vendor/pygments-main/tests/examplefiles/main.cmake +42 -0
- data/vendor/pygments-main/tests/examplefiles/markdown.lsp +679 -0
- data/vendor/pygments-main/tests/examplefiles/matlab_noreturn +3 -0
- data/vendor/pygments-main/tests/examplefiles/matlab_sample +27 -0
- data/vendor/pygments-main/tests/examplefiles/matlabsession_sample.txt +37 -0
- data/vendor/pygments-main/tests/examplefiles/minimal.ns2 +4 -0
- data/vendor/pygments-main/tests/examplefiles/moin_SyntaxReference.txt +340 -0
- data/vendor/pygments-main/tests/examplefiles/multiline_regexes.rb +38 -0
- data/vendor/pygments-main/tests/examplefiles/nasm_aoutso.asm +96 -0
- data/vendor/pygments-main/tests/examplefiles/nasm_objexe.asm +30 -0
- data/vendor/pygments-main/tests/examplefiles/nemerle_sample.n +87 -0
- data/vendor/pygments-main/tests/examplefiles/nginx_nginx.conf +118 -0
- data/vendor/pygments-main/tests/examplefiles/numbers.c +12 -0
- data/vendor/pygments-main/tests/examplefiles/objc_example.m +25 -0
- data/vendor/pygments-main/tests/examplefiles/objc_example2.m +24 -0
- data/vendor/pygments-main/tests/examplefiles/perl_misc +62 -0
- data/vendor/pygments-main/tests/examplefiles/perl_perl5db +998 -0
- data/vendor/pygments-main/tests/examplefiles/perl_regex-delims +120 -0
- data/vendor/pygments-main/tests/examplefiles/perlfunc.1 +856 -0
- data/vendor/pygments-main/tests/examplefiles/phpcomplete.vim +567 -0
- data/vendor/pygments-main/tests/examplefiles/pleac.in.rb +1223 -0
- data/vendor/pygments-main/tests/examplefiles/postgresql_test.txt +47 -0
- data/vendor/pygments-main/tests/examplefiles/pppoe.applescript +10 -0
- data/vendor/pygments-main/tests/examplefiles/psql_session.txt +122 -0
- data/vendor/pygments-main/tests/examplefiles/py3_test.txt +2 -0
- data/vendor/pygments-main/tests/examplefiles/pycon_test.pycon +14 -0
- data/vendor/pygments-main/tests/examplefiles/pytb_test2.pytb +2 -0
- data/vendor/pygments-main/tests/examplefiles/python25-bsd.mak +234 -0
- data/vendor/pygments-main/tests/examplefiles/qsort.prolog +13 -0
- data/vendor/pygments-main/tests/examplefiles/r-console-transcript.Rout +38 -0
- data/vendor/pygments-main/tests/examplefiles/ragel-cpp_rlscan +280 -0
- data/vendor/pygments-main/tests/examplefiles/ragel-cpp_snippet +2 -0
- data/vendor/pygments-main/tests/examplefiles/regex.js +22 -0
- data/vendor/pygments-main/tests/examplefiles/reversi.lsp +427 -0
- data/vendor/pygments-main/tests/examplefiles/ruby_func_def.rb +11 -0
- data/vendor/pygments-main/tests/examplefiles/scilab.sci +30 -0
- data/vendor/pygments-main/tests/examplefiles/sibling.prolog +19 -0
- data/vendor/pygments-main/tests/examplefiles/simple.md +747 -0
- data/vendor/pygments-main/tests/examplefiles/smarty_example.html +209 -0
- data/vendor/pygments-main/tests/examplefiles/source.lgt +343 -0
- data/vendor/pygments-main/tests/examplefiles/sources.list +62 -0
- data/vendor/pygments-main/tests/examplefiles/sphere.pov +18 -0
- data/vendor/pygments-main/tests/examplefiles/sqlite3.sqlite3-console +27 -0
- data/vendor/pygments-main/tests/examplefiles/squid.conf +30 -0
- data/vendor/pygments-main/tests/examplefiles/string.jl +1031 -0
- data/vendor/pygments-main/tests/examplefiles/string_delimiters.d +21 -0
- data/vendor/pygments-main/tests/examplefiles/stripheredoc.sh +3 -0
- data/vendor/pygments-main/tests/examplefiles/test.R +119 -0
- data/vendor/pygments-main/tests/examplefiles/test.adb +211 -0
- data/vendor/pygments-main/tests/examplefiles/test.asy +131 -0
- data/vendor/pygments-main/tests/examplefiles/test.awk +121 -0
- data/vendor/pygments-main/tests/examplefiles/test.bas +29 -0
- data/vendor/pygments-main/tests/examplefiles/test.bmx +145 -0
- data/vendor/pygments-main/tests/examplefiles/test.boo +39 -0
- data/vendor/pygments-main/tests/examplefiles/test.bro +250 -0
- data/vendor/pygments-main/tests/examplefiles/test.cs +374 -0
- data/vendor/pygments-main/tests/examplefiles/test.css +54 -0
- data/vendor/pygments-main/tests/examplefiles/test.d +135 -0
- data/vendor/pygments-main/tests/examplefiles/test.dart +23 -0
