{"expand":"renderedFields,names,schema,operations,editmeta,changelog,versionedRepresentations","id":"34501","self":"https://jira.geedge.net/rest/api/2/issue/34501","key":"OMPUB-923","fields":{"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303},"components":[],"timespent":null,"timeoriginalestimate":null,"description":"5.11日业主反馈 *办公室环境* 出现由82.223.55.87导致的穿透，现象如下：\r\n * 业主提供的pcap包中，对应会话为SSH协议，会话发生时间为15:04-15:06\r\n * 查询14:00-16:00的session record，查询条件为用户端IP、服务端IP和服务端端口，仅在15:40左右查询到两条会话记录，与pcap包中记录时间相差较大\r\n * 会话日志中查询到的两条会话均为测试设备的公网IP访问82.223.55.87、且端口为22的SSH协议会话，预期应命中Psiphon-Server-APP - signature1：Psiphon-Server-Signature，但只有一条会话被标记为Psiphon-Server-APP，另一条未识别（红框内Psiphon3 APP为旧版本内置APP，非deny对象）\r\n ** 预期命中的Signature条件配置如下：命中ip.dst，且满足ssl.sni非条件\r\n\r\n!image-2023-05-12-16-34-51-971.png|width=805,height=323!!image-2023-05-15-16-13-51-750.png|width=384,height=318!\r\n\r\n \r\n\r\n ","project":{"self":"https://jira.geedge.net/rest/api/2/project/10206","id":"10206","key":"OMPUB","name":"Operation and Maintenance","projectTypeKey":"business","avatarUrls":{"48x48":"https://jira.geedge.net/secure/projectavatar?pid=10206&avatarId=10715","24x24":"https://jira.geedge.net/secure/projectavatar?size=small&pid=10206&avatarId=10715","16x16":"https://jira.geedge.net/secure/projectavatar?size=xsmall&pid=10206&avatarId=10715","32x32":"https://jira.geedge.net/secure/projectavatar?size=medium&pid=10206&avatarId=10715"},"projectCategory":{"self":"https://jira.geedge.net/rest/api/2/projectCategory/10002","id":"10002","description":"系统运维","name":"MaintenanceDev"}},"fixVersions":[],"aggregatetimespent":null,"resolution":{"self":"https://jira.geedge.net/rest/api/2/resolution/10100","id":"10100","description":"Developer and tester should keep tracking on this issue, and issue will keep open.","name":"Need tracking"},"timetracking":{},"customfield_10401":null,"customfield_10104":["com.atlassian.greenhopper.service.sprint.Sprint@281921a0[id=175,rapidViewId=41,state=CLOSED,name=现场or研发自提-Bug,startDate=2023-04-12T17:12:00.000+08:00,endDate=2023-05-17T17:12:00.000+08:00,completeDate=2024-02-22T10:24:06.706+08:00,activatedDate=2023-04-12T17:12:53.172+08:00,sequence=177,goal=,autoStartStop=false]","com.atlassian.greenhopper.service.sprint.Sprint@226c6ef5[id=200,rapidViewId=41,state=FUTURE,name=自提Bug,startDate=<null>,endDate=<null>,completeDate=<null>,activatedDate=<null>,sequence=197,goal=<null>,autoStartStop=false]"],"customfield_10402":null,"customfield_10105":"0|i040bo:","customfield_10403":null,"customfield_10404":null,"attachment":[{"self":"https://jira.geedge.net/rest/api/2/attachment/37898","id":"37898","filename":"82.223.55.87.pcapng","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-12T16:37:41.922+0800","size":5717840,"mimeType":"application/octet-stream","content":"https://jira.geedge.net/secure/attachment/37898/82.223.55.87.pcapng"},{"self":"https://jira.geedge.net/rest/api/2/attachment/37899","id":"37899","filename":"image-2023-05-12-16-34-51-971.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-12T16:34:53.201+0800","size":272005,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/37899/image-2023-05-12-16-34-51-971.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/37899/_thumb_37899.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/38043","id":"38043","filename":"image-2023-05-15-16-13-51-750.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2023-05-15T16:13:51.921+0800","size":49772,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/38043/image-2023-05-15-16-13-51-750.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/38043/_thumb_38043.png"}],"aggregatetimeestimate":null,"resolutiondate":"2024-05-13T15:07:53.813+0800","workratio":-1,"summary":"【E21现场】命中Psiphon Object的会话未按预期标注为Psiphon-Server-APP","lastViewed":null,"watches":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-923/watchers","watchCount":4,"isWatching":false},"creator":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"subtasks":[],"created":"2023-05-12T16:37:51.262+0800","reporter":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"customfield_10000":"{summaryBean=com.atlassian.jira.plugin.devstatus.rest.SummaryBean@7c126acc[summary={pullrequest=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@48d20201[overall=PullRequestOverallBean{stateCount=0, state='OPEN', details=PullRequestOverallDetails{openCount=0, mergedCount=0, declinedCount=0}},byInstanceType={}], build=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@3760b987[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BuildOverallBean@6ffa7760[failedBuildCount=0,successfulBuildCount