{"expand":"renderedFields,names,schema,operations,editmeta,changelog,versionedRepresentations","id":"44575","self":"https://jira.geedge.net/rest/api/2/issue/44575","key":"OMPUB-1343","fields":{"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303},"components":[],"timespent":null,"timeoriginalestimate":null,"description":"M22现场下发一条策略：“Lantern_vpn_ test”，策略详情如图：\r\n\r\n!image-2024-06-27-14-27-05-083.png|width=422,height=218!\r\n\r\n!image-2024-06-27-14-27-42-813.png|width=425,height=272!\r\n\r\n策略于2024-06-27 09:52:24已经限定Source IP Address，但是在查询Security Events（2024-06-27 10:33:26 to 2024-06-27 10:45:53）日志的时候发现，日志展示的client ip出现一些除了Source IP Address条件限定外的IP Address，如图：\r\n\r\n!image-2024-06-27-16-12-30-071.png|width=560,height=293!\r\n\r\n在此期间除了客户修改了策略条件外，无其他操作，修改前后策略对比：\r\n\r\n!image-2024-06-27-16-13-02-214.png|width=267,height=403!\r\n\r\n!image-2024-06-27-14-33-12-912.png|width=261,height=393!\r\n\r\n \r\n\r\n ","project":{"self":"https://jira.geedge.net/rest/api/2/project/10206","id":"10206","key":"OMPUB","name":"Operation and Maintenance","projectTypeKey":"business","avatarUrls":{"48x48":"https://jira.geedge.net/secure/projectavatar?pid=10206&avatarId=10715","24x24":"https://jira.geedge.net/secure/projectavatar?size=small&pid=10206&avatarId=10715","16x16":"https://jira.geedge.net/secure/projectavatar?size=xsmall&pid=10206&avatarId=10715","32x32":"https://jira.geedge.net/secure/projectavatar?size=medium&pid=10206&avatarId=10715"},"projectCategory":{"self":"https://jira.geedge.net/rest/api/2/projectCategory/10002","id":"10002","description":"系统运维","name":"MaintenanceDev"}},"fixVersions":[],"aggregatetimespent":null,"resolution":{"self":"https://jira.geedge.net/rest/api/2/resolution/10000","id":"10000","description":"该问题的工作流程已完成。","name":"完成"},"timetracking":{},"customfield_10401":null,"customfield_10104":null,"customfield_10402":null,"customfield_10105":"0|i05plg:","customfield_10403":null,"customfield_10404":null,"attachment":[{"self":"https://jira.geedge.net/rest/api/2/attachment/59393","id":"59393","filename":"anydesk00000.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T17:23:33.900+0800","size":457752,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59393/anydesk00000.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59393/_thumb_59393.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59392","id":"59392","filename":"anydesk00001.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T17:23:36.120+0800","size":371686,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59392/anydesk00001.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59392/_thumb_59392.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59391","id":"59391","filename":"firewall.cm.maat.2024-06-27","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T16:09:27.086+0800","size":1164298,"mimeType":"application/octet-stream","content":"https://jira.geedge.net/secure/attachment/59391/firewall.cm.maat.2024-06-27"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59356","id":"59356","filename":"image-2024-06-27-14-27-05-083.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T15:56:31.999+0800","size":246375,"mimeType":"image/jpeg","content":"https://jira.geedge.net/secure/attachment/59356/image-2024-06-27-14-27-05-083.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59356/_thumb_59356.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59355","id":"59355","filename":"image-2024-06-27-14-27-42-813.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T15:58:04.407+0800","size":198227,"mimeType":"image/jpeg","content":"https://jira.geedge.net/secure/attachment/59355/image-2024-06-27-14-27-42-813.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59355/_thumb_59355.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59354","id":"59354","filename":"image-2024-06-27-14-33-12-912.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T16:04:48.294+0800","size":231367,"mimeType":"image/jpeg","content":"https://jira.geedge.net/secure/attachment/59354/image-2024-06-27-14-33-12-912.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59354/_thumb_59354.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59357","id":"59357","filename":"image-2024-06-27-16-12-30-071.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T16:12:31.574+0800","size":646366,"mimeType":"image/jpeg","content":"https://jira.geedge.net/secure/attachment/59357/image-2024-06-27-16-12-30-071.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59357/_thumb_59357.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59358","id":"59358","filename":"image-2024-06-27-16-13-02-214.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T16:13:03.362+0800","size":231474,"mimeType":"image/jpeg","content":"https://jira.geedge.net/secure/attachment/59358/image-2024-06-27-16-13-02-214.