- data/vendor/pygments-main/tests/examplefiles/test.dtd +89 -0
- data/vendor/pygments-main/tests/examplefiles/test.ec +605 -0
- data/vendor/pygments-main/tests/examplefiles/test.ecl +58 -0
- data/vendor/pygments-main/tests/examplefiles/test.eh +315 -0
- data/vendor/pygments-main/tests/examplefiles/test.erl +169 -0
- data/vendor/pygments-main/tests/examplefiles/test.evoque +33 -0
- data/vendor/pygments-main/tests/examplefiles/test.fan +818 -0
- data/vendor/pygments-main/tests/examplefiles/test.flx +57 -0
- data/vendor/pygments-main/tests/examplefiles/test.gdc +13 -0
- data/vendor/pygments-main/tests/examplefiles/test.groovy +97 -0
- data/vendor/pygments-main/tests/examplefiles/test.html +339 -0
- data/vendor/pygments-main/tests/examplefiles/test.ini +10 -0
- data/vendor/pygments-main/tests/examplefiles/test.java +653 -0
- data/vendor/pygments-main/tests/examplefiles/test.jsp +24 -0
- data/vendor/pygments-main/tests/examplefiles/test.maql +45 -0
- data/vendor/pygments-main/tests/examplefiles/test.mod +374 -0
- data/vendor/pygments-main/tests/examplefiles/test.moo +51 -0
- data/vendor/pygments-main/tests/examplefiles/test.myt +166 -0
- data/vendor/pygments-main/tests/examplefiles/test.nim +93 -0
- data/vendor/pygments-main/tests/examplefiles/test.pas +743 -0
- data/vendor/pygments-main/tests/examplefiles/test.php +505 -0
- data/vendor/pygments-main/tests/examplefiles/test.plot +333 -0
- data/vendor/pygments-main/tests/examplefiles/test.ps1 +108 -0
- data/vendor/pygments-main/tests/examplefiles/test.pypylog +1839 -0
- data/vendor/pygments-main/tests/examplefiles/test.r3 +94 -0
- data/vendor/pygments-main/tests/examplefiles/test.rb +177 -0
- data/vendor/pygments-main/tests/examplefiles/test.rhtml +43 -0
- data/vendor/pygments-main/tests/examplefiles/test.scaml +8 -0
- data/vendor/pygments-main/tests/examplefiles/test.ssp +12 -0
- data/vendor/pygments-main/tests/examplefiles/test.tcsh +830 -0
- data/vendor/pygments-main/tests/examplefiles/test.vb +407 -0
- data/vendor/pygments-main/tests/examplefiles/test.vhdl +161 -0
- data/vendor/pygments-main/tests/examplefiles/test.xqy +138 -0
- data/vendor/pygments-main/tests/examplefiles/test.xsl +23 -0
- data/vendor/pygments-main/tests/examplefiles/truncated.pytb +15 -0
- data/vendor/pygments-main/tests/examplefiles/type.lisp +1202 -0
- data/vendor/pygments-main/tests/examplefiles/underscore.coffee +603 -0
- data/vendor/pygments-main/tests/examplefiles/unicode.applescript +5 -0
- data/vendor/pygments-main/tests/examplefiles/unicodedoc.py +11 -0
- data/vendor/pygments-main/tests/examplefiles/webkit-transition.css +3 -0
- data/vendor/pygments-main/tests/examplefiles/while.pov +13 -0
- data/vendor/pygments-main/tests/examplefiles/wiki.factor +384 -0
- data/vendor/pygments-main/tests/examplefiles/xml_example +1897 -0
- data/vendor/pygments-main/tests/examplefiles/zmlrpc.f90 +798 -0
- data/vendor/pygments-main/tests/old_run.py +138 -0
- data/vendor/pygments-main/tests/run.py +48 -0
- data/vendor/pygments-main/tests/support.py +15 -0
- data/vendor/pygments-main/tests/test_basic_api.py +294 -0
- data/vendor/pygments-main/tests/test_clexer.py +31 -0
- data/vendor/pygments-main/tests/test_cmdline.py +105 -0
- data/vendor/pygments-main/tests/test_examplefiles.py +97 -0
- data/vendor/pygments-main/tests/test_html_formatter.py +162 -0
- data/vendor/pygments-main/tests/test_latex_formatter.py +55 -0
- data/vendor/pygments-main/tests/test_perllexer.py +137 -0
- data/vendor/pygments-main/tests/test_regexlexer.py +47 -0
- data/vendor/pygments-main/tests/test_token.py +46 -0
- data/vendor/pygments-main/tests/test_using_api.py +40 -0
- data/vendor/pygments-main/tests/test_util.py +116 -0
- data/vendor/simplejson/.gitignore +10 -0
- data/vendor/simplejson/.travis.yml +5 -0
- data/vendor/simplejson/CHANGES.txt +291 -0
- data/vendor/simplejson/LICENSE.txt +19 -0
- data/vendor/simplejson/MANIFEST.in +5 -0
- data/vendor/simplejson/README.rst +19 -0
- data/vendor/simplejson/conf.py +179 -0
