{{# var lang003 = {"ch": "任意", "en": "Any"},     lang004 = {"ch": "日志导出", "en": "Log Export"},     lang005 = {"ch": "确定要导出吗？", "en": "Confirm to Export the Log?"},     lang006 = {"ch": "命中次数", "en": "Hit Count"},     lang007 = {"ch": "序号", "en": "No."},     lang008 = {"ch": "最新命中时间", "en": "Last Hit Time"},     lang009 = {"ch": "协议", "en": "Protocol"},     lang010 = {"ch": "源IP:端口", "en": "Src IP:Port"},     lang011 = {"ch": "目标IP:端口", "en": "Dst IP:Port"},     lang013 = {"ch": "关键字搜索", "en": "Search"},     lang017 = {"ch": "阻断", "en": "Deny"},     lang018 = {"ch": "放行", "en": "Allow"},     lang019 = {"ch": "情报源", "en": "Vendor"},     lang020 = {"ch": "威胁等级", "en": "Severity"},     lang021 = {"ch": "严重", "en": "Critical"},     lang022 = {"ch": "高", "en": "High"},     lang023 = {"ch": "中", "en": "Medium"},     lang024 = {"ch": "低", "en": "Low"},     lang025 = {"ch": "未知", "en": "Unknown"},     lang026 = {"ch": "误报反馈", "en": "False Positive Feedback"},     lang027 = {"ch": "情报校验", "en": "Intelligence Verification"},     lang028 = {"ch": "情报类型", "en": "Intelligence Type"},     lang029 = {"ch": "恶意家族", "en": "Malware Family"},     lang030 = {"ch": "操作", "en": "Action"},     lang031 = {"ch": "报文分析", "en": "Packet Analysis"},     lang032 = {"ch": "监测", "en": "Monitor"},     lang033 = {"ch": "账号", "en": "Account"},     lang034 = {"ch": "地理位置", "en": "Location"},     lang035 = {"ch": "用户账号", "en": "Username"},     lang036 = {"ch": "信息", "en": "Info"};  var util = layui.util, ntmlog = layui.ntmlog;  if(d.stime && d.etime) {     var time1 = util.toDateString(d.etime);     var time2 = util.toDateString(d.stime); } else {     var cur_time = (new Date()).getTime();     var time1 = util.toDateString(cur_time);     var time2 = util.toDateString(cur_time - 900000); } }}  <style> .paui-threat-risk-critical{color:#ff2d2d;} .paui-threat-risk-high{color:#ff5252;} .paui-threat-risk-mid{color:#ffcc00;} .paui-threat-risk-low{color:#4dabf7;} .paui-threat-risk-info{color:#757575;} .paui-threat-risk-critical .layui-badge-dot{background-color:#ff2d2d;} .paui-threat-risk-high .layui-badge-dot{background-color:#ff5252;} .paui-threat-risk-mid .layui-badge-dot{background-color:#ffab00;} .paui-threat-risk-low .layui-badge-dot{background-color:#4dabf7;} .paui-threat-risk-info .layui-badge-dot{background-color:#757575;} .layui-badge-rim {     height: 20px;     line-height: 20px;     padding: 0px 8px;     border-radius: 3px;     margin:3px 0px;     font-size: 11px; }    </style>  {{# if(d.malc_screen == "1"){ }} <div style="padding: 10px;"> {{# } }}  {{# if(d.malc_screen == "1"){ }} <div> {{# }else{ }} <div style="overflow: hidden; height: calc(100vh - 92px);"> {{# } }} <form class="layui-form layui-form-pane paui-table-form" lay-filter="form_malc_auth_search"> <input type="hidden" name="taskname" value="pamalc_auth_sum"> <div class="layui-form-item paui-table-form-left"> <label class="layui-form-label">MAC</label> <div class="layui-input-inline" style="width:120px"> <input type="text" name="mac" class="layui-input"> </div> {{- ntmlog.show_srcdst_html() }} </div>  <div class="layui-form-item paui-table-form-right" style="width: 100px;"> <div class="layui-input-inline" style="width:100px; margin-right:0px;"> <div class="layui-btn-group malc_auth_type layui-btn-red"> <button type="button" isipv6="1" class="layui-btn layui-btn-sm layui-btn-primary"> IPv4 </button> <button type="button" isipv6="2" class="layui-btn layui-btn-sm layui-btn-primary"> IPv6 </button> </div> </div> </div>  <div class="layui-form-item paui-table-form-left"> <label class="layui-form-label">关键字</label> <div class="layui-input-inline" style="width: 120px"> <input type="text" name="keywd" class="layui-input"> </div> <label class="layui-form-label">{{ lang019[g_lang] || "情报源" }}</label> <div class="layui-input-inline" style="width: 120px;"> <select name="db" lay-filter="select_malcvendor_select_auth" id="select_malcvendor_select_auth"></select> </div> <label class="layui-form-label">{{ lang028[g_lang] || "情报类型" }}</label> <div class="layui-input-inline" style="width: 120px;"> <select name="type" lay-filter="select_malclog_select2_auth" id="select_malclog_select2_auth"> <option value="">{{ lang003[g_lang] || "任意" }}</option> </select> </div> <label