flow.record 3.16.dev9__tar.gz → 3.17.dev1__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- {flow_record-3.16.dev9/flow.record.egg-info → flow_record-3.17.dev1}/PKG-INFO +1 -1
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/__init__.py +2 -1
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/selector.py +1 -24
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/version.py +2 -2
- {flow_record-3.16.dev9 → flow_record-3.17.dev1/flow.record.egg-info}/PKG-INFO +1 -1
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/COPYRIGHT +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/LICENSE +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/MANIFEST.in +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/README.md +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/examples/filesystem.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/examples/passivedns.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/examples/records.json +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/examples/tcpconn.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/__init__.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/__init__.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/archive.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/avro.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/broker.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/csvfile.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/duckdb.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/elastic.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/jsonfile.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/line.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/mongo.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/split.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/splunk.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/sqlite.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/stream.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/text.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/adapter/xlsx.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/base.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/exceptions.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/credential.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/net/__init__.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/net/ip.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/net/ipv4.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/net/tcp.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/fieldtypes/net/udp.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/jsonpacker.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/packer.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/stream.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/tools/__init__.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/tools/geoip.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/tools/rdump.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/utils.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow/record/whitelist.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow.record.egg-info/SOURCES.txt +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow.record.egg-info/dependency_links.txt +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow.record.egg-info/entry_points.txt +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow.record.egg-info/requires.txt +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/flow.record.egg-info/top_level.txt +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/pyproject.toml +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/setup.cfg +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/__init__.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/_utils.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/docs/Makefile +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/docs/conf.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/docs/index.rst +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/selector_explain_example.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/standalone_test.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_avro.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_avro_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_compiled_selector.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_csv_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_deprecations.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_elastic_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_fieldtype_ip.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_fieldtypes.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_json_packer.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_json_record_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_multi_timestamp.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_packer.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_rdump.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_record.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_record_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_record_descriptor.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_regression.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_selector.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_splunk_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/test_sqlite_duckdb_adapter.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tests/utils_inspect.py +0 -0
- {flow_record-3.16.dev9 → flow_record-3.17.dev1}/tox.ini +0 -0
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.1
|
|
2
2
|
Name: flow.record
|
|
3
|
-
Version: 3.
|
|
3
|
+
Version: 3.17.dev1
|
|
4
4
|
Summary: A library for defining and creating structured data (called records) that can be streamed to disk or piped to other tools that use flow.record
|
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
|
6
6
|
License: Affero General Public License v3
|
|
@@ -67,7 +67,8 @@ def flow_record_tz(*, default_tz: str = "UTC") -> Optional[ZoneInfo | UTC]:
|
|
|
67
67
|
try:
|
|
68
68
|
return ZoneInfo(tz)
|
|
69
69
|
except ZoneInfoNotFoundError as exc:
|
|
70
|
-
|
|
70
|
+
if tz != "UTC":
|
|
71
|
+
warnings.warn(f"{exc!r}, falling back to timezone.utc")
|
|
71
72
|
return UTC
|
|
72
73
|
|
|
73
74
|
|
|
@@ -17,25 +17,6 @@ except ImportError:
|
|
|
17
17
|
|
|
18
18
|
string_types = (str, type(""))
|
|
19
19
|
|
|
20
|
-
AST_NODE_S_TYPES = tuple(
|
|
21
|
-
filter(
|
|
22
|
-
None,
|
|
23
|
-
[
|
|
24
|
-
getattr(ast, "Str", None),
|
|
25
|
-
getattr(ast, "Bytes", None),
|
|
26
|
-
],
|
|
27
|
-
),
|
|
28
|
-
)
|
|
29
|
-
|
|
30
|
-
AST_NODE_VALUE_TYPES = tuple(
|
|
31
|
-
filter(
|
|
32
|
-
None,
|
|
33
|
-
[
|
|
34
|
-
getattr(ast, "NameConstant", None),
|
|
35
|
-
getattr(ast, "Constant", None),
|
|
36
|
-
],
|
|
37
|
-
),
|
|
38
|
-
)
|
|
39
20
|
|
|
40
21
|
AST_OPERATORS = {
|
|
41
22
|
ast.Add: operator.add,
|
|
@@ -581,11 +562,7 @@ class RecordContextMatcher:
|
|
|
581
562
|
return r
|
|
582
563
|
|
|
583
564
|
def _eval(self, node):
|
|
584
|
-
if isinstance(node, ast.
|
|
585
|
-
return node.n
|
|
586
|
-
elif isinstance(node, AST_NODE_S_TYPES):
|
|
587
|
-
return node.s
|
|
588
|
-
elif isinstance(node, AST_NODE_VALUE_TYPES):
|
|
565
|
+
if isinstance(node, ast.Constant):
|
|
589
566
|
return node.value
|
|
590
567
|
elif isinstance(node, ast.List):
|
|
591
568
|
return list(map(self.eval, node.elts))
|
|
@@ -12,5 +12,5 @@ __version__: str
|
|
|
12
12
|
__version_tuple__: VERSION_TUPLE
|
|
13
13
|
version_tuple: VERSION_TUPLE
|
|
14
14
|
|
|
15
|
-
__version__ = version = '3.
|
|
16
|
-
__version_tuple__ = version_tuple = (3,
|
|
15
|
+
__version__ = version = '3.17.dev1'
|
|
16
|
+
__version_tuple__ = version_tuple = (3, 17, 'dev1')
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
Metadata-Version: 2.1
|
|
2
2
|
Name: flow.record
|
|
3
|
-
Version: 3.
|
|
3
|
+
Version: 3.17.dev1
|
|
4
4
|
Summary: A library for defining and creating structured data (called records) that can be streamed to disk or piped to other tools that use flow.record
|
|
5
5
|
Author-email: Dissect Team <dissect@fox-it.com>
|
|
6
6
|
License: Affero General Public License v3
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|
|
File without changes
|