├── .gitignore ├── README.md ├── conf └── filter.csv ├── csv └── test.csv ├── demo.png ├── etl.py ├── init.py ├── logo.ico ├── main.py ├── requirements.txt ├── server.py └── web ├── index.html └── js ├── echarts.min.js └── jquery-3.4.1.min.js /.gitignore: -------------------------------------------------------------------------------- 1 | /.idea/ 2 | /__pycache__/ 3 | /build/ 4 | /dist/ 5 | /venv/ 6 | /csv/ 7 | /web/sub_title.ini 8 | /web/tmp.json 9 | *.spec -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # SOC_Sankey_Generator 2 | 3 | ## 简介 4 | 这是一款从SOC日志中进行数据ETL与数据可视化的工具，可以快速将日志呈现为Sankey图，适合安全日报、周报、月报中使用；也适合HW行动中防守方每日汇报。 5 | 6 | ## 环境&依赖 7 | python3 8 | pandas(必选，用于处理csv) 9 | pyinstaller(可选，exe打包用) 10 | 11 | ## 用法 12 | 将日志文件整理成表头为：**源地址,目的地址,事件名称,事件数** 的CSV格式文件，放于csv目录下 13 | 运行mian.py或者main.exe按提示输入完成数据处理，最后浏览器访问 http://127.0.0.1:8900 即可。 14 | 15 | ## 展示 16 | ![alt demo](demo.png "demo") 17 | 18 | ## 过滤器用法 19 | 本工具支持包含与排除两种正则过滤器，请在conf目录下的filter.csv文件中进行配置。 20 | 配置说明为： 21 | 22 | >第一列：过滤模式[in=包含,ex=排除] 23 | >第二列：字段列号[0=源地址,1=目的地址,2=攻击方式] 24 | >第三列：匹配值[正则匹配] 25 | >第四列：备注 26 | 27 | 28 | 例如： 29 | ```ex,0,114.114.114.114,备注``` 30 | 为：排除源地址是114.114.1114.114的事件 31 | 32 | ```in,2,暴力破解,备注 ``` 33 | 为：仅查看事件名称中包含暴力破解的事件 34 | 35 | 当过滤器文件内容发生改动时，工具会自动对数据进行重新整理，可直接刷新网页页面。 36 | 37 | ## 打包命令 38 | ```pyinstaller -i logo.ico -F main.py ``` -------------------------------------------------------------------------------- /conf/filter.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LennyLeng/SOC_Sankey_Generator/9c26829c4697f20da9c9a06b1f20da87a06d27f4/conf/filter.csv -------------------------------------------------------------------------------- /csv/test.csv: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LennyLeng/SOC_Sankey_Generator/9c26829c4697f20da9c9a06b1f20da87a06d27f4/csv/test.csv -------------------------------------------------------------------------------- /demo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LennyLeng/SOC_Sankey_Generator/9c26829c4697f20da9c9a06b1f20da87a06d27f4/demo.png -------------------------------------------------------------------------------- /etl.py: -------------------------------------------------------------------------------- 1 | #coding=utf8 2 | 3 | import pandas as pd 4 | import json 5 | import re 6 | 7 | def get_filter(csv_file): 8 | filter_list = [] 9 | data = pd.read_csv(csv_file, encoding='gbk', header=0) 10 | 11 | for data_row in data.values: 12 | if (data_row[0].startswith('#')): 13 | continue 14 | dict = {} 15 | dict['filter_type'] = data_row[0] 16 | dict['col_index'] = int(data_row[1]) 17 | dict['pattern_val'] = data_row[2] 18 | dict['tip'] = data_row[3] 19 | filter_list.append(dict) 20 | return filter_list 21 | 22 | 23 | def generate_json(csv_file, limit, filter_list): 24 | print('开始抽取整理数据...') 25 | # 读取csv文件，thousands用于处理千分位分割符，header用于指定第一行为表头 26 | data = pd.read_csv(csv_file, encoding='gbk', header=0, thousands=',') 27 | #按照事件数量降序排列 28 | data = data.sort_values(by='事件数',ascending=False) 29 | 30 | # 生成打环判定源地址集合,集合set具有不重复特征 31 | i0_set_tmp = set() 32 | i1_set_tmp = set() 33 | 34 | links_tmp = {} 35 | nodes_tmp = set() 36 | links = [] 37 | nodes = [] 38 | 39 | # 生成links,nodes_tmp 40 | 41 | i = 0 42 | for data_row in data.values: 43 | # data_row[0] => 源地址 44 | # data_row[1] => 目的地址 45 | # data_row[2].replace(" ", "") => 事件名称 46 | # data_row[3] => 事件数 47 | if (limit == '' or i < int(limit)): 48 | 49 | #删除首尾空白不可见符 50 | data_row[0] = (str)(data_row[0]) 51 | data_row[0] = data_row[0].strip() 52 | 53 | data_row[1] = (str)(data_row[1]) 54 | data_row[1] = data_row[1].strip() 55 | 56 | data_row[2] = (str)(data_row[2]) 57 | data_row[2] = data_row[2].strip() 58 | 59 | #处理事件名称中的字符空格 60 | data_row[2] = data_row[2].replace(" ", "") 61 | 62 | #filter list policy 开始 63 | is_exclude = False 64 | for filter in filter_list: 65 | try: 66 | if(filter['filter_type'] == 'ex' and re.search(filter['pattern_val'], data_row[filter['col_index']])): 67 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t',str(data_row[3]), 68 | '\t',filter['tip'],'\t忽略') 69 | is_exclude = True 70 | break 71 | 72 | if (filter['filter_type'] == 'in' and not re.search(filter['pattern_val'],data_row[filter['col_index']])): 73 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t', 74 | str(data_row[3]), 75 | '\t', '未'+filter['tip'], '\t忽略') 76 | is_exclude = True 77 | break 78 | 79 | except: 80 | pass 81 | 82 | if(is_exclude): 83 | continue 84 | # filter list policy 结束 85 | 86 | if (data_row[2] == '' or data_row[2] == '空值'): 87 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t', str(data_row[3]), 88 | '\t事件名称为空\t修正') 89 | data_row[2] = '空名称' 90 | 91 | if (data_row[0] == data_row[1] or data_row[1] == '空值'): 92 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t', str(data_row[3]), 93 | '\t源目相同或者目的为空\t修正') 94 | data_row[1] = '0.0.0.0' 95 | i1_set_tmp.add(data_row[1]) 96 | 97 | if (data_row[0] == '空值'): 98 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t', str(data_row[3]), 99 | '\t源为空\t修正') 100 | data_row[0] = '0.0.0.0' 101 | i0_set_tmp.add(data_row[0]) 102 | 103 | if (data_row[1] in i0_set_tmp ): 104 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t', str(data_row[3]), 105 | '\t出现打环情况\t忽略') 106 | continue 107 | 108 | if (data_row[0] in i1_set_tmp ): 109 | print(data_row[0], '\t=>\t', data_row[2][:10] + '…', '\t=>\t', data_row[1], '\t|\t', str(data_row[3]), 110 | '\t出现多级情况\t忽略') 111 | continue 112 | 113 | i0_set_tmp.add(data_row[0]) 114 | i1_set_tmp.add(data_row[1]) 115 | 116 | nodes_tmp.add(data_row[0]) 117 | nodes_tmp.add(data_row[1]) 118 | nodes_tmp.add(data_row[2]) 119 | 120 | tmp = list() 121 | tmp.append(data_row[0]) 122 | tmp.append(data_row[2]) 123 | tmp = json.dumps(tmp) 124 | if (tmp in links_tmp): 125 | links_tmp[tmp] += data_row[3] 126 | else: 127 | links_tmp[tmp] = data_row[3] 128 | 129 | tmp = list() 130 | tmp.append(data_row[2]) 131 | tmp.append(data_row[1]) 132 | tmp = json.dumps(tmp) 133 | if (tmp in links_tmp): 134 | links_tmp[tmp] += data_row[3] 135 | else: 136 | links_tmp[tmp] = data_row[3] 137 | 138 | else: 139 | #print(data_row[0], data_row[1],data_row[2],data_row[3], '!!!') 140 | break 141 | i += 1 142 | 143 | 144 | # 生成nodes 145 | for data_row in nodes_tmp: 146 | dic = {} 147 | dic['name'] = data_row 148 | nodes.append(dic) 149 | 150 | for data_row in links_tmp: 151 | tmp = json.loads(data_row) 152 | dic = {} 153 | dic['source'] = tmp[0] 154 | dic['target'] = tmp[1] 155 | dic['value'] = links_tmp[data_row] 156 | links.append(dic) 157 | 158 | data = {'nodes': nodes, 'links': links} 159 | print('抽取整理数据完成!') 