querylog/query.py at master · gkw/querylog · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137

#!/usr/bin/env python
import sys, random
from pprint import pprint
from datetime import datetime

from random import randrange
from datetime import timedelta
import pymongo


class IPv4:
  def __init__(self):
    self.digits = [0,0,0,0]

  def set(self, d):
    self.digits = d

  def hexpad(self, num):
    h = str(hex(num))[2:6]
    if len(h) == 1:
      return "0" + h
    else:
      return h

  def num2hex(self):
    d = self.digits
    return [self.hexpad(d[0]),self.hexpad(d[1]),self.hexpad(d[2]),self.hexpad(d[3])]

  @staticmethod
  def char2ip(d):
    return str(int(d[0],16)) + "." + \
           str(int(d[1],16)) + "." + \
           str(int(d[2],16)) + "." + \
           str(int(d[3],16))

#python2.7 is used to run this script

def query(params):

  pprint (params)

  conn = pymongo.MongoClient()
  db = conn.endgame.conding_GenkiKuroda

  results = db.find({'visited_at':{'$gt':params['from']},
                     'visited_at':{'$lt':params['to']}},
                    {'_id':0,'ipv4':1,'visited_at':1}).sort('visited_at', 1)

  #make sure index is being used...
  #pprint(db.find({'visited_at':{'$gt':params['from']},
  #                'visited_at':{'$lt':params['to']}}}.explain()

  try:
    last_date = None
    ipv4s = set([])
    ip_count = 0

    for x in results:
      visited_at = x['visited_at']

      #reset ipv4s for new day
      if last_date != None:
        if last_date.year  != visited_at.year or   \
           last_date.month != visited_at.month or \
           last_date.day   != visited_at.day:
          #print ipv4s
          ip_count = ip_count + len(ipv4s)
          ipv4s = set([])
      last_date = visited_at
      ipv4s.add("".join(x['ipv4']))

      print ("%s %s") % (visited_at, IPv4.char2ip(x['ipv4']))
    print ("%d hits (%d unique hits)" % (results.count(),  ip_count+len(ipv4s)))
  except Exception as ex01:
    print ex01

def random_date(start, end):
    """
    Source: http://stackoverflow.com/questions/553303/generate-a-random-date-between-two-other-dates
    """
    delta = end - start
    int_delta = (delta.days * 24 * 60 * 60) + delta.seconds
    random_second = randrange(int_delta)

    return start + timedelta(seconds=random_second)

def init(count):

  conn = pymongo.MongoClient()
  db = conn.endgame.conding_GenkiKuroda.drop()
  db = conn.endgame.conding_GenkiKuroda

  ipaddr = IPv4()
  for x in xrange(count):
    for i in range(4):
      try:
        ipaddr.digits[i] = random.randint(0, 255)
      except Exception as ex01:
        print ex01

    d1 = datetime.strptime('1/1/2014  1:30 PM', '%m/%d/%Y %I:%M %p')
    d2 = datetime.strptime('11/1/2014 3:50 PM', '%m/%d/%Y %I:%M %p')

    log = {'ipv4':ipaddr.num2hex(),
           'visited_at': random_date(d1, d2),
          #'url': 'http://example.org/products/' + str(randrange(count)) + '.html'
          }
    db.insert(log)

    #intentinally making some duplicate IP addresses.
    log = {'ipv4':ipaddr.num2hex(),
           'visited_at': random_date(d1, d2),
          #'url': 'http://example.org/products/' + str(randrange(count)) + '.html'
          }
    db.insert(log)

  #create indexes
  db.ensure_index('visited_at', 1)
  db.ensure_index('visited_at', -1)
  db.ensure_index('ipv4', 1)
  db.ensure_index('ipv4', -1)

if __name__ == "__main__":
  try:
    init(5000)
  except Exception as ex01:
    print ex01, "cannot be initialized..."
    quit()

  try:
    fromDate = datetime(2014, 1, 1, 0, 0, 0, 0)
    toDate   = datetime(2014, 4, 1, 0, 0, 0, 0)
    query({'from':fromDate,'to':toDate})
  except:
    print "something wrong happened..."
    quit()