#each collumn seperate with '\t' #id (0~65535) #name string #type one of ip,expr,expr_plus,digest,intval,compile or plugin #src_charset one of GBK,BIG5,UNICODE,UTF8 #dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/' #do_merege yes or no #cross cache 0~max #quickswitch quickoff or quick off #id name type src_charset dst_charset do_merge cross_cache quickswitch 0 CONFIG_COMPILE compile UTF8 UTF8 no 0 1 CONFIG_GROUP group UTF8 UTF8 no 0 2 DF_IP_PORT ip UTF8 UTF8 no 0 2 FX_IP_PORT ip UTF8 UTF8 no 0 3 DJ_IP_PORT ip UTF8 UTF8 no 0 4 UNIVERSAL_IP ip UTF8 UTF8 no 0 5 UNIVERSAL_PROTO_TYPE intval UTF8 UTF8 no 0 6 DF_HTTP_REQ_HDR expr_plus UTF8 UTF8/GBK yes 0 quickoff 6 DJ_HTTP_REQ_HDR expr_plus UTF8 UTF8/GBK yes 0 quickoff 7 DF_HTTP_REQ_BODY expr UTF8 GBK/BIG5/UNICODE/UTF8 yes 1024 7 DJ_HTTP_REQ_BODY expr UTF8 GBK/BIG5/UNICODE/UTF8 yes 1024 8 DF_HTTP_RES_HDR expr_plus UTF8 UTF8/GBK yes 0 quickoff 8 DJ_HTTP_RES_HDR expr_plus UTF8 UTF8/GBK yes 0 quickoff 9 DF_HTTP_RES_BODY expr UTF8 GBK/BIG5/UNICODE/UTF8 yes 1024 9 DJ_HTTP_RES_BODY expr UTF8 GBK/BIG5/UNICODE/UTF8 yes 1024 10 DF_DNS_REGION expr_plus UTF8 UTF8 yes 0 quickoff 10 DJ_DNS_REQ_REGION expr_plus UTF8 UTF8 yes 0 quickoff 11 DJ_DNS_RES_REGION expr_plus UTF8 UTF8 yes 0 quickoff 12 DF_SSL_REGION expr_plus UTF8 UTF8 yes 0 quickoff 12 DJ_SSL_REGION expr_plus UTF8 UTF8 yes 0 quickoff 13 DF_MAIL_HDR expr_plus UTF8 UTF8/GBK/BIG5/UNICODE yes 0 quickoff 13 DJ_MAIL_HDR expr_plus UTF8 UTF8/GBK/BIG5/UNICODE yes 0 quickoff 14 DF_MAIL_BODY expr_plus UTF8 GBK/BIG5/UNICODE/UTF8 yes 14 DJ_MAIL_BODY expr_plus UTF8 GBK/BIG5/UNICODE/UTF8 yes 15 DF_FTP_URL expr UTF8 UTF8 yes 15 DJ_FTP_URL expr UTF8 UTF8 yes 17 DJ_IP_PKT_BIN expr UTF8 UTF8 yes 18 DNS_RESPONSE_STRATEGY plugin GBK GBK no 0 19 DNS_GROUP_TYPE plugin GBK GBK no 0 20 DNS_FAKE_IP plugin GBK GBK no 0 21 DNS_FAKE_INFO plugin GBK GBK no 0 22 DJ_HTTP_URL expr UTF8 GBK/UTF8 yes 22 DF_HTTP_URL expr UTF8 GBK/UTF8 yes 23 ENCRYPT_PROTO_RANDOM plugin GBK GBK no 0