Documentation ¶
Index ¶
Constants ¶
View Source
const LogFile = "logboost.log"
Variables ¶
View Source
var AuditLogIPRegex = regexp.MustCompile(`.*ClientIP":"(?P<ClientIP>.*?)",.*`)
View Source
var DataCenterASNNumbers = []string{} /* 792 elements not displayed */
https://github.com/X4BNet/lists_vpn/blob/main/input/datacenter/ASN.txt
View Source
var DnsCacheFile = "dns.cache"
View Source
var Dnsfastcache = fastcache.LoadFromFileOrNew(DnsCacheFile, 1_000_000_000)
1 GB max cache size
View Source
var ExtraKeysColumnName = "EXTRA_KEYS"
View Source
var GeoFields = []string{"lb_IP", "lb_ASN", "lb_ASN_Number", "lb_Country", "lb_City", "lb_Domains", "lb_TLD", "lb_ThreatCategories", "lb_ThreatFeedCount", "lb_ThreatFeeds"}
View Source
var GeoLiteASNDBURL = ""
View Source
var GeoLiteCityDBURL = ""
View Source
var GeoLiteCountryDBURL = ""
View Source
var GetAllFiles = false
Controls whether we collect files in visit() beyond .log, .csv and .txt - set by -getall param
View Source
var Ipv4_regex = regexp.MustCompile(`.*?(?P<ip>\b(?:(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\b).*?`)
var Ipv4_regex = regexp.MustCompile(`.*(?P<ip>((25[0-5]|(2[0-4]|1\d|[1-9]|)\d)\.?\b){4}).*`)
View Source
var Ipv6_regex = regexp.MustCompile(`.*?(?P<ip>(([0-9a-fA-F]{0,4}:){2,7}[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,7}:|([0-9a-fA-F]{1,4}:){1,6}:[0-9a-fA-F]{1,4}|([0-9a-fA-F]{1,4}:){1,5}(:[0-9a-fA-F]{1,4}){1,2}|([0-9a-fA-F]{1,4}:){1,4}(:[0-9a-fA-F]{1,4}){1,3}|([0-9a-fA-F]{1,4}:){1,3}(:[0-9a-fA-F]{1,4}){1,4}|([0-9a-fA-F]{1,4}:){1,2}(:[0-9a-fA-F]{1,4}){1,5}|[0-9a-fA-F]{1,4}:((:[0-9a-fA-F]{1,4}){1,6})|:((:[0-9a-fA-F]{1,4}){1,7}|:)|fe80:(:[0-9a-fA-F]{0,4}){0,4}%[0-9a-zA-Z]{1,}|::(ffff(:0{1,4}){0,1}:){0,1}((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])|([0-9a-fA-F]{1,4}:){1,4}:((25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9])\.){3,3}(25[0-5]|(2[0-4]|1{0,1}[0-9]){0,1}[0-9]))).*?`)
View Source
var LogsToProcess = make([]string, 0)
Used in func visit to add log paths as we crawl the input directory
View Source
var MaxMindFileLocations = map[string]string{
"ASN": "",
"City": "",
"Country": "",
"Domain": "",
}
View Source
var MaxMindFiles = map[string]string{
"ASN": "GeoLite2-ASN.mmdb",
"City": "GeoLite2-City.mmdb",
"Country": "GeoLite2-Country.mmdb",
"Domain": "GeoIP2-Domain.mmdb",
}
View Source
var MaxMindStatus = map[string]bool{ "ASN": false, "City": false, "Country": false, "Domain": false, }
View Source
var MaxMindURLs = map[string]string{ "ASN": GeoLiteASNDBURL, "City": GeoLiteCityDBURL, "Country": GeoLiteCountryDBURL, "Domain": "", }
Functions ¶
This section is empty.
Types ¶
This section is empty.
Click to show internal directories.
Click to hide internal directories.