153 lines
3.2 KiB
Go
153 lines
3.2 KiB
Go
package elasticsearch
|
|
|
|
import (
|
|
"bufio"
|
|
"encoding/json"
|
|
"strconv"
|
|
"strings"
|
|
|
|
osm "git.loafle.net/overflow/service_matcher-go"
|
|
)
|
|
|
|
type ElasticSearchMatcher struct {
|
|
osm.Matchers
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) Key() string {
|
|
return "ELASTICSEARCH"
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) Type() string {
|
|
return "SEARCH"
|
|
}
|
|
func (m *ElasticSearchMatcher) Vendor(matchCtx *osm.MatchCtx) string {
|
|
return "Elasticsearch"
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) Version(matchCtx *osm.MatchCtx) string {
|
|
return "UNKNOWN"
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) OsType(matchCtx *osm.MatchCtx) string {
|
|
return "UNKNOWN"
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) OsVersion(matchCtx *osm.MatchCtx) string {
|
|
return "UNKNOWN"
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) Name(matchCtx *osm.MatchCtx) string {
|
|
name := "ElasticSearch"
|
|
if v, ok := matchCtx.GetAttribute("number"); ok {
|
|
name = name + " (" + v + ")"
|
|
}
|
|
return name
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) IsPrePacket() bool {
|
|
return false
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) HasResponse(matchCtx *osm.MatchCtx, index int) bool {
|
|
return true
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) IsError(matchCtx *osm.MatchCtx, index int, packet *osm.Packet) bool {
|
|
return false
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) Match(matchCtx *osm.MatchCtx, index int, packet *osm.Packet) error {
|
|
|
|
if packet == nil || !packet.Valid() {
|
|
return osm.NoPacketReceivedError()
|
|
}
|
|
|
|
str := string(packet.Bytes())
|
|
hnb := strings.Split(str, "\r\n\r\n")
|
|
|
|
if nil == hnb || 2 > len(hnb) {
|
|
return osm.NotMatchedError()
|
|
}
|
|
|
|
header := hnb[0]
|
|
body := hnb[1]
|
|
|
|
lineNo := 0
|
|
scanner := bufio.NewScanner(strings.NewReader(header))
|
|
contentLen := 0
|
|
for scanner.Scan() {
|
|
line := scanner.Text()
|
|
|
|
if strings.Compare(line, "") == 0 {
|
|
continue
|
|
}
|
|
|
|
if lineNo == 0 && !strings.HasPrefix(line, "HTTP/") {
|
|
return osm.NotMatchedError()
|
|
}
|
|
|
|
if strings.Contains(line, ":") {
|
|
kv := strings.Split(line, ": ")
|
|
if kv[0] == "content-type" && !strings.Contains(kv[1], "application/json") {
|
|
return osm.NotMatchedError()
|
|
}
|
|
if kv[0] == "content-length" {
|
|
len, err := strconv.Atoi(kv[1])
|
|
if err != nil {
|
|
return osm.NotMatchedError()
|
|
}
|
|
contentLen = len
|
|
}
|
|
}
|
|
lineNo++
|
|
}
|
|
content := body[:contentLen]
|
|
if strings.HasPrefix(content, "{") && strings.HasSuffix(content, "}") {
|
|
return osm.NotMatchedError()
|
|
}
|
|
m.parseJson(matchCtx, content)
|
|
if _, ok := matchCtx.GetAttribute("cluster_name"); !ok {
|
|
return osm.NotMatchedError()
|
|
}
|
|
if _, ok := matchCtx.GetAttribute("cluster_uuid"); !ok {
|
|
return osm.NotMatchedError()
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) parseJson(matchCtx *osm.MatchCtx, jsonstr string) error {
|
|
jsonMap := make(map[string]interface{})
|
|
err := json.Unmarshal([]byte(jsonstr), &jsonMap)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
m.dumpMap(matchCtx, jsonMap)
|
|
return nil
|
|
}
|
|
|
|
func (m *ElasticSearchMatcher) dumpMap(matchCtx *osm.MatchCtx, jsonMap map[string]interface{}) {
|
|
for k, v := range jsonMap {
|
|
if mv, ok := v.(map[string]interface{}); ok {
|
|
m.dumpMap(matchCtx, mv)
|
|
} else {
|
|
s, ok := v.(string)
|
|
if ok {
|
|
matchCtx.SetAttribute(k, s)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
func NewMatcher() osm.Matcher {
|
|
|
|
m := &ElasticSearchMatcher{}
|
|
|
|
reqStr := "GET / HTTP/1.1\r\n\r\n"
|
|
byte := make([]byte, len(reqStr))
|
|
copy(byte[:], reqStr)
|
|
|
|
m.AddPacket(osm.NewPacket(byte, len(reqStr)))
|
|
|
|
return m
|
|
}
|