{{# var lang001 = {"ch": "关键字", "en": "Keyword"}, lang002 = {"ch": "时间范围", "en": "Time"}, lang003 = {"ch": "任意", "en": "Any"}, lang004 = {"ch": "日志导出", "en": "Log Export"},     lang005 = {"ch": "确定要导出吗？", "en": "Confirm to Export the Log?"},     lang006 = {"ch": "命中次数", "en": "Hit Count"},     lang007 = {"ch": "序号", "en": "No."},     lang008 = {"ch": "目标端口", "en": "Dst port"},     lang009 = {"ch": "执行动作", "en": "Action"},     lang010 = {"ch": "源IP:端口", "en": "Src IP:Port"},     lang011 = {"ch": "目标IP:端口", "en": "Dst IP:Port"},     lang012 = {"ch": "链路", "en": "Link"},     lang013 = {"ch": "条件关系", "en": "Condition"},     lang014 = {"ch": "与", "en": "And"},     lang015 = {"ch": "或", "en": "Or"},     lang016 = {"ch": "非", "en": "Not"},     lang017 = {"ch": "阻断", "en": "Deny"},     lang019 = {"ch": "情报源", "en": "Vendor"},     lang020 = {"ch": "威胁等级", "en": "Severity"},     lang021 = {"ch": "严重", "en": "Critical"},     lang022 = {"ch": "高", "en": "High"},     lang023 = {"ch": "中", "en": "Medium"},     lang024 = {"ch": "低", "en": "Low"},     lang025 = {"ch": "未知", "en": "Unknown"},     lang028 = {"ch": "情报类型", "en": "Intelligence Type"},     lang031 = {"ch": "报文分析", "en": "Packet Analysis"},     lang032 = {"ch": "监测", "en": "Monitor"},     lang035 = {"ch": "用户账号", "en": "Username"};  var util = layui.util, ntmlog = layui.ntmlog;  if(d.stime && d.etime) {     var time1 = util.toDateString(d.etime);     var time2 = util.toDateString(d.stime); } else {     var cur_time = (new Date()).getTime();     var time1 = util.toDateString(cur_time);     var time2 = util.toDateString(cur_time - 900000); } }}  <style> .paui-threat-risk-critical{color:#ff2d2d;} .paui-threat-risk-high{color:#ff5252;} .paui-threat-risk-mid{color:#ffcc00;} .paui-threat-risk-low{color:#4dabf7;} .paui-threat-risk-info{color:#757575;} .paui-threat-risk-critical .layui-badge-dot{background-color:#ff2d2d;} .paui-threat-risk-high .layui-badge-dot{background-color:#ff5252;} .paui-threat-risk-mid .layui-badge-dot{background-color:#ffab00;} .paui-threat-risk-low .layui-badge-dot{background-color:#4dabf7;} .paui-threat-risk-info .layui-badge-dot{background-color:#757575;} .layui-badge-rim {     height: 20px;     line-height: 20px;     padding: 0px 8px;     border-radius: 3px;     margin:3px 0px;     font-size: 11px; }    </style>  {{# if(d.malc_screen == "1"){ }} <div style="padding: 10px;"> {{# } }}  {{# if(d.malc_screen == "1"){ }} <div> {{# }else{ }} <div style="overflow: hidden; height: calc(100vh - 92px);"> {{# } }} <form class="layui-form layui-form-pane paui-table-form" lay-filter="form_malc_username_search"> <div class="layui-form-item paui-table-form-content">  <div class="layui-form-item paui-table-form-right" style="float: right;"> <div class="layui-input-inline" style="width:100px; margin-right:0px;"> <div class="layui-btn-group malc_username_type layui-btn-red"> <button type="button" isipv6="1" class="layui-btn layui-btn-sm layui-btn-primary"> IPv4 </button> <button type="button" isipv6="2" class="layui-btn layui-btn-sm layui-btn-primary"> IPv6 </button> </div> </div> <div class="layui-form-mid" style="margin-right:0px"> <span class="abtn" malc_username_event="btnevt_export" title='{{ lang004[g_lang] || "日志导出" }}'> <i class="pa-icon pa-download"></i> </span> <span class="abtn paui-malc-username-filter" title='自定义'> <i class="pa-icon pa-filter"></i> </span> </div> </div>  <div class="paui-table-form-init"> <label class="layui-form-label">{{ lang002[g_lang] || "时间范围" }}</label> <div class="layui-input-inline" style="width:308px"> <input type="text" name="time" class="layui-input" id="ipt_username_time" value="{{time2}} - {{time1}}" lay-verify="required" lay-affix="clear"> </div> <div class="layui-form-mid" style="padding:0px!important"> <button class="layui-btn layui-btn-normal layui-btn-sm" lay-submit lay-filter="submit_malc_username_search" id="submit_malc_username_search" paui-form-toggle="btnevt_form_hide_evt"> <i class="layui-icon