Skip to content

Conversation

@bminnix
Copy link
Contributor

@bminnix bminnix commented Jun 2, 2025

Fix: NXOS was not pulling CVEs because urls were using "nxos" but needed "nx-os"

Add: aruba_aos and paloalto_panos

Update: URLS were using parameter "virtualStringMatch", updated to use "cpeName" per the API documentation to get more accurate results

flat-data and others added 4 commits June 1, 2025 02:43
{
  "date": "2025-06-01T02:43:49.033Z",
  "files": [
    {
      "name": "netutils/data_files/oui_mappings.py",
      "deltaBytes": 7279,
      "source": "https://standards-oui.ieee.org"
    }
  ]
}
{
  "date": "2025-06-01T02:48:51.338Z",
  "files": [
    {
      "name": "netutils/data_files/protocol_mappings.py",
      "deltaBytes": 62,
      "source": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv"
    }
  ]
}
Flatbot PROTOCOL File Updates
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think you can remove this, we would keep this regardless of NIST_LIB_MAPPER_REVERSE_DICT. This is the standard to map between all of the different OS's.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Removed.

Copy link
Contributor Author

@bminnix bminnix Jun 3, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I also updated the NIST_LIB_MAPPER_REVERSE to keep consistent entries with the others (after adding the other platforms) since the mapper itself is being kept for standard.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's use NIST_TO_VENDOR

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated

pyproject.toml Outdated
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you remove this from your PR? We'll make a v1.14.0 prep PR where we'll bump the version and add any release notes since there will (most likely) be other updates.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated

Copy link
Collaborator

@qduk qduk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are all the mappings in NIST_TO_VENDOR actually correct? Specially os_name

  • asa: shouldn't it be adaptive_security_appliance_software
  • xe: shouldn't it be ios_xe
  • xr: shouldn't it be ios_xr

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for fixing it, looks good!

@jeffkala jeffkala merged commit 32d2941 into networktocode:develop Jul 11, 2025
19 checks passed
@jeffkala jeffkala mentioned this pull request Jul 11, 2025
michalis1 pushed a commit to michalis1/netutils that referenced this pull request Feb 2, 2026
* Flat: latest data (2025-06-01T02:43:49.033Z)
{
  "date": "2025-06-01T02:43:49.033Z",
  "files": [
    {
      "name": "netutils/data_files/oui_mappings.py",
      "deltaBytes": 7279,
      "source": "https://standards-oui.ieee.org"
    }
  ]
}

* Flat: latest data (2025-06-01T02:48:51.338Z)
{
  "date": "2025-06-01T02:48:51.338Z",
  "files": [
    {
      "name": "netutils/data_files/protocol_mappings.py",
      "deltaBytes": 62,
      "source": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv"
    }
  ]
}

* Updated teh URL for cpeName (didn't make it into last commit) and updated tests for it.

* Made changes to the URL creation using cpeName instead of virtualMatchString, fixed nxos, added aruba and paloalto, update get_nist_urls() to use NIST_LIB_MAPPER_REVERSE_DICT

* Removing TODO comment on NIST_LIB_MAPPER_REVERSE

* Added panos to the reverse mapper and alphabetized all NIST mapper entries.

* Ran developmen_scripts again

* Missed alphabetization on cisco_asa in the reverse dict

* Renamed NIST_LIB_MAPPER_REVERSE_DICT to NIST_TO_VENDOR

* Reverted the version bump

* Fixing value in lib_mapper NIST_TO_VENDOR for adaptive_security_appliance_software

* Updating lib_mapper NIST_TO_VENDOR for ios xe and xr

---------

Co-authored-by: flat-data <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants