xbase-util 0.3.2__tar.gz → 0.3.4__tar.gz

{xbase_util-0.3.2 → xbase_util-0.3.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: xbase_util
-Version: 0.3.2
+Version: 0.3.4
 Summary: 网络安全基础工具
 Home-page: https://gitee.com/jimonik/xbase_util.git
 Author: xyt

{xbase_util-0.3.2 → xbase_util-0.3.4}/setup.py

@@ -3,7 +3,7 @@ from distutils.core import setup
 from setuptools import find_packages
 
 setup(name="xbase_util",
-      version="0.3.2",
+      version="0.3.4",
       description="网络安全基础工具",
       long_description="包含提取，预测，训练的基础工具",
       author="xyt",

{xbase_util-0.3.2 → xbase_util-0.3.4}/xbase_util/xbase_util.py

@@ -225,21 +225,22 @@ def get_statistic_fields(packets):
     return field_map
 
 
-def get_dns_domains(packets):
-    domain_names = []
+def get_dns_domain(packets):
+    domain_name = ""
     for packet_item in packets:
         if DNS in packet_item:
             dns_layer = packet_item[DNS]
             if dns_layer.qd:
                 try:
                     domain_name = dns_layer.qd.qname.decode('utf-8')
+                    # print(f"dns域名:{domain_name}")
                 except Exception:
                     domain_name = str(dns_layer.qd.qname)
                     print(f"dns域名编码失败的字符串:{domain_name}")
-                if domain_name.endswith("."):
-                    domain_name = domain_name[:-1]
-                domain_names.append(domain_name)
-    return domain_names
+                break
+    if domain_name.endswith("."):
+        domain_name = domain_name[:-1]
+    return domain_name
 
 
 def extract_session_fields(origin_list, geoUtil):
@@ -323,6 +324,7 @@ def extract_session_fields(origin_list, geoUtil):
             "http.request-refererCnt": http.get("requestRefererCnt", 0),
             "http.path": http.get("path", []),
             "http.hostCnt": http.get("hostCnt", 0),
+            "http.host": http.get("host", []),
             "http.response-server": http.get("response-server", []),
             "http.pathCnt": http.get("pathCnt", 0),
             "http.useragentTokens": http.get("useragentTokens", ""),

{xbase_util-0.3.2 → xbase_util-0.3.4}/xbase_util.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: xbase-util
-Version: 0.3.2
+Version: 0.3.4
 Summary: 网络安全基础工具
 Home-page: https://gitee.com/jimonik/xbase_util.git
 Author: xyt