160 | return json.dumps(data) 161 | 162 | if __name__ == '__main__': 163 | filter_list = get_filter('conf/filter.csv') 164 | json_data = generate_json('csv/test.csv', '', filter_list) 165 | with open('web/tmp.json', 'w') as f: 166 | f.write(json_data) -------------------------------------------------------------------------------- /init.py: -------------------------------------------------------------------------------- 1 | #coding=utf8 2 | import etl 3 | import os 4 | 5 | def init(): 6 | print("启明星辰SOC日志Sankey图分析生成工具V1.5.2") 7 | # 1.0 基本功能 8 | # 1.1 修复snakeyjson数据原到目的的数值不一致问题 9 | # 1.2 增加白名单排除配置文件 10 | # 1.3 修复filter正则匹配问题，使用更宽松的search代替match 11 | # 1.31 修复源ip未空情况 12 | # 1.4 修复i0源地址集排除逻辑，打环判定更精确；修复http.server存在缓存，刷新数据不是最新的情况；修复filter文件不在时程序报错的情况。 13 | # 1.5 重构i0源地址集排除逻辑，优化padas读取csv文件逻辑，使用thousands用于处理千分位分割符，使用header用于指定第一行为表头 14 | # 1.5.1 新增多级排除逻辑，优化padas读取config文件逻辑 15 | # 1.5.2 bugfix 极端情况字段存在float情况，强制转换至str 16 | 17 | print("作者：Lenny\n") 18 | 19 | # 选择文件 20 | print('将启明SOC日志文件整理成表头为：[源地址,目的地址,事件名称,事件数]的CSV格式文件，放于csv目录下') 21 | csv_files = dict() 22 | data_row = 1 23 | for file in os.listdir('csv'): 24 | if (file[-4:] == '.csv'): 25 | print("[%d] %s" % (data_row, file)) 26 | csv_files[str(data_row)] = file 27 | data_row += 1 28 | select_index = input('输入要加载的文件序号[1-%d]:' % (data_row - 1)) 29 | print("已选择:%s" % (csv_files[str(select_index)])) 30 | # 输入日期 31 | date = input('输入图表副标题:') 32 | with open('web/sub_title.ini', 'w', encoding='utf-8') as f: 33 | f.write(date) 34 | 35 | # 输入提取条数 36 | limit = input('输入提取条数（不输入默认为全部提取,建议50条）:') 37 | 38 | return (csv_files[str(select_index)], limit) -------------------------------------------------------------------------------- /logo.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/LennyLeng/SOC_Sankey_Generator/9c26829c4697f20da9c9a06b1f20da87a06d27f4/logo.ico -------------------------------------------------------------------------------- /main.py: -------------------------------------------------------------------------------- 1 | #coding=utf8 2 | 3 | import etl 4 | import server 5 | import init 6 | import os 7 | import time 8 | import multiprocessing 9 | import traceback 10 | 11 | def generate_json_and_write_file(csv_file, limit): 12 | filter_chang_time = float(0) 13 | while True: 14 | try: 15 | if(filter_chang_time < os.stat('conf/filter.csv').st_mtime): 16 | filter_list = etl.get_filter('conf/filter.csv') 17 | json_data = etl.generate_json('csv/' + csv_file, limit, filter_list) 18 | with open('web/tmp.json', 'w') as f: 19 | f.write(json_data) 20 | print("web服务已启动，打开浏览器访问http://127.0.0.1:%d" % (server.PORT)) 21 | filter_chang_time = os.stat('conf/filter.csv').st_mtime 22 | except: 23 | #当filter文件不存在时，重置文件改变时间 24 | traceback.print_exc() 25 | filter_chang_time = float(0) 26 | time.sleep(1) 27 | 28 | def run(): 29 | (csv_file, limit) = init.init() 30 | json_p = multiprocessing.Process(target=generate_json_and_write_file, args=(csv_file, limit)) 31 | json_p.start() 32 | http_p = multiprocessing.Process(target=server.run) 33 | http_p.start() 34 | 35 | def debug(): 36 | (csv_file, limit) = init.init() 37 | http_p = multiprocessing.Process(target=server.run) 38 | http_p.start() 39 | generate_json_and_write_file(csv_file, limit) 40 | 41 | if __name__ == '__main__': 42 | multiprocessing.freeze_support() 43 | run() -------------------------------------------------------------------------------- /requirements.txt: -------------------------------------------------------------------------------- 1 | pandas 2 | pyinstaller -------------------------------------------------------------------------------- /server.py: -------------------------------------------------------------------------------- 1 | import http.server 2 | PORT = 8900 3 | DIRECTORY = "web" 4 | def run(): 5 | class Handler(http.server.SimpleHTTPRequestHandler): 6 | def __init__(self, *args, **kwargs): 7 | super().