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59358/_thumb_59358.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59366","id":"59366","filename":"image-2024-06-27-20-07-09-538.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T20:07:09.924+0800","size":473050,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59366/image-2024-06-27-20-07-09-538.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59366/_thumb_59366.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59385","id":"59385","filename":"image-2024-06-28-15-41-10-125.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhangwei","name":"zhangwei","key":"JIRAUSER10101","emailAddress":"zhangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10101&avatarId=10600","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10101&avatarId=10600","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10101&avatarId=10600","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10101&avatarId=10600"},"displayName":"张微","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T15:41:09.780+0800","size":10092,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59385/image-2024-06-28-15-41-10-125.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59385/_thumb_59385.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59386","id":"59386","filename":"image-2024-06-28-15-41-40-712.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhangwei","name":"zhangwei","key":"JIRAUSER10101","emailAddress":"zhangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10101&avatarId=10600","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10101&avatarId=10600","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10101&avatarId=10600","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10101&avatarId=10600"},"displayName":"张微","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T15:41:40.347+0800","size":17808,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59386/image-2024-06-28-15-41-40-712.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59386/_thumb_59386.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59389","id":"59389","filename":"image-2024-06-28-15-46-16-611.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhangwei","name":"zhangwei","key":"JIRAUSER10101","emailAddress":"zhangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10101&avatarId=10600","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10101&avatarId=10600","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10101&avatarId=10600","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10101&avatarId=10600"},"displayName":"张微","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T15:46:16.201+0800","size":10247,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59389/image-2024-06-28-15-46-16-611.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59389/_thumb_59389.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59395","id":"59395","filename":"image-2024-06-28-17-24-50-136.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T17:24:50.298+0800","size":184983,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59395/image-2024-06-28-17-24-50-136.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59395/_thumb_59395.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59394","id":"59394","filename":"image-2024-06-28-17-25-00-177.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T17:25:00.401+0800","size":405359,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59394/image-2024-06-28-17-25-00-177.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59394/_thumb_59394.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/59407","id":"59407","filename":"image-2024-06-28-21-03-12-905.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T21:03:13.390+0800","size":9488,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/59407/image-2024-06-28-21-03-12-905.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/59407/_thumb_59407.png"}],"aggregatetimeestimate":null,"resolutiondate":"2024-07-05T14:13:17.577+0800","workratio":-1,"summary":"【M22项目】Security Policy在限定了source ip的情况下安全日志出现其他client