博客

    public static List<WtmpLog> roundAuditAnalyzer(List<WtmpLog> WtmpLogs, JSONArray fortressIps) {

        List<WtmpLog> roundIpList = new ArrayList<>();
        List<HashMap> fortressIpList = JSON.parseArray(fortressIps.toJSONString(), HashMap.class);

        for (WtmpLog wtmpLog : WtmpLogs) {
            boolean flag = true;
            for (HashMap fortress : fortressIpList) {
                //如果主机和堡垒都存在同样IP, 但是堡垒ptype=tns, 也属于绕行数据
                if (wtmpLog.getClientIp().equals(fortress.get("ip")) && !P_TYPE.toLowerCase().equals(fortress.get("ptype").toString().toLowerCase())) {
                    flag = false;
                    break;
                }
            }
            if (flag) {
                roundIpList.add(wtmpLog);
            }
        }

        return roundIpList;