#each collumn seperate with '\t' #id (0~65535) #name string #type one of ip, ip_plus, expr, expr_plus, digest, intval, compile or plugin #src_charset one of GBK,BIG5,UNICODE,UTF8 #dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/' #do_merege [yes/no] #cross cache [number] #For ip/intval/digest/compile/group table. #id name type # #For plugin table. The first column's id is 1. 0 as not speicified. #id name type column_define # #For virtual Table #id name type real_table_name # #For expr/expr_plus Table #id name type src_charset dst_charset do_merge cross_cache 0 COMPILE compile escape -- 1 GROUP2COMPILE group2compile -- 2 GROUP2GROUP group2group -- 3 HTTP_URL expr UTF8 GBK/BIG5/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 128 3 HTTP_HOST expr UTF8 GBK/BIG5/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 128 4 KEYWORDS_TABLE expr UTF8 GBK/BIG5/UNICODE/UTF8/unicode_ascii_esc/unicode_ascii_aligned/unicode_ncr_dec/unicode_ncr_hex/windows-1251 yes 0 5 IP_CONFIG ip -- 6 CONTENT_SIZE intval -- 7 QD_ENTRY_INFO plugin 4 -- 8 FILE_DIGEST digest -- 9 HTTP_SIGNATURE expr_plus GBK GBK yes 0 10 SIM_URL similar -- 11 IMAGE_FP expr UTF8 UTF8 yes 128 12 TEST_EFFECTIVE_RANGE_TABLE plugin {"valid":4,"tag":5} -- 13 TEST_FOREIGN_KEY plugin {"valid":4,"foreign":[6,8],"tag":3} -- 14 COMPILE_ALIAS compile escape -- 15 TEST_PLUGIN_EXDATA_TABLE plugin {"key":2,"valid":4,"tag":5,"estimate_size":1024} -- 16 IR_INTERCEPT_IP plugin {"valid":14,"tag":18} 17 APP_PAYLOAD expr_plus UTF8 UTF8 yes 0 18 TROJAN_PAYLOAD expr UTF8 UTF8 yes 0 19 MAIL_ADDR expr UTF8 UTF8 yes 0 20 IP_PLUS_CONFIG ip_plus -- 21 HTTP_RESPONSE_KEYWORDS virtual KEYWORDS_TABLE -- 22 HTTP_REQUEST_HEADER virtual HTTP_SIGNATURE -- 23 HTTP_RESPONSE_HEADER virtual HTTP_SIGNATURE -- 24 VIRTUAL_IP_PLUS_TABLE virtual IP_PLUS_CONFIG -- 24 VIRTUAL_IP_PLUS_SOURCE virtual IP_PLUS_CONFIG -- 24 VIRTUAL_IP_PLUS_DESTINATION virtual IP_PLUS_CONFIG -- 25 COMPOSITION_IP_SOURCE virtual IP_PLUS_CONFIG -- 26 COMPOSITION_IP_DESTINATION virtual IP_PLUS_CONFIG -- 27 COMPOSITION_IP_SESSION virtual IP_PLUS_CONFIG -- 28 COMPOSITION_IP composition {"source":"COMPOSITION_IP_SOURCE","destination":"COMPOSITION_IP_DESTINATION","session":"COMPOSITION_IP_SESSION"} 29 TEST_IP_PLUGIN_WITH_EXDATA ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":6} -- 30 AS_NUMBER expr UTF8 UTF8 yes 0 31 SOURCE_IP_ASN virtual AS_NUMBER -- 32 DESTINATION_IP_ASN virtual AS_NUMBER -- 33 GeoLocation expr UTF8 UTF8 yes 0 34 SOURCE_IP_GEO virtual GeoLocation --