| Dir : /usr/libexec/kcare/python/kcarectl/__pycache__/ |
| Server: Linux red.truehostdns.com 4.18.0-553.150.1.el8_10.x86_64 #1 SMP Fri Jul 31 15:23:31 EDT 2026 x86_64 IP: 51.161.15.103 |
| Dir : //usr/libexec/kcare/python/kcarectl/__pycache__/anomaly.cpython-36.pyc |
3
0�j� � @ s� d dl Z d dlZd dlmZmZmZmZ ejejd�dd� �Z dd� Z
ejejd�dd � �Z ejejd
d �d d
� �Z e
dkr�e i � dS )� N)� delivery_kit�kcare� log_utils�utils)�loggerc C s | j � S )a Send the DataPackage archive to the patch server.
Upload errors are logged and swallowed (catch_errors), preserving
the historical kernel-anomaly behavior.
:param data_package: DataPackage instance to send
:return: Upload name (package identifier)
)�send)� data_package� r �-/usr/libexec/kcare/python/kcarectl/anomaly.py�send_data_package s r c C sT t j � }xFtj| �D ]8\}}|| dkr*P dj||jdd��}|j||d� qW dS )zZadds recent files for the last hour to the given data package starting from the newest onei z{0}/{1}�/�_)�src_pathN)�timer Zsort_files_by_ctime�format�replace�add_file)�filesr Zarchive_prefix�now�path�ctimeZarcnamer r r
�copy_recent_files s r c 3 C s� t j� }|��� tjjd�r(|jdd� tjjd�r@|jdd� |jdd� |jd d � |jd
d � tjjd �s|tjjd
�r�d}n$tjjd�r�d}|jddd� nd}|jd|� td�� }|jdtj |j
� �d� W d Q R X td�� }|jdtj |j
� �d� W d Q R X |jdd d� |j d | � |jd d d� |jd d!j t
j� �� ytt
j� |d"� W n4 tk
�r� } z|jd#j |�� W Y d d }~X nX ytt
j� |d$� W n4 tk
�r� } z|jd%j |�� W Y d d }~X nX W d Q R X |S )&Nz/var/log/messages�messagesz tail -n10000 /var/log/messagesz/var/log/syslogZsyslogz tail -n10000 /var/log/syslogz kcarectl.logz"tail -n10000 /var/log/kcarectl.logZdmesgZls_var_cache_kcarezls -lR /var/cache/kcare/z /usr/bin/rpmz/bin/rpmzFrpm -q -a --queryformat="%{N}|%{V}-%{R}|%{arch}|%{INSTALLTIME:date}\n"z
/usr/bin/dpkgzJ/usr/bin/dpkg-query -W -f "${binary:Package}|${Version}|${Architecture}\n"zdpkg.logz/var/log/dpkg.log)r z echo "unknown package manager"z
packages.listz
/proc/versionZ proc_version)Z
data_bytesz
/proc/modulesZ proc_modulesz
kcare.confz /etc/sysconfig/kcare/kcare.confzserver_info.jsonz
kdump.confz/etc/kdump.confZls_kdumpz
ls -lR {0}Zkdumpzfailed to copy kdumps:
{0}Z
crashreporterz+failed to copy crashreporter artifacts:
{0})r ZKernelAnomalyPackage�osr �existsZ
add_stdoutr �openr �bstr�readZadd_jsonr r Zget_kdump_rootr Zlist_kdump_txt_files� ExceptionZ log_errorZ list_crashreporter_log_files)� server_infor Z packages_cmd�f�er r r
� prepare_kernel_anomaly_report* sB
"
" ",r" F)r Zdefault_returnc C s | d }t | d �}t | jd�p"d�}t | d �}| d }yt | d d �}W n tttfk
rl d}Y nX ||||||g}t|�s�d S d }d } d }
|d
k r�|dkr�d }|| | ko�|| d
kn r�|dkr�d } ||k r�d }
|| |
g} t| ��rtjdj| �� d S d S )z3taken from eportal - anomalies::detect_agent_reboot�reason�uptime� patch_levelz-1� last_stop�ts�stater Fi, � Ti �updatezAgent anomaly detected: {0}���) �int�get�KeyError� TypeError�
ValueError�allr �loginfor ) r r# r$ r% r& r' Zstate_tsZfieldsZ first_update_after_reboot_markerZ crash_soon_after_update_markerZno_proper_shutdown_marker�markersr r r
�detect_anomaly_ s8
,
r4 �__main__)r r �kcarectlr r r r Z catch_errors�logwarnr r r" r4 �__name__r r r r
�<module> s
5-