diff --git a/01-TestCase/tsg_bfapi/security_policy/Delete_Security_Policy_Monitor_Application_Test.robot b/01-TestCase/tsg_bfapi/security_policy/Delete_Security_Policy_Monitor_Application_Test.robot new file mode 100644 index 0000000..fb2cecd --- /dev/null +++ b/01-TestCase/tsg_bfapi/security_policy/Delete_Security_Policy_Monitor_Application_Test.robot @@ -0,0 +1,222 @@ +*** Settings *** +Test Teardown DeletePolicyAndObjectAndApplicationAndSignature ${policyIds} ${objectIds} ${appId} ${signaturesId} +Resource ../../../02-Keyword/tsg_bfapi/PolicyObject.robot +Resource ../../../02-Keyword/tsg_bfapi/policy_object/Policy.robot +Resource ../../../02-Keyword/tsg_bfapi/policy_object/Object.robot +Resource ../../../02-Keyword/tsg_bfapi/policy_object/Log.robot +Resource ../../../02-Keyword/tsg_bfapi/policy_object/Application.robot +Resource ../../../02-Keyword/tsg_bfapi/Common.robot +Resource ../../../03-Variable/ApplicationID.txt +Resource ../../../05-Other/AllFlowCaseVariable.txt +Library json +Library DateTime +*** Variables *** +@{policyIds} +@{profiles} +${objectIds} ${EMPTY} +*** Test Cases *** + +Delete-test + #删除对象 + ${objectids} set Variable ${monitor_objectId} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId1} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId2} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId3} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId4} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId5} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId6} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId7} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId8} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId9} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId10} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId11} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId12} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId13} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId14} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId15} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId16} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId17} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId18} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId19} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId20} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId21} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId22} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId23} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId24} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId25} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId26} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId27} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId28} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId29} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId30} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId31} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId32} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId33} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId34} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId35} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId36} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId37} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId38} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId39} + ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId40} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId41} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId42} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId43} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId44} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId45} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId46} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId47} + # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_objectId48} + #删除策略 + ${policyIds} set Variable ${monitor_policyId} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId1} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId2} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId3} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId4} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId5} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId6} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId7} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId8} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId9} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId10} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId11} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId12} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId13} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId14} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId15} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId16} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId17} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId18} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId19} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId20} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId21} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId22} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId23} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId24} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId25} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId26} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId27} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId28} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId29} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId30} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId31} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId32} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId33} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId34} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId35} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId36} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId37} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId38} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId39} + ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId40} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId41} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId42} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId43} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId44} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId45} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId46} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId47} + # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId48} + + #删除Application + ${appId} set Variable ${monitor_applicationId} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId1} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId2} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId3} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId4} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId5} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId6} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId7} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId8} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId9} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId10} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId11} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId12} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId13} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId14} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId15} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId16} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId17} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId18} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId19} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId20} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId21} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId22} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId23} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId24} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId25} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId26} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId27} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId28} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId29} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId30} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId31} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId32} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId33} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId34} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId35} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId36} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId37} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId38} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId39} + ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId40} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId41} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId42} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId43} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId44} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId45} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId46} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId47} + # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId48} + + + #删除Signatures + ${signaturesId} set Variable ${monitor_signaturesId} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId1} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId2} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId3} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId4} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId5} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId6} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId7} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId8} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId9} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId10} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId11} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId12} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId13} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId14} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId15} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId16} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId17} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId18} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId19} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId20} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId21} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId22} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId23} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId24} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId25} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId26} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId27} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId28} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId29} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId30} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId31} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId32} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId33} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId34} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId35} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId36} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId37} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId38} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId39} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId40} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId41} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId42} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId43} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId44} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId45} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId46} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId47} + # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId48} \ No newline at end of file diff --git a/01-TestCase/tsg_bfapi/security_policy/Security_Policy_Monitor_Application_Test.robot