layui-icon-search"></i> </button> {{- ntmlog.reset_form() }} </div> <div class="layui-form-mid" style="padding:5px 0px 0px 0px!important"> <span class="abtn" paui-form-toggle="btnevt_form_toggle_evt"> 高级搜索&nbsp;<i class="layui-icon layui-icon-down"></i> </span> </div> </div>   <div class="paui-table-form-hide"> <div class="paui-table-form-hide-center"> <div class="paui-table-form-often"> <div class="paui-table-form-hide-title"><span class="layui-icon layui-icon-search"></span>常用条件</div> <input type="hidden" name="taskname" value="pamalcipsum"> {{- ntmlog.show_srcdst_html() }} <div class="paui-table-form-inline"> <label class="layui-form-label">MAC</label> <div class="layui-input-inline" style="width:208px"> <input type="text" name="mac" class="layui-input" lay-affix="clear"> </div> </div> </div> <div class="paui-table-form-minority"> <div class="paui-table-form-hide-title"><span class="layui-icon layui-icon-set"></span>其它条件</div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang001[g_lang] || "关键字" }}</label> <div class="layui-input-inline" style="width: 208px"> <input type="text" name="keywd" class="layui-input" lay-affix="clear"> </div> </div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang019[g_lang] || "情报源" }}</label> <div class="layui-input-inline" style="width: 208px;"> <select name="db" lay-filter="select_malcvendor_select_username" id="select_malc_vendor2_username"> <option value="">{{ lang003[g_lang] || "任意" }}</option> </select> </div> </div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang028[g_lang] || "情报类型" }}</label> <div class="layui-input-inline malc-type-line" style="width: 208px;"> <span class="clear-malc-type layui-icon layui-icon-clear"></span> <div class="ipt_malc_seleted layui-hide" typeseleted=""></div> <input type="hidden" name="type" class="ipt_malc_name"> <input type="text" name="malc_cname" class="layui-input ipt_malc_cname" readonly onclick="select_malc(global_malctype)"> </div> </div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang020[g_lang] || "威胁等级" }}</label> <div class="layui-input-inline" style="width: 208px;"> <select name="risk" lay-filter="select_malclog_select3" id="select_malclog_username_select3"> <option value="">{{ lang003[g_lang] || "任意" }}</option> <option value="1">{{ lang021[g_lang] || "严重" }}</option> <option value="2">{{ lang022[g_lang] || "高" }}</option> <option value="3">{{ lang023[g_lang] || "中" }}</option> <option value="4">{{ lang024[g_lang] || "低" }}</option> <option value="0">{{ lang025[g_lang] || "未知" }}</option> </select> </div> </div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang035[g_lang] || "用户账号" }}</label> <div class="layui-input-inline" style="width: 208px"> <input type="text" name="username" class="layui-input" lay-affix="clear"> </div> <input type="hidden" name="isipv6" value="1" class="layui-input"> </div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang012[g_lang] || "链路" }}</label> <div class="layui-input-inline" style="width: 208px"> <select name="vpaid" id="vid" class="vid" lay-search=""> </select> </div> </div> <div class="paui-table-form-inline"> <label class="layui-form-label">{{ lang013[g_lang] || "条件关系" }}</label> <div class="layui-input-inline" style="width: 208px;"> <select name="qrtype"> <option value="and">{{ lang014[g_lang] || "与" }}</option> <option value="or">{{ lang015[g_lang] || "或" }}</option> <option value="not">{{ lang016[g_lang] || "非" }}</option> </select> </div> </div> </div> </div> </div> </div> </form> <div class="paui-table-card"> <table id="tab_malc_username_all" lay-filter="tab_malc_username_all"></table> <hr style="margin: 0px;"> <div class="layui-row"> <div class="layui-col-xs8"> <div class="layui-table-page" id="page_malc_username_all" style="border:0px;"></div> </div> <div class="layui-col-xs4 paui-query-process-box"></div> </div> </div> </div>  {{# if(d.malc_screen == "1"){ }} </div> {{# } }}   <script id="tpl_cond_username_src" type="text/html"> <span