__init__(*args, directory=DIRECTORY, **kwargs) 8 | 9 | def end_headers(self): 10 | self.send_cacheless_headers() 11 | http.server.SimpleHTTPRequestHandler.end_headers(self) 12 | 13 | def send_cacheless_headers(self): 14 | self.send_header("Cache-Control", "no-cache, no-store, must-revalidate") 15 | self.send_header("Pragma", "no-cache") 16 | self.send_header("Expires", "0") 17 | 18 | try: 19 | httpd = http.server.HTTPServer(("", PORT), Handler) 20 | httpd.serve_forever() 21 | except KeyboardInterrupt: 22 | print('接收到关闭指令，退出程序') 23 | httpd.shutdown() 24 | 25 | if __name__ == '__main__': 26 | run() -------------------------------------------------------------------------------- /web/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 |
10 | 50 | 51 | -------------------------------------------------------------------------------- /web/js/jquery-3.4.1.min.js: -------------------------------------------------------------------------------- 1 | /*! jQuery v3.4.1 | (c) JS Foundation and other contributors | jquery.org/license */ 2 | !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e||"function"==typeof e?n[o.call(e)]||"object":typeof e}var f="3.4.1",k=function(e,t){return new k.fn.init(e,t)},p=/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g;function d(e){var t=!!e&&"length"in e&&e.length,n=w(e);return!m(e)&&!x(e)&&("array"===n||0===t||"number"==typeof t&&0+~]|"+M+")"+M+"*"),U=new RegExp(M+"|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegExp("^("+I+"|[*])"),ATTR:new RegExp("^"+W),PSEUDO:new RegExp("^"+$),CHILD:new RegExp("^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\("+M+"*(even|odd|(([+-]|)(\\d*)n|)"+M+"*(?:([+-]|)"+M+"*(\\d+)|))"+M+"*\\)|)","i"),bool:new RegExp("^(?:"+R+")$","i"),needsContext:new RegExp("^"+M+"*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\("+M+"*((?:-\\d)?\\d*)"+M+"*\\)|)(?=[^-]|$)","i")},Y=/HTML$/i,Q=/^(?:input|select|textarea|button)$/i,J=/^h\d$/i,K=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)|(\w+)|\.([\w-]+))$/,ee=/[+~]/,te=new RegExp("\\\\([\\da-f]{1,6}"+M+"?|("+M+")|.)","ig"),ne=function(e,t,n){var r="0x"+t-65536;return r!=r||n?t:r<0?String.fromCharCode(r+65536):String.fromCharCode(r>>10|55296,1023&r|56320)},re=/([\0-\x1f\x7f]|^-?\d)|^-$|[^\0-\x1f\x7f-\uFFFF\w-]/g,ie=function(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(m.childNodes),m.childNodes),t[m.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n||[],"string"!=typeof t||!t||1!==p&&9!==p&&11!==p)return n;if(!r&&((e?e.ownerDocument||e:m)!==C&&T(e),e=e||C,E)){if(11!==p&&(u=Z.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return n.push(a),n}else if(f&&(a=f.getElementById(i))&&y(e,a)&&a.id===i)return n.push(a),n}else{if(u[2])return H.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])&&d.getElementsByClassName&&e.getElementsByClassName)return H.apply(n,e.getElementsByClassName(i)),n}if(d.qsa&&!A[t+" "]&&(!v||!v.test(t))&&(1!==p||"object"!==e.nodeName.toLowerCase())){if(c=t,f=e,1===p&&U.test(t)){(s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=k),o=(l=h(t)).length;while(o--)l[o]="#"+s+" "+xe(l[o]);c=l.join(","),f=ee.test(t)&&ye(e.parentNode)||e}try{return H.apply(n,f.querySelectorAll(c)),n}catch(e){A(t,!0)}finally{s===k&&e.removeAttribute("id")}}}return g(t.replace(B,"$1"),e,n,r)}function ue(){var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[k]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}function de(t){return function(e){return"input"===e.nodeName.toLowerCase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t||"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t||e.isDisabled!