-
Notifications
You must be signed in to change notification settings - Fork 2
/
job-filemagic.py
92 lines (65 loc) · 2.26 KB
/
job-filemagic.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
#!/usr/bin/python
# -*- coding: utf-8 -*-
import logging
import time
import tempfile
from pymongo import MongoClient
import gridfs
try:
import magic
except ImportError:
pass
from utils import get_file, clean_data, get_type, Config
JOBNAME = 'FILEMAGIC'
SLEEPTIME = 1
# create logger
logger = logging.getLogger(JOBNAME)
logger.setLevel(logging.DEBUG)
# create console handler with a higher log level
logch = logging.StreamHandler()
logch.setLevel(logging.INFO)
# create formatter and add it to the handlers
formatter = \
logging.Formatter('%(asctime)s - %(name)s - %(levelname)s - %(message)s'
)
logch.setFormatter(formatter)
# add the handlers to the logger
logger.addHandler(logch)
client = MongoClient(host=Config().database.dbhost, port=Config().database.dbport)
db = client.vxcage
fs = gridfs.GridFS(db)
while True:
try:
for (sampleno, sample) in \
enumerate(db.fs.files.find({'filetype': {'$exists': False}},
timeout=False)):
try:
logger.info('[%s] Processing sample %s' % (sampleno,
sample['sha256']))
samplekey = {'sha256': sample['sha256']}
# download sample file
logger.debug('[%s] Downloading data' % sampleno)
data = get_file(db, sha256=sample['sha256'])
# Do analysis
logger.debug('[%s] Analysing' % sampleno)
file_type = get_type(data)
# Store results
logger.debug('[%s] Storing results into MongoDB'
% sampleno)
if file_type:
db.fs.files.update(samplekey,
{'$set': {'filetype': file_type}},
upsert=True)
# delete sample file
logger.debug('[%s] Deleting temporary data' % sampleno)
del samplekey
del data
logger.info('[%s] Metadata updated' % sampleno)
except Exception, e:
logger.exception(e)
pass
except Exception, e:
logger.exception(e)
pass
logger.info('Sleeping %s minutes' % SLEEPTIME)
time.sleep(SLEEPTIME * 60)