b/01-TestCase/tsg_bfapi/security_policy/Security_Policy_Monitor_Application_Test.robot index ee25878..84d8e0d 100644 --- a/01-TestCase/tsg_bfapi/security_policy/Security_Policy_Monitor_Application_Test.robot +++ b/01-TestCase/tsg_bfapi/security_policy/Security_Policy_Monitor_Application_Test.robot @@ -7,6 +7,7 @@ Resource ../../../02-Keyword/tsg_bfapi/policy_object/Log.robot Resource ../../../02-Keyword/tsg_bfapi/policy_object/Application.robot Resource ../../../02-Keyword/tsg_bfapi/Common.robot Resource ../../../03-Variable/ApplicationID.txt +Resource ../../../05-Other/AllFlowCaseVariable.txt Library json Library DateTime *** Variables *** @@ -35,29 +36,1046 @@ Monitor-test-001 ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 log ${policyIds}[0][policyIds][0] - # insert_policyId_to_file1 monitor_policyId ${policyIds}[0][policyIds][0] - # insert_policyId_to_file1 monitor_applicationId ${appId} - # insert_policyId_to_file1 monitor_signaturesId ${signaturesId} - # insert_policyId_to_file1 monitor_objectId ${objectId} + insert_policyId_to_file1 monitor_policyId ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId ${appId} + insert_policyId_to_file1 monitor_signaturesId ${signaturesId} + insert_policyId_to_file1 monitor_objectId ${objectId} +Monitor-test-002 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} -Delete-test - #删除对象 - ${objectids} set Variable ${monitor_objectId} - # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_policyId1} - # ${objectids} Catenate SEPARATOR=, ${objectids} ${monitor_policyId2} + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"udp.payload.s2c_first_data","layer":"session_layer","stage":1,"attributeType":"string","attributeId":69,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"www.google.com ","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"udp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId1 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId1 ${appId} + insert_policyId_to_file1 monitor_signaturesId1 ${signaturesId} + insert_policyId_to_file1 monitor_objectId1 ${objectId} - #删除策略 - ${policyIds} set Variable ${monitor_policyId} - # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId1} - # ${policyIds} Catenate SEPARATOR=, ${policyIds} ${monitor_policyId2} +Monitor-test-003 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} - #删除Application - ${appId} set Variable ${monitor_applicationId} - # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId1} - # ${appId} Catenate SEPARATOR=, ${appId} ${monitor_applicationId2} + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"udp.srcport","layer":"packet_layer","stage":0,"attributeType":"numeric","attributeId":83,"objectId":[],"lowBoundary":"53","upBoundary":"53","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"udp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} - #删除Signatures - ${signaturesId} set Variable ${monitor_signaturesId} - # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId} - # ${signaturesId} Catenate SEPARATOR=, ${signaturesId} ${monitor_signaturesId} \ No newline at end of file + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId2 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId2 ${appId} + insert_policyId_to_file1 monitor_signaturesId2 ${signaturesId} + insert_policyId_to_file1 monitor_objectId2 ${objectId} +Monitor-test-004 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"udp.dstport","layer":"packet_layer","stage":0,"attributeType":"numeric","attributeId":85,"objectId":[],"lowBoundary":"53","upBoundary":"53","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"udp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId3 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId3 ${appId} + insert_policyId_to_file1 monitor_signaturesId3 ${signaturesId} + insert_policyId_to_file1 monitor_objectId3 ${objectId} + +Monitor-test-005 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"tcp.payload.c2s_first_data","layer":"session_layer","stage":1,"attributeType":"string","attributeId":1,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"access.video.qq.com","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"tcp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId4 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId4 ${appId} + insert_policyId_to_file1 monitor_signaturesId4 ${signaturesId} + insert_policyId_to_file1 monitor_objectId4 ${objectId} + +Monitor-test-006 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"tcp.payload.s2c_first_data","layer":"session_layer","stage":2,"attributeType":"string","attributeId":3,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"GlobalSign","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"tcp","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId5 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId5 ${appId} + insert_policyId_to_file1 monitor_signaturesId5 ${signaturesId} + insert_policyId_to_file1 monitor_objectId5 ${objectId} +Monitor-test-007 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"tcp.analysis.create_with_syn","layer":"session_layer","stage":1,"attributeType":"bool","attributeId":5,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"tcp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId6 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId6 ${appId} + insert_policyId_to_file1 monitor_signaturesId6 ${signaturesId} + insert_policyId_to_file1 monitor_objectId6 ${objectId} +Monitor-test-008 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"tcp.payload","layer":"packet_layer","stage":0,"attributeType":"string","attributeId":9,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"ods_action_log","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"tcp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId7 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId7 ${appId} + insert_policyId_to_file1 monitor_signaturesId7 ${signaturesId} + insert_policyId_to_file1 monitor_objectId7 ${objectId} + +Monitor-test-009 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"tcp.srcport","layer":"packet_layer","stage":0,"attributeType":"numeric","attributeId":79,"objectId":[],"lowBoundary":"21","upBoundary":"21","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"tcp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId8 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId8 ${appId} + insert_policyId_to_file1 