"""This module defines a generated parser model."""

from aminer.parsing.DateTimeModelElement import DateTimeModelElement
from aminer.parsing.DecimalIntegerValueModelElement import DecimalIntegerValueModelElement
from aminer.parsing.FirstMatchModelElement import FirstMatchModelElement
from aminer.parsing.FixedDataModelElement import FixedDataModelElement
from aminer.parsing.OptionalMatchModelElement import OptionalMatchModelElement
from aminer.parsing.SequenceModelElement import SequenceModelElement
from aminer.parsing.VariableByteDataModelElement import VariableByteDataModelElement
from aminer.parsing.DelimitedDataModelElement import DelimitedDataModelElement


def get_model():
    """Return a model to parse Audit logs from the AIT-LDS."""
    alphabet = b"!'#$%&\"()*+,-./0123456789:;<>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ\\^_`abcdefghijklmnopqrstuvwxyz{|}~=[]"

    seq = [
        FixedDataModelElement("audit_str", b"audit("),
        DateTimeModelElement("time", b"%s.%f"),
        FixedDataModelElement("colon_str", b":"),
        DecimalIntegerValueModelElement("id"),
        FixedDataModelElement("pid_str", b"): pid="),
        VariableByteDataModelElement("pid", alphabet),
        FixedDataModelElement("uid_str", b" uid="),
        VariableByteDataModelElement("uid", alphabet),
        FixedDataModelElement("auid_str", b" auid="),
        VariableByteDataModelElement("auid", alphabet),
        FixedDataModelElement("ses_str", b" ses="),
        VariableByteDataModelElement("ses", alphabet),
        FixedDataModelElement("msg2_str", b" msg="),
        VariableByteDataModelElement("msg2", alphabet),
        FirstMatchModelElement("fm", [
            SequenceModelElement("acct", [
                FixedDataModelElement("acct_str", b" acct="),
                VariableByteDataModelElement("acct", alphabet)]),
            SequenceModelElement("comm", [
                FixedDataModelElement("comm_str", b" comm="),
                VariableByteDataModelElement("comm", alphabet)]),
            SequenceModelElement("id", [
                FixedDataModelElement("id_str", b" id="),
                VariableByteDataModelElement("id", alphabet)]),
            SequenceModelElement("cmd", [
                FixedDataModelElement("cmd_str", b" cmd="),
                VariableByteDataModelElement("cmd", alphabet)])]),
        OptionalMatchModelElement(
            "opt", SequenceModelElement("opt_seq", [
                FixedDataModelElement("exe_str", b" exe="),
                VariableByteDataModelElement("exe", alphabet),
                FixedDataModelElement("hostname_str", b" hostname="),
                VariableByteDataModelElement("hostname", alphabet),
                FixedDataModelElement("addr_str", b" addr="),
                VariableByteDataModelElement("addr", alphabet)])),
        FixedDataModelElement("terminal_str", b" terminal="),
        VariableByteDataModelElement("terminal", alphabet),
        FixedDataModelElement("res_str", b" res="),
        VariableByteDataModelElement("res", alphabet)]

    model = SequenceModelElement("model", [
        FixedDataModelElement("type_str", b"type="),
        FirstMatchModelElement("type", [
            SequenceModelElement("execve", [
                FixedDataModelElement("execve_str", b"EXECVE msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("argc_str", b"): argc="),
                DecimalIntegerValueModelElement("argc", value_sign_type=DecimalIntegerValueModelElement.SIGN_TYPE_OPTIONAL),
                FixedDataModelElement("a0_str", b" a0="),
                VariableByteDataModelElement("a0", alphabet),
                OptionalMatchModelElement(
                    "opt1", SequenceModelElement("seq1", [
                        FixedDataModelElement("a1_str", b" a1="),
                        VariableByteDataModelElement("a1", alphabet),
                        OptionalMatchModelElement(
                            "opt2", SequenceModelElement("seq2", [
                                FixedDataModelElement("a2_str", b" a2="),
                                VariableByteDataModelElement("a2", alphabet),
                                OptionalMatchModelElement(
                                    "opt3", SequenceModelElement("seq3", [
                                        FixedDataModelElement("a3_str", b" a3="),
                                        VariableByteDataModelElement("a3", alphabet),
                                        OptionalMatchModelElement(
                                            "opt4", SequenceModelElement("seq4", [
                                                FixedDataModelElement("a4_str", b" a4="),
                                                VariableByteDataModelElement("a4", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt5", SequenceModelElement("seq5", [