- data/vendor/simplejson/index.rst +628 -0
- data/vendor/simplejson/scripts/make_docs.py +18 -0
- data/vendor/simplejson/setup.py +104 -0
- data/vendor/simplejson/simplejson/__init__.py +510 -0
- data/vendor/simplejson/simplejson/_speedups.c +2745 -0
- data/vendor/simplejson/simplejson/decoder.py +425 -0
- data/vendor/simplejson/simplejson/encoder.py +567 -0
- data/vendor/simplejson/simplejson/ordered_dict.py +119 -0
- data/vendor/simplejson/simplejson/scanner.py +77 -0
- data/vendor/simplejson/simplejson/tests/__init__.py +67 -0
- data/vendor/simplejson/simplejson/tests/test_bigint_as_string.py +55 -0
- data/vendor/simplejson/simplejson/tests/test_check_circular.py +30 -0
- data/vendor/simplejson/simplejson/tests/test_decimal.py +66 -0
- data/vendor/simplejson/simplejson/tests/test_decode.py +83 -0
- data/vendor/simplejson/simplejson/tests/test_default.py +9 -0
- data/vendor/simplejson/simplejson/tests/test_dump.py +67 -0
- data/vendor/simplejson/simplejson/tests/test_encode_basestring_ascii.py +46 -0
- data/vendor/simplejson/simplejson/tests/test_encode_for_html.py +32 -0
- data/vendor/simplejson/simplejson/tests/test_errors.py +34 -0
- data/vendor/simplejson/simplejson/tests/test_fail.py +91 -0
- data/vendor/simplejson/simplejson/tests/test_float.py +19 -0
- data/vendor/simplejson/simplejson/tests/test_indent.py +86 -0
- data/vendor/simplejson/simplejson/tests/test_item_sort_key.py +20 -0
- data/vendor/simplejson/simplejson/tests/test_namedtuple.py +121 -0
- data/vendor/simplejson/simplejson/tests/test_pass1.py +76 -0
- data/vendor/simplejson/simplejson/tests/test_pass2.py +14 -0
- data/vendor/simplejson/simplejson/tests/test_pass3.py +20 -0
- data/vendor/simplejson/simplejson/tests/test_recursion.py +67 -0
- data/vendor/simplejson/simplejson/tests/test_scanstring.py +117 -0
- data/vendor/simplejson/simplejson/tests/test_separators.py +42 -0
- data/vendor/simplejson/simplejson/tests/test_speedups.py +20 -0
- data/vendor/simplejson/simplejson/tests/test_tuple.py +49 -0
- data/vendor/simplejson/simplejson/tests/test_unicode.py +109 -0
- data/vendor/simplejson/simplejson/tool.py +39 -0
- metadata +492 -0
@@ -0,0 +1,121 @@
|
|
1
|
+
#!/bin/awk -f
|
2
|
+
|
3
|
+
BEGIN {
|
4
|
+
# It is not possible to define output file names here because
|
5
|
+
# FILENAME is not define in the BEGIN section
|
6
|
+
n = "";
|
7
|
+
printf "Generating data files ...";
|
8
|
+
network_max_bandwidth_in_byte = 10000000;
|
9
|
+
network_max_packet_per_second = 1000000;
|
10
|
+
last3 = 0;
|
11
|
+
last4 = 0;
|
12
|
+
last5 = 0;
|
13
|
+
last6 = 0;
|
14
|
+
}
|
15
|
+
{
|
16
|
+
if ($1 ~ /Average/)
|
17
|
+
{ # Skip the Average values
|
18
|
+
n = "";
|
19
|
+
next;
|
20
|
+
}
|
21
|
+
|
22
|
+
if ($2 ~ /all/)
|
23
|
+
{ # This is the cpu info
|
24
|
+
print $3 > FILENAME".cpu.user.dat";
|
25
|
+
# print $4 > FILENAME".cpu.nice.dat";
|
26
|
+
print $5 > FILENAME".cpu.system.dat";
|
27
|
+
# print $6 > FILENAME".cpu.iowait.dat";
|
28
|
+
print $7 > FILENAME".cpu.idle.dat";
|
29
|
+
print 100-$7 > FILENAME".cpu.busy.dat";
|
30
|
+
}
|
31
|
+
if ($2 ~ /eth0/)
|
32
|
+
{ # This is the eth0 network info
|
33
|
+
if ($3 > network_max_packet_per_second)
|
34
|
+
print last3 > FILENAME".net.rxpck.dat"; # Total number of packets received per second.
|
35
|
+
else
|
36
|
+
{
|
37
|
+
last3 = $3;
|
38
|
+
print $3 > FILENAME".net.rxpck.dat"; # Total number of packets received per second.
|
39
|
+
}
|
40
|
+
if ($4 > network_max_packet_per_second)
|
41
|
+
print last4 > FILENAME".net.txpck.dat"; # Total number of packets transmitted per second.
|
42
|
+
else
|
43
|
+
{
|
44
|
+
last4 = $4;
|
45
|
+
print $4 > FILENAME".net.txpck.dat"; # Total number of packets transmitted per second.
|
46
|
+
}
|
47
|
+
if ($5 > network_max_bandwidth_in_byte)
|
48
|
+
print last5 > FILENAME".net.rxbyt.dat"; # Total number of bytes received per second.
|
49
|
+
else
|
50
|
+
{
|
51
|
+
last5 = $5;
|
52
|
+
print $5 > FILENAME".net.rxbyt.dat"; # Total number of bytes received per second.