=0,unknownBuildCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], review=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@353db886[overall=com.atlassian.jira.plugin.devstatus.summary.beans.ReviewsOverallBean@3293bbd5[stateCount=0,state=<null>,dueDate=<null>,overDue=false,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], deployment-environment=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@d8081[overall=com.atlassian.jira.plugin.devstatus.summary.beans.DeploymentOverallBean@3cf0a697[topEnvironments=[],showProjects=false,successfulCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], repository=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@6451d007[overall=com.atlassian.jira.plugin.devstatus.summary.beans.CommitOverallBean@4b33824b[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], branch=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@27d60a24[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BranchOverallBean@1eabc457[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}]},errors=[],configErrors=[]], devSummaryJson={\"cachedValue\":{\"errors\":[],\"configErrors\":[],\"summary\":{\"pullrequest\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":\"OPEN\",\"details\":{\"openCount\":0,\"mergedCount\":0,\"declinedCount\":0,\"total\":0},\"open\":true},\"byInstanceType\":{}},\"build\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"failedBuildCount\":0,\"successfulBuildCount\":0,\"unknownBuildCount\":0},\"byInstanceType\":{}},\"review\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":null,\"dueDate\":null,\"overDue\":false,\"completed\":false},\"byInstanceType\":{}},\"deployment-environment\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"topEnvironments\":[],\"showProjects\":false,\"successfulCount\":0},\"byInstanceType\":{}},\"repository\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}},\"branch\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}}}},\"isStale\":false}}","aggregateprogress":{"progress":0,"total":0},"customfield_10100":null,"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/3","iconUrl":"https://jira.geedge.net/images/icons/priorities/medium.svg","name":"Medium","id":"3"},"customfield_10200":null,"customfield_10400":null,"labels":["E21现场"],"environment":null,"timeestimate":null,"aggregatetimeoriginalestimate":null,"versions":[],"duedate":null,"progress":{"progress":0,"total":0},"issuelinks":[],"comment":{"comments":[{"self":"https://jira.geedge.net/rest/api/2/issue/34501/comment/77221","id":"77221","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"经与[~yinjiangyi] 讨论，已配置的特征”dst.ip AND 非ssl.sni“（ssl.sni已经被common.server_fqdn包含），预期匹配如下情况：\r\n # ssl，http，quic协议请求中不包含FQDN字段（对应ssl.sni,http.host,quic.sni）的会话\r\n # 非ssl，http，quic协议的会话\r\n\r\n上述条件仅使用单一条件（例如common.server_fqdn==empty），无论是功能端实现还是用户使用都容易造成困扰。\r\n * 例如对于http,ssl,quic会话s2c侧的单向流量，满足server_fqdn==empty的条件，但是不符合用户意图\r\n\r\n \r\n\r\n针对24.02版本，建议app signature更新为：\r\n * dst.ip AND negate (app==HTTP or app==SSL or app==QUIC)\r\n * dst.ip AND ssl.sni_absent\r\n\r\nHTTP和QUIC协议目前不支持显式的指定类似的fqdn_absent语义，有需要的话功能端可以增加","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-03-25T17:16:34.662+0800","updated":"2024-03-25T18:00:29.394+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/34501/comment/80625","id":"80625","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"body":"* 上述方案是否满足需求，请验证。[~yinjiangyi] ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"created":"2024-05-13T15:07:43.505+0800","updated":"2024-05-13T15:07:43.505+0800"}],"maxResults":2,"total":2,"startAt":0},"votes":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-923/votes","votes":0,"hasVoted":false},"worklog":{"startAt":0,"maxResults":20,"total":0,"worklogs":[]},"assignee":{"self":"https://jira.geedge.net/rest/api/2/user?username=liuxueli","name":"liuxueli","key":"JIRAUSER10133","emailAddress":"liuxueli@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10133&avatarId=10612","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10133&avatarId=10612","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10133&avatarId=10612","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10133&avatarId=10612"},"displayName":"刘学利","active":true,"timeZone":"Asia/Shanghai"},"updated":"2024-05-13T15:07:53.817+0800","status":{"self":"https://jira.geedge.net/rest/api/2/status/10100","description":"此问题正在被经办人积极处理。","iconUrl":"https://jira.geedge.net/images/icons/status_generic.gif","name":"处理中","id":"10100","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/4","id":4,"key":"indeterminate","colorName":"yellow","name":"处理中"}}}}