                                                FixedDataModelElement("a5_str", b" a5="),
                                                VariableByteDataModelElement("a5", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt6", SequenceModelElement("seq6", [
                                                FixedDataModelElement("a6_str", b" a6="),
                                                VariableByteDataModelElement("a6", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt7", SequenceModelElement("seq7", [
                                                FixedDataModelElement("a7_str", b" a7="),
                                                VariableByteDataModelElement("a7", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt8", SequenceModelElement("seq8", [
                                                FixedDataModelElement("a8_str", b" a8="),
                                                VariableByteDataModelElement("a8", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt9", SequenceModelElement("seq9", [
                                                FixedDataModelElement("a9_str", b" a9="),
                                                VariableByteDataModelElement("a9", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt10", SequenceModelElement("seq10", [
                                                FixedDataModelElement("a10_str", b" a10="),
                                                VariableByteDataModelElement("a10", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt11", SequenceModelElement("seq11", [
                                                FixedDataModelElement("a11_str", b" a11="),
                                                VariableByteDataModelElement("a11", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt12", SequenceModelElement("seq12", [
                                                FixedDataModelElement("a12_str", b" a12="),
                                                VariableByteDataModelElement("a12", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt13", SequenceModelElement("seq13", [
                                                FixedDataModelElement("a13_str", b" a13="),
                                                VariableByteDataModelElement("a13", alphabet)
                                                ])
                                            ),
                                        OptionalMatchModelElement(
                                            "opt14", SequenceModelElement("seq14", [
                                                FixedDataModelElement("a14_str", b" a14="),
                                                VariableByteDataModelElement("a14", alphabet)
                                                ])
                                            )]))]))]))]),
            SequenceModelElement("proctitle", [
                FixedDataModelElement("type_str", b"PROCTITLE msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("proctitle_str", b"): proctitle="),
                VariableByteDataModelElement("proctitle", alphabet)]),
            SequenceModelElement("syscall", [
                FixedDataModelElement("msg_str", b"SYSCALL msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("arch_str", b"): arch="),
                VariableByteDataModelElement("arch", alphabet),
                FixedDataModelElement("syscall_str", b" syscall="),
                DecimalIntegerValueModelElement("syscall", value_sign_type=DecimalIntegerValueModelElement.SIGN_TYPE_OPTIONAL),
                FixedDataModelElement("success_str", b" success="),
                VariableByteDataModelElement("success", alphabet),
                FixedDataModelElement("exit_str", b" exit="),
                VariableByteDataModelElement("exit", alphabet),
                FixedDataModelElement("a0_str", b" a0="),
                VariableByteDataModelElement("a0", alphabet),
                FixedDataModelElement("a1_str", b" a1="),
                VariableByteDataModelElement("a1", alphabet),
                FixedDataModelElement("a2_str", b" a2="),
                VariableByteDataModelElement("a2", alphabet),
                FixedDataModelElement("a3_str", b" a3="),
                VariableByteDataModelElement("a3", alphabet),
                FixedDataModelElement("items_str", b" items="),
                VariableByteDataModelElement("items", alphabet),
                FixedDataModelElement("ppid_str", b" ppid="),
                VariableByteDataModelElement("ppid", alphabet),
                FixedDataModelElement("pid_str", b" pid="),
                VariableByteDataModelElement("pid", alphabet),
                FixedDataModelElement("auid_str", b" auid="),
                VariableByteDataModelElement("auid", alphabet),
