{{# var lang001 = {"ch": "日志类型", "en": "Log Type"}, lang002 = {"ch": "关键字搜索", "en": "Search"}, lang003 = {"ch": "请选择", "en": "Please Select"}, lang004 = {"ch": "序号", "en": "No."}, lang005 = {"ch": "时间", "en": "Time"}, lang006 = {"ch": "防护类型", "en": "Protection Type"}, lang007 = {"ch": "源IP", "en": "Src IP"}, lang008 = {"ch": "目的IP", "en": "Dst IP"}, lang009 = {"ch": "删除", "en": "Delete"}, lang010 = {"ch": "动作", "en": "Action"}, lang011 = {"ch": "操作", "en": "Operation"}, lang012 = {"ch": "告警", "en": "Alert"}, lang013 = {"ch": "丢弃", "en": "Discard"}, lang014 = {"ch": "确定要删除日志", "en": "Confirm Log Deletion"}, lang015 = {"ch": "TCP报文标志合法性", "en": "TCP Packet Flag Legitimacy"}, lang016 = {"ch": "Ping of Death", "en": "Ping of Death"}, lang017 = {"ch": "超大ICMP报文", "en": "Oversized ICMP Packet"}, lang018 = {"ch": "匹配策略", "en": "Match Policy"}, lang019 = {"ch": "匹配描述", "en": "Match Description"}, lang020 = {"ch": "详细信息", "en": "Details"}, lang021 = {"ch": "的tcp报文标志位非法，", "en": "TCP packet has invalid flag bits,"}, lang022 = {"ch": "各标志位全为1", "en": "All flag bits are set to 1"}, lang023 = {"ch": "各标志位全为0", "en": "All flag bits are set to 0"}, lang024 = {"ch": "SYN和FIN位同时为1", "en": "SYN and FIN bits are both set to 1"}, lang025 = {"ch": "SYN和RST位同时为1", "en": "SYN and RST bits are both set to 1"}, lang026 = {"ch": "FIN位为1而ACK位为0", "en": "FIN bit is 1 while ACK bit is 0"}, lang027 = {"ch": "的icmp报文大小是", "en": "The size of the ICMP packet is"}, lang028 = {"ch": "字节", "en": "bytes"}, lang029 = {"ch": "，超过超大ICMP报文配置的", "en": ", exceeding the oversized ICMP packet limit of"}, lang030 = {"ch": "的icmp分片报文大小是", "en": "The size of the ICMP fragment packet is"}, lang031 = {"ch": "，超过Ping Of Death报文的大小", "en": ", exceeding the Ping of Death packet size"}, lang032 = {"ch": "arp报文的最大pps是", "en": "ARP packet maximum PPS is"}, lang033 = {"ch": "超过arpflood配置", "en": "exceeds the ARP flood threshold"}, lang034 = {"ch": "报文的pps是", "en": "Packet PPS is"}, lang035 = {"ch": "超过", "en": "exceeds"}, lang036 = {"ch": "的配置", "en": "configuration"}, lang037 = {"ch": "的", "en": "of"}, lang038 = {"ch": "，匹配中的策略是", "en": ", the matched policy is"}, lang039 = {"ch": "当前攻击", "en": "Real-time attacks"}, lang040 = {"ch": "历史攻击", "en": "Historical attacks"}, lang041 = {"ch": "事件正在发生，", "en": "Event is occurring,"}, lang042 = {"ch": "事件持续了", "en": "Event lasted for"}, lang043 = {"ch": "秒，", "en": " seconds,"}, lang044 = {"ch": "，有", "en": ",with"}, lang045 = {"ch": "个报文触发", "en": "packets triggered"}, lang046 = {"ch": "报文的最大pps是", "en": "Maximum PPS of packets is"}, lang047 = {"ch": "所有", "en": "All"};  }}  <div class="paui-page-attackpro-log—list"> <form class="layui-form layui-form-pane paui-table-form" lay-filter="form_attackpro_log_search"> <div class="layui-form-item paui-table-form-left"> <label class="layui-form-label" style="width: 100px;">{{ lang006[g_lang] || "防护类型" }}</label> <div class="layui-input-inline"> {{# if(d.state){ }}                 <select name="type" lay-filter="select_attackpro_log_refresh" id="select_attackpro_log_refresh"> <option value="">{{ lang047[g_lang] || "所有" }}</option> <option value="SYN Flood">SYN Flood</option> <option value="UDP Flood">UDP Flood</option> <option value="ICMP Flood">ICMP Flood</option> <option value="ARP Flood">ARP Flood</option> <option value="{{ lang015[g_lang] || "TCP报文标志合法性" }}">{{ lang015[g_lang] || "TCP报文标志合法性" }}</option> <option value="Ping of Death">Ping of Death</option> <option value="{{ lang017[g_lang] || "超大ICMP报文" }}">{{ lang017[g_lang] || "超大ICMP报文" }}</option> </select>     {{# }else{ }}                 <input type="text" name="type" value='{{d.title}}' class="layui-input" autocomplete="off" readonly> {{# } }} </div> <div class="layui-input-inline"> <input