|
53
|
+
}
|
54
|
+
if ($6 > network_max_bandwidth_in_byte)
|
55
|
+
print last6 > FILENAME".net.txbyt.dat"; # Total number of bytes transmitted per second.
|
56
|
+
else
|
57
|
+
{
|
58
|
+
last6 = $6;
|
59
|
+
print $6 > FILENAME".net.txbyt.dat"; # Total number of bytes transmitted per second.
|
60
|
+
}
|
61
|
+
# print $7 > FILENAME".net.rxcmp.dat"; # Number of compressed packets received per second (for cslip etc.).
|
62
|
+
# print $8 > FILENAME".net.txcmp.dat"; # Number of compressed packets transmitted per second.
|
63
|
+
# print $9 > FILENAME".net.rxmcst.dat"; # Number of multicast packets received per second.
|
64
|
+
}
|
65
|
+
|
66
|
+
# Detect which is the next info to be parsed
|
67
|
+
if ($2 ~ /proc|cswch|tps|kbmemfree|totsck/)
|
68
|
+
{
|
69
|
+
n = $2;
|
70
|
+
}
|
71
|
+
|
72
|
+
# Only get lines with numbers (real data !)
|
73
|
+
if ($2 ~ /[0-9]/)
|
74
|
+
{
|
75
|
+
if (n == "proc/s")
|
76
|
+
{ # This is the proc/s info
|
77
|
+
print $2 > FILENAME".proc.dat";
|
78
|
+
# n = "";
|
79
|
+
}
|
80
|
+
if (n == "cswch/s")
|
81
|
+
{ # This is the context switches per second info
|
82
|
+
print $2 > FILENAME".ctxsw.dat";
|
83
|
+
# n = "";
|
84
|
+
}
|
85
|
+
if (n == "tps")
|
86
|
+
{ # This is the disk info
|
87
|
+
print $2 > FILENAME".disk.tps.dat"; # total transfers per second
|
88
|
+
print $3 > FILENAME".disk.rtps.dat"; # read requests per second
|
89
|
+
print $4 > FILENAME".disk.wtps.dat"; # write requests per second
|
90
|
+
print $5 > FILENAME".disk.brdps.dat"; # block reads per second
|
91
|
+
print $6 > FILENAME".disk.bwrps.dat"; # block writes per second
|
92
|
+
# n = "";
|
93
|
+
}
|
94
|
+
if (n == "kbmemfree")
|
95
|
+
{ # This is the mem info
|
96
|
+
print $2 > FILENAME".mem.kbmemfree.dat"; # Amount of free memory available in kilobytes.
|
97
|
+
print $3 > FILENAME".mem.kbmemused.dat"; # Amount of used memory in kilobytes. This does not take into account memory used by the kernel itself.
|
98
|
+
print $4 > FILENAME".mem.memused.dat"; # Percentage of used memory.
|
99
|
+
# It appears the kbmemshrd has been removed from the sysstat output - ntolia
|
100
|
+
# print $X > FILENAME".mem.kbmemshrd.dat"; # Amount of memory shared by the system in kilobytes. Always zero with 2.4 kernels.
|
101
|
+
# print $5 > FILENAME".mem.kbbuffers.dat"; # Amount of memory used as buffers by the kernel in kilobytes.
|
102
|
+
print $6 > FILENAME".mem.kbcached.dat"; # Amount of memory used to cache data by the kernel in kilobytes.
|
103
|
+
# print $7 > FILENAME".mem.kbswpfree.dat"; # Amount of free swap space in kilobytes.
|
104
|
+
# print $8 > FILENAME".mem.kbswpused.dat"; # Amount of used swap space in kilobytes.
|
105
|
+
print $9 > FILENAME".mem.swpused.dat"; # Percentage of used swap space.
|
106
|
+
# n = "";
|
107
|
+
}
|
108
|
+
if (n == "totsck")
|
109
|
+
{ # This is the socket info
|
110
|
+
print $2 > FILENAME".sock.totsck.dat"; # Total number of used sockets.
|
111
|
+
print $3 > FILENAME".sock.tcpsck.dat"; # Number of TCP sockets currently in use.