class="layui-form-label">{{ lang020[g_lang] || "威胁等级" }}</label> <div class="layui-input-inline" style="width: 120px;"> <select name="risk" lay-filter="select_malclog_select3_auth" id="select_malclog_select3_auth"> <option value="">{{ lang003[g_lang] || "任意" }}</option> <option value="1">{{ lang021[g_lang] || "严重" }}</option> <option value="2">{{ lang022[g_lang] || "高" }}</option> <option value="3">{{ lang023[g_lang] || "中" }}</option> <option value="4">{{ lang024[g_lang] || "低" }}</option> <option value="0">{{ lang025[g_lang] || "未知" }}</option> </select> </div> <label class="layui-form-label">{{ lang035[g_lang] || "用户账号" }}</label> <div class="layui-input-inline" style="width: 120px"> <input type="text" name="username" class="layui-input"> </div> <input type="hidden" name="isipv6" value="1" class="layui-input">   </div>  <div class="layui-form-item paui-table-form-left"> <label class="layui-form-label">链路</label> <div class="layui-input-inline" style="width: 120px"> <select name="vpaid" id="vid" class="vid" lay-search=""> </select> </div>  <label class="layui-form-label">条件关系</label> <div class="layui-input-inline" style="width: 120px;"> <select name="qrtype"> <option value="and">与</option> <option value="or">或</option> <option value="not">非</option> </select> </div>  <label class="layui-form-label">时间范围</label> <div class="layui-input-inline" style="width:328px"> <input type="text" name="time" class="layui-input" id="ipt_auth_time" value="{{time2}} - {{time1}}"  lay-verify="required"> </div> <div class="layui-input-inline"> <button class="layui-btn layui-btn-normal layui-btn-sm" lay-submit lay-filter="submit_malc_auth_search" id="submit_malc_auth_search"> <i class="layui-icon layui-icon-search"></i> </button> {{- ntmlog.reset_form() }} </div> </div>  <div class="layui-form-item paui-table-form-right"> <div class="layui-form-mid" style="margin-right:0px"> <span class="abtn" malc_auth_event="btnevt_export" title="日志导出"> <i class="pa-icon pa-download"></i> </span> <span class="abtn paui-malc-auth-filter" title='自定义'> <i class="pa-icon pa-filter"></i> </span> </div> </div> </form> <div class="paui-table-card"> <table id="tab_malc_auth_all" lay-filter="tab_malc_auth_all"></table> <hr style="margin: 0px;"> <div class="layui-row"> <div class="layui-col-xs8"> <div class="layui-table-page" id="page_malc_auth_all" style="border:0px;"></div> </div> <div class="layui-col-xs4 paui-query-process-box"></div> </div> </div> </div>  {{# if(d.malc_screen == "1"){ }} </div> {{# } }}   <script id="tpl_cond_auth" type="text/html"> <span malc_auth_event="tabevt_auth" class="abtn" obj='{% JSON.stringify(d) %}' paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% d.auth %}</span> </script>    <script id="tpl_cond_src" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ if(d.src == "NULL"){ %} <span>-</span> {%# }else if(d.src.length > 0){ for(var i = 0; i < d.src.length; i++){ d.srcip= d.src[i]; %} <span class="abtn" malc_auth_event="tabevt_srcip" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.src[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.ioc %}</span> {%# } %} </script>   <script id="tpl_cond_dst" type="text/html"> {%# var ntmlog = layui.ntmlog; if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ var dst = ""; if(d.dst.length > 0){ for(var i = 0; i < d.dst.length; i++){ d.ip = d.dst[i].split(" ")[0]; %} <span class="abtn" malc_auth_event="tabevt_dstip" paui-copy-tips="btnevt_copy_tips"  obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.dst[i].split(" ")[0] %}</span> <span style="display: inline-block; padding-left: 10px;" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{%- ntmlog.show_td_flag(d.dst[i].split(" ")[1]) %}</span></br> {%#  } } }else{ d.ip = d.dst;                  %} <span class="abtn" ntmlog_session_event="tabevt_dst" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.dst %}</span> {%#  } %} </script>  <script id="tpl_cond_port" type="text/html"> {%# if (g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode") { var arr = d.dport; var port = "";  for (var i = 0; i < arr.length; i++) { if (i % 2 === 0) { if (i + 1 < arr.length) { d.port_ = arr[i]; d.port_1 = arr[i+1]; %}  <span class="abtn" obj='{% JSON.stringify(d) %}' malc_auth_event="tabevt_dport" port="{% arr[i] %}" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr[i] %}</span> |  <span class="abtn" obj='{% JSON.stringify(d) %}' malc_auth_event="tabevt_dport" port="{% arr[i+1] %}" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr[i+1] %}</span></br> {%# } else {  d.port_ = arr[i]; %} <span class="abtn" obj='{% JSON.stringify(d) %}' malc_auth_event="tabevt_dport"  port="{% arr[i] %}" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr[i] %}</span></br> {%# } } } } else { %} <span class="nbtn" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr %}</span> {%# } %} </script>   <script id="tpl_cond_db" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ if(d.db == "NULL"){ %} <span>-</span> {%# }else if(d.db.length > 0){ for(var i = 0; i < d.db.length; i++){ d.dbs= d.db[i]; %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.db[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.db %}</span> {%# } %} </script>      <script id="tpl_cond_ioc" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ if(d.ioc == "NULL"){ %} <span>-</span> {%# }else if(d.ioc.length > 0){ for(var i = 0; i < d.ioc.length; i++){ d.io= d.ioc[i]; %} <span class="abtn" malc_auth_event="tabevt_ioc" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.ioc[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.ioc %}</span> {%# } %} </script>  <script id="tpl_cond_cmname" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){  if(d.cmname == "NULL"){ %} <span>-</span> {%# }else if(d.cmname.length > 0){  for(var i = 0; i < d.cmname.length; i++){  d.cm = d.cmname[i]; %} <span class="layui-badge-rim layui-bg-red" style="border:0px">{% d.cmname[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.cmname %}</span> {%# } %} </script>   <script id="tpl_cond_risk" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){  if(d.risk == "NULL"){ %} <span>-</span> {%# }else if(d.risk.length > 0){  for(var i = 0; i < d.risk.length; i++){  %}  {%# if(d.risk[i] == 1) { %} <div class="paui-threat-risk-critical"> <span class="layui-badge-dot"></span>&nbsp;{{ lang021[g_lang] || "严重" }} </div>></br> {%# } else if(d.risk[i] == 2){ %} <div class="paui-threat-risk-high"> <span class="layui-badge-dot"></span>&nbsp;{{ lang022[g_lang] || "高" }} </div></br> {%# } else if(d.risk[i] == 3){ %} <div class="paui-threat-risk-mid"> <span class="layui-badge-dot"></span>&nbsp;{{ lang023[g_lang] || "中" }} </div></br> {%# } else if(d.risk[i] == 4){ %} <div class="paui-threat-risk-low"> <span class="layui-badge-dot"></span>&nbsp;{{ lang024[g_lang] || "低" }} </div></br> {%# } else if(d.risk[i] == 0){ %} <div class="paui-threat-risk-mid"> <span class="layui-badge-dot"></span>&nbsp;{{ lang025[g_lang] || "未知" }} </div></br> {%# } else { %} <div>-</div> {%# } %}      {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.risk %}</span> {%# } %} </script>    <script id="tpl_cond_drop" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){  if(d.drop == "NULL"){ %} <span>-</span> {%# }else if(d.drop.length > 0){  for(var i = 0; i < d.drop.length; i++){  %}  {%# if(d.drop[i] == 1) { %} <span class="paui-color-danger">{{ lang017[g_lang] || "阻断" }}</span>; </br>  {%# } else { %} <span class="paui-color-disable">{{ lang032[g_lang] || "监测" }}</span> </br> {%# } %}      {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.drop %}</span> {%# } %} </script>     <script> layui.use(function(){     var $ = layui.$,     util = layui.util,     form = layui.form,     table = layui.table,     ntmlog = layui.ntmlog, laydate = layui.laydate,     patpl = layui.patpl;      var pa_table_username = new Paui_table();     var api = '/cgi-bin/flowcontrol/ajax_malc';     var pdata = JSON.parse('{{- JSON.stringify(d) }}');     var vendor = [];    var newarr = groupByProperty(g_sys_env.linkArr, 'grpname'); var _html = '<option value="">{{ lang003[g_lang] || "任意" }}</option>'; for (let [key, value] of Object.entries(newarr)) { _html += '<optgroup label="'+ key +'">'; for(var k = 0; k < newarr[key].length; k++){ _html += '<option value="'+ newarr[key][k].id +'">'+ newarr[key][k].name +'</option>'  } _html += '</optgroup>'; } $(".vid").html(_html);  if(pdata.srcip && pdata.srcip.indexOf(":") != -1 || pdata.dstip && pdata.dstip.indexOf(":") != -1){ paui_db.save("isipv6", "2"); }else