def WriteHuntResults(client_id, hunt_id, responses):
"""Writes hunt results from a given client as part of a given hunt."""
if not hunt.IsLegacyHunt(hunt_id):
data_store.REL_DB.WriteFlowResults(responses)
def UpdateFn(hunt_obj):
hunt_obj.num_results += len(responses)
return hunt_obj
hunt_obj = data_store.REL_DB.UpdateHuntObject(hunt_id, UpdateFn)
hunt_obj = hunt.StopHuntIfAverageLimitsExceeded(hunt_obj)
return
hunt_id_urn = rdfvalue.RDFURN("hunts").Add(hunt_id)
msgs = []
for response in responses:
if isinstance(response, rdf_flow_objects.FlowStatus):
continue
msgs.append(
rdf_flows.GrrMessage(payload=response.payload, source=client_id))
with data_store.DB.GetMutationPool() as pool:
for msg in msgs:
hunts_results.HuntResultCollection.StaticAdd(
hunt_id_urn.Add("Results"), msg, mutation_pool=pool)
for msg in msgs:
multi_type_collection.MultiTypeCollection.StaticAdd(
hunt_id_urn.Add("ResultsPerType"), msg, mutation_pool=pool)
stats_collector_instance.Get().IncrementCounter("hunt_results_added",
delta=len(responses))
def ProcessHuntClientCrash(flow_obj, client_crash_info):
"""Processes client crash triggerted by a given hunt-induced flow."""
if not hunt.IsLegacyHunt(flow_obj.parent_hunt_id):
def UpdateFn(hunt_obj):
hunt_obj.num_crashed_clients += 1
return hunt_obj
hunt_obj = data_store.REL_DB.UpdateHuntObject(flow_obj.parent_hunt_id,
UpdateFn)
if (hunt_obj.crash_limit
and hunt_obj.num_crashed_clients >= hunt_obj.crash_limit):
# Remove our rules from the forman and cancel all the started flows.
# Hunt will be hard-stopped and it will be impossible to restart it.
reason = ("Hunt %s reached the crashes limit of %d "
"and was stopped.") % (hunt_obj.hunt_id,
hunt_obj.crash_limit)
hunt.StopHunt(hunt_obj.hunt_id, reason=reason)
hunt_obj = hunt.StopHuntIfAverageLimitsExceeded(hunt_obj)
return
hunt_urn = rdfvalue.RDFURN("hunts").Add(flow_obj.parent_hunt_id)
with aff4.FACTORY.Open(hunt_urn, mode="rw") as fd:
# Legacy AFF4 code expects token to be set.
fd.token = access_control.ACLToken(username=fd.creator)
fd.RegisterCrash(client_crash_info)
def ProcessHuntFlowError(flow_obj,
error_message=None,
backtrace=None,
status_msg=None):
"""Processes error and status message for a given hunt-induced flow."""
if not hunt.IsLegacyHunt(flow_obj.parent_hunt_id):
def UpdateFn(hunt_obj):
hunt_obj.num_failed_clients += 1
return hunt_obj
hunt_obj = data_store.REL_DB.UpdateHuntObject(flow_obj.parent_hunt_id,
UpdateFn)
hunt_obj = hunt.StopHuntIfAverageLimitsExceeded(hunt_obj)
return
hunt_urn = rdfvalue.RDFURN("hunts").Add(flow_obj.parent_hunt_id)
client_urn = rdf_client.ClientURN(flow_obj.client_id)
error = rdf_hunts.HuntError(client_id=flow_obj.client_id,
backtrace=backtrace)
if error_message is not None:
error.log_message = error_message
with data_store.DB.GetMutationPool() as pool:
grr_collections.HuntErrorCollection.StaticAdd(
hunt_urn.Add("ErrorClients"), error, mutation_pool=pool)
grr_collections.ClientUrnCollection.StaticAdd(
hunt_urn.Add("CompletedClients"), client_urn, mutation_pool=pool)
if status_msg is not None:
with aff4.FACTORY.OpenWithLock(hunt_urn,
lease_time=_HUNT_LEASE_TIME,
blocking=True) as fd:
fd.GetRunner().SaveResourceUsage(flow_obj.client_id, status_msg)
def ProcessHuntFlowDone(flow_obj, status_msg=None):
"""Notifis hunt about a given hunt-induced flow completion."""