==!t&&ae(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e.namespaceURI,n=(e.ownerDocument||e).documentElement;return!Y.test(t||n&&n.nodeName||"HTML")},T=se.setDocument=function(e){var t,n,r=e?e.ownerDocument||e:m;return r!==C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),m!==C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(function(e){return a.appendChild(e).id=k,!C.getElementsByName||!C.getElementsByName(k).length}),d.getById?(b.filter.ID=function(e){var t=e.replace(te,ne);return function(e){return e.getAttribute("id")===t}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n=t.getElementById(e);return n?[n]:[]}}):(b.filter.ID=function(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e);if("*"===e){while(n=o[i++])1===n.nodeType&&r.push(n);return r}return o},b.find.CLASS=d.getElementsByClassName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="",e.querySelectorAll("[msallowcapture^='']").length&&v.push("[*^$]="+M+"*(?:''|\"\")"),e.querySelectorAll("[selected]").length||v.push("\\["+M+"*(?:value|"+R+")"),e.querySelectorAll("[id~="+k+"-]").length||v.push("~="),e.querySelectorAll(":checked").length||v.push(":checked"),e.querySelectorAll("a#"+k+"+*").length||v.push(".#.+[+~]")}),ce(function(e){e.innerHTML="";var t=C.createElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"*[*^$|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":disabled").length&&v.push(":enabled",":disabled"),e.querySelectorAll("*,:x"),v.push(",.*:")})),(d.matchesSelector=K.test(c=a.matches||a.webkitMatchesSelector||a.mozMatchesSelector||a.oMatchesSelector||a.msMatchesSelector))&&ce(function(e){d.disconnectedMatch=c.call(e,"*"),c.call(e,"[s!='']:x"),s.push("!=",$)}),v=v.length&&new RegExp(v.join("|")),s=s.length&&new RegExp(s.join("|")),t=K.test(a.compareDocumentPosition),y=t||K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r||!(!r||1!==r.nodeType||!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareDocumentPosition(r)))}:function(e,t){if(t)while(t=t.parentNode)if(t===e)return!0;return!1},D=t?function(e,t){if(e===t)return l=!0,0;var n=!e.compareDocumentPosition-!t.compareDocumentPosition;return n||(1&(n=(e.ownerDocument||e)===(t.ownerDocument||t)?e.compareDocumentPosition(t):1)||!d.sortDetached&&t.compareDocumentPosition(e)===n?e===C||e.ownerDocument===m&&y(m,e)?-1:t===C||t.ownerDocument===m&&y(m,t)?1:u?P(u,e)-P(u,t):0:4&n?-1:1)}:function(e,t){if(e===t)return l=!0,0;var n,r=0,i=e.parentNode,o=t.parentNode,a=[e],s=[t];if(!i||!o)return e===C?-1:t===C?1:i?-1:o?1:u?P(u,e)-P(u,t):0;if(i===o)return pe(e,t);n=e;while(n=n.parentNode)a.unshift(n);n=t;while(n=n.parentNode)s.unshift(n);while(a[r]===s[r])r++;return r?pe(a[r],s[r]):a[r]===m?-1:s[r]===m?1:0}),C},se.matches=function(e,t){return se(e,null,null,t)},se.matchesSelector=function(e,t){if((e.ownerDocument||e)!==C&&T(e),d.matchesSelector&&E&&!A[t+" "]&&(!s||!s.test(t))&&(!v||!v.test(t)))try{var n=c.call(e,t);if(n||d.disconnectedMatch||e.document&&11!==e.document.nodeType)return n}catch(e){A(t,!0)}return 0":{dir:"parentNode",first:!0}," ":{dir:"parentNode"},"+":{dir:"previousSibling",first:!0},"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(te,ne),e[3]=(e[3]||e[4]||e[5]||"").replace(te,ne),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]||se.