|
112
|
+
# print $4 > FILENAME".sock.udpsck.dat"; # Number of UDP sockets currently in use.
|
113
|
+
# print $5 > FILENAME".sock.rawsck.dat"; # Number of RAW sockets currently in use.
|
114
|
+
# print $6 > FILENAME".sock.ip-frag.dat"; # Number of IP fragments currently in use.
|
115
|
+
# n = "";
|
116
|
+
}
|
117
|
+
}
|
118
|
+
}
|
119
|
+
END {
|
120
|
+
print " '" FILENAME "' done.";
|
121
|
+
}
|
@@ -0,0 +1,29 @@
|
|
1
|
+
Public Class Form1
|
2
|
+
Inherits System.Windows.Forms.Form
|
3
|
+
|
4
|
+
Private t As New System.Timers.Timer(2000)
|
5
|
+
|
6
|
+
Private Sub Form1_Load(ByVal sender As Object, _
|
7
|
+
ByVal e As System.EventArgs) Handles MyBase.Load
|
8
|
+
|
9
|
+
AddHandler t.Elapsed, AddressOf TimerFired
|
10
|
+
End Sub
|
11
|
+
|
12
|
+
Private Sub btnStart_Click(ByVal sender As System.Object, _
|
13
|
+
ByVal e As System.EventArgs) Handles btnStart.Click
|
14
|
+
|
15
|
+
t.Enabled = True
|
16
|
+
End Sub
|
17
|
+
|
18
|
+
Private Sub btnStop_Click(ByVal sender As System.Object, _
|
19
|
+
ByVal e As System.EventArgs) Handles btnStop.Click
|
20
|
+
|
21
|
+
t.Enabled = False
|
22
|
+
End Sub
|
23
|
+
|
24
|
+
Public Sub TimerFired(ByVal sender As Object, _
|
25
|
+
ByVal e As System.Timers.ElapsedEventArgs)
|
26
|
+
|
27
|
+
Label1.Text = "Signal Time = " & e.SignalTime.ToString
|
28
|
+
End Sub
|
29
|
+
End Class
|
@@ -0,0 +1,145 @@
|
|
1
|
+
|
2
|
+
Rem
|
3
|
+
foobar
|
4
|
+
EndRem
|
5
|
+
|
6
|
+
Rem
|
7
|
+
foobar!
|
8
|
+
End Rem
|
9
|
+
|
10
|
+
Rem
|
11
|
+
End Rem
|
12
|
+
|
13
|
+
SuperStrict
|
14
|
+
|
15
|
+
Framework brl.blitz
|
16
|
+
Import brl.standardio
|
17
|
+
|
18
|
+
'Import "blah.bmx"
|
19
|
+
'Import "blah/blah.bmx"
|
20
|
+
'Include "blurg/blurg.bmx"
|
21
|
+
|
22
|
+
Const ca:Long = $10000000 ' Hex
|
23
|
+
Const cb:Int = %10101010 ' Binary
|
24
|
+
Global ga:String = "blargh"
|
25
|
+
Local a:Int = 124, b$ = "abcdef"
|
26
|
+
?Not Debug
|
27
|
+
Print(_name123(ga, a, 100.2))
|
28
|
+
?
|
29
|
+
|
30
|
+
Function _name123 : Float (zorp:String, ll:Int = False, blah#, waffles% = 100)
|
31
|
+
Return 235.7804 ' Single-line comment
|
32
|
+
End Function
|
33
|
+
Function TestString:String()
|
34
|
+
End Function
|
35
|
+
Function TestByte:Byte()
|
36
|
+
End Function
|
37
|
+
|
38
|
+
Function hub(blah:String, ..
|
39
|
+
abc:Int = Pi)
|
40
|
+
End Function
|
41
|
+
Function Blar%()
|
42
|
+
Local aa !, ab @ ,ac @@, ad# ,ae$,af% ' Intentional mangling
|
43
|
+
Local ba:Double, bb :Byte, bc: Short,bd:Float,be: String,ff:Int = True
|
44
|
+
End Function
|
45
|
+
|
46
|
+
?Win32
|
47
|
+
abc()
|
48
|
+
?Linux
|
49
|
+
abc()
|
50
|
+
?
|
51
|
+
|
52
|
+
Function abc()
|
53
|
+
Print "abc" ' I cannot find a way to parse these as function calls without messing something up
|
54
|
+
Print ' Anyhow, they're generally not used in this way
|
55
|
+
Goto Eww_Goto
|
56
|
+
#Eww_Goto
|
57
|
+
End Function
|
58
|
+
|
59
|
+
Type TBlarf Abstract
|
60
|
+
End Type
|
61
|
+
|
62
|
+
Type TFooBar
|
63
|
+
End Type
|
64
|
+
|
65
|
+
New MyClass.TestMethod()
|
66
|
+
New(MyClass).TestMethod()
|
67
|
+
Local myinst:MyClass = New MyClass
|
68
|
+
myinst.TestMethod()
|
69
|
+
|
70
|
+
Type MyClass Extends TFooBar
|
71
|
+
|
72
|
+
Field m_foo:MyClass
|
73
|
+
Field m_bar:MyClass
|
74
|
+
|
75
|
+
Rem
|
76
|
+
abc
|
77
|
+
def
|
78
|
+
End Rem
|
79
|
+
Method New()
|
80
|
+
Rem
|
81
|
+
abcdef
|
82
|
+
endrem
|
83
|
+
End Method
|
84
|
+
|
85
|
+
Method TestMethod() ' foobar
|
86
|
+
m_foo = Self
|
87
|
+
m_bar = MyClass(m_foo)
|
88
|
+
m_foo.m_bar.m_foo.m_bar.Yell()
|
89
|
+
End Method
|
90
|
+
|
91
|
+
Method Yell()
|
92
|
+
Print("huzzah!")
|
93
|
+
End Method
|
94
|
+
|
95
|
+
Function Wakka$(foo:String)
|
96
|
+
Return foo + "bar"
|
97
|
+
End Function
|
98
|
+
|
99
|
+
End Type
|
100
|
+
|
101
|
+
Extern "c"
|
102
|
+
Function vesper!(a:Int) = "vesper@4"
|
103
|
+
Function bubbles@@(a%)
|
104
|
+
End Extern
|
105
|
+
|
106
|
+
Print("blah " + ..
|
107
|
+
"blah " + ..
