Function update_rdns

python3_cron_scripts/get_data_by_cidr_unified.py:178–234

Search RDNS file and insert relevant records into the database.

(logger, rdns_file, mongo_connection, dns_manager, ip_manager, zones)

def update_rdns(logger, rdns_file, mongo_connection, dns_manager, ip_manager, zones):
    """
    Search RDNS file and insert relevant records into the database.
    """
    g_dns = GoogleDNS.GoogleDNS()
    rdns_collection = mongo_connection.get_sonar_reverse_dns_connection()

    with open(rdns_file, "r") as rdns_f:
        for line in rdns_f:
            try:
                data = json.loads(line)
            except ValueError:
                continue
            except Exception as e:
                logger.error("Error parsing file...")
                logger.error("Exception: " + str(e))
                raise

            if "type" in data and data["type"] != "ptr":
                continue

            try:
                ip_addr = data["name"]
            except:
                ip_addr = None

            try:
                domain = data["value"]
            except KeyError:
                domain = None

            timestamp = data["timestamp"]

            if domain != None and ip_addr != None and ip_manager.is_tracked_ip(ip_addr):
                logger.debug("Matched RDNS " + ip_addr)
                zone = find_zone(domain, zones)
                result = mongo_connection.perform_count(
                    rdns_collection, {"ip": ip_addr}
                )

                if result == 0:
                    insert_json = {}
                    insert_json["ip"] = ip_addr
                    insert_json["zone"] = zone
                    insert_json["fqdn"] = domain
                    insert_json["status"] = "unknown"
                    insert_json["sonar_timestamp"] = int(timestamp)
                    insert_json["created"] = datetime.now()
                    insert_json["updated"] = datetime.now()
                    mongo_connection.perform_insert(rdns_collection, insert_json)
                else:
                    rdns_collection.update_one(
                        {"ip": ip_addr},
                        {"$set": {"fqdn": domain}, "$currentDate": {"updated": True}},
                    )

                check_for_ptr_record(ip_addr, dns_manager, g_dns, zones)