                FixedDataModelElement("uid_str", b" uid="),
                VariableByteDataModelElement("uid", alphabet),
                FixedDataModelElement("gid_str", b" gid="),
                VariableByteDataModelElement("gid", alphabet),
                FixedDataModelElement("euid_str", b" euid="),
                VariableByteDataModelElement("euid", alphabet),
                FixedDataModelElement("suid_str", b" suid="),
                VariableByteDataModelElement("suid", alphabet),
                FixedDataModelElement("fsuid_str", b" fsuid="),
                VariableByteDataModelElement("fsuid", alphabet),
                FixedDataModelElement("egid_str", b" egid="),
                VariableByteDataModelElement("egid", alphabet),
                FixedDataModelElement("sgid_str", b" sgid="),
                VariableByteDataModelElement("sgid", alphabet),
                FixedDataModelElement("fsgid_str", b" fsgid="),
                VariableByteDataModelElement("fsgid", alphabet),
                FixedDataModelElement("tty_str", b" tty="),
                VariableByteDataModelElement("tty", alphabet),
                FixedDataModelElement("ses_str", b" ses="),
                VariableByteDataModelElement("ses", alphabet),
                FixedDataModelElement("comm_str", b" comm="),
                VariableByteDataModelElement("comm", alphabet),
                FixedDataModelElement("exe_str", b" exe="),
                VariableByteDataModelElement("exe", alphabet),
                FixedDataModelElement("key_str", b" key="),
                VariableByteDataModelElement("key", alphabet)]),
            SequenceModelElement("path", [
                FixedDataModelElement("msg_str", b"PATH msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("item_str", b"): item="),
                DecimalIntegerValueModelElement("item", value_sign_type=DecimalIntegerValueModelElement.SIGN_TYPE_OPTIONAL),
                FixedDataModelElement("name_str", b" name="),
                VariableByteDataModelElement("name", alphabet),
                FirstMatchModelElement("path", [
                    SequenceModelElement("nametype", [
                        FixedDataModelElement("nametype_str", b" nametype="),
                        VariableByteDataModelElement("nametype", alphabet)]),
                    SequenceModelElement("inode", [
                        FixedDataModelElement("inode_str", b" inode="),
                        DecimalIntegerValueModelElement("inode", value_sign_type=DecimalIntegerValueModelElement.SIGN_TYPE_OPTIONAL),
                        FixedDataModelElement("dev_str", b" dev="),
                        VariableByteDataModelElement("dev", alphabet),
                        FixedDataModelElement("mode_str", b" mode="),
                        VariableByteDataModelElement("mode", alphabet),
                        FixedDataModelElement("ouid_str", b" ouid="),
                        VariableByteDataModelElement("ouid", alphabet),
                        FixedDataModelElement("ogid_str", b" ogid="),
                        VariableByteDataModelElement("ogid", alphabet),
                        FixedDataModelElement("rdev_str", b" rdev="),
                        VariableByteDataModelElement("rdev", alphabet),
                        FixedDataModelElement("nametype_str", b" nametype="),
                        VariableByteDataModelElement("nametype", alphabet)])])]),
            SequenceModelElement("login", [
                FixedDataModelElement("msg1_str", b"LOGIN msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("pid_str", b"): pid="),
                VariableByteDataModelElement("pid", alphabet),
                FixedDataModelElement("uid_str", b" uid="),
                VariableByteDataModelElement("uid", alphabet),
                FixedDataModelElement("old_auid_str", b" old-auid="),
                VariableByteDataModelElement("old_auid", alphabet),
                FixedDataModelElement("auid_str", b" auid="),
                VariableByteDataModelElement("auid", alphabet),
                OptionalMatchModelElement(
                    "tty", SequenceModelElement("tty", [
                        FixedDataModelElement("tty_str", b" tty="),
                        VariableByteDataModelElement("tty", alphabet)])),
                FixedDataModelElement("old_ses_str", b" old-ses="),
                VariableByteDataModelElement("old_ses", alphabet),
                FixedDataModelElement("ses_str", b" ses="),
                VariableByteDataModelElement("ses", alphabet),
                FixedDataModelElement("res_str", b" res="),
                VariableByteDataModelElement("res", alphabet)]),
            SequenceModelElement("sockaddr", [