malc_username_event="tabevt_srcip" class="abtn" obj='{% JSON.stringify(d) %}' paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% d.obj %}</span> </script>  <script id="tpl_cond_username_dst" type="text/html"> {%# var ntmlog = layui.ntmlog; if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ var dst = ""; if(d.dst.length > 0){ for(var i = 0; i < d.dst.length; i++){ d.ip = d.dst[i].split(" ")[0]; %} <span class="abtn" malc_username_event="tabevt_dstip" paui-copy-tips="btnevt_copy_tips"  obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.dst[i].split(" ")[0] %}</span> <span style="display: inline-block; padding-left: 10px;" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{%- ntmlog.show_td_flag(d.dst[i].split(" ")[1]) %}</span></br> {%#  } } }else{ d.ip = d.dst; %} <span class="abtn" ntmlog_session_event="tabevt_dst" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.dst %}</span> {%#  } %} </script>  <script id="tpl_cond_username_port" type="text/html"> {%# if (g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode") { var arr = d.dport; var port = "";  for (var i = 0; i < arr.length; i++) { if (i % 2 === 0) { if (i + 1 < arr.length) { d.port_ = arr[i]; d.port_1 = arr[i+1]; %} <span class="abtn" obj='{% JSON.stringify(d) %}' malc_username_event="tabevt_dport" port="{% arr[i] %}" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr[i] %}</span> |  <span class="abtn" obj='{% JSON.stringify(d) %}' malc_username_event="tabevt_dport" port="{% arr[i+1] %}" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr[i+1] %}</span></br> {%# } else {  d.port_ = arr[i]; %} <span class="abtn" obj='{% JSON.stringify(d) %}' malc_username_event="tabevt_dport"  port="{% arr[i] %}" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr[i] %}</span></br> {%# } } } } else { %} <span class="nbtn" paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">{% arr %}</span> {%# } %} </script>   <script id="tpl_cond_username_db" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ if(d.db == "NULL"){ %} <span>-</span> {%# }else if(d.db.length > 0){ for(var i = 0; i < d.db.length; i++){ d.dbs= d.db[i]; %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.db[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.db %}</span> {%# } %} </script>   <script id="tpl_cond_username_ioc" type="text/html"> {%# if(g_sys_env.oem == "pro" || g_sys_env.oem == "ngntm" || g_sys_env.oem == "ngnode"){ if(d.ioc == "NULL"){ %} <span>-</span> {%# }else if(d.ioc.length > 0){ for(var i = 0; i < d.ioc.length; i++){ d.io= d.ioc[i]; %} <span class="abtn" malc_username_event="tabevt_ioc" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.ioc[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.ioc %}</span> {%# } %} </script>  <script id="tpl_cond_username_auth" type="text/html"> {%# if(g_sys_env.oem == "pro"){ if(d.auth == "NULL"){ %} <span>-</span> {%# }else if(d.auth.length > 0){ for(var i = 0; i < d.auth.length; i++){  d.au = d.auth[i]; %} <span class="abtn" malc_username_event="tabevt_username" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.auth[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.auth %}</span> {%# } %} </script>  <script id="tpl_cond_username_cmname" type="text/html"> {%# if(g_sys_env.oem == "pro"){  if(d.cmname == "NULL"){ %} <span>-</span> {%# }else if(d.cmname.length > 0){  for(var i = 0; i < d.cmname.length; i++){  d.cm = d.cmname[i]; %} <span class="layui-badge-rim layui-bg-red" style="border:0px">{% d.cmname[i] %}</span></br> {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.cmname %}</span> {%# } %} </script>   <script id="tpl_cond_username_risk" type="text/html"> {%# if(g_sys_env.oem == "pro"){  if(d.risk == "NULL"){ %} <span>-</span> {%# }else if(d.risk.length > 0){  for(var i = 0; i < d.risk.length; i++){  %} {%# if(d.risk[i] == 1) { %} <div class="paui-threat-risk-critical"> <span class="layui-badge-dot"></span>&nbsp;{{ lang021[g_lang] || "严重" }} </div>></br> {%# } else if(d.risk[i] == 