monitor_signaturesId8 ${signaturesId} + insert_policyId_to_file1 monitor_objectId8 ${objectId} + +Monitor-test-010 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"tcp.dstport","layer":"packet_layer","stage":0,"attributeType":"numeric","attributeId":81,"objectId":[],"lowBoundary":"21","upBoundary":"21","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"tcp","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId9 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId9 ${appId} + insert_policyId_to_file1 monitor_signaturesId9 ${signaturesId} + insert_policyId_to_file1 monitor_objectId9 ${objectId} + +Monitor-test-011 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.session.analysis.app_id","layer":"session_layer","stage":2,"attributeType":"numeric","attributeId":65,"objectId":[],"lowBoundary":126,"upBoundary":126,"exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId10 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId10 ${appId} + insert_policyId_to_file1 monitor_signaturesId10 ${signaturesId} + insert_policyId_to_file1 monitor_objectId10 ${objectId} + +Monitor-test-012 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.session.analysis.app_id","layer":"session_layer","stage":2,"attributeType":"numeric","attributeId":65,"objectId":[],"lowBoundary":106,"upBoundary":106,"exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId11 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId11 ${appId} + insert_policyId_to_file1 monitor_signaturesId11 ${signaturesId} + insert_policyId_to_file1 monitor_objectId11 ${objectId} + +Monitor-test-013 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.session.analysis.app_id","layer":"session_layer","stage":2,"attributeType":"numeric","attributeId":65,"objectId":[],"lowBoundary":103,"upBoundary":103,"exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId12 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId12 ${appId} + insert_policyId_to_file1 monitor_signaturesId12 ${signaturesId} + insert_policyId_to_file1 monitor_objectId12 ${objectId} + +Monitor-test-014 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.session.analysis.app_id","layer":"session_layer","stage":2,"attributeType":"numeric","attributeId":65,"objectId":[],"lowBoundary":104,"upBoundary":104,"exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId13 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId13 ${appId} + insert_policyId_to_file1 monitor_signaturesId13 ${signaturesId} + insert_policyId_to_file1 monitor_objectId13 ${objectId} + +Monitor-test-015 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.session.analysis.app_id","layer":"session_layer","stage":2,"attributeType":"numeric","attributeId":65,"objectId":[],"lowBoundary":110,"upBoundary":110,"exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId14 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId14 ${appId} + insert_policyId_to_file1 monitor_signaturesId14 ${signaturesId} + insert_policyId_to_file1 monitor_objectId14 ${objectId} + +Monitor-test-016 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.c2s_session_size","layer":"session_layer","stage":2,"attributeType":"string","attributeId":71,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"571;147;1099;85;","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId15 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId15 ${appId} + insert_policyId_to_file1 monitor_signaturesId15 ${signaturesId} + insert_policyId_to_file1 monitor_objectId15 ${objectId} + +Monitor-test-017 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"general.s2c_session_size","layer":"session_layer","stage":2,"attributeType":"string","attributeId":73,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"250;250;","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"general","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId16 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId16 ${appId} + insert_policyId_to_file1 monitor_signaturesId16 ${signaturesId} + insert_policyId_to_file1 monitor_objectId16 ${objectId} + +Monitor-test-018 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ip.payload","layer":"packet_layer","stage":0,"attributeType":"string","attributeId":7,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"test2@192.168.40.158","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"ip","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId17 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId17 ${appId} + insert_policyId_to_file1 monitor_signaturesId17 ${signaturesId} + insert_policyId_to_file1 monitor_objectId17 ${objectId} + +Monitor-test-019 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ip.src","layer":"packet_layer","stage":0,"attributeType":"ip","attributeId":75,"objectId":[${objectId}],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"ip","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId18 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId18 ${appId} + insert_policyId_to_file1 monitor_signaturesId18 ${signaturesId} + insert_policyId_to_file1 monitor_objectId18 ${objectId} + +Monitor-test-020 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ip.dst","layer":"packet_layer","stage":0,"attributeType":"ip","attributeId":77,"objectId":[${objectId}],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"ip","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId19 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId19 ${appId} + insert_policyId_to_file1 monitor_signaturesId19 ${signaturesId} + insert_policyId_to_file1 monitor_objectId19 ${objectId} + +Monitor-test-021 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"dns.qry.name","layer":"session_layer","stage":1,"attributeType":"string","attributeId":63,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"facebook.com","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"dns","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId20 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId20 ${appId} + insert_policyId_to_file1 monitor_signaturesId20 ${signaturesId} + insert_policyId_to_file1 monitor_objectId20 ${objectId} + +Monitor-test-022 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"dns.qry.name","layer":"session_layer","stage":1,"attributeType":"string","attributeId":63,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"youtube.com","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"dns","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId21 