                FixedDataModelElement("msg_str", b"SOCKADDR msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("saddr_str", b"): saddr="),
                VariableByteDataModelElement("saddr", alphabet)]),
            SequenceModelElement("unknown", [
                FixedDataModelElement("unknwon_str", b"UNKNOWN["),
                DecimalIntegerValueModelElement("unknown_id", value_sign_type=DecimalIntegerValueModelElement.SIGN_TYPE_OPTIONAL),
                FixedDataModelElement("msg_str", b"] msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("proctitle_str", b"): proctitle="),
                VariableByteDataModelElement("proctitle", alphabet)]),
            SequenceModelElement("cred_refr", [
                FixedDataModelElement("msg1_str", b"CRED_REFR msg=")] + seq),
            SequenceModelElement("user_start", [
                FixedDataModelElement("msg1_str", b"USER_START msg=")] + seq),
            SequenceModelElement("user_acct", [
                FixedDataModelElement("msg1_str", b"USER_ACCT msg=")] + seq),
            SequenceModelElement("user_auth", [
                FixedDataModelElement("msg1_str", b"USER_AUTH msg=")] + seq),
            SequenceModelElement("user_login", [
                FixedDataModelElement("msg1_str", b"USER_LOGIN msg=")] + seq),
            SequenceModelElement("cred_disp", [
                FixedDataModelElement("msg1_str", b"CRED_DISP msg=")] + seq),
            SequenceModelElement("service_start", [
                FixedDataModelElement("msg1_str", b"SERVICE_START msg=")] + seq),
            SequenceModelElement("service_stop", [
                FixedDataModelElement("msg1_str", b"SERVICE_STOP msg=")] + seq),
            SequenceModelElement("user_end", [
                FixedDataModelElement("msg1_str", b"USER_END msg=")] + seq),
            SequenceModelElement("user_cmd", [
                FixedDataModelElement("msg1_str", b"USER_CMD msg=")] + seq),
            SequenceModelElement("cred_acq", [
                FixedDataModelElement("msg1_str", b"CRED_ACQ msg=")] + seq),
            SequenceModelElement("avc", [
                FixedDataModelElement("abc_str", b"AVC msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("apparmor_str", b"): apparmor=\""),
                DelimitedDataModelElement("apparmor", b"\""),
                FixedDataModelElement("operation_str", b"\" operation=\""),
                DelimitedDataModelElement("operation", b"\""),
                OptionalMatchModelElement(
                    "opt", SequenceModelElement("seq", [
                        FixedDataModelElement("info_str", b"\" info=\""),
                        DelimitedDataModelElement("info", b"\"")])),
                FixedDataModelElement("profile_str", b"\" profile=\""),
                DelimitedDataModelElement("profile", b"\""),
                FixedDataModelElement("name_str", b"\" name=\""),
                DelimitedDataModelElement("name", b"\""),
                FixedDataModelElement("pid_str", b"\" pid="),
                DecimalIntegerValueModelElement("pid"),
                FixedDataModelElement("comm_str", b" comm=\""),
                DelimitedDataModelElement("comm", b"\""),
                FixedDataModelElement("quote", b"\"")]),
            SequenceModelElement("user_bprm_fcaps", [
                FixedDataModelElement("msg1_str", b"BPRM_FCAPS msg=audit("),
                DateTimeModelElement("time", b"%s.%f"),
                FixedDataModelElement("colon_str", b":"),
                DecimalIntegerValueModelElement("id"),
                FixedDataModelElement("fver_str", b"): fver="),
                VariableByteDataModelElement("fver", alphabet),
                FixedDataModelElement("fp_str", b" fp="),
                VariableByteDataModelElement("fp", alphabet),
                FixedDataModelElement("fi_str", b" fi="),
                VariableByteDataModelElement("fi", alphabet),
                FixedDataModelElement("fe_str", b" fe="),
                VariableByteDataModelElement("fe", alphabet),
                FixedDataModelElement("old_pp_str", b" old_pp="),
                VariableByteDataModelElement("old_pp", alphabet),
                FixedDataModelElement("old_pi_str", b" old_pi="),
                VariableByteDataModelElement("old_pi", alphabet),
                FixedDataModelElement("old_pe_str", b" old_pe="),
                VariableByteDataModelElement("old_pe", alphabet),
                FixedDataModelElement("new_pp_str", b" new_pp="),
                VariableByteDataModelElement("new_pp", alphabet),
                FixedDataModelElement("new_pi_str", b" new_pi="),
                VariableByteDataModelElement("new_pi", alphabet),
                FixedDataModelElement("new_pe_str", b" new_pe="),
                VariableByteDataModelElement("new_pe", alphabet)])])])

    return model