2){ %} <div class="paui-threat-risk-high"> <span class="layui-badge-dot"></span>&nbsp;{{ lang022[g_lang] || "高" }} </div></br> {%# } else if(d.risk[i] == 3){ %} <div class="paui-threat-risk-mid"> <span class="layui-badge-dot"></span>&nbsp;{{ lang023[g_lang] || "中" }} </div></br> {%# } else if(d.risk[i] == 4){ %} <div class="paui-threat-risk-low"> <span class="layui-badge-dot"></span>&nbsp;{{ lang024[g_lang] || "低" }} </div></br> {%# } else if(d.risk[i] == 0){ %} <div class="paui-threat-risk-mid"> <span class="layui-badge-dot"></span>&nbsp;{{ lang025[g_lang] || "未知" }} </div></br> {%# } else { %} <div>-</div> {%# } %}  {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.risk %}</span> {%# } %} </script>    <script id="tpl_cond_username_drop" type="text/html"> {%# if(g_sys_env.oem == "pro"){  if(d.drop == "NULL"){ %} <span>-</span> {%# }else if(d.drop.length > 0){ for(var i = 0; i < d.drop.length; i++){ %} {%# if(d.drop[i] == 1) { %} <span class="paui-color-danger">{{ lang017[g_lang] || "阻断" }}</span> </br>  {%# } else { %} <span class="paui-color-disable">{{ lang032[g_lang] || "监测" }}</span> </br> {%# } %}  {%# } } }else{ %} <span class="abtn" ntmlog_session_event="tabevt_host" paui-copy-tips="btnevt_copy_tips" obj='{% JSON.stringify(d) %}' paui-right-click="btnevt_right_click">{% d.drop %}</span> {%# } %} </script>     <script> var global_malctype = []; layui.use(function(){     var $ = layui.$,     util = layui.util,     form = layui.form,     table = layui.table,     ntmlog = layui.ntmlog, laydate = layui.laydate,     patpl = layui.patpl;      var pa_table_username = new Paui_table();     var api = '/cgi-bin/flowcontrol/ajax_malc';     var pdata = JSON.parse('{{- JSON.stringify(d) }}');     var vendor = [];  var newarr = groupByProperty(g_sys_env.linkArr, 'grpname'); var _html = '<option value="">{{ lang003[g_lang] || "任意" }}</option>'; for (let [key, value] of Object.entries(newarr)) { _html += '<optgroup label="'+ key +'">'; for(var k = 0; k < newarr[key].length; k++){ _html += '<option value="'+ newarr[key][k].id +'">'+ newarr[key][k].name +'</option>'  } _html += '</optgroup>'; } $(".vid").html(_html);  if(pdata.srcip && pdata.srcip.indexOf(":") != -1 || pdata.dstip && pdata.dstip.indexOf(":") != -1){ paui_db.save("isipv6", "2"); }else if(pdata.srcip && pdata.srcip.indexOf(":") == -1 || pdata.dstip && pdata.dstip.indexOf(":") == -1){ paui_db.save("isipv6", "1"); }  $(".malc_username_type button").click(function(){ $(this).addClass("layui-btn-normal"); $(this).removeClass("layui-btn-primary"); $(this).siblings().removeClass("layui-btn-normal"); $(this).siblings().addClass("layui-btn-primary"); paui_db.save("isipv6", $(this).attr("isipv6")); form.val("form_malc_username_search", {"isipv6": paui_db.get("isipv6")}); $("#submit_malc_username_search").click(); });  if(typeof paui_db.get("isipv6") != undefined){ if(paui_db.get("isipv6") == "1"){ $(".malc_username_type button").eq(0).addClass("layui-btn-normal"); $(".malc_username_type button").eq(0).removeClass("layui-btn-primary"); $(".malc_username_type button").eq(1).addClass("layui-btn-primary"); $(".malc_username_type button").eq(1).removeClass("layui-btn-normal"); form.val("form_malc_username_search", {"isipv6": "1"}); }else if(paui_db.get("isipv6") == "2"){ $(".malc_username_type button").eq(0).addClass("layui-btn-primary"); $(".malc_username_type button").eq(0).removeClass("layui-btn-normal"); $(".malc_username_type button").eq(1).addClass("layui-btn-normal"); $(".malc_username_type button").eq(1).removeClass("layui-btn-primary"); form.val("form_malc_username_search", {"isipv6": "2"}); } }   laydate.render({ elem: '#ipt_username_time' ,type: 'datetime' ,range: true ,lang: g_lang     ,shortcuts: paui_date_select_range() });       var event_center = {         btnevt_export: function(){ pa_confirm('确定要将当前条件的数据导出吗？', function(index){    layer.close(index);    ntmlog.create_ntmtask({    aloneid: true,    form: "form_malc_username_search",    