{{# var lang001 = {"ch": "隧道发现", "en": "Tunnel Discovery"}, lang002 = {"ch": "源IP", "en": "Src IP"}, lang003 = {"ch": "源端口", "en": "Src Port"}, lang004 = {"ch": "目标IP", "en": "Dst IP"}, lang005 = {"ch": "目标端口", "en": "Dst Port"}, lang006 = {"ch": "传输协议", "en": "Transport Protocol"}, lang007 = {"ch": "任意", "en": "Any"}, lang009 = {"ch": "序号", "en": "No."}, lang010 = {"ch": "时间", "en": "Time"}, lang011 = {"ch": "源IP", "en": "Src IP"}, lang012 = {"ch": "目标IP", "en": "Dst IP"}, lang013 = {"ch": "解析类型", "en": "Parse Type"}, lang014 = {"ch": "用户名称", "en": "User Name"}, lang015 = {"ch": "地理位置", "en": "Geolocation"}, lang016 = {"ch": "操作", "en": "Action"}, lang017 = {"ch": "导出", "en": "Export"}, lang018 = {"ch": "域名", "en": "Domain"}, lang019 = {"ch": "确定要将当前条件的数据，导出为Excel吗", "en": "Confirm to export current data to Excel?"}, lang020 = {"ch": "返回数据出错", "en": "Error returning data"}, lang021 = {"ch": "疑似度", "en": "Suspicion Level"};  var ntmlog = layui.ntmlog; }}  <style> .paui-drag-box{display: flex; flex-direction: row; height: 100%;} .paui-drag-left{display: flex; overflow-x: hidden; overflow-y: auto; padding: 5px; width: 12%;} .paui-drag-right{display: flex; border-left:1px solid #c1c1c1; width: 87%; overflow-x: hidden;} #paui-proto-tree .layui-icon-component{font-size:14px; color:#aaa} #paui-attr-content .layui-tab-title li {font-size: 12px;} #paui-attr-content .layui-table-page {width: 90%;} .layui-tab-content{ height: calc(100vh - 85px);} .layui-tab-item{ height: 100%;}  .paui-proto-item{padding: 5px; cursor: pointer;} .paui-proto-item-active{color: #2E8AE3; font-weight: bold;} .paui-proto-item:hover{color: orange} </style>   <div class="layui-tab layui-tab-brief"> <ul class="layui-tab-title" lay-filter="paui-dashboard-bridge"> <li class="layui-this">命中会话</li> </ul>     <div class="layui-tab-content">         <div class="layui-tab-item layui-show"> <div class="paui-drag-box"> <div class="paui-drag-left paui-bg-white"> <div class="layui-row" style="width: 100%;"> <div class="layui-row" id="paui-proto-tree" style="overflow-y: auto;"> <div class="layui-row" style="padding: 5px 15px;color: #666666;"> <i class="layui-icon layui-icon-app"></i>对象类型 </div> <ul style="padding: 5px 20px;" id="typetree"> <li class="paui-proto-item" tag="数据库审计" proto_attr_event="btnevt_show_proto"> <i class="layui-icon layui-icon-component" style="margin-right: 2px;"></i>数据库审计 </li> <!-- <li class="paui-proto-item" tag="奇安信威胁情报" proto_attr_event="btnevt_show_proto"> <i class="layui-icon layui-icon-component" style="margin-right: 2px;"></i>奇安信威胁情报 </li> --> </ul> </div> </div> </div> <div class="paui-drag-right" id="paui-attr-content" style="overflow-y: auto;"> <div class="layui-row" style="width: 100%; padding: 0 10px;"> <form class="layui-form layui-form-pane paui-table-form" lay-filter="tab_alert_session"> <div class="layui-form-item paui-table-form-left"> <input type="hidden" name="action" value="netev_session"> <label class="layui-form-label">策略ID</label> <div class="layui-input-inline" style="width: 120px;"> <input class="layui-input" name="rule_id" type="text"> </div> <label class="layui-form-label">源IP</label> <div class="layui-input-inline" style="width: 120px;"> <input class="layui-input" name="src" type="text"> </div> <label class="layui-form-label">源端口</label> <div class="layui-input-inline" style="width: 120px;"> <input class="layui-input" name="sport" type="text"> </div> <label class="layui-form-label">目标IP</label> <div class="layui-input-inline" style="width: 120px;"> <input class="layui-input" name="dst" type="text"> </div> <label class="layui-form-label">目标端口</label> <div class="layui-input-inline" style="width: 120px;"> <input class="layui-input" name="dport" type="text"> </div> </div> <div class="layui-form-item paui-table-form-left"> <label class="layui-form-label">{{ lang006[g_lang] || "传输协议" }}</label> <div class="layui-input-inline" style="width: 120px;"> <select name="proto"> <option value="">{{ lang007[g_lang] || "任意" }}</option> <option value="6">TCP</option> <option value="17">UDP</option> </select> </div> <label class="layui-form-label">对象类型</label> <div class="layui-input-inline" style="width: 120px;"> <select name="type" id="object_type" lay-filter="object_type"> <option value="">所有</option> <option value="数据库审计">数据库审计</option> <option value="奇安信威胁情报">奇安信威胁情报</option> </select> </div> <label class="layui-form-label">{{ lang014[g_lang] || "用户名称" }}</label> <div class="layui-input-inline" style="width: 120px;"> <input class="layui-input" name="username" type="text" lay-verify="mac"> </div>  <div class="layui-input-inline" style="width:40px"> <button class="layui-btn layui-btn-normal layui-btn-sm" lay-submit lay-filter="submit_alert_session_search"> <i class="layui-icon layui-icon-search"></i> </button> </div> </div> </form>  <div class="paui-table-card"> <table id="table_alert_session" lay-filter="table_alert_session"></table> <div class="layui-table-page" id="page_alert_session"></div> </div> </div> </div> </div>         </div>     <!-- </div> --> </div>    <script> layui.use('ntmlog', function(){     var $ = layui.