{
    "compile_table": "COMPILE",
    "group_table": "GROUP",
    "rules": [
        {
            "compile_id": 123,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "escaped\\bdata:have\\ba\\bspace\\band\\ba\\b\\&\\bsymbol.",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "123_IP_group",
                    "regions": [
                        {
                            "table_name": "IP_CONFIG",
                            "table_type": "ip",
                            "table_content": {
                                "addr_type": "ipv4",
                                "src_ip": "10.0.6.201",
                                "mask_src_ip": "255.255.0.0",
                                "src_port": "0",
                                "mask_src_port": "65535",
                                "dst_ip": "0.0.0.0",
                                "mask_dst_ip": "255.255.255.255",
                                "dst_port": "0",
                                "mask_dst_port": "65535",
                                "protocol": 6,
                                "direction": "double"
                            }
                        },
                        {
                            "table_name": "IP_CONFIG",
                            "table_type": "ip",
                            "table_content": {
                                "addr_type": "ipv6",
                                "src_ip": "2001:da8:205:1::101",
                                "mask_src_ip": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:0000",
                                "src_port": "0",
                                "mask_src_port": "65535",
                                "dst_ip": "0::0",
                                "mask_dst_ip": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff",
                                "dst_port": "0",
                                "mask_dst_port": "65535",
                                "protocol": 6,
                                "direction": "double"
                            }
                        }
                    ]
                },
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "abckkk&123",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 124,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "123_IP_group"
                },
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "CONTENT_SIZE",
                            "table_type": "intval",
                            "table_content": {
                                "low_boundary": 100,
                                "up_boundary": 500
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 125,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "action=search\\&query=(.*)",
                                "expr_type": "regex",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 126,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "should_not_hit_any_rule",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                },
                {
                    "group_name": "126_interval_group",
                    "regions": [
                        {
                            "table_name": "CONTENT_SIZE",
                            "table_type": "intval",
                            "table_content": {
                                "low_boundary": 2014,
                                "up_boundary": 2016
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 127,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "FILE_DIGEST",
                            "table_type": "digest",
                            "table_content": {
                                "raw_len": 1160164,
                                "digest": "3072:Xk/maCm4yLYtRIFDFnVfHH+CAQI6VD5mekDmaa/4qCuFnqak1s3/+Gn1IJHa/AvybUsbGWcIAy9grTp2s5bbj/TaKxONfb[0:1160163]#12288:UChtbFS6pypdTy4m2[0:1160163]",
                                "cfds_level": 70
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 128,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_REGION",
                            "table_type": "expr_plus",
                            "table_content": {
                            		"district": "HTTP\\bURL",
                                "keywords": "abckkk&123",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 129,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "utf8_中文",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "C#中国",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 130,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "utf8_维语",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "KEYWORDS_TABLE",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "2010&يىلىدىكى",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 131,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "utf8_维语2",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "KEYWORDS_TABLE",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "سىياسىي",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 132,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "string\\bunescape",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "KEYWORDS_TABLE",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "Take\\bme\\bHome&Batman\\",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 133,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "13018_table_conjunction_test_part1\[encoded data, 12983 characters]",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_HOST",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "www.3300av.com",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 134,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "table_conjunction_test_part2",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "novel&27122.txt",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 135,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "SIM_URL",
                            "table_type": "similar",
                            "table_content": {
                                "target": "mwss.xiu.youku.com/live/hls/v1/0000000000000000000000001526a0a8/709.ts?&token=98765",
                                "threshold": 90
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 136,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "offset_string",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "IMAGE_FP",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "4362-4458:323031333A30333A30372032333A35363A313000323031333A30333A30372032333A35363A3130000000FFE20C584943435F50524F46494C4500010100000C484C696E6F021000006D6E74725247422058595A2007CE00020009000600310000",
                                "expr_type": "offset",
                                "match_method": "none",
                                "format": "hexbin"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 137,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "offset_string",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "IMAGE_FP",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "19339-19467:6CB2CB2F2028474C994991CCFC65CCA5E3B6FF001673985D157358610CACC674EE64CC27B5721CCDABD9CCA7C8E9F7BB1F54A930A6034D50F92711F5B2DACCB0715D2E6873CE5CE431DC701A194C260E9DB78CC89F2C84745869AB88349A3AE0412AB59D9ABA84EDEFFF0057FA4DA66D333698B5AD6F844DA2226D1CADAD5E44",
                                "expr_type": "offset",
                                "match_method": "none",
                                "format": "hexbin"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 138,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "effective_range": 0,