if not hunt.IsLegacyHunt(flow_obj.parent_hunt_id):
resources = _FlowStatusToClientResources(flow_obj, status_msg)
def UpdateFn(hunt_obj):
hunt_obj.num_successful_clients += 1
if flow_obj.num_replies_sent:
hunt_obj.num_clients_with_results += 1
hunt_obj.client_resources_stats.RegisterResources(resources)
return hunt_obj
hunt_obj = data_store.REL_DB.UpdateHuntObject(flow_obj.parent_hunt_id,
UpdateFn)
hunt_obj = hunt.StopHuntIfAverageLimitsExceeded(hunt_obj)
hunt.CompleteHuntIfExpirationTimeReached(hunt_obj)
return
hunt_urn = rdfvalue.RDFURN("hunts").Add(flow_obj.parent_hunt_id)
client_urn = rdf_client.ClientURN(flow_obj.client_id)
# Update the counter metrics separately from collections to minimize
# contention.
with aff4.FACTORY.Open(hunt_urn, mode="rw") as fd:
# Legacy AFF4 code expects token to be set.
fd.token = access_control.ACLToken(username=fd.creator)
if flow_obj.num_replies_sent:
fd.context.clients_with_results_count += 1
fd.context.completed_clients_count += 1
fd.context.results_count += flow_obj.num_replies_sent
fd.GetRunner().SaveResourceUsage(flow_obj.client_id, status_msg)
with aff4.FACTORY.Open(hunt_urn, mode="rw") as fd:
# Legacy AFF4 code expects token to be set.
fd.token = access_control.ACLToken(username=fd.creator)
fd.RegisterCompletedClient(client_urn)
if flow_obj.num_replies_sent:
fd.RegisterClientWithResults(client_urn)
fd.StopHuntIfAverageLimitsExceeded()
def ProcessHuntFlowDone(flow_obj, status_msg=None):
"""Notifis hunt about a given hunt-induced flow completion."""
if not hunt.IsLegacyHunt(flow_obj.parent_hunt_id):
resources = rdf_client_stats.ClientResources(
client_id=flow_obj.client_id,
session_id=flow_obj.flow_id,
cpu_usage=rdf_client_stats.CpuSeconds(
user_cpu_time=status_msg.cpu_time_used.user_cpu_time,
system_cpu_time=status_msg.cpu_time_used.system_cpu_time),
network_bytes_sent=status_msg.network_bytes_sent)
def UpdateFn(hunt_obj):
hunt_obj.num_successful_clients += 1
if flow_obj.num_replies_sent:
hunt_obj.num_clients_with_results += 1
hunt_obj.client_resources_stats.RegisterResources(resources)
return hunt_obj
hunt_obj = data_store.REL_DB.UpdateHuntObject(flow_obj.parent_hunt_id,
UpdateFn)
hunt_obj = hunt.StopHuntIfAverageLimitsExceeded(hunt_obj)
hunt.CompleteHuntIfExpirationTimeReached(hunt_obj)
return
hunt_urn = rdfvalue.RDFURN("hunts").Add(flow_obj.parent_hunt_id)
client_urn = rdf_client.ClientURN(flow_obj.client_id)
with aff4.FACTORY.OpenWithLock(hunt_urn,
lease_time=_HUNT_LEASE_TIME,
blocking=True) as fd:
# Legacy AFF4 code expects token to be set.
fd.token = access_control.ACLToken(username=fd.creator)
fd.RegisterCompletedClient(client_urn)
if flow_obj.num_replies_sent:
fd.RegisterClientWithResults(client_urn)
fd.context.clients_with_results_count += 1
fd.context.completed_clients_count += 1
fd.context.results_count += flow_obj.num_replies_sent
fd.GetRunner().SaveResourceUsage(flow_obj.client_id, status_msg)
fd.StopHuntIfAverageLimitsExceeded()
def ProcessHuntFlowError(flow_obj,
error_message=None,
backtrace=None,
status_msg=None):
"""Processes error and status message for a given hunt-induced flow."""
if not hunt.IsLegacyHunt(flow_obj.parent_hunt_id):
resources = _FlowStatusToClientResources(flow_obj, status_msg)
def UpdateFn(hunt_obj):
hunt_obj.num_failed_clients += 1
hunt_obj.client_resources_stats.RegisterResources(resources)
return hunt_obj
hunt_obj = data_store.REL_DB.UpdateHuntObject(flow_obj.parent_hunt_id,
UpdateFn)
hunt_obj = hunt.StopHuntIfAverageLimitsExceeded(hunt_obj)
return
hunt_urn = rdfvalue.RDFURN("hunts").Add(flow_obj.parent_hunt_id)
client_urn = rdf_client.ClientURN(flow_obj.client_id)
error = rdf_hunts.HuntError(client_id=flow_obj.client_id,
backtrace=backtrace)
if error_message is not None:
error.log_message = error_message
with data_store.DB.GetMutationPool() as pool:
grr_collections.HuntErrorCollection.StaticAdd(
hunt_urn.Add("ErrorClients"), error, mutation_pool=pool)
grr_collections.ClientUrnCollection.StaticAdd(
hunt_urn.Add("CompletedClients"), client_urn, mutation_pool=pool)
if status_msg is not None:
with aff4.FACTORY.Open(hunt_urn, mode="rw") as fd:
# Legacy AFF4 code expects token to be set.
fd.token = access_control.ACLToken(username=fd.creator)
fd.GetRunner().SaveResourceUsage(flow_obj.client_id, status_msg)