$,     util = layui.util,     form = layui.form,     patpl = layui.patpl,     table = layui.table,     ntmlog = layui.ntmlog,     laydate = layui.laydate;      var pa_tab = new Paui_table();      var api = "/cgi-bin/system/ajax_alert";     var pdata = JSON.parse('{{- JSON.stringify(d) }}'); var arr = ["数据库审计", "奇安信威胁情报"];       var event_center = { btnevt_show_proto: function(){ $(this).siblings().removeClass("paui-proto-item-active"); $(this).addClass("paui-proto-item-active"); form.val('tab_alert_session', {     type: $(this).attr("tag") }); table_search(); return false; },          tabevt_srcip: function(obj){             form.val('tab_alert_session', {                 src: obj.data.src             });             table_search();         },          tabevt_sport: function(obj){             form.val('tab_alert_session', {                 sport: obj.data.sport             });             table_search();         },          tabevt_dstip: function(obj){             form.val('tab_alert_session', {                 dst: obj.data.dst             });             table_search();         },          tabevt_dport: function(obj){             form.val('tab_alert_session', {                 dport: obj.data.dport             });             table_search();         },          tabevt_proto: function(obj){             form.val('tab_alert_session', {                 proto: obj.data.proto             });             table_search();         },           tabevt_username: function(obj){             form.val('tab_alert_session', {                 username: obj.data.username             });             table_search();         },  tabevt_pcap: function(obj){ var msobj = {}; msobj.src_ip = obj.data.src; msobj.src_port = obj.data.sport; msobj.dst_ip = obj.data.dst; msobj.dst_port = obj.data.dport; msobj.proto = obj.data.proto; msobj.time = obj.data.time;     msobj.taskname = 'pcaplog',     msobj.pop_title = "报文分析";     msobj.pop_route = "pcap/pcap_dump_main";     ntmlog.showNtmWindow(msobj, 1400, 700); }     };       var col_render = function(r){         switch(this.field){             case "src": return [ '<span class="nbtn" lay-event="tabevt_srcip" autoclose="false" paui-right-click="btnevt_right_click">', r.src, '</span>',':','<span class="nbtn" lay-event="tabevt_sport">', r.sport, '</span>' ].join('');              case "dst": return [ '<span class="nbtn" lay-event="tabevt_dstip" autoclose="false" paui-right-click="btnevt_right_click">', r.dst, '</span>',':','<span class="nbtn" lay-event="tabevt_dport">', r.dport, '</span>' ].join('');                          case "proto":                 return '<span class="nbtn" lay-event="tabevt_proto">'+ (r.proto == 6 ? 'TCP' : 'UDP') +'</span>';                case "username":                 return '<span class="nbtn" lay-event="tabevt_username">'+ r.username +'</span>';                          case "time":                 return util.toDateString(Number(r.time)*1000);            }     };      var table_search = function(){         var search = form.getValue("tab_alert_session");         pa_tab.reload({             where: search         });     };      /* 页面渲染 */     form.val('tab_alert_session', pdata);      pa_tab.render({         elem: '#table_alert_session',         url: api,         where: form.getValue("tab_alert_session"),         height: 'full-{{ d.pop_route ? 144 : 226 }}',         page: true,         pageElem: 'page_alert_session',         parseData: function(json){             json.count = json.data.count || 0;             json.data = json.data.data || [];             return json;         },         cols: [[             {type: 'numbers', title: '{{ lang009[g_lang] || "序号" }}'}             ,{field: 'rule_id', title: '策略ID', width: 80}             ,{field: 'time', title: '{{ lang010[g_lang] || "时间" }}', templet: col_render, width: 150}             ,{field: 'typestr', title: '对象类型'}             ,{field: 'attrstr', title: '对象属性'} ,{field: 'username', title: '{{ lang014[g_lang] || "用户名称" }}', templet: col_render, width: 80}             ,{field: 'src', title: '{{ lang011[g_lang] || "源IP" }}', templet: col_render}             ,{field: 'dst', title: '{{ lang012[g_lang] || "目标IP" }}', templet: col_render}             ,{field: 'proto', title: '{{ lang006[g_lang] || "传输协议" }}', templet: col_render}, ,{field: 'pcap', title: '操作', width: 40, align: 'right', templet: ntmlog.col_render}         ]]     });      /* 事件绑定 */ util.event('proto_attr_event', event_center);     form.on('submit(submit_alert_session_search)', function(obj){         table_search();         return false;     });  form.on('select(object_type)', function(data){ if(data.value == ''){ $("#typetree li").removeClass("paui-proto-item-active"); }else{ $("#typetree li").eq(arr.indexOf(data.value)).addClass("paui-proto-item-active"); $("#typetree li").eq(arr.indexOf(data.value)).siblings().removeClass("paui-proto-item-active"); } table_search(); return false; });      table.on('tool(table_alert_session)', function(obj){         event_center[obj.event](obj);     });  }); </script>