            "tags":"{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\",\"上海/浦东/陆家嘴\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"联通\"]}],[{\"tag\":\"location\",\"value\":[\"北京\"]},{\"tag\":\"isp\",\"value\":[\"联通\"]}]]}",
            "user_region": "Not\\baccepted\\btags",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "should&hit&aaa",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 139,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "effective_range": 0,
            "tags":"{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"移动\"]}]]}",
            "user_region": "Accepted\\btags",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "should&hit&bbb",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 140,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "file_streams",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "KEYWORDS_TABLE",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "2018-10-05",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 141,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "Something:I\\bhave\\ba\\bname,7799",
            "table_name":"COMPILE_ALIAS",
            "is_valid": "yes",
            "groups": [
                {
                    "group_name": "Untitled",
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "i.ytimg.com",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 142,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": ",IgpwcjA0LnN2bzAzKgkxMjcuMC4wLjE",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 143,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "NOT-logic-test1",
            "is_valid": "yes",
            "groups": [
                {
                    "not_flag":0,
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "must-contained-string-of-rule-143",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        } 
                    ]
                },
                {
                    "not_flag":1,
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "must-not-contained-string-of-rule-143",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 144,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "NOT-logic-test2",
            "is_valid": "yes",
            "groups": [
                {
                    "not_flag":0,
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "must-contained-string-of-rule-144",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                },
                {
                    "not_flag":1,
                    "regions": [
                        {
                            "table_name": "KEYWORDS_TABLE",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "must-not-contained-string-of-rule-144",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 145,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "NOT-logic-test3",
            "is_valid": "yes",
            "groups": [
                {
                    "not_flag":0,
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "must-contained-string-of-rule-145",
                                "expr_type": "none",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                },
                {
                    "not_flag":1,
                     "group_name": "123_IP_group"
                }
            ]
        },
        {
            "compile_id": 146,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "Cookie:\\s&head",
                                "expr_type": "regex",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 147,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "googlevideo.com/videoplayback&mn=sn-35153iuxa-5a56%2Csn-n8v7znz7",
                                "expr_type": "and",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
				{
				    "is_valid": "yes",
				    "do_log": 0,
				    "effective_rage": 0,
				    "action": 0,
				    "compile_id": 148,
				    "service": 0,
				    "do_blacklist": 0,
				    "user_region": "APP_ID=100001;BEHAV_ID=100002",
				    "groups": [
				        {
				            "regions": [
				                {
				                    "table_name": "APP_PAYLOAD",
				                    "table_content": {
				                        "format": "hexbin",
				                        "match_method": "sub",
				                        "district": "Payload",
				                        "keywords": "1-1:03&9-10:2d&14-16:2d34&19-21:2d&24-25:2d",
				                        "expr_type": "offset"
				                    },
				                    "table_type": "expr_plus"
				                }
				            ],
				            "group_name": "Untitled"
				        }
				    ]
				},
        {
            "compile_id": 149,
            "service": 1,
            "action": 1,
            "do_blacklist": 1,
            "do_log": 1,
            "user_region": "anything",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_name": "HTTP_URL",
                            "table_type": "string",
                            "table_content": {
                                "keywords": "^((?!.*\\binstagram\\b)).*\\.fbcdn\\.net$",
                                "expr_type": "regex",
                                "match_method": "sub",
                                "format": "uncase plain"
                            }
                        }
                    ]
                }
            ]
        },
        {
            "compile_id": 150,
            "service": 0,
            "action": 0,
            "do_blacklist": 0,
            "do_log": 0,
            "effective_rage": 0,
            "user_region": "0",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_type": "expr",
                            "table_name": "TROJAN_PAYLOAD",
                            "table_content": {
                                "keywords": "0-4:01000000",
                                "expr_type": "offset",
                                "format": "hexbin",
                                "match_method": "sub"
                            }
                        }
                    ],
                    "group_name": "billgates_regist1"
                },
                {
                    "regions": [
                        {
                            "table_type": "expr",
                            "table_name": "TROJAN_PAYLOAD",
                            "table_content": {
                                "keywords": "1:G2.40",
                                "expr_type": "none",
                                "format": "uncase plain",
                                "match_method": "sub"
                            }
                        }
                    ],
                    "group_name": "billgates_regist2"
                }
            ]
        },
        {
            "compile_id": 151,
            "service": 0,
            "action": 0,
            "do_blacklist": 0,
            "do_log": 0,
            "effective_rage": 0,
            "user_region": "suffix_hit",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_type": "expr",
                            "table_name": "MAIL_ADDR",
                            "table_content": {
                                "keywords": "ceshi3@mailhost.cn",
                                "expr_type": "none",
                                "format": "uncase plain",
                                "match_method": "suffix"
