gfwleak/tango-maat
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

format log

Browse Source
This commit is contained in:
liuwentan
2023-03-02 14:52:31 +08:00
parent d790afa58b
commit 5a53edd943
27 changed files with 684 additions and 582 deletions
Download Patch File Download Diff File Expand all files Collapse all files

92
test/table_info.conf
View File

@@ -69,7 +69,7 @@
},
{
"table_id":5,
"table_name":"HTTP_URL_LITERAL",
"table_name":["HTTP_URL_LITERAL", "HTTP_HOST_LITERAL"],
"table_type":"expr",
"valid_column":7,
"custom": {
@@ -101,22 +101,6 @@
},
{
"table_id":7,
"table_name":"HTTP_HOST",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":8,
"table_name":"KEYWORDS_TABLE",
"table_type":"expr",
"valid_column":7,
@@ -132,7 +116,7 @@
}
},
{
"table_id":9,
"table_id":8,
"table_name":"IP_CONFIG",
"table_type":"ip_plus",
"valid_column":18,
@@ -146,7 +130,7 @@
}
},
{
"table_id":10,
"table_id":9,
"table_name":"CONTENT_SIZE",
"table_type":"intval",
"valid_column":5,
@@ -158,7 +142,7 @@
}
},
{
"table_id":11,
"table_id":10,
"table_name":"QD_ENTRY_INFO",
"table_type":"plugin",
"valid_column":4,
@@ -168,7 +152,7 @@
}
},
{
"table_id":12,
"table_id":11,
"table_name":"HTTP_SIGNATURE",
"table_type":"expr_plus",
"valid_column":8,
@@ -185,7 +169,7 @@
}
},
{
"table_id":13,
"table_id":12,
"table_name":"IMAGE_FP",
"table_type":"expr",
"valid_column":7,
@@ -201,7 +185,7 @@
}
},
{
"table_id":14,
"table_id":13,
"table_name":"TEST_EFFECTIVE_RANGE_TABLE",
"table_type":"plugin",
"valid_column":4,
@@ -211,7 +195,7 @@
}
},
{
"table_id":15,
"table_id":14,
"table_name":"TEST_FOREIGN_KEY",
"table_type":"plugin",
"valid_column":4,
@@ -222,7 +206,7 @@
}
},
{
"table_id":16,
"table_id":15,
"table_name":"TEST_PLUGIN_EXDATA_TABLE",
"table_type":"plugin",
"valid_column":4,
@@ -233,7 +217,7 @@
}
},
{
"table_id":17,
"table_id":16,
"table_name":"IR_INTERCEPT_IP",
"table_type":"plugin",
"valid_column":14,
@@ -243,7 +227,7 @@
}
},
{
"table_id":18,
"table_id":17,
"table_name":"APP_PAYLOAD",
"table_type":"expr_plus",
"valid_column":8,
@@ -260,7 +244,7 @@
}
},
{
"table_id":19,
"table_id":18,
"table_name":"TROJAN_PAYLOAD",
"table_type":"expr",
"valid_column":7,
@@ -277,7 +261,7 @@
}
},
{
"table_id":20,
"table_id":19,
"table_name":"MAIL_ADDR",
"table_type":"expr",
"valid_column":7,
@@ -293,7 +277,7 @@
}
},
{
"table_id":21,
"table_id":20,
"table_name":"IP_PLUS_CONFIG",
"table_type":"ip_plus",
"valid_column":18,
@@ -307,43 +291,43 @@
}
},
{
"table_id":22,
"table_id":21,
"table_name":"HTTP_RESPONSE_KEYWORDS",
"table_type":"virtual",
"physical_table": ["KEYWORDS_TABLE"]
},
{
"table_id":23,
"table_id":22,
"table_name":"HTTP_REQUEST_HEADER",
"table_type":"virtual",
"physical_table": ["HTTP_SIGNATURE"]
},
{
"table_id":24,
"table_id":23,
"table_name":"HTTP_RESPONSE_HEADER",