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId21 ${appId} + insert_policyId_to_file1 monitor_signaturesId21 ${signaturesId} + insert_policyId_to_file1 monitor_objectId21 ${objectId} + +Monitor-test-023 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.host","layer":"session_layer","stage":1,"attributeType":"string","attributeId":45,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"www.nymbler.com","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"http","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId22 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId22 ${appId} + insert_policyId_to_file1 monitor_signaturesId22 ${signaturesId} + insert_policyId_to_file1 monitor_objectId22 ${objectId} + +Monitor-test-024 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.host","layer":"session_layer","stage":1,"attributeType":"string","attributeId":45,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"weixin","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"http","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId23 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId23 ${appId} + insert_policyId_to_file1 monitor_signaturesId23 ${signaturesId} + insert_policyId_to_file1 monitor_objectId23 ${objectId} + +Monitor-test-025 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.uri","layer":"session_layer","stage":1,"attributeType":"string","attributeId":47,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"backorder","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"http","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId24 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId24 ${appId} + insert_policyId_to_file1 monitor_signaturesId24 ${signaturesId} + insert_policyId_to_file1 monitor_objectId24 ${objectId} + +Monitor-test-026 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.uri","layer":"session_layer","stage":1,"attributeType":"string","attributeId":47,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"mmtls","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":0,"protocol":"http","luaProfileId":0}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId25 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId25 ${appId} + insert_policyId_to_file1 monitor_signaturesId25 ${signaturesId} + insert_policyId_to_file1 monitor_objectId25 ${objectId} + +Monitor-test-027 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.user_agent","layer":"session_layer","stage":1,"attributeType":"string","attributeId":49,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"Mozilla/5.0","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId26 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId26 ${appId} + insert_policyId_to_file1 monitor_signaturesId26 ${signaturesId} + insert_policyId_to_file1 monitor_objectId26 ${objectId} + +Monitor-test-028 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.user_agent","layer":"session_layer","stage":1,"attributeType":"string","attributeId":49,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"Micro","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId27 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId27 ${appId} + insert_policyId_to_file1 monitor_signaturesId27 ${signaturesId} + insert_policyId_to_file1 monitor_objectId27 ${objectId} + +Monitor-test-029 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.content_type","layer":"session_layer","stage":1,"attributeType":"string","attributeId":51,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"text","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId28 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId28 ${appId} + insert_policyId_to_file1 monitor_signaturesId28 ${signaturesId} + insert_policyId_to_file1 monitor_objectId28 ${objectId} + +Monitor-test-030 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.content_type","layer":"session_layer","stage":1,"attributeType":"string","attributeId":51,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"application","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId29 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId29 ${appId} + insert_policyId_to_file1 monitor_signaturesId29 ${signaturesId} + insert_policyId_to_file1 monitor_objectId29 ${objectId} + +Monitor-test-031 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.content_encoding","layer":"session_layer","stage":1,"attributeType":"string","attributeId":53,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"gzip","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId30 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId30 ${appId} + insert_policyId_to_file1 monitor_signaturesId30 ${signaturesId} + insert_policyId_to_file1 monitor_objectId30 ${objectId} + +Monitor-test-032 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.content_encoding","layer":"session_layer","stage":1,"attributeType":"string","attributeId":53,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"Gzip","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId31 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId31 ${appId} + insert_policyId_to_file1 monitor_signaturesId31 ${signaturesId} + insert_policyId_to_file1 monitor_objectId31 ${objectId} + +Monitor-test-033 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.referer","layer":"session_layer","stage":1,"attributeType":"string","attributeId":55,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"nymbler","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId32 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId32 ${appId} + insert_policyId_to_file1 monitor_signaturesId32 ${signaturesId} + insert_policyId_to_file1 monitor_objectId32 ${objectId} + +Monitor-test-034 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.cookie","layer":"session_layer","stage":1,"attributeType":"string","attributeId":57,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"PLAY","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true},{"sigObjectName":"Condition 1","attributeName":"http.cookie","layer":"session_layer","stage":1,"attributeType":"string","attributeId":57,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"heroku","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId33 