if(pdata.srcip && pdata.srcip.indexOf(":") == -1 || pdata.dstip && pdata.dstip.indexOf(":") == -1){ paui_db.save("isipv6", "1"); }  $(".malc_auth_type button").click(function(){ $(this).addClass("layui-btn-normal"); $(this).removeClass("layui-btn-primary"); $(this).siblings().removeClass("layui-btn-normal"); $(this).siblings().addClass("layui-btn-primary"); paui_db.save("isipv6", $(this).attr("isipv6")); form.val("form_malc_auth_search", {"isipv6": paui_db.get("isipv6")}); $("#submit_malc_auth_search").click(); });  if(typeof paui_db.get("isipv6") != undefined){ if(paui_db.get("isipv6") == "1"){ $(".malc_auth_type button").eq(0).addClass("layui-btn-normal"); $(".malc_auth_type button").eq(0).removeClass("layui-btn-primary"); $(".malc_auth_type button").eq(1).addClass("layui-btn-primary"); $(".malc_auth_type button").eq(1).removeClass("layui-btn-normal"); form.val("form_malc_auth_search", {"isipv6": "1"}); }else if(paui_db.get("isipv6") == "2"){ $(".malc_auth_type button").eq(0).addClass("layui-btn-primary"); $(".malc_auth_type button").eq(0).removeClass("layui-btn-normal"); $(".malc_auth_type button").eq(1).addClass("layui-btn-normal"); $(".malc_auth_type button").eq(1).removeClass("layui-btn-primary"); form.val("form_malc_auth_search", {"isipv6": "2"}); } }   laydate.render({ elem: '#ipt_auth_time' ,type: 'datetime' ,range: true ,lang: g_lang     ,shortcuts: paui_date_select_range() });       var event_center = {          btnevt_export: function(){ pa_confirm('确定要将当前条件的数据导出吗？', function(index){    layer.close(index);    ntmlog.create_ntmtask({    aloneid: true,    form: "form_malc_auth_search",    iform: function(data){    data.download = 1;    return data;    },    query: function(){    pa_ajax({    url: '/cgi-bin/App/ntm/ajax_task',    data: {"action": "list_ntmlog_task", "taskid": g_alone_taskid, "tag_list": " download=1"},    success: function(json){    layer.closeAll("loading");    if(json.code != 0) {    alert_err(json.msg);    return;    }    if(json.data.file){    var url = "/cgi-bin/App/ntm/ajax_ntm?action=ntm_download&file=" + json.data.file + "&name=";    paui_goto_url(url);    } else {    layer.closeAll("loading");    alert_err('返回数据出错：' + JSON.stringify(json.data));    }    }    });    },    }); });         },  tabevt_auth: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "",                     auth1: obj.auth },{ title: "数据诊断",                     path: "control/malc_history", desc: "",                     auth2: obj.auth }]        ,click: function(data){ if(data.auth1){                         var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.username = data.auth1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);                     }  else if(data.auth2){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.username = data.auth2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);   }      } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },           tabevt_ioc:function(obj){  var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "",                     keywd1: obj.io, auth1:obj.auth },{ title: "数据诊断",                     path: "control/malc_history", desc: "",                     keywd2: obj.io, auth2:obj.auth }]        ,click: function(data){ if(data.keywd1){                         var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.keywd = data.keywd1; opt.username = data.auth1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);                     }  else if(data.keywd2){ var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.keywd = data.keywd2; opt.username = data.auth2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);   }      } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },          tabevt_pcap: function(obj){ var time = util.toDateString((obj.data.time)*1000);             var date = new Date( time.replace('/', ' ') );             var timestamp = date.getTime() / 1000;             var root = "/cgi-bin/common/popup";             var url = objtourl({                 time: timestamp,                 endtime: 0,                 req_time: time,                 proto: obj.data.proto == "TCP" ? 