监控主机间的访问关系

#!python3

# FileName: net_monitor.py

import psutilimport osimport jsonimport atexitimport timeimport ipaddressimport sys

from pprint import pprint



def is_ipv6(ip_str):    try:        ipaddress.IPv6Address(ip_str)        return True    except ipaddress.AddressValueError:        return False



def cleanup():    serialize_data(json_file, ipset)    print('Saving ...')



def serialize_data(file_name, my_set):    json_data = json.dumps(list(my_set))

    # 将 JSON 数据写入文件    with open(file_name, 'w') as json_file:        json_file.write(json_data)



def unserialize_data(file_name):    with open(file_name, 'r') as json_file:        loaded_data = json.load(json_file)        return set(loaded_data)



# 默认数据文件，也可以命令行指定json_file = r'd:ipset.json'



# ip 集合ipset = set()

# 休眠时间，单位：秒sleep_sec = 1



if __name__ == '__main__':

    # 命令行指定新的数据文件    if len(sys.argv) == 2:        json_file = sys.argv[1]

    # 注册清理函数    atexit.register(cleanup)

    if os.path.isfile(json_file):        ipset = unserialize_data(json_file)

    count = 0

    while True:

        # 获取当前网络连接信息        network_connections = psutil.net_connections()

        for conn in network_connections:

            if conn.laddr and conn.raddr:                ip = conn.raddr.ip                # 处理 ipv6                if is_ipv6(ip):                    continue                if ip not in ipset:                    ipset.add(ip)

        time.sleep(sleep_sec)        count += 1        if count%30 == 0:            serialize_data(json_file, ipset)            count = 0

$ pyhton3 net_monitor ipset.json

import ipaddress

def sort_ips(ip_list):    # 使用ipaddress.IPv4Address创建IPv4地址对象并排序    sorted_ips = sorted(ipaddress.IPv4Address(ip) for ip in ip_list)    return sorted_ips

# 示例列表ip_list = ['192.168.1.2', '10.0.0.1', '172.16.0.1', '192.168.0.1']

# 对IP地址进行排序sorted_ips = sort_ips(ip_list)

# 打印排序后的IP地址for ip in sorted_ips:    print(ip)

import ipaddress

def is_private_ip(ip_str):    try:        ip = ipaddress.ip_address(ip_str)        return ip.is_private    except ValueError:        # 无效的IP地址        return False

# 示例ip1 = '192.168.1.1'ip2 = '203.0.113.1'

# 判断是否为私有网络IP地址print(f"{ip1} is private IP: {is_private_ip(ip1)}")print(f"{ip2} is private IP: {is_private_ip(ip2)}")

10.0.0.0-10.255.255.255  CIDR格式：10.0.0.0/8172.16.0.0-172.31.255.255 CIDR格式：172.16.0.0/12192.168.0.0-192.168.255.255 CIDR格式：192.168.0.0/16

0.0.0.0/8 - Current network (only valid as source address) RFC 1700100.64.0.0 ~ 100.127.255.255 (100.64.0.0/10 prefix) carrier-grade NAT communication between service provider and subscribers127.0.0.0 is reserved for loopback and IPC on the localhost.127.0.0.1 ~ 127.255.255.254 (127.0.0.0/8) - loopback IP addresses (refers to self) RFC 5735192.0.0.0/24 - reserved (IANA) RFC 5735192.88.99.0/24 - IPv6 to IPv4 relay. RFC 3068198.18.0.0/15 - network benchmark tests. RFC 2544198.51.100.0/24 - TEST-NET-2. RFC 5737203.0.113.0/24 - TEST-NET-3. RFC 5737224.0.0.0 ~ 239.255.255.255 (224.0.0.0/4) reserved for multicast addresses. RFC 3171240.0.0.0/4 - reserved (former Class E network) RFC 1700255.255.255.255 is the limited broadcast address (limited to all other nodes on the LAN) RFC 919

255 in any part of the IP is reserved for broadcast addressing0.0.0.0 in routing context means the default route (to "the rest of" the internet) RFC 17000.0.0.0 in the context of firewalls means "all addresses of the local machine" RFC 1700

https://www.speedguide.net/ip/203.0.113.5