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId33 ${appId} + insert_policyId_to_file1 monitor_signaturesId33 ${signaturesId} + insert_policyId_to_file1 monitor_objectId33 ${objectId} + +Monitor-test-035 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"http.set_cookie","layer":"session_layer","stage":3,"attributeType":"string","attributeId":59,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"PLAY","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true},{"sigObjectName":"Condition 1","attributeName":"http.set_cookie","layer":"session_layer","stage":3,"attributeType":"string","attributeId":59,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"heroku","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"http","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId34 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId34 ${appId} + insert_policyId_to_file1 monitor_signaturesId34 ${signaturesId} + insert_policyId_to_file1 monitor_objectId34 ${objectId} + +Monitor-test-036 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"quic.sni","layer":"session_layer","stage":1,"attributeType":"string","attributeId":61,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"google","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"quic","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId35 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId35 ${appId} + insert_policyId_to_file1 monitor_signaturesId35 ${signaturesId} + insert_policyId_to_file1 monitor_objectId35 ${objectId} + +Monitor-test-037 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ssl.handshake.extensions_server_name","layer":"session_layer","stage":1,"attributeType":"string","attributeId":15,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"jianshu","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"ssl","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId36 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId36 ${appId} + insert_policyId_to_file1 monitor_signaturesId36 ${signaturesId} + insert_policyId_to_file1 monitor_objectId36 ${objectId} + +Monitor-test-038 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ssl.handshake.extensions_server_name","layer":"session_layer","stage":1,"attributeType":"string","attributeId":15,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"baidu","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"ssl","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId37 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId37 ${appId} + insert_policyId_to_file1 monitor_signaturesId37 ${signaturesId} + insert_policyId_to_file1 monitor_objectId37 ${objectId} + +Monitor-test-039 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ssl.handshake.cert.serial_number","layer":"session_layer","stage":2,"attributeType":"string","attributeId":19,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"baidu","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":2,"protocol":"ssl","luaProfileId":0,"Case-insensitive":true}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId38 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId38 ${appId} + insert_policyId_to_file1 monitor_signaturesId38 ${signaturesId} + insert_policyId_to_file1 monitor_objectId38 ${objectId} + +Monitor-test-040 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ssl.handshake.cert.serial_number","layer":"session_layer","stage":2,"attributeType":"string","attributeId":19,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"010098a42e24bb185a17bbed77ac9a4d","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":1,"protocol":"ssl","luaProfileId":0,"Case-insensitive":false}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId39 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId39 ${appId} + insert_policyId_to_file1 monitor_signaturesId39 ${signaturesId} + insert_policyId_to_file1 monitor_objectId39 ${objectId} + +Monitor-test-041 + Comment 创建IP + ${addItemList1} Create Dictionary isSession=endpoint ip=192.168.50.59 port=0-65535 direction=0 protocol=0 isInitialize=0 + ${addItemLists} Create list ${addItemList1} + ${objectDict} Create Dictionary objectType=ip objectSubType=endpoint isValid=${1} addItemList=${addItemLists} + ${rescode} ${objectId} AddObjects ${1} ${objectDict} + + Comment 创建Signatures + ${signaturesBody} Set Variable {"returnData":1,"opAction":"add","signatures":[{"signatureName":"${TEST NAME}","profileModifiedTime":"","iconColor":"","signatureDesc":"","andConditions":[{"sigObjectName":"Condition 1","orConditions":[{"sigObjectName":"null","attributeName":"ssl.handshake.certificate.subject_common_name","layer":"session_layer","stage":2,"attributeType":"string","attributeId":27,"objectId":[],"lowBoundary":"","upBoundary":"","exprType":0,"enableOffset":false,"keywordObj":[{"keywords":"010098a42e24bb185a17bbed77ac9a4d","offset":"","depth":""}],"attributeFlag":1,"matchMethod":0,"isHexbin":1,"protocol":"ssl","luaProfileId":0,"Case-insensitive":false}]}]}]} + ${signaturesId} AddSignature ${signaturesBody} + + Comment 创建Application + ${applicationBody} Set Variable {"opAction":"add","returnData":1,"appObj":{"appId":"","appName":"${TEST NAME}","standardPorts":"","isValid":1,"appProperties":{"parentAppId":0,"category":"networking","subcategory":"proxy","technology":"peer-to-peer","risk":"3","characteristics":"","denyAction":0,"continueScanning":0,"tcpTimeout":0,"udpTimeout":0,"tcpHalfClose":null,"tcpTimeWait":null},"appSurrogates":[{"appSuid":null,"group_by":"session","time_window":0,"ordered_match":"no","show":false,"signature_sequence":[{"signature_id":${signaturesId},"exclude":0,"iconColor":""}]}]}} + ${appId} AddApplication ${applicationBody} + + Comment 查询Application，获取AppIDObject + ${appidobject} GetAppIdObjects ${appId} + Comment 创建策略 + ${policyDict} Create Dictionary policyName=${TEST NAME} policyType=tsg_security action=monitor source=${objectId}|TSG_SECURITY_SOURCE_ADDR userRegion={"protocol":"${TEST NAME}"} isValid=${1} appIdObjects=${appidobject} + ${rescode} ${policyIds} AddPolicies 1 ${policyDict} v2 + log ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_policyId40 ${policyIds}[0][policyIds][0] + insert_policyId_to_file1 monitor_applicationId40 ${appId} + insert_policyId_to_file1 monitor_signaturesId40 ${signaturesId} + insert_policyId_to_file1 monitor_objectId40 ${objectId} + +