6 : 17,                  src_ip: obj.data.src_ip,                 dst_ip: obj.data.dst_ip,                 src_port: obj.data.sport,                 dst_port: obj.data.dport,                 taskname: 'pcaplog',                 popup_from_ntm: 1,                 pop_title: "{{ lang031[g_lang] || '报文分析' }}->" + obj.data.cmname,                 pop_route: "pcap/pcap_dump_main"             });             ShowWindow(root + url, "", 1400, 700);         },  tabevt_srcip: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "", auth1:obj.auth,                     srcip1: obj.srcip },{ title: "数据诊断",                     path: "control/malc_history", desc: "", auth2:obj.auth,                     srcip2: obj.srcip }]        ,click: function(data){ if(data.srcip1){                         var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.srcip = data.srcip1; opt.username = data.auth1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);                     }  else if(data.srcip2){ var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.username = data.auth2; opt.srcip = data.srcip2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);   }      } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },  tabevt_sport: function(obj){             form.val("form_malc_his_search", {"sport": obj.data.sport}); $("#submit_malc_his_search").click();         },  tabevt_dstip: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "", dstip1:obj.ip, auth1:obj.auth },{ title: "数据诊断",                     path: "control/malc_history", desc: "", dstip2:obj.ip, auth2:obj.auth }]        ,click: function(data){ if(data.dstip1){ var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.dstip = data.dstip1; opt.username = data.auth1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);                     }  else if(data.dstip2){ var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.dstip = data.dstip2; opt.username = data.auth2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);   }      } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },  tabevt_dport: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); var port = $(this).attr("port");  dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "", dport1:port, auth1:obj.auth },{ title: "数据诊断",                     path: "control/malc_history", desc: "", dport2:port, auth2:obj.auth }]        ,click: function(data){ if(data.dport1){ var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.dport = data.dport1; opt.username = data.auth1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);                     }  else if(data.dport2){ var opt = form.getValue('form_malc_auth_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.dport = data.dport2; opt.username = data.auth2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);   }      } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },  tabevt_vid: function(obj){ form.val("form_malc_his_search", {"vpaid": obj.data.vid}); $("#submit_malc_his_search").click(); },    tabevt_db: function(obj){ var fdb = 0; for(var i = 0; i < vendor.length; i++){ if(obj.data.db == vendor[i].name){ fdb = vendor[i].id; } }             form.val("form_malc_his_search", {"db": fdb}); $("#submit_malc_his_search").click(); load_loglist_env();         },  tabevt_type: function(obj){ var fdb = 0; for(var i = 0; i < vendor.length; i++){ if(obj.data.db == vendor[i].name){ fdb = vendor[i].id; } } form.val("form_malc_his_search", {"db": fdb}); load_loglist_env();              form.val("form_malc_his_search", {"type": obj.data.mname});             $("#submit_malc_his_search").click();         },     };           var load_loglist_env = function(){         var search = form.getValue("form_malc_auth_search");         $.ajax({             url: g_sys_env.paui_vpath + api, async: false,             data: {'action': 'load_loglist_env', id: search.db || ''},             success: function(json){                 var dom1 = $("#select_malcvendor_select_auth");                 var dom2 = $("#select_malclog_select2_auth");                                  dom1.html('');                 dom2.html('<option value="">{{ lang003[g_lang] || "任意" }}</option>');                  dom1.append('<option value="任意">任意</option>'); vendor = [];                 layui.each(json.data.vendor, function(index, elem){  vendor.push({ "id": elem.id, "name": elem.name, "cname": elem.cname });                     