ip","lastViewed":null,"watches":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-1343/watchers","watchCount":12,"isWatching":false},"creator":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"subtasks":[],"created":"2024-06-27T16:06:33.751+0800","reporter":{"self":"https://jira.geedge.net/rest/api/2/user?username=chengsiyuan","name":"chengsiyuan","key":"JIRAUSER10915","emailAddress":"chengsiyuan@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?avatarId=10346","24x24":"https://jira.geedge.net/secure/useravatar?size=small&avatarId=10346","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&avatarId=10346","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&avatarId=10346"},"displayName":"程思源","active":true,"timeZone":"Asia/Shanghai"},"customfield_10000":"{summaryBean=com.atlassian.jira.plugin.devstatus.rest.SummaryBean@35efd257[summary={pullrequest=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@6e73d784[overall=PullRequestOverallBean{stateCount=0, state='OPEN', details=PullRequestOverallDetails{openCount=0, mergedCount=0, declinedCount=0}},byInstanceType={}], build=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@4b7155ab[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BuildOverallBean@3b4e74b6[failedBuildCount=0,successfulBuildCount=0,unknownBuildCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], review=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@20d8e983[overall=com.atlassian.jira.plugin.devstatus.summary.beans.ReviewsOverallBean@1ab18ca4[stateCount=0,state=<null>,dueDate=<null>,overDue=false,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], deployment-environment=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@5b2c5e54[overall=com.atlassian.jira.plugin.devstatus.summary.beans.DeploymentOverallBean@138f7a43[topEnvironments=[],showProjects=false,successfulCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], repository=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@747c1d40[overall=com.atlassian.jira.plugin.devstatus.summary.beans.CommitOverallBean@623e6bc7[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], branch=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@5bd9572a[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BranchOverallBean@33ec7370[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}]},errors=[],configErrors=[]], devSummaryJson={\"cachedValue\":{\"errors\":[],\"configErrors\":[],\"summary\":{\"pullrequest\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":\"OPEN\",\"details\":{\"openCount\":0,\"mergedCount\":0,\"declinedCount\":0,\"total\":0},\"open\":true},\"byInstanceType\":{}},\"build\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"failedBuildCount\":0,\"successfulBuildCount\":0,\"unknownBuildCount\":0},\"byInstanceType\":{}},\"review\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":null,\"dueDate\":null,\"overDue\":false,\"completed\":false},\"byInstanceType\":{}},\"deployment-environment\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"topEnvironments\":[],\"showProjects\":false,\"successfulCount\":0},\"byInstanceType\":{}},\"repository\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}},\"branch\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}}}},\"isStale\":false}}","aggregateprogress":{"progress":0,"total":0},"customfield_10100":null,"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/2","iconUrl":"https://jira.geedge.net/images/icons/priorities/high.svg","name":"High","id":"2"},"customfield_10200":null,"customfield_10400":null,"labels":["M22"],"environment":null,"timeestimate":null,"aggregatetimeoriginalestimate":null,"versions":[],"duedate":null,"progress":{"progress":0,"total":0},"issuelinks":[],"comment":{"comments":[{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82616","id":"82616","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhengchao","name":"zhengchao","key":"JIRAUSER10000","emailAddress":"zhengchao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10000&avatarId=10604","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10000&avatarId=10604","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10000&avatarId=10604","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10000&avatarId=10604"},"displayName":"郑超","active":true,"timeZone":"Asia/Qyzylorda"},"body":"[~liuchang]  写个maat的单测复现一下，用maat_cmd_set_line接口构造：\r\n\r\nsession属性： src IP_X -> dst IP\r\n\r\n测试流程：\r\n # 规则 rule1: src IP_Y & dst IP\r\n # maat_scan(session.src_ip_Y), maat_scan(session.dst_Ip) \r\n # EXPECT 不命中\r\n # 新建规则 app1（compile）: dst IP\r\n # 修改rule1 : src IP_Y & app1\r\n # reset maat_state\r\n # maat_scan(session.src_ip_X), maat_scan(session.dst_Ip)\r\n # EXPECT不命中","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhengchao","name":"zhengchao","key":"JIRAUSER10000","emailAddress":"zhengchao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10000&avatarId=10604","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10000&avatarId=10604","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10000&avatarId=10604","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10000&avatarId=10604"},"displayName":"郑超","active":true,"timeZone":"Asia/Qyzylorda"},"created":"2024-06-27T20:10:47.778+0800","updated":"2024-06-27T20:12:16.382+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82617","id":"82617","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"*用户操作*\r\n\r\n根据audit log，{*}10:33~10:52{*}之间，对应策略存在如下修改操作：\r\n\r\n!image-2024-06-28-17-24-50-136.png|width=247,height=560!!image-2024-06-28-17-25-00-177.png|width=277,height=565!