                            }
                        }
                    ],
                    "group_name": "Untitled"
                }
            ]
        },
        {
            "compile_id": 152,
            "service": 0,
            "action": 0,
            "do_blacklist": 0,
            "do_log": 0,
            "effective_rage": 0,
            "user_region": "prefix_hit",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_type": "expr",
                            "table_name": "MAIL_ADDR",
                            "table_content": {
                                "keywords": "ceshi3@mailhost.cn",
                                "expr_type": "none",
                                "format": "uncase plain",
                                "match_method": "prefix"
                            }
                        },
                        {
                            "table_type": "expr",
                            "table_name": "MAIL_ADDR",
                            "table_content": {
                                "keywords": "ceshi6@mailhost.cn",
                                "expr_type": "none",
                                "format": "uncase plain",
                                "match_method": "prefix"
                            }
                        }
                    ],
                    "group_name": "152_mail_addr"
                },
                {
                    "group_name": "interval_group_refered",
                    "sub_groups": [
                    		{"group_name": "126_interval_group"}              		
                    ]
                }
            ]
        },
        {
            "compile_id": 153,
            "service": 0,
            "action": 0,
            "do_blacklist": 0,
            "do_log": 0,
            "effective_rage": 0,
            "user_region": "group_referer_group",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_type": "expr",
                            "table_name": "MAIL_ADDR",
                            "table_content": {
                                "keywords": "ceshi4@mailhost.cn",
                                "expr_type": "none",
                                "format": "uncase plain",
                                "match_method": "prefix"
                            }
                        }
                    ],
                    "group_name": "Untitled",
                    "sub_groups": [
                    		{"group_name": "152_mail_addr"}
                    ],
                    "not_flag" : 0
                },
                {
                    "group_name": "IP_group_refered",
                    "sub_groups": [
                    		{"group_name": "123_IP_group"}              		
                    ]
                }
            ]
        },
        {
            "compile_id": 154,
            "service": 0,
            "action": 0,
            "do_blacklist": 0,
            "do_log": 0,
            "effective_rage": 0,
            "user_region": "ipv4_plus",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_type": "ip_plus",
                            "table_name": "IP_PLUS_CONFIG",
                            "table_content": {
                                "addr_type": "ipv4",
                                "saddr_format": "range",
                                "src_ip1": "10.0.7.100",
                                "src_ip2": "10.0.7.106",
                                "sport_format": "range",
                                "src_port1": "5000",
                                "src_port2": "5001",
                                "daddr_format": "mask",
                                "dst_ip1": "123.56.104.218",
                                "dst_ip2": "255.255.255.0",
                                "dport_format": "range",
                                "dst_port1": "7400",
                                "dst_port2": "7400",
                                "protocol": 6,
                                "direction": "double"
                            }
                        }                       
                    ],
                    "not_flag" : 0
                }
            ]
        },
        {
            "compile_id": 155,
            "service": 0,
            "action": 0,
            "do_blacklist": 0,
            "do_log": 0,
            "effective_rage": 0,
            "user_region": "ipv6_plus",
            "is_valid": "yes",
            "groups": [
                {
                    "regions": [
                        {
                            "table_type": "ip_plus",
                            "table_name": "IP_PLUS_CONFIG",
                            "table_content": {
                                "addr_type": "ipv6",
                                "saddr_format": "range",
                                "src_ip1": "1001:da8:205:1::101",
                                "src_ip2": "1001:da8:205:1::201",
                                "sport_format": "mask",
                                "src_port1": "5210",
                                "src_port2": "65520",
                                "daddr_format": "mask",
                                "dst_ip1": "3001:da8:205:1::401",
                                "dst_ip2": "ffff:ffff:ffff:ffff:ffff:ffff:ffff:0000",
                                "dport_format": "mask",
                                "dst_port1": "0",
                                "dst_port2": "65535",
                                "protocol": 6,
                                "direction": "double"
                            }
                        }                      
                    ],
                    "not_flag" : 0
                }
            ]
        }
    ],
    "plugin_table": [
        {
            "table_name": "QD_ENTRY_INFO",
            "table_content": [
                "1\t192.168.0.1\t101\t1",
                "2\t192.168.0.2\t101\t1",
                "3\t192.168.1.1\t102\t1"
            ]
        },
        {
            "table_name": "TEST_PLUGIN_TABLE",
            "table_content": [
                "1\t3388\t99\t1",
                "2\t3355\t66\t1",
                "3\tcccc\t11\t1"
            ]
        },
        {
            "table_name": "TEST_EFFECTIVE_RANGE_TABLE",
            "table_content": [
                "1\tSUCCESS\t99\t1\t{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"移动\"]}]]}\t1111",
                "2\tSUCCESS\t66\t1\t0\t222",
                "3\tFAILED\t11\t1\t{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京/朝阳/华严北里\",\"上海/浦东/陆家嘴\"]},{\"tag\":\"isp\",\"value\":[\"电信\",\"联通\"]}],[{\"tag\":\"location\",\"value\":[\"北京\"]},{\"tag\":\"isp\",\"value\":[\"联通\"]}]]}\t333",
                "4\tSUCCESS\t66\t1\t{}\t444",
                "5\tSUCCESS\t66\t1\t{\"tag_sets\":[[{\"tag\":\"location\",\"value\":[\"北京\"]}]]}\t444",
                "6\tSUCCESS\t66\t1\t{\"tag_sets\":[[{\"tag\":\"weather\",\"value\":[\"hot\"]}]]}\t444"
            ]
        },
        {
            "table_name": "IR_INTERCEPT_IP",
            "table_content": [
                "1000000130\t1000000130\t4\t192.168.10.99\t255.255.255.255\t0\t65535\t0.0.0.0\t255.255.255.255\t0\t65535\t0\t1\t1\t96\t1\tuser_region\t{}\t2019/1/24/18:0:34",
                "161\t161\t4\t0.0.0.0\t255.255.255.255\t0\t65535\t61.135.169.121\t255.255.255.255\t0\t65535\t0\t0\t1\t96\t832\t0\t0\t2019/1/24/18:48:42"
            ]
        }
    ]
}