var opt = new Option((g_lang == "ch" ? elem.cname : elem.name), elem.id);                     dom1.append(opt);                 });  if(search.db != ""){ layui.each(json.data.malctype, function(index, elem){ var opt = new Option(elem.cname, elem.name); dom2.append(opt); }); }                  form.val('form_malc_auth_search', search);                                  if(pdata.pop_route){                     form.val('form_malc_auth_search', {                         type: pdata.name                     });                 }             }         });     };     load_loglist_env();      var col_render = function(r){ var html = "";         switch(this.field){             case 'auth':                 return patpl( $("#tpl_cond_auth").html() ).render(r);      case 'src': return patpl( $("#tpl_cond_src").html() ).render(r);       case 'count':                 return '<span paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">' + r.count + '</span>';              case 'dst': return patpl( $("#tpl_cond_dst").html() ).render(r);      case 'dport':                 return patpl( $("#tpl_cond_port").html() ).render(r);              case "drop":     return patpl( $("#tpl_cond_drop").html() ).render(r);      case 'db': var arr = r.db; for(var i = 0; i < arr.length; i++){ for(var j = 0; j < vendor.length; j++){ if(arr[i] == vendor[j].id){ html += '<span class="nbtn"  paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">' + vendor[j].cname + '</span></br>'; } } } return html;              case 'ioc':                 return patpl( $("#tpl_cond_ioc").html() ).render(r);               case "cmname":                 return patpl( $("#tpl_cond_cmname").html() ).render(r);       case "risk":                 return patpl( $("#tpl_cond_risk").html() ).render(r);          }     };       /* 页面渲染 */     form.render();  var tab_height = 260; var get_ntmlog_data = function(){ pa_table_username.render({ elem: '#tab_malc_auth_all',             url: "/cgi-bin/App/ntm/ajax_task", where: { 'action': 'list_ntmlog_task', 'taskid': g_ntmlog_taskid, }, height: 'full-{{d.pop_route ? 470 : 260}}',             page: {'layout':['prev', 'page', 'next', 'count'], groups: 3}, dbkey: "tab_malc_auth_cols",             pageElem: 'page_malc_auth_all', filterElem: '.paui-malc-auth-filter',             autoSort: false, colHeight: 'auto', parseData: function(json){ json.data = json.data.data.filter(function(item){       return item.auth !== '-';     }); json.count = json.data.length; return json; },     cols: [[     {type: 'numbers', title: '{{ lang007[g_lang] || "序号" }}'}, {field: 'auth', title: '用户账号', width: 120, templet: col_render}, {field: 'src', title: '源IP', minWidth: 235, templet: col_render}, {field: 'count', title: '命中次数', width: 120, templet: col_render}, {field: 'dst', title: '目标IP', minWidth: 235, templet: col_render}, {field: 'dport', title: '目标端口', minWidth: 135, templet: col_render}, {field: 'db', title: '{{ lang019[g_lang] || "情报源" }}', templet: col_render, width: 200}, {field: 'cmname', title: '{{ lang028[g_lang] || "情报类型" }}', templet: col_render, width: 100}, {field: 'ioc', title: 'IOC', minWidth: 150, templet: col_render}, {field: 'risk', title: '{{ lang020[g_lang] || "威胁等级" }}', width: 90, templet: col_render, align:'center'}, {field: 'drop', title: '执行动作', minWidth: 100, templet: col_render},                 ]] }); };      /* 事件绑定 */  form.val('form_malc_auth_search', pdata); form.render();         util.event('malc_auth_event', event_center);          form.on('select(select_malcvendor_select_auth)', function(obj){ form.val('form_malc_auth_search', {type: ''}); load_loglist_env(); if(obj.value == 16 || obj.value == 0){ $("#select_malclog_select3_auth").attr("disabled", "disabled"); form.render(""); } else if(obj.value == "任意"){ $("#select_malclog_select3_auth").removeAttr("disabled"); form.render(""); } else{ $("#select_malclog_select3_auth").removeAttr("disabled"); form.render(""); }         });  table.on('tool(tab_malc_auth_all)', function(obj){ event_center[obj.event](obj); });  form.on('submit(submit_malc_auth_search)', function(obj){ ntmlog.create_ntmtask({         form: "form_malc_auth_search", query: get_ntmlog_data });     return false }); $("#submit_malc_auth_search").click(); }); </script>