#-*- coding: utf-8 -*-
#!/usr/bin/python
import os,re,time

new_rules = {}
old_rules = {}
rules_all = {}

def get_filename(filename):
    global rules_all
    rules_tmp = {}
    data = open(filename,'r')
    for i in data:
        line = i
        i = i.replace(' ','')
        if 'sid:' not in i or 'rev:' not in i:
            continue
        else:
            sid = re.findall('sid:(\d*);',i)[0]
            rev = re.findall('rev:(\d*);',i)[0]
            rules_tmp[sid] = rev
            rules_all[sid] = line
    return rules_tmp

def get_rules():
    global new_rules,old_rules
    new_dir_list = os.listdir("./rules")
    for filename in new_dir_list:
        if filename[-6:] == '.rules':
            new_rules[filename] = {}
    for filename in new_rules.keys():
        new_rules[filename] = get_filename("./rules/"+filename)
    old_dir_list = os.listdir("./rules-bak-2018-0912")
    for filename in old_dir_list:
        if filename[-6:] == '.rules':
            old_rules[filename] = {}
    for filename in old_rules.keys():
        old_rules[filename] = get_filename("./rules-bak-2018-0912/"+filename)

def save_file(line,txtype):
    try:
        save = open(time.strftime("/tmp/ids_rules/"+"%Y-%m-%d",time.localtime())+txtype+'.txt','a+')
    except Exception, e:
        os.mkdir('/tmp/ids_rules/')
        save = open(time.strftime("/tmp/ids_rules/"+"%Y-%m-%d",time.localtime())+txtype+'.txt','a+')
    save.write(line)
    save.close()

if __name__ == '__main__':
    get_rules()
    for filename in new_rules:
        if filename not in old_rules:
            print '[info]file_add:%s' %filename
        else:
            for irules in new_rules[filename]:
                if irules not in old_rules[filename]:
                    if re.findall('(?:(?:1[0-9][0-9]\.)|(?:2[0-4][0-9]\.)|(?:25[0-5]\.)|(?:[1-9][0-9]\.)|(?:[0-9]\.)){3}(?:(?:1[0-9][0-9])|(?:2[0-4][0-9])|(?:25[0-5])|(?:[1-9][0-9])|(?:[0-9]))',rules_all[irules]):
                        save_file(rules_all[irules],'_ip_type')
                        continue
                    elif re.findall('([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:)',rules_all[irules]):
                        save_file(rules_all[irules],'_ip_type')
                        continue
                    print '[info]irules_add:%s,filename:%s' %(irules,filename)
                    print rules_all[irules]
                    save_file(rules_all[irules],'_irule_type')
                elif new_rules[filename][irules] != old_rules[filename][irules]:
                    if re.findall('(?:(?:1[0-9][0-9]\.)|(?:2[0-4][0-9]\.)|(?:25[0-5]\.)|(?:[1-9][0-9]\.)|(?:[0-9]\.)){3}(?:(?:1[0-9][0-9])|(?:2[0-4][0-9])|(?:25[0-5])|(?:[1-9][0-9])|(?:[0-9]))',rules_all[irules]):
                        save_file(rules_all[irules],'_ip_type')
                        continue
                    elif re.findall('([0-9A-Fa-f]{1,4}:){7}([0-9A-Fa-f]{1,4}|:)',rules_all[irules]):
                        save_file(rules_all[irules],'_ip_type')
                        continue
                    if new_rules[filename][irules] > old_rules[filename][irules]:
                        print '[info]irules_is_upgrade:%s,filename:%s' %(irules,filename)
                    else:
                        print '[info]irules_is_downgrade:%s,filename:%s' %(irules,filename)
                    print rules_all[irules]
                    save_file(rules_all[irules],'_irule_type')
                else:
                    pass
            for irules in old_rules[filename]:
                if irules not in new_rules[filename]:
                    print '[info]irules_delete:%s,filename:%s' %(irules,filename)
                    print rules_all[irules]
                    save_file(rules_all[irules],'_irule_type')