\r\n * v12 策略条件 source IP + destination IP\r\n * v13 策略条件从source IP + destination IP，变更为source IP + APPID\r\n * v14 策略失效\r\n * v15 策略生效\r\n * v16 策略失效\r\n * v17 策略生效\r\n\r\n*异常日志*\r\n * 从现场导出Security Event Log，查询条件为“reveive time：10:34-10:52， start time 10:31-10:33” 共计13752条日志，其中ClientIP非策略条件中的11555条（{*}异常日志{*}）\r\n ** 异常命中的会话，会话持续时间普遍超过60s，少量会话持续时间较短（<10s）\r\n ** *92台Sled均出现异常日志*\r\n * 按sled_ip==10.161.12.10过滤，异常命中会话出现的end time（策略条件为Deny，该时间通常为命中策略的时刻）时段为{*}10:33:28~10:46:27{*}，对应maat的日志[^firewall.cm.maat.2024-06-27]\r\n\r\n*功能端日志*\r\n * 查询10.161.12.10设备的maat规则更新日志，10:33:28~10:46:27之间，存在6次增量，每次加载的entries在3~6条之间\r\n ** 10:41:39的增量加载后，SECURITY_COMPILE_PLUGIN的rule_count从130变更为129\r\n ** 10:41:52的增量加载后，又从129变回130\r\n\r\n!image-2024-06-27-20-07-09-538.png|width=875,height=298!\r\n\r\n \r\n\r\n根据现场收集的信息，本issue中的误命中，发生时段为用户界面多次修改策略的过程。推测在该过程中，功能端执行策略时，策略条件退化为APPID。\r\n\r\n \r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-27T20:22:39.849+0800","updated":"2024-06-28T17:26:39.171+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82633","id":"82633","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuchang","name":"liuchang","key":"JIRAUSER11501","emailAddress":"liuchang@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=32"},"displayName":"刘畅","active":true,"timeZone":"Asia/Shanghai"},"body":"maat单测用例未复现，测试流程：\r\n\r\nsession属性： src IP 45.112.178.18 -> dst IP 2.2.2.2\r\n # 规则 rule1: src IP 103.89.49.6 & dst IP 2.2.2.2\r\n # maat_scan_ipv4(\"45.112.178.18\"), maat_scan_ipv4(\"2.2.2.2\") \r\n # EXPECT 不命中，{*}实际不命中{*}\r\n # 新建规则 app1（compile）: dst IP{*}（只新建了app_id表的一个group）{*}\r\n # 修改rule1 : src 103.89.49.6 & app1（group）\r\n # reset maat_state\r\n # maat_scan_ipv4(\"45.112.178.18\"), maat_scan_group(app1.group_id)\r\n # EXPECT不命中，{*}实际不命中{*}","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuchang","name":"liuchang","key":"JIRAUSER11501","emailAddress":"liuchang@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=32"},"displayName":"刘畅","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T14:19:29.899+0800","updated":"2024-06-28T14:19:29.899+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82657","id":"82657","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhangwei","name":"zhangwei","key":"JIRAUSER10101","emailAddress":"zhangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10101&avatarId=10600","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10101&avatarId=10600","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10101&avatarId=10600","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10101&avatarId=10600"},"displayName":"张微","active":true,"timeZone":"Asia/Shanghai"},"body":"在信息港44.3环境模拟现场操作情况，操作一条生效的，ID为212的安全策略：\r\n\r\n1. 修改策略条件：修改前条件source+destination，修改后条件source+application，产生如下图的MAA_UPDATE_STATUS，修改操作每个表的每个操作版本号+1（删除+1，新增+1），下图涉及两张表，所以本次修改操作，MAAT_VERSION+4\r\n\r\n!image-2024-06-28-15-41-40-712.png!\r\n\r\n2. 停用策略，MAAT_VERSION+2（两张表）\r\n\r\n!image-2024-06-28-15-41-10-125.png!\r\n\r\n3. 启用策略：MAAT_VERSION+2（两张表）\r\n\r\n!image-2024-06-28-15-46-16-611.png!","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhangwei","name":"zhangwei","key":"JIRAUSER10101","emailAddress":"zhangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10101&avatarId=10600","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10101&avatarId=10600","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10101&avatarId=10600","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10101&avatarId=10600"},"displayName":"张微","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T15:49:08.038+0800","updated":"2024-06-28T16:01:31.751+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82659","id":"82659","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuchang","name":"liuchang","key":"JIRAUSER11501","emailAddress":"liuchang@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=32"},"displayName":"刘畅","active":true,"timeZone":"Asia/Shanghai"},"body":"补充测试：MAAT单测中模拟CM的行为操作策略，修改策略条件和启停策略，未复现bug","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuchang","name":"liuchang","key":"JIRAUSER11501","emailAddress":"liuchang@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/c38384799a676db81827b3342cfba318?d=mm&s=32"},"displayName":"刘畅","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-06-28T16:05:01.646+0800","updated":"2024-06-28T16:05:01.646+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82674","id":"82674","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"body":"* 