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]||1):2*("even"===e[3]||"odd"===e[3])),e[5]=+(e[7]+e[8]||"odd"===e[3])):e[3]&&se.error(e[0]),e},PSEUDO:function(e){var t,n=!e[6]&&e[2];return G.CHILD.test(e[0])?null:(e[3]?e[2]=e[4]||e[5]||"":n&&X.test(n)&&(t=h(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(te,ne).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.toLowerCase()===t}},CLASS:function(e){var t=p[e+" "];return t||(t=new RegExp("(^|"+M+")"+e+"("+M+"|$)"))&&p(e,function(e){return t.test("string"==typeof e.className&&e.className||"undefined"!=typeof e.getAttribute&&e.getAttribute("class")||"")})},ATTR:function(n,r,i){return function(e){var t=se.attr(e,n);return null==t?"!="===r:!r||(t+="","="===r?t===i:"!="===r?t!==i:"^="===r?i&&0===t.indexOf(i):"*="===r?i&&-1:\x20\t\r\n\f]*)[\x20\t\r\n\f]*\/?>(?:<\/\1>|)$/i;function j(e,n,r){return m(n)?k.grep(e,function(e,t){return!!n.call(e,t,e)!==r}):n.nodeType?k.grep(e,function(e){return e===n!==r}):"string"!=typeof n?k.grep(e,function(e){return-1)[^>]*|#([\w-]+))$/;(k.fn.init=function(e,t,n){var r,i;if(!e)return this;if(n=n||q,"string"==typeof e){if(!(r="<"===e[0]&&">"===e[e.length-1]&&3<=e.length?[null,e,null]:L.exec(e))||!r[1]&&t)return!t||t.jquery?(t||n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof k?t[0]:t,k.merge(this,k.parseHTML(r[1],t&&t.nodeType?t.ownerDocument||t:E,!0)),D.test(r[1])&&k.isPlainObject(t))for(r in t)m(this[r])?this[r](t[r]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(k):k.makeArray(e,this)}).prototype=k.fn,q=k(E);var H=/^(?:parents|prev(?:Until|All))/,O={children:!0,contents:!0,next:!0,prev:!0};function P(e,t){while((e=e[t])&&1!==e.nodeType);return e}k.fn.extend({has:function(e){var t=k(e,this),n=t.length;return this.filter(function(){for(var e=0;e\x20\t\r\n\f]*)/i,he=/^$|^module$|\/(?:java|ecma)script/i,ge={option:[1,""],thead:[1,"","
"],col:[2,"","
"],tr:[2,"","
"],td:[3,"","
"],_default:[0,"",""]};function ve(e,t){var n;return n="undefined"!=typeof e.getElementsByTagName?e.getElementsByTagName(t||"*"):"undefined"!=typeof e.querySelectorAll?e.querySelectorAll(t||"*"):[],void 0===t||t&&A(e,t)?k.merge([e],n):n}function ye(e,t){for(var n=0,r=e.length;nx",y.noCloneChecked=!!me.cloneNode(!0).lastChild.defaultValue;var Te=/^key/,Ce=/^(?:mouse|pointer|contextmenu|drag|drop)|click/,Ee=/^([^.]*)(?:\.(.+)|)/;function ke(){return!0}function Se(){return!1}function Ne(e,t){return e===function(){try{return E.activeElement}catch(e){}}()==("focus"===t)}function Ae(e,t,n,r,i,o){var a,s;if("object"==typeof t){for(s in"string"!=typeof n&&(r=r||n,n=void 0),t)Ae(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Se;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return k().off(e),a.apply(this,arguments)}).guid=a.guid||(a.guid=k.guid++)),e.each(function(){k.event.add(this,t,i,r,n)})}function De(e,i,o){o?(Q.set(e,i,!1),k.event.add(e,i,{namespace:!1,handler:function(e){var t,n,r=Q.get(this,i);if(1&e.isTrigger&&this[i]){if(r.length)(k.event.special[i]||{}).delegateType&&e.stopPropagation();else if(r=s.call(arguments),Q.set(this,i,r),t=o(this,i),this[i](),r!==(n=Q.get(this,i))||t?Q.set(this,i,!1):n={},r!==n)return e.stopImmediatePropagation(),e.preventDefault(),n.value}else r.length&&(Q.set(this,i,{value:k.event.trigger(k.extend(r[0],k.Event.prototype),r.slice(1),this)}),e.stopImmediatePropagation())}})):void 0===Q.get(e,i)&&k.event.add(e,i,ke)}k.event={global:{},add:function(t,e,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Q.get(t);if(v){n.handler&&(n=(o=n).handler,i=o.selector),i&&k.find.matchesSelector(ie,i),n.guid||(n.guid=k.guid++),(u=v.events)||(u=v.events={}),(a=v.handle)||(a=v.handle=function(e){return"undefined"!