|
108
|
+
"blah.")
|
109
|
+
|
110
|
+
Try
|
111
|
+
Throw("blar!")
|
112
|
+
Catch exception:String
|
113
|
+
Print("Caught: " + exception)
|
114
|
+
End Try
|
115
|
+
|
116
|
+
For Local i:Int = 0 To 10 Step 1
|
117
|
+
Print("Index: " + i)
|
118
|
+
Next
|
119
|
+
Local array:String[] = ["foo", "bar", "11", "22", "33"]
|
120
|
+
For Local value:String = EachIn array
|
121
|
+
Print("Value: " + value)
|
122
|
+
Next
|
123
|
+
|
124
|
+
Local foobar:Int = Not (1 Or (2 And (4 Shl 5 Shr 6)) Sar 7) Mod (8+2)
|
125
|
+
Local az:Int = 1234567890
|
126
|
+
az : + 1
|
127
|
+
az: - 2
|
128
|
+
az :* 3
|
129
|
+
az:/ 4
|
130
|
+
az:& 5
|
131
|
+
az:| 6
|
132
|
+
az: ~ 7
|
133
|
+
az : Shl 8
|
134
|
+
az: Shr 9
|
135
|
+
az :Sar 10
|
136
|
+
az:Mod 11
|
137
|
+
az = ((10-5+2/4*2)>(((8^2)) < 2)) & 12|2
|
138
|
+
|
139
|
+
Function flub(fah Ptr, eah:Int Ptr, blu@@ Ptr)
|
140
|
+
End Function
|
141
|
+
Function Foob:Int Ptr(blar:Byte Ptr, Saffon@Ptr, blaus#Ptr)
|
142
|
+
End Function
|
143
|
+
Function zauus@Ptr()
|
144
|
+
End Function
|
145
|
+
|
@@ -0,0 +1,39 @@
|
|
1
|
+
import System
|
2
|
+
import Boo.Lang.Interpreter from Boo.Lang.Interpreter
|
3
|
+
|
4
|
+
class ObjectInterpreter(AbstractInterpreter):
|
5
|
+
|
6
|
+
_context as object
|
7
|
+
|
8
|
+
[getter(Value)]
|
9
|
+
_value as object
|
10
|
+
|
11
|
+
def constructor(context):
|
12
|
+
_context = context
|
13
|
+
self.RememberLastValue = true
|
14
|
+
|
15
|
+
override def Lookup(name as string):
|
16
|
+
property = _context.GetType().GetProperty(name)
|
17
|
+
return property.PropertyType if property is not null
|
18
|
+
|
19
|
+
override def GetValue(name as string):
|
20
|
+
return _context.GetType().GetProperty(name).GetValue(
|
21
|
+
_context, null)
|
22
|
+
|
23
|
+
override def SetLastValue(value):
|
24
|
+
_value = value
|
25
|
+
|
26
|
+
override def SetValue(name as string, value):
|
27
|
+
raise InvalidOperationException()
|
28
|
+
|
29
|
+
override def Declare(name as string, type as Type):
|
30
|
+
raise InvalidOperationException()
|
31
|
+
|
32
|
+
class Person:
|
33
|
+
[property(FirstName)]
|
34
|
+
_fname as string = ""
|
35
|
+
|
36
|
+
p = Person(FirstName: "Homer")
|
37
|
+
i = ObjectInterpreter(p)
|
38
|
+
i.Eval('"Hello, ${FirstName.ToUpper()}!"')
|
39
|
+
print i.Value
|
@@ -0,0 +1,250 @@
|
|
1
|
+
@load notice
|
2
|
+
@load utils/thresholds
|
3
|
+
|
4
|
+
module SSH;
|
5
|
+
|
6
|
+
export {
|
7
|
+
redef enum Log::ID += { SSH };
|
8
|
+
|
9
|
+
redef enum Notice::Type += {
|
10
|
+
Login,
|
11
|
+
Password_Guessing,
|
12
|
+
Login_By_Password_Guesser,
|
13
|
+
Login_From_Interesting_Hostname,
|
14
|
+
Bytecount_Inconsistency,
|
15
|
+
};
|
16
|
+
|
17
|
+
type Info: record {
|
18
|
+
ts: time &log;
|
19
|
+
uid: string &log;
|
20
|
+
id: conn_id &log;
|
21
|
+
status: string &log &optional;
|
22
|
+
direction: string &log &optional;
|
23
|
+
remote_location: geo_location &log &optional;
|
24
|
+
client: string &log &optional;
|
25
|
+
server: string &log &optional;
|
26
|
+
resp_size: count &log &default=0;
|
27
|
+
|
28
|
+
## Indicate if the SSH session is done being watched.
|
29
|
+
done: bool &default=F;
|
30
|
+
};
|
31
|
+
|
32
|
+
const password_guesses_limit = 30 &redef;
|
33
|
+
|
34
|
+
# The size in bytes at which the SSH connection is presumed to be
|
35
|
+
# successful.
|
36
|
+
const authentication_data_size = 5500 &redef;