iform: function(data){    data.download = 1;    return data;    },    query: function(){    pa_ajax({    url: '/cgi-bin/App/ntm/ajax_task',    data: {"action": "list_ntmlog_task", "taskid": g_alone_taskid, "tag_list": " download=1"},    success: function(json){    layer.closeAll("loading");    if(json.code != 0) {    alert_err(json.msg);    return;    }    if(json.data.file){    var url = "/cgi-bin/App/ntm/ajax_ntm?action=ntm_download&file=" + json.data.file + "&name=";    paui_goto_url(url);    } else {    layer.closeAll("loading");    alert_err('返回数据出错：' + JSON.stringify(json.data));    }    }    });    },    }); });         },          tabevt_ioc:function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "",                     keywd1: obj.io },{ title: "数据诊断",                     path: "control/malc_history", desc: "",                     keywd2: obj.io }], click: function(data){ if(data.keywd1){                         var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.keywd = data.keywd1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);                    }else if(data.keywd2){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.keywd = data.keywd2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);   }     } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },          tabevt_pcap: function(obj){ var time = util.toDateString((obj.data.time)*1000);             var date = new Date( time.replace('/', ' ') );             var timestamp = date.getTime() / 1000;             var root = "/cgi-bin/common/popup";             var url = objtourl({                 time: timestamp,                 endtime: 0,                 req_time: time,                 proto: obj.data.proto == "TCP" ? 6 : 17,                  src_ip: obj.data.src_ip,                 dst_ip: obj.data.dst_ip,                 src_port: obj.data.sport,                 dst_port: obj.data.dport,                 taskname: 'pcaplog',                 popup_from_ntm: 1,                 pop_title: "{{ lang031[g_lang] || '报文分析' }}->" + obj.data.cmname,                 pop_route: "pcap/pcap_dump_main"             });             ShowWindow(root + url, "", 1400, 700);         },  tabevt_srcip: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "",                     srcip1: obj.obj },{ title: "数据诊断",                     path: "control/malc_history", desc: "",                     srcip2: obj.obj }]     ,click: function(data){ if(data.srcip1){                         var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.srcip = data.srcip1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);                    }else if(data.srcip2){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.srcip = data.srcip2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);   }     } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },  tabevt_sport: function(obj){             form.val("form_malc_his_search", {"sport": obj.data.sport}); $("#submit_malc_his_search").click();         },  tabevt_dstip: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "",                     srcip1: obj.obj, dstip1:obj.ip },{ title: "数据诊断",                 path: "control/malc_history", desc: "",                     srcip2: obj.obj, dstip2:obj.ip }] ,click: function(data){ if(data.srcip1){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.dstip = data.dstip1; opt.srcip = data.srcip1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660); }else if(data.srcip2){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.dstip = data.dstip2; opt.srcip = data.srcip2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);   } } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },  tabevt_dport: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); var port = $(this).attr("port");  dropdown.render({     elem: _this     ,show: true     ,trigger: 'click'     ,data: [{ title: "历史会话", path: "control/malc_history", desc: "",                     srcip1: obj.obj, dport1:port },{ title: "数据诊断",                     path: "control/malc_history", desc: "",                     srcip2: obj.obj, dport2:port }]     ,click: function(data){ if(data.srcip1){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.srcip = data.srcip1; opt.dport = data.dport1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);                    }else if(data.srcip2){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.srcip = data.srcip2; opt.dport = data.dport2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660);   }     } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } })         },  tabevt_vid: function(obj){ form.val("form_malc_his_search", {"vpaid": obj.data.vid}); $("#submit_malc_his_search").click(); },  tabevt_username: function(obj){ var obj = JSON.parse($(this).attr("obj")); var _this = $(this); dropdown.render({ elem: _this ,show: true ,trigger: 'click' ,data: [{ title: "历史会话", path: "control/malc_history", desc: "", username1: obj.au },{ title: "数据诊断", path: "control/malc_history", desc: "", username2: obj.au }], click: function(data){ if(data.username1){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "历史命中"; opt.pop_route = "control/malc_history"; opt.username = data.username1; opt.malc_screen = 1; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1"); popupWindow(opt, 1400, 660); }else if(data.username2){ var opt = form.getValue('form_malc_username_search'); delete opt.taskname; opt.pop_title = "数据诊断"; opt.pop_route = "control/malc_report"; opt.username = data.username2; opt.isipv6 = (typeof paui_db.get("isipv6") != "undefined" ? paui_db.get("isipv6") : "1");  popupWindow(opt, 1400, 660);   } } ,style: 'box-shadow: 1px 1px 20px rgb(43 110 233 / 20%); border-radius:5px;' ,templet: function(d){ return '<div class="dropdownspan" style="width: 160px; font-weight: bold; color: #222; font-size: 12px; line-height: 24px; display: block; border-bottom: 1px #ddd solid; text-align: left; padding: 6px 8px;">' + d.title + '<span style="display: block; color: #666; font-size: 11px; line-height: 16px; white-space: normal;  white-space: pre-wrap; font-weight: initial;">' + d.desc + '</span>' + '</div>'; } }) },  tabevt_db: function(obj){ var fdb = 0; for(var i = 0; i < vendor.length; i++){ if(obj.data.db == vendor[i].name){ fdb = vendor[i].id; } } form.val("form_malc_his_search", {"db": fdb}); $("#submit_malc_his_search").click(); load_loglist_env();         },  tabevt_type: function(obj){ var fdb = 0; for(var i = 0; i < vendor.length; i++){ if(obj.data.db == vendor[i].name){ fdb = vendor[i].id; } } form.val("form_malc_his_search", {"db": fdb}); load_loglist_env();  form.val("form_malc_his_search", {"type": obj.data.mname}); $("#submit_malc_his_search").click();         }     };           var load_loglist_env = function(){         var search = form.getValue("form_malc_username_search");         $.ajax({             url: g_sys_env.paui_vpath + api, async: false,             data: {'action': 'load_loglist_env', id: search.db || ''},             success: function(json){                 var dom1 = $("#select_malc_vendor2_username");                                  dom1.html('');                  dom1.append('<option value="任意">任意</option>'); vendor = []; if(search.db != "" && search.db != "任意"){ global_malctype = json.data.malctype; }else{ global_malctype = []; }                 layui.each(json.data.vendor, function(index, elem){ vendor.push({ "id": elem.id, "name": elem.name, "cname": elem.cname });                     var opt = new Option((g_lang == "ch" ? elem.cname : elem.name), elem.id);                     dom1.append(opt);                 });                  form.val('form_malc_username_search', search);                                  if(pdata.pop_route){                     form.val('form_malc_username_search', {                         type: pdata.name                     });                 }             }         });     };     load_loglist_env();      var