京版网关环境稳定复现本BUG，误命中的持续时间约4分钟\r\n ** 策略ID=5211 2024-06-28 20:03:39~20:07:33存在误命中\r\n *  京版网关环境复现步骤：\r\n ** 创建策略条件：Source IP+Destination IP, 生效策略\r\n *** \r\n{code:java}\r\n[root@tsg-traffic-engine-vsys-1-firewall-854678cd59-h42pr policy.5211.sip.dip]# cat MONITOR_COMPILE.00000000000000086731 | grep 5211\r\n5211    11    1    0    2    {}    {\"packet_capture\":{\"enable\":0},\"traffic_mirror\":{\"enable\":0},\"vsys_id\":1}    2    1    1719575997000000 0    key=5211\r\n[root@tsg-traffic-engine-vsys-1-firewall-854678cd59-h42pr policy.5211.sip.dip]# cat GROUP_MONITOR_COMPILE_RELATION.00000000000000086731 | grep -w 5211\r\n8758    5211    0    ATTR_SOURCE_IP    0    1    1719575997000000 0    key=9844\r\n16328    5211    0    ATTR_DESTINATION_IP    1    1    1719575997000000 0    key=9845\r\n[root@tsg-traffic-engine-vsys-1-firewall-854678cd59-h42pr policy.5211.sip.dip]# \r\n{code}\r\n\r\n * \r\n ** 修改策略条件:  Source IP+ Application, 生效策略\r\n *** \r\n{code:java}\r\n[root@tsg-traffic-engine-vsys-1-firewall-854678cd59-h42pr policy.5211.sip.del.dip.add.app]# cat MONITOR_COMPILE.00000000000000086735 | grep 5211\r\n5211    11    1    0    2    {}    {\"packet_capture\":{\"enable\":0},\"traffic_mirror\":{\"enable\":0},\"vsys_id\":1}    2    1    1719576219000000 0    key=5211\r\n[root@tsg-traffic-engine-vsys-1-firewall-854678cd59-h42pr policy.5211.sip.del.dip.add.app]# cat GROUP_MONITOR_COMPILE_RELATION.00000000000000086735 | grep -w 5211\r\n16365    5211    0    ATTR_APP_ID    0    1    1719576219000000 0    key=9846\r\n8758    5211    0    ATTR_SOURCE_IP    1    1    1719576219000000 0    key=9847\r\n[root@tsg-traffic-engine-vsys-1-firewall-854678cd59-h42pr policy.5211.sip.del.dip.add.app]#{code}\r\n\r\n * \r\n ** 从dump的策略详情可以看出，{color:#ff0000}*策略修改前后ATTR_SOURCE_IP对应的cluster ID由0变更为1*{color}，在这种场景下maat添加自测试用例能复现误命中问题：用例如下：\r\n *** 添加策略\r\n **** 添加策略条件 ATTR_SOURCE_IP(1.1.1.1)  cluster ID=0\r\n **** 添加策略条件 ATTR_DESTINATION_IP(2.2.2.2) cluster ID=1 \r\n **** Scan Source IP(3.3.3.3)\r\n **** scan Destination IP (2.2.2.2) \r\n *** 修改策略\r\n **** 删除策略条件 ATTR_SOURCE_IP  cluster ID=0\r\n **** 删除策略条件 ATTR_DESTINATION_IP cluster ID=1 \r\n **** 添加策略条件 ATTR_SOURCE_IP  cluster ID=1\r\n **** 添加策略条件 ATTR_APP_ID(group=1000) cluster ID=0\r\n **** Scan Application(group_id=1000)\r\n * 原因：\r\n ** maat扫描命中group ID后将clause ID记录在maat_state中，策略更新时clause ID发生变化时没有更新maat_state中的clause ID，故发生误命中。\r\n *** 扫描source IP + Destination IP后配置更新（clause ID发生变化），maat_state中clause ID未更新，接着扫描Application时实际生效条件变为Destination IP + Application","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=zhengchao","name":"zhengchao","key":"JIRAUSER10000","emailAddress":"zhengchao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10000&avatarId=10604","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10000&avatarId=10604","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10000&avatarId=10604","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10000&avatarId=10604"},"displayName":"郑超","active":true,"timeZone":"Asia/Qyzylorda"},"created":"2024-06-28T20:57:38.863+0800","updated":"2024-07-02T14:51:53.732+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/44575/comment/82699","id":"82699","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=gitlab","name":"gitlab","key":"JIRAUSER10210","emailAddress":"gitlab@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=32"},"displayName":"gitlab","active":true,"timeZone":"Asia/Shanghai"},"body":"[刘畅|https://git.mesalab.cn/liuchang] mentioned this issue in [a merge request|https://git.mesalab.cn/tango/maat/-/merge_requests/292] of [TSG-OS / Maat|https://git.mesalab.cn/tango/maat] on branch [bugfix/should-clear-clause-id-when-reomve-group-from-clause|https://git.mesalab.cn/tango/maat/-/tree/bugfix/should-clear-clause-id-when-reomve-group-from-clause]:{quote}fix OMPUB-1343 and add a test case for this bug{quote}","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=gitlab","name":"gitlab","key":"JIRAUSER10210","emailAddress":"gitlab@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/f66dd5efaf79bf21d0713eacdb61f7bd?d=mm&s=32"},"displayName":"gitlab","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-07-01T14:58:10.825+0800","updated":"2024-07-01T14:58:10.825+0800"}],"maxResults":7,"total":7,"startAt":0},"votes":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-1343/votes","votes":0,"hasVoted":false},"worklog":{"startAt":0,"maxResults":20,"total":0,"worklogs":[]},"assignee":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"updated":"2024-08-16T14:56:07.064+0800","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}}}}