telekom-security/tpotce
1
0
Fork 0
mirror of https://github.com/telekom-security/tpotce.git synced 2025-07-02 01:27:27 -04:00
Code Issues Packages Projects Releases Wiki Activity

refine ip matching

Browse Source 
fix regex to only match IPs at the beginning of a line
This commit is contained in:
Marco Ochse
2017-10-21 16:00:03 +02:00
committed by GitHub
parent b71f2f67f4
commit f2880ec3d6
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
docker/elk/logstash/dist/gen_iprep_map.sh vendored
View File

@ -43,9 +43,9 @@ local myFILE=$1
myZIP=$(file $myFILE | grep -c "Zip") myZIP=$(file $myFILE | grep -c "Zip")
if [ "$myZIP" == "1" ] if [ "$myZIP" == "1" ]
then then
unzip -p $myFILE | grep -o -P "\b(?:\d{1,3}\.){3}\d{1,3}/\d{1,2}\b" | xargs -I '{}' prips '{}' unzip -p $myFILE | grep -o -P "^\b(?:\d{1,3}\.){3}\d{1,3}/\d{1,2}\b" | xargs -I '{}' prips '{}'
else else
grep -o -P "\b(?:\d{1,3}\.){3}\d{1,3}/\d{1,2}\b" $myFILE | xargs -I '{}' prips '{}' grep -o -P "^\b(?:\d{1,3}\.){3}\d{1,3}/\d{1,2}\b" $myFILE | xargs -I '{}' prips '{}'
fi fi
fi fi
} }
@ -60,9 +60,9 @@ local myFILE=$1
myZIP=$(file $myFILE | grep -c "Zip") myZIP=$(file $myFILE | grep -c "Zip")
if [ "$myZIP" == "1" ] if [ "$myZIP" == "1" ]
then then
unzip -p $myFILE | grep -o -P "\b(?:\d{1,3}\.){3}\d{1,3}\b" unzip -p $myFILE | grep -o -P "^\b(?:\d{1,3}\.){3}\d{1,3}\b"
else else
grep -o -P "\b(?:\d{1,3}\.){3}\d{1,3}\b" $myFILE grep -o -P "^\b(?:\d{1,3}\.){3}\d{1,3}\b" $myFILE
fi fi
fi fi
} }