|
37
|
+
|
38
|
+
# The amount of time to remember presumed non-successful logins to build
|
39
|
+
# model of a password guesser.
|
40
|
+
const guessing_timeout = 30 mins &redef;
|
41
|
+
|
42
|
+
# The set of countries for which you'd like to throw notices upon successful login
|
43
|
+
# requires Bro compiled with libGeoIP support
|
44
|
+
const watched_countries: set[string] = {"RO"} &redef;
|
45
|
+
|
46
|
+
# Strange/bad host names to originate successful SSH logins
|
47
|
+
const interesting_hostnames =
|
48
|
+
/^d?ns[0-9]*\./ |
|
49
|
+
/^smtp[0-9]*\./ |
|
50
|
+
/^mail[0-9]*\./ |
|
51
|
+
/^pop[0-9]*\./ |
|
52
|
+
/^imap[0-9]*\./ |
|
53
|
+
/^www[0-9]*\./ |
|
54
|
+
/^ftp[0-9]*\./ &redef;
|
55
|
+
|
56
|
+
# This is a table with orig subnet as the key, and subnet as the value.
|
57
|
+
const ignore_guessers: table[subnet] of subnet &redef;
|
58
|
+
|
59
|
+
# If true, we tell the event engine to not look at further data
|
60
|
+
# packets after the initial SSH handshake. Helps with performance
|
61
|
+
# (especially with large file transfers) but precludes some
|
62
|
+
# kinds of analyses (e.g., tracking connection size).
|
63
|
+
const skip_processing_after_detection = F &redef;
|
64
|
+
|
65
|
+
# Keeps count of how many rejections a host has had
|
66
|
+
global password_rejections: table[addr] of TrackCount
|
67
|
+
&write_expire=guessing_timeout
|
68
|
+
&synchronized;
|
69
|
+
|
70
|
+
# Keeps track of hosts identified as guessing passwords
|
71
|
+
# TODO: guessing_timeout doesn't work correctly here. If a user redefs
|
72
|
+
# the variable, it won't take effect.
|
73
|
+
global password_guessers: set[addr] &read_expire=guessing_timeout+1hr &synchronized;
|
74
|
+
|
75
|
+
global log_ssh: event(rec: Info);
|
76
|
+
}
|
77
|
+
|
78
|
+
# Configure DPD and the packet filter
|
79
|
+
redef capture_filters += { ["ssh"] = "tcp port 22" };
|
80
|
+
redef dpd_config += { [ANALYZER_SSH] = [$ports = set(22/tcp)] };
|
81
|
+
|
82
|
+
redef record connection += {
|
83
|
+
ssh: Info &optional;
|
84
|
+
};
|
85
|
+
|
86
|
+
event bro_init()
|
87
|
+
{
|
88
|
+
Log::create_stream(SSH, [$columns=Info, $ev=log_ssh]);
|
89
|
+
}
|
90
|
+
|
91
|
+
function set_session(c: connection)
|
92
|
+
{
|
93
|
+
if ( ! c?$ssh )
|
94
|
+
{
|
95
|
+
local info: Info;
|
96
|
+
info$ts=network_time();
|
97
|
+
info$uid=c$uid;
|
98
|
+
info$id=c$id;
|
99
|
+
c$ssh = info;
|
100
|
+
}
|
101
|
+
}
|
102
|
+
|
103
|
+
function check_ssh_connection(c: connection, done: bool)
|
104
|
+
{
|
105
|
+
# If done watching this connection, just return.
|
106
|
+
if ( c$ssh$done )
|
107
|
+
return;
|
108
|
+
|
109
|
+
# If this is still a live connection and the byte count has not
|
110
|
+
# crossed the threshold, just return and let the resheduled check happen later.
|
111
|
+
if ( !done && c$resp$size < authentication_data_size )
|
112
|
+
return;
|
113
|
+
|
114
|
+
# Make sure the server has sent back more than 50 bytes to filter out
|
115
|
+
# hosts that are just port scanning. Nothing is ever logged if the server
|
116
|
+
# doesn't send back at least 50 bytes.
|
117
|
+
if ( c$resp$size < 50 )
|
118
|
+
return;
|
119
|
+
|
120
|
+
local status = "failure";
|
121
|
+
local direction = Site::is_local_addr(c$id$orig_h) ? "to" : "from";
|
122
|
+
local location: geo_location;
|
123
|
+
location = (direction == "to") ? lookup_location(c$id$resp_h) : lookup_location(c$id$orig_h);
|
124
|
+
|
125
|
+
if ( done && c$resp$size < authentication_data_size )
|
126
|
+
{
|
127
|
+
# presumed failure
|
128
|
+
if ( c$id$orig_h !in password_rejections )
|
129
|
+
password_rejections[c$id$orig_h] = new_track_count();
|
130
|
+
|
131
|
+
# Track the number of rejections
|
132
|
+
if ( !(c$id$orig_h in ignore_guessers &&
|
133
|
+
c$id$resp_h in ignore_guessers[c$id$orig_h]) )
|
134
|
+
++password_rejections[c$id$orig_h]$n;
|
135
|
+
|
136
|
+
if ( default_check_threshold(password_rejections[c$id$orig_h]) )
|
137
|
+
{
|
138
|
+
add password_guessers[c$id$orig_h];
|
139
|
+
NOTICE([$note=Password_Guessing,
|
140
|
+
$conn=c,
|
141
|
+
$msg=fmt("SSH password guessing by %s", c$id$orig_h),
|
142
|
+
$sub=fmt("%d failed logins", password_rejections[c$id$orig_h]$n),
|
143
|
+
$n=password_rejections[c$id$orig_h]$n]);