=typeof k&&k.event.triggered!==e.type?k.event.dispatch.apply(t,arguments):void 0}),l=(e=(e||"").match(R)||[""]).length;while(l--)d=g=(s=Ee.exec(e[l])||[])[1],h=(s[2]||"").split(".").sort(),d&&(f=k.event.special[d]||{},d=(i?f.delegateType:f.bindType)||d,f=k.event.special[d]||{},c=k.extend({type:d,origType:g,data:r,handler:n,guid:n.guid,selector:i,needsContext:i&&k.expr.match.needsContext.test(i),namespace:h.join(".")},o),(p=u[d])||((p=u[d]=[]).delegateCount=0,f.setup&&!1!==f.setup.call(t,r,h,a)||t.addEventListener&&t.addEventListener(d,a)),f.add&&(f.add.call(t,c),c.handler.guid||(c.handler.guid=n.guid)),i?p.splice(p.delegateCount++,0,c):p.push(c),k.event.global[d]=!0)}},remove:function(e,t,n,r,i){var o,a,s,u,l,c,f,p,d,h,g,v=Q.hasData(e)&&Q.get(e);if(v&&(u=v.events)){l=(t=(t||"").match(R)||[""]).length;while(l--)if(d=g=(s=Ee.exec(t[l])||[])[1],h=(s[2]||"").split(".").sort(),d){f=k.event.special[d]||{},p=u[d=(r?f.delegateType:f.bindType)||d]||[],s=s[2]&&new RegExp("(^|\\.)"+h.join("\\.(?:.*\\.|)")+"(\\.|$)"),a=o=p.length;while(o--)c=p[o],!i&&g!==c.origType||n&&n.guid!==c.guid||s&&!s.test(c.namespace)||r&&r!==c.selector&&("**"!==r||!c.selector)||(p.splice(o,1),c.selector&&p.delegateCount--,f.remove&&f.remove.call(e,c));a&&!p.length&&(f.teardown&&!1!==f.teardown.call(e,h,v.handle)||k.removeEvent(e,d,v.handle),delete u[d])}else for(d in u)k.event.remove(e,d+t[l],n,r,!0);k.isEmptyObject(u)&&Q.remove(e,"handle events")}},dispatch:function(e){var t,n,r,i,o,a,s=k.event.fix(e),u=new Array(arguments.length),l=(Q.get(this,"events")||{})[s.type]||[],c=k.event.special[s.type]||{};for(u[0]=s,t=1;t\x20\t\r\n\f]*)[^>]*)\/>/gi,qe=/\s*$/g;function Oe(e,t){return A(e,"table")&&A(11!==t.nodeType?t:t.firstChild,"tr")&&k(e).children("tbody")[0]||e}function Pe(e){return e.type=(null!==e.getAttribute("type"))+"/"+e.type,e}function Re(e){return"true/"===(e.type||"").slice(0,5)?e.type=e.type.slice(5):e.removeAttribute("type"),e}function Me(e,t){var n,r,i,o,a,s,u,l;if(1===t.nodeType){if(Q.hasData(e)&&(o=Q.access(e),a=Q.set(t,o),l=o.events))for(i in delete a.handle,a.events={},l)for(n=0,r=l[i].length;n")},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNode(!0),f=oe(e);if(!(y.noCloneChecked||1!==e.nodeType&&11!==e.nodeType||k.isXMLDoc(e)))for(a=ve(c),r=0,i=(o=ve(e)).length;r").attr(n.scriptAttrs||{}).prop({charset:n.scriptCharset,src:n.url}).on("load error",i=function(e){r.remove(),i=null,e&&t("error"===e.type?404:200,e.type)}),E.head.appendChild(r[0])},abort:function(){i&&i()}}});var Vt,Gt=[],Yt=/(=)\?(?=&|$)|\?\?/;k.ajaxSetup({jsonp:"callback",jsonpCallback:function(){var e=Gt.pop()||k.expando+"_"+kt++;return this[e]=!0,e}}),k.ajaxPrefilter("json jsonp",function(e,t,n){var r,i,o,a=!1!==e.jsonp&&(Yt.test(e.url)?"url":"string"==typeof e.data&&0===(e.contentType||"").indexOf("application/x-www-form-urlencoded")&&Yt.test(e.data)&&"data");if(a||"jsonp"===e.dataTypes[0])return r=e.jsonpCallback=m(e.jsonpCallback)?e.jsonpCallback():e.jsonpCallback,a?e[a]=e[a].replace(Yt,"$1"+r):!1!==e.jsonp&&(e.url+=(St.test(e.url)?"&":"?")+e.jsonp+"="+r),e.converters["script json"]=function(){return o||k.error(r+" was not called"),o[0]},e.dataTypes[0]="json",i=C[r],C[r]=function(){o=arguments},n.always(function(){void 0===i?k(C).removeProp(r):C[r]=i,e[r]&&(e.jsonpCallback=t.jsonpCallback,Gt.push(r)),o&&m(i)&&i(o[0]),o=i=void 0}),"script"}),y.createHTMLDocument=((Vt=E.implementation.createHTMLDocument("").body).innerHTML="
",2===Vt.childNodes.length),k.parseHTML=function(e,t,n){return"string"!=typeof e?[]:("boolean"==typeof t&&(n=t,t=!1),t||(y.createHTMLDocument?((r=(t=E.implementation.createHTMLDocument("")).createElement("base")).href=E.location.href,t.head.appendChild(r)):t=E),o=!n&&[],(i=D.exec(e))?[t.createElement(i[1])]:(i=we([e],t,o),o&&o.length&&k(o).remove(),k.merge([],i.childNodes)));var r,i,o},k.fn.load=function(e,t,n){var r,i,o,a=this,s=e.indexOf(" ");return-1").append(k.parseHTML(e)).find(r):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o||[e.responseText,t,e])})}),this},k.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){k.fn[t]=function(e){return this.on(t,e)}}),k.expr.pseudos.animated=function(t){return k.grep(k.timers,function(e){return t===e.elem}).length},k.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=k.css(e,"position"),c=k(e),f={};"static"===l&&(e.style.position="relative"),s=c.offset(),o=k.css(e,"top"),u=k.css(e,"left"),("absolute"===l||"fixed"===l)&&-1<(o+u).indexOf("auto")?(a=(r=c.position()).top,i=r.left):(a=parseFloat(o)||0,i=parseFloat(u)||0),m(t)&&(t=t.call(e,n,k.extend({},s))),null!=t.top&&(f.top=t.top-s.top+a),null!=t.left&&(f.left=t.left-s.left+i),"using"in t?t.using.call(e,f):c.css(f)}},k.fn.extend({offset:function(t){if(arguments.length)return void 0===t?this:this.each(function(e){k.offset.setOffset(this,t,e)});var e,n,r=this[0];return r?r.getClientRects().length?(e=r.getBoundingClientRect(),n=r.ownerDocument.defaultView,{top:e.top+n.pageYOffset,left:e.left+n.pageXOffset}):{top:0,left:0}:void 0},position:function(){if(this[0]){var e,t,n,r=this[0],i={top:0,left:0};if("fixed"===k.css(r,"position"))t=r.getBoundingClientRect();else{t=this.offset(),n=r.ownerDocument,e=r.offsetParent||n.documentElement;while(e&&(e===n.body||e===n.documentElement)&&"static"===k.css(e,"position"))e=e.parentNode;e&&e!==r&&1===e.nodeType&&((i=k(e).offset()).top+=k.css(e,"borderTopWidth",!0),i.left+=k.css(e,"borderLeftWidth",!0))}return{top:t.top-i.top-k.css(r,"marginTop",!0),left:t.left-i.left-k.css(r,"marginLeft",!0)}}},offsetParent:function(){return this.map(function(){var e=this.offsetParent;while(e&&"static"===k.css(e,"position"))e=e.offsetParent;return e||ie})}}),k.each({scrollLeft:"pageXOffset",scrollTop:"pageYOffset"},function(t,i){var o="pageYOffset"===i;k.fn[t]=function(e){return _(this,function(e,t,n){var r;if(x(e)?r=e:9===e.nodeType&&(r=e.defaultView),void 0===n)return r?r[i]:e[t];r?r.scrollTo(o?r.pageXOffset:n,o?n:r.pageYOffset):e[t]=n},t,e,arguments.length)}}),k.each(["top","left"],function(e,n){k.cssHooks[n]=ze(y.pixelPosition,function(e,t){if(t)return t=_e(e,n),$e.test(t)?k(e).position()[n]+"px":t})}),k.each({Height:"height",Width:"width"},function(a,s){k.each({padding:"inner"+a,content:s,"":"outer"+a},function(r,o){k.fn[o]=function(e,t){var n=arguments.length&&(r||"boolean"!=typeof e),i=r||(!0===e||!0===t?"margin":"border");return _(this,function(e,t,n){var r;return x(e)?0===o.indexOf("outer")?e["inner"+a]:e.document.documentElement["client"+a]:9===e.nodeType?(r=e.documentElement,Math.max(e.body["scroll"+a],r["scroll"+a],e.body["offset"+a],r["offset"+a],r["client"+a])):void 0===n?k.css(e,t,i):k.style(e,t,n,i)},s,n?e:void 0,n)}})}),k.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select submit keydown keypress keyup contextmenu".split(" "),function(e,n){k.fn[n]=function(e,t){return 0