-
Notifications
You must be signed in to change notification settings - Fork 63
Nist updates #662
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Nist updates #662
Conversation
{
"date": "2025-06-01T02:43:49.033Z",
"files": [
{
"name": "netutils/data_files/oui_mappings.py",
"deltaBytes": 7279,
"source": "https://standards-oui.ieee.org"
}
]
}
{
"date": "2025-06-01T02:48:51.338Z",
"files": [
{
"name": "netutils/data_files/protocol_mappings.py",
"deltaBytes": 62,
"source": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv"
}
]
}
Flatbot OUI File Updates
Flatbot PROTOCOL File Updates
netutils/lib_mapper.py
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think you can remove this, we would keep this regardless of NIST_LIB_MAPPER_REVERSE_DICT. This is the standard to map between all of the different OS's.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Removed.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I also updated the NIST_LIB_MAPPER_REVERSE to keep consistent entries with the others (after adding the other platforms) since the mapper itself is being kept for standard.
netutils/lib_mapper.py
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's use NIST_TO_VENDOR
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated
…ated tests for it.
…hString, fixed nxos, added aruba and paloalto, update get_nist_urls() to use NIST_LIB_MAPPER_REVERSE_DICT
pyproject.toml
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you remove this from your PR? We'll make a v1.14.0 prep PR where we'll bump the version and add any release notes since there will (most likely) be other updates.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated
qduk
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Are all the mappings in NIST_TO_VENDOR actually correct? Specially os_name
asa: shouldn't it beadaptive_security_appliance_softwarexe: shouldn't it beios_xexr: shouldn't it beios_xr
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for fixing it, looks good!
* Flat: latest data (2025-06-01T02:43:49.033Z)
{
"date": "2025-06-01T02:43:49.033Z",
"files": [
{
"name": "netutils/data_files/oui_mappings.py",
"deltaBytes": 7279,
"source": "https://standards-oui.ieee.org"
}
]
}
* Flat: latest data (2025-06-01T02:48:51.338Z)
{
"date": "2025-06-01T02:48:51.338Z",
"files": [
{
"name": "netutils/data_files/protocol_mappings.py",
"deltaBytes": 62,
"source": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.csv"
}
]
}
* Updated teh URL for cpeName (didn't make it into last commit) and updated tests for it.
* Made changes to the URL creation using cpeName instead of virtualMatchString, fixed nxos, added aruba and paloalto, update get_nist_urls() to use NIST_LIB_MAPPER_REVERSE_DICT
* Removing TODO comment on NIST_LIB_MAPPER_REVERSE
* Added panos to the reverse mapper and alphabetized all NIST mapper entries.
* Ran developmen_scripts again
* Missed alphabetization on cisco_asa in the reverse dict
* Renamed NIST_LIB_MAPPER_REVERSE_DICT to NIST_TO_VENDOR
* Reverted the version bump
* Fixing value in lib_mapper NIST_TO_VENDOR for adaptive_security_appliance_software
* Updating lib_mapper NIST_TO_VENDOR for ios xe and xr
---------
Co-authored-by: flat-data <[email protected]>
Fix: NXOS was not pulling CVEs because urls were using "nxos" but needed "nx-os"
Add: aruba_aos and paloalto_panos
Update: URLS were using parameter "virtualStringMatch", updated to use "cpeName" per the API documentation to get more accurate results