|
144
|
+
}
|
145
|
+
}
|
146
|
+
# TODO: This is to work around a quasi-bug in Bro which occasionally
|
147
|
+
# causes the byte count to be oversized.
|
148
|
+
# Watch for Gregors work that adds an actual counter of bytes transferred.
|
149
|
+
else if ( c$resp$size < 20000000 )
|
150
|
+
{
|
151
|
+
# presumed successful login
|
152
|
+
status = "success";
|
153
|
+
c$ssh$done = T;
|
154
|
+
|
155
|
+
if ( c$id$orig_h in password_rejections &&
|
156
|
+
password_rejections[c$id$orig_h]$n > password_guesses_limit &&
|
157
|
+
c$id$orig_h !in password_guessers )
|
158
|
+
{
|
159
|
+
add password_guessers[c$id$orig_h];
|
160
|
+
NOTICE([$note=Login_By_Password_Guesser,
|
161
|
+
$conn=c,
|
162
|
+
$n=password_rejections[c$id$orig_h]$n,
|
163
|
+
$msg=fmt("Successful SSH login by password guesser %s", c$id$orig_h),
|
164
|
+
$sub=fmt("%d failed logins", password_rejections[c$id$orig_h]$n)]);
|
165
|
+
}
|
166
|
+
|
167
|
+
local message = fmt("SSH login %s %s \"%s\" \"%s\" %f %f %s (triggered with %d bytes)",
|
168
|
+
direction, location$country_code, location$region, location$city,
|
169
|
+
location$latitude, location$longitude,
|
170
|
+
id_string(c$id), c$resp$size);
|
171
|
+
NOTICE([$note=Login,
|
172
|
+
$conn=c,
|
173
|
+
$msg=message,
|
174
|
+
$sub=location$country_code]);
|
175
|
+
|
176
|
+
# Check to see if this login came from an interesting hostname
|
177
|
+
when ( local hostname = lookup_addr(c$id$orig_h) )
|
178
|
+
{
|
179
|
+
if ( interesting_hostnames in hostname )
|
180
|
+
{
|
181
|
+
NOTICE([$note=Login_From_Interesting_Hostname,
|
182
|
+
$conn=c,
|
183
|
+
$msg=fmt("Strange login from %s", hostname),
|
184
|
+
$sub=hostname]);
|
185
|
+
}
|
186
|
+
}
|
187
|
+
|
188
|
+
if ( location$country_code in watched_countries )
|
189
|
+
{
|
190
|
+
|
191
|
+
}
|
192
|
+
|
193
|
+
}
|
194
|
+
else if ( c$resp$size >= 200000000 )
|
195
|
+
{
|
196
|
+
NOTICE([$note=Bytecount_Inconsistency,
|
197
|
+
$conn=c,
|
198
|
+
$msg="During byte counting in SSH analysis, an overly large value was seen.",
|
199
|
+
$sub=fmt("%d",c$resp$size)]);
|
200
|
+
}
|
201
|
+
|
202
|
+
c$ssh$remote_location = location;
|
203
|
+
c$ssh$status = status;
|
204
|
+
c$ssh$direction = direction;
|
205
|
+
c$ssh$resp_size = c$resp$size;
|
206
|
+
|
207
|
+
Log::write(SSH, c$ssh);
|
208
|
+
|
209
|
+
# Set the "done" flag to prevent the watching event from rescheduling
|
210
|
+
# after detection is done.
|
211
|
+
c$ssh$done;
|
212
|
+
|
213
|
+
# Stop watching this connection, we don't care about it anymore.
|
214
|
+
if ( skip_processing_after_detection )
|
215
|
+
{
|
216
|
+
skip_further_processing(c$id);
|
217
|
+
set_record_packets(c$id, F);
|
218
|
+
}
|
219
|
+
}
|
220
|
+
|
221
|
+
event connection_state_remove(c: connection) &priority=-5
|
222
|
+
{
|
223
|
+
if ( c?$ssh )
|
224
|
+
check_ssh_connection(c, T);
|
225
|
+
}
|
226
|
+
|
227
|
+
event ssh_watcher(c: connection)
|
228
|
+
{
|
229
|
+
local id = c$id;
|
230
|
+
# don't go any further if this connection is gone already!
|
231
|
+
if ( !connection_exists(id) )
|
232
|
+
return;
|
233
|
+
|
234
|
+
check_ssh_connection(c, F);
|
235
|
+
if ( ! c$ssh$done )
|
236
|
+
schedule +15secs { ssh_watcher(c) };
|
237
|
+
}
|
238
|
+
|
239
|
+
event ssh_server_version(c: connection, version: string) &priority=5
|
240
|
+
{
|
241
|
+
set_session(c);
|
242
|
+
c$ssh$server = version;
|
243
|
+
}
|
244
|
+
|
245
|
+
event ssh_client_version(c: connection, version: string) &priority=5
|
246
|
+
{
|
247
|
+
set_session(c);
|
248
|
+
c$ssh$client = version;
|
249
|
+
schedule +15secs { ssh_watcher(c) };
|
250
|
+
}
|