col_render = function(r){ var html = "";         switch(this.field){ case 'obj': return patpl( $("#tpl_cond_username_src").html() ).render(r);  case 'count': return '<span paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">' + r.count + '</span>';  case 'dst': return patpl( $("#tpl_cond_username_dst").html() ).render(r);  case 'dport': return patpl( $("#tpl_cond_username_port").html() ).render(r);  case "drop": return patpl( $("#tpl_cond_username_drop").html() ).render(r);  case 'db': var arr = r.db; for(var i = 0; i < arr.length; i++){ for(var j = 0; j < vendor.length; j++){ if(arr[i] == vendor[j].id){ html += '<span class="nbtn"  paui-copy-tips="btnevt_copy_tips" paui-right-click="btnevt_right_click">' + vendor[j].cname + '</span></br>'; } } } return html;  case 'ioc': return patpl( $("#tpl_cond_username_ioc").html() ).render(r);   case "cmname": return patpl( $("#tpl_cond_username_cmname").html() ).render(r);   case "auth": return patpl( $("#tpl_cond_username_auth").html() ).render(r);  case "risk": return patpl( $("#tpl_cond_username_risk").html() ).render(r);          }     };       /* 页面渲染 */     form.render();  var tab_height = 260; var get_ntmlog_data = function(){ pa_table_username.render({ elem: '#tab_malc_username_all',             url: "/cgi-bin/App/ntm/ajax_task", where: { 'action': 'list_ntmlog_task', 'taskid': g_ntmlog_taskid, }, height: 'full-{{d.pop_route ? 400 : 190}}',             page: {'layout':['prev', 'page', 'next', 'count'], groups: 3}, dbkey: "tab_malc_username_cols",             pageElem: 'page_malc_username_all', filterElem: '.paui-malc-username-filter',             autoSort: false, colHeight: 'auto', parseData: function(json){ json.count = json.data.total; json.data = json.data.data; return json; },     cols: [[    {type: 'numbers', title: '{{ lang007[g_lang] || "序号" }}'}, {field: 'obj', title: '{{ lang010[g_lang] || "源IP" }}', minWidth: 135, templet: col_render}, {field: 'count', title: '{{ lang006[g_lang] || "命中次数" }}', width: 120, templet: col_render}, {field: 'auth', title: '{{ lang035[g_lang] || "用户账号" }}', width: 120, templet: col_render}, {field: 'dst', title: '{{ lang011[g_lang] || "目标IP" }}', minWidth: 235, templet: col_render}, {field: 'dport', title: '{{ lang008[g_lang] || "目标端口" }}', minWidth: 135, templet: col_render}, {field: 'db', title: '{{ lang019[g_lang] || "情报源" }}', templet: col_render, width: 200}, {field: 'cmname', title: '{{ lang028[g_lang] || "情报类型" }}', templet: col_render, width: 100}, {field: 'ioc', title: 'IOC', minWidth: 150, templet: col_render}, {field: 'risk', title: '{{ lang020[g_lang] || "威胁等级" }}', width: 90, templet: col_render, align:'center'}, {field: 'drop', title: '{{ lang009[g_lang] || "执行动作" }}', minWidth: 100, templet: col_render},                 ]] }); };       /* 事件绑定 */ form.val('form_malc_username_search', pdata); form.render();     util.event('malc_username_event', event_center);  $(".clear-malc-type").click(function(){ $(".ipt_malc_seleted").attr({"typeseleted": ""}); $(".ipt_malc_name").val(""); $(".ipt_malc_cname").val(""); });  form.on('select(select_malcvendor_select_username)', function(obj){ $(".ipt_malc_seleted").attr({"typeseleted": ""}); $(".ipt_malc_name").val(""); $(".ipt_malc_cname").val(""); form.val('form_malc_username_search', {type: ''}); load_loglist_env(); if(obj.value == 16 || obj.value == 0){ $("#select_malclog_username_select3").attr("disabled", "disabled"); form.render(""); } else if(obj.value == "任意"){ $("#select_malclog_username_select3").removeAttr("disabled"); form.render(""); } else{ $("#select_malclog_username_select3").removeAttr("disabled"); form.render(""); } });  table.on('tool(tab_malc_username_all)', function(obj){ event_center[obj.event](obj); });  form.on('submit(submit_malc_username_search)', function(obj){ ntmlog.create_ntmtask({         form: "form_malc_username_search", query: get_ntmlog_data });     return false }); $("#submit_malc_username_search").click(); }); </script>