hansjone/netx
1
0
Fork 0
mirror of https://github.com/hansjone/netx.git synced 2026-10-09 02:00:46 +08:00
Code Issues Projects Releases 1 Packages Wiki Activity Actions 2

Ignore Huawei/ZTE post-login banners when classifying auth failures.

Browse source 
Bastion hop success notices mention authentication failure count and were misread as target_auth_rejected.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
oliver 2026-08-02 20:12:03 +08:00
parent 015b935f81
commit 60186a12e3
2 changed files with 36 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

14
netx_api/ne_cli_errors.py
View file

@ -26,12 +26,24 @@ _AUTH_PATTERNS: tuple[re.Pattern[str], ...] = tuple(
)
)
# Huawei / ZTE post-login security banner (success path via SSH or bastion hop).
# Example: "Afterwards, 0 authentication failure occurred."
_LOGIN_SUCCESS_NOTICE = re.compile(
r"^.*(?:"
r"last\s+successful\s+login\s+was\s+performed"
r"|afterwards,\s*\d+\s+authentication\s+failures?\s+occurred"
r"|上次成功登录"
r"|之后发生了?\s*\d+\s*次认证失败"
r").*$",
re.I | re.M,
)
_PROMPT_TIMEOUT = re.compile(r"pattern not detected|readtimeout|read timeout", re.I)
def find_auth_failure_snippet(text: str, *, max_len: int = 220) -> str | None:
"""Return a short matching auth-failure line/snippet, or None."""
blob = str(text or "")
blob = _LOGIN_SUCCESS_NOTICE.sub("", str(text or ""))
if not blob.strip():
return None
for pat in _AUTH_PATTERNS: