db

type BASE interface {
	InitialDB(string, time.Duration, time.Duration) error
	RecordQueryAction(sql.QueryAction) error
	Abnormals() int
	RecordAbnormal(sql.QueryContext, string) error
	Patterns() int
	CheckPattern([]byte) error
	AddPattern([]byte, sql.QueryContext) error
	PutPattern([]byte, []byte) error
	DeletePattern([]byte) error
	Purge() error
	CheckQuery(sql.QueryContext, bool, bool) bool
	CheckPermission(sql.QueryContext, bool, bool) bool
	UpdateState() error
	SyncAndClose() error
}

type BoltDB struct {
	// contains filtered or unexported fields
}

type MySQL struct {
	UUID string
	// contains filtered or unexported fields
}

type Pattern struct {
	ID int `orm:"column(id)"`
	// pattent_key
	Key string `orm:"column(key);null;type(text)"`
	//value
	Value string `orm:"column(value);null;type(text)"`
	// Example Value
	ExampleValue string `orm:"column(example_value);null;type(text)"`
	// 启用状态, true, false
	Enable bool   `orm:"column(enable);default(true)"`
	UUID   string `orm:"column(uuid);size(36)"`
}

type Permission struct {
	ID int `orm:"column(id)"`
	// 数据库
	Db string `orm:"column(db);null;size(128)"`
	// 用户
	User string `orm:"column(user);null;size(128)"`
	// 客户端
	Client string `orm:"column(client);null;size(128)"`
	// 表, "*" 表示全部
	Table string `orm:"column(table);null;size(128)"`
	// 权限, SELECT,UPDATE,DELETE,INSERT,GRANT....
	Permission string `orm:"column(permission);type(text)"`
	// 启用状态, true, false
	Enable bool   `orm:"column(enable);default(true)"`
	UUID   string `orm:"column(uuid);size(36)"`
}

type QueryAction struct {
	ID        int    `orm:"column(id)"`
	SessionID string `orm:"column(flow_id);null;size(32)"`
	FlowInfo  string `orm:"column(flow_info);null;type(text)"`
	// 实际查询语句
	Query string `orm:"column(query);null;type(text)"`
	// 查询用户
	User string `orm:"column(user);null;size(128)"`
	// 查询客户端信息
	ClientIP      string `orm:"column(client_ip);null;size(39)"`
	ClientProgram string `orm:"column(client_program);null;size(128)"`
	// server info
	ServerIP   string `orm:"column(server_ip);null;size(39)"`
	ServerPort int    `orm:"column(server_port);null"`
	// 执行的数据库和表
	Database string `orm:"column(db);null;size(128)"`
	Tables   string `orm:"column(tables);null;type(text)"`
	// 执行时间和执行耗时(ms)
	Time     time.Time `orm:"column(time);auto_now_add;type(datetime);size(6)"`
	Duration int64     `orm:"column(duration);default(0)"`
	// 执行结果
	QueryResult bool `orm:"column(query_result);default(true)"`
	// 是否违规操作
	IsAbnormal bool `orm:"column(is_abnormal);default(false)"`
	// 违规操作类型：none, pattern, permission
	AbnormalType string `orm:"column(abnormal_type);size(32);default(none)"`
	// 处理结果：none, learning, pass, drop
	Action string `orm:"column(action);size(36);defult(pass)"`
	// 告警
	IsAlarm bool `orm:"column(is_alarm);default(false)"`
	// 是否分析
	Analysed bool `orm:"column(analysed);default(false)"`
	// sql type
	SQLType string `orm:"column(sql_type);null;size(32)"`
	// dbshield or others
	Tool string `orm:"column(tool);null;size(32)"`
	// 模式
	Pattern string `orm:"column(pattern);null;type(text)"`
	// 区分不同
	UUID string `orm:"column(uuid);size(36)"`
}

type State struct {
	ID              int    `orm:"column(id)"`
	Key             string `orm:"column(key);size(5)"`
	QueryCounter    uint64 `orm:"column(QueryCounter);type(bigint unsigned)"`
	AbnormalCounter uint64 `orm:"column(AbnormalCounter);type(bigint unsigned)"`
	UUID            string `orm:"column(uuid);size(36)"`
}