type="text" name="keyword" class="layui-input" autocomplete="off" placeholder='{{ lang002[g_lang] || "关键字搜索" }}' lay-affix="clear" lay-filter="clear_attackpro_log_search"> </div> <div class="layui-input-inline" style="width:40px"> <button class="layui-btn layui-btn-normal layui-btn-sm" lay-submit lay-filter="submit_attackpro_log_search"> <i class="layui-icon layui-icon-search"></i> </button> </div> </div> </form> <div class="layui-row paui-table-card"> <table id="tab_attackpro_log_list" lay-filter="tab_attackpro_log_list"></table> <div class="layui-table-page" id="page_attackpro_log_list"></div> </div> </div>  <script> layui.use(function () { var $ = layui.$, util = layui.util, form = layui.form, table = layui.table, patpl = layui.patpl;  var api = '/cgi-bin/protection/ajax_attackpro';  var pa_table = new Paui_table();   var col_render = function (r) { switch (this.field) { case "time": return util.toDateString(r.time * 1000);  case "sip": if (r.sip == "0.0.0.0") return '<div style="padding: 5px 0px;"></div>'; else return r.sip;  case "dip": if (r.dip == "0.0.0.0") return '<div style="padding: 5px 0px;"></div>'; else return r.dip;  case "message": var state_ = ""; if ('{{d.state}}' == 'log' && r.duration != 0) { state_ = `{{ lang042[g_lang] || "事件持续了" }}${r.duration}{{ lang043[g_lang] || "秒" }}`; }  switch (r.type) { case "{{ lang015[g_lang] || 'TCP报文标志合法性' }}": if (r.val == 1) { return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang021[g_lang] || "的tcp报文标志位非法，" }}{{ lang022[g_lang] || "各标志位全为1" }}{{ lang044[g_lang] || "，有" }}${r.counter}{{ lang045[g_lang] || "个报文触发" }}`; } else if (r.val == 2) { return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang021[g_lang] || "的tcp报文标志位非法，" }}{{ lang023[g_lang] || "各标志位全为0" }}{{ lang044[g_lang] || "，有" }}${r.counter}{{ lang045[g_lang] || "个报文触发" }}`; } else if (r.val == 3) { return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang021[g_lang] || "的tcp报文标志位非法，" }}{{ lang024[g_lang] || "SYN和FIN位同时为1" }}{{ lang044[g_lang] || "，有" }}${r.counter}{{ lang045[g_lang] || "个报文触发" }}`; } else if (r.val == 4) { return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang021[g_lang] || "的tcp报文标志位非法，" }}{{ lang025[g_lang] || "SYN和RST位同时为1" }}{{ lang044[g_lang] || "，有" }}${r.counter}{{ lang045[g_lang] || "个报文触发" }}`; } else if (r.val == 5) { return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang021[g_lang] || "的tcp报文标志位非法，" }}{{ lang026[g_lang] || "FIN位为1而ACK位为0" }}{{ lang044[g_lang] || "，有" }}${r.counter}{{ lang045[g_lang] || "个报文触发" }}`; } case "{{ lang017[g_lang] || '超大ICMP报文' }}": return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang027[g_lang] || "的icmp报文大小是" }}${r.val}{{ lang028[g_lang] || "字节" }}{{ lang029[g_lang] || "，超过超大ICMP报文配置的" }}${r.base}{{ lang028[g_lang] || "字节" }}`; case "Ping of Death": return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang008[g_lang] || "目的IP" }} ${r.dip}{{ lang030[g_lang] || "的icmp分片报文大小是" }}${r.val}{{ lang028[g_lang] || "字节" }}{{ lang031[g_lang] || "，超过Ping Of Death报文的大小" }}${r.base}{{ lang028[g_lang] || "字节" }}`; case "ARP Flood": return `${state_}{{ lang032[g_lang] || "arp报文的最大pps是" }}${r.val}{{ lang033[g_lang] || "超过arpflood配置" }}${r.base}`; default: if (r.sip != "0.0.0.0") { var type = ""; if (r.type == "SYN Flood") { type = "syn" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else if (r.type == "UDP Flood") { type = "udp" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else if (r.type == "ICMP Flood") { type = "icmp" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else { type = "{{ lang034[g_lang] || '报文的pps是' }}"; } return `${state_}{{ lang007[g_lang] || "源IP" }} ${r.sip} {{ lang037[g_lang] || "的" }} ${type}${r.val}{{ lang035[g_lang] || "超过" }}${r.type}{{ lang036[g_lang] || "的配置" }}${r.base}{{ lang038[g_lang] || "，匹配中的策略是" }}${r.policy}`; } else if (r.dip != "0.0.0.0") { var type = ""; if (r.type == "SYN Flood") { type = "syn" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else if (r.type == "UDP Flood") { type = "udp" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else if (r.type == "ICMP Flood") { type = "icmp" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else { type = "{{ lang034[g_lang] || '报文的pps是' }}"; } return `${state_}{{ lang008[g_lang] || "目的IP" }} ${r.dip} {{ lang037[g_lang] || "的" }} ${type}${r.val}{{ lang035[g_lang] || "超过" }}${r.type}{{ lang036[g_lang] || "的配置" }}${r.base}{{ lang038[g_lang] || "，匹配中的策略是" }}${r.policy}`; } else if (r.sip == "0.0.0.0" && r.dip == "0.0.0.0") { var type = ""; if (r.type == "SYN Flood") { type = "syn" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else if (r.type == "UDP Flood") { type = "udp" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else if (r.type == "ICMP Flood") { type = "icmp" + "{{ lang046[g_lang] || '报文的最大pps是' }}"; } else { type = "{{ lang034[g_lang] || '报文的pps是' }}"; } return `${state_}${type}${r.val}{{ lang035[g_lang] || "超过" }}${r.type}{{ lang036[g_lang] || "的配置" }}${r.base}{{ lang038[g_lang] || "，匹配中的策略是" }}${r.policy}`; }  }  case "action": switch (r.action) { case "log": return '<span class="paui-color-danger">{{ lang012[g_lang] || "告警" }}</span>'; case "drop": return '{{ lang013[g_lang] || "丢弃" }}'; default: return r.action; };  } };   var table_search = function () { var search = form.getValue("form_attackpro_log_search"); pa_table.reload({ where: search }) };   var load_log = function () { pa_table.render({ elem: '#tab_attackpro_log_list', height: 'full-{{d.pop_route ? "152" : "192"}}', url: api, where: { 'action': 'load_log','state':'{{d.state}}' }, page: true, pageType: 'web', pageElem: 'page_attackpro_log_list', dbkey: "new_tab_attackpros_col", filterElem: '.paui-attackpro-table-filter', colHeight: 'auto', parseData: function (json) { var data = []; var search = form.getValue("form_attackpro_log_search"); layui.each(json.data, function (index, elem) { if (elem.policy.indexOf("%20")) { elem.policy = elem.policy.replaceAll("%20", " "); }  elem.type = elem.type == "synflood" ? "SYN Flood" : elem.type; elem.type = elem.type == "udpflood" ? "UDP Flood" : elem.type; elem.type = elem.type == "icmpflood" ? "ICMP Flood" : elem.type; elem.type = elem.type == "arpflood" ? "ARP Flood" : elem.type; elem.type = elem.type == "tcpflag" ? "{{ lang015[g_lang] || 'TCP报文标志合法性' }}" : elem.type; elem.type = elem.type == "pingofdeath" ? "Ping of Death" : elem.type; elem.type = elem.type == "hugeicmp" ? "{{ lang017[g_lang] || '超大ICMP报文' }}" : elem.type;  if (!pa_str_find(JSON.stringify(elem), search.keyword)) return;  if (search.type != "" && search.type != elem.type) return;  data.push(elem); }); data.sort((a, b) => b.time - a.time); json.data = data; json.count = data.length; return json; }, cols: [[ { type: 'numbers', title: '{{ lang004[g_lang] || "序号" }}', minWidth: 60 } , { field: 'time', title: '{{ lang005[g_lang] || "时间" }}', width: 200, templet: col_render } , { field: 'type', title: '{{ lang006[g_lang] || "防护类型" }}', width: 100 } , { field: 'action', title: '{{ lang010[g_lang] || "动作" }}', width: 100, templet: col_render } , { field: 'message', title: '{{ lang020[g_lang] || "详细信息" }}', minWidth: 300, templet: col_render } ]] }); };   /* 页面渲染 */ form.render(); load_log();   /* 事件绑定 */ form.on('select(select_attackpro_log_refresh)', table_search); form.on('input-affix(clear_attackpro_log_search)', table_search); form.on('submit(submit_attackpro_log_search)', function (obj) { table_search(); return false; });  }); </script>