"table_type":"virtual",
"physical_table": ["HTTP_SIGNATURE"]
},
{
"table_id":25,
"table_id":24,
"table_name":"VIRTUAL_IP_PLUS_TABLE",
"table_type":"virtual",
"physical_table": ["IP_PLUS_CONFIG"]
},
{
"table_id":26,
"table_id":25,
"table_name":"VIRTUAL_IP_PLUS_SOURCE",
"table_type":"virtual",
"physical_table": ["IP_PLUS_CONFIG"]
},
{
"table_id":27,
"table_id":26,
"table_name":"VIRTUAL_IP_PLUS_DESTINATION",
"table_type":"virtual",
"physical_table": ["IP_PLUS_CONFIG"]
},
{
"table_id":28,
"table_id":27,
"table_name":"TEST_IP_PLUGIN_WITH_EXDATA",
"table_type":"ip_plugin",
"valid_column":6,
@@ -356,7 +340,7 @@
}
},
{
"table_id":29,
"table_id":28,
"table_name":"AS_NUMBER",
"table_type":"expr",
"valid_column":7,
@@ -372,19 +356,19 @@
}
},
{
"table_id":30,
"table_id":29,
"table_name":"SOURCE_IP_ASN",
"table_type":"virtual",
"physical_table":["AS_NUMBER"]
},
{
"table_id":31,
"table_id":30,
"table_name":"DESTINATION_IP_ASN",
"table_type":"virtual",
"physical_table":["AS_NUMBER"]
},
{
"table_id":32,
"table_id":31,
"table_name":"GeoLocation",
"table_type":"expr",
"valid_column":7,
@@ -400,13 +384,13 @@
}
},
{
"table_id":33,
"table_id":32,
"table_name":"SOURCE_IP_GEO",
"table_type":"virtual",
"physical_table":["GeoLocation"]
},
{
"table_id":34,
"table_id":33,
"table_name":"INTERGER_PLUS",
"table_type":"intval_plus",
"valid_column":6,
@@ -419,7 +403,7 @@
}
},
{
"table_id":35,
"table_id":34,
"table_name":"TEST_FQDN_PLUGIN_WITH_EXDATA",
"table_type":"fqdn_plugin",
"valid_column":5,
@@ -430,7 +414,7 @@
}
},
{
"table_id":36,
"table_id":35,
"table_name":"APP_ID",
"table_type":"intval",
"valid_column":5,
@@ -442,7 +426,7 @@
}
},
{
"table_id":37,
"table_id":36,
"table_name":"EMPTY_KEYWORD",
"table_type":"expr",
"valid_column":7,
@@ -458,7 +442,7 @@
}
},
{
"table_id":38,
"table_id":37,
"table_name":"EMPTY_INTERGER",
"table_type":"intval",
"valid_column":5,
@@ -470,7 +454,7 @@
}
},
{
"table_id":39,
"table_id":38,
"table_name":"TEST_BOOL_PLUGIN_WITH_EXDATA",
"table_type":"bool_plugin",
"valid_column":4,
@@ -480,7 +464,7 @@
}
},
{
"table_id":40,
"table_id":39,
"table_name":"FLAG_CONFIG",
"table_type":"flag",
"valid_column":5,
@@ -492,7 +476,7 @@
}
},
{
"table_id":41,
"table_id":40,
"table_name":"FLAG_PLUS_CONFIG",
"table_type":"flag_plus",
"valid_column":6,
@@ -505,7 +489,7 @@
}
},
{
"table_id":42,
"table_id":41,
"table_name":"PORT_CONFIG",
"table_type":"port",
"valid_column":7,
@@ -519,19 +503,19 @@
}
},
{
"table_id":43,
"table_id":42,
"table_name":"VIRTUAL_PORT_SOURCE",
"table_type":"virtual",
"physical_table": ["PORT_CONFIG"]
},
{
"table_id":44,
"table_id":43,
"table_name":"VIRTUAL_PORT_DESTINATION",
"table_type":"virtual",
"physical_table": ["PORT_CONFIG"]
},
{
"table_id":45,
"table_id":44,
"table_name":"COMPOSITION_CONFIG",
"table_type":"composition",
"custom": {