2023-04-03 08:30:49 +00:00
|
|
|
[
|
|
|
|
|
{
|
|
|
|
|
"table_id": 0,
|
|
|
|
|
"table_name": "TSG_COMPILE",
|
2023-05-11 15:10:43 +08:00
|
|
|
"db_tables":["TSG_SECURITY_COMPILE", "PXY_INTERCEPT_COMPILE", "TRAFFIC_SHAPING_COMPILE", "SERVICE_CHAINING_COMPILE", "APP_SIG_COMPILE", "APP_PRE_SIG_COMPILE", "APP_SELECTOR_COMPILE"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "compile",
|
|
|
|
|
"user_region_encoded": "escape",
|
|
|
|
|
"valid_column": 8,
|
|
|
|
|
"custom": {
|
|
|
|
|
"compile_id": 1,
|
|
|
|
|
"service_id": 2,
|
|
|
|
|
"action": 3,
|
|
|
|
|
"do_blacklist": 4,
|
|
|
|
|
"do_log": 5,
|
|
|
|
|
"tags": 6,
|
|
|
|
|
"user_region": 7,
|
|
|
|
|
"clause_num": 9,
|
2023-06-19 17:35:17 +08:00
|
|
|
"evaluation_order":10,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 1,
|
|
|
|
|
"table_name": "TSG_GROUP_COMPILE_RELATION",
|
2023-05-11 15:10:43 +08:00
|
|
|
"db_tables":["GROUP_SECURITY_COMPILE_RELATION", "GROUP_PXY_INTERCEPT_COMPILE_RELATION", "GROUP_SHAPING_COMPILE_RELATION", "GROUP_SERVICE_CHAINING_COMPILE_RELATION", "APP_SIG_GROUP_COMPILE_RELATION", "APP_PRE_SIG_GROUP_COMPILE_RELATION", "APP_SELECTOR_GROUP_COMPILE_RELATION"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "group2compile",
|
|
|
|
|
"associated_compile_table_id": 0,
|
|
|
|
|
"valid_column": 3,
|
|
|
|
|
"custom": {
|
|
|
|
|
"group_id": 1,
|
|
|
|
|
"compile_id": 2,
|
|
|
|
|
"not_flag": 4,
|
|
|
|
|
"virtual_table_name": 5,
|
|
|
|
|
"clause_index": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 2,
|
|
|
|
|
"table_name": "TSG_GROUP_GROUP_RELATION",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["GROUP_GROUP_RELATION", "APP_SIG_GROUP_GROUP_RELATION", "APP_SELECTOR_GROUP_GROUP_RELATION"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "group2group",
|
2023-05-08 14:46:26 +08:00
|
|
|
"valid_column": 4,
|
2023-04-03 08:30:49 +00:00
|
|
|
"custom": {
|
|
|
|
|
"group_id": 1,
|
2023-05-08 14:46:26 +08:00
|
|
|
"super_group_id": 2,
|
|
|
|
|
"is_exclude": 3
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 3,
|
|
|
|
|
"table_name": "TSG_IP_ADDR",
|
|
|
|
|
"db_tables": ["TSG_OBJ_IP_ADDR", "TSG_OBJ_IP_LEARNING_ADDR"],
|
|
|
|
|
"table_type": "ip_plus",
|
|
|
|
|
"valid_column": 11,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id":1,
|
|
|
|
|
"group_id":2,
|
|
|
|
|
"addr_type":3,
|
|
|
|
|
"addr_format":4,
|
|
|
|
|
"ip1":5,
|
|
|
|
|
"ip2":6,
|
|
|
|
|
"port_format":7,
|
|
|
|
|
"port1":8,
|
|
|
|
|
"port2":9,
|
|
|
|
|
"protocol":10
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 4,
|
|
|
|
|
"table_name": "TSG_OBJ_SUBSCRIBER_ID",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 5,
|
|
|
|
|
"table_name": "TSG_OBJ_ACCOUNT",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 6,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_OBJ_URL",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 7,
|
|
|
|
|
"table_name": "TSG_OBJ_FQDN",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 8,
|
|
|
|
|
"table_name": "TSG_OBJ_FQDN_CAT",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"low_bound": 3,
|
|
|
|
|
"up_bound": 4
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 9,
|
|
|
|
|
"table_name": "TSG_OBJ_KEYWORDS",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 10,
|
|
|
|
|
"table_name": "TSG_OBJ_APP_ID",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"low_bound": 3,
|
|
|
|
|
"up_bound": 4
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 11,
|
|
|
|
|
"table_name": "TSG_OBJ_HTTP_SIGNATURE",
|
|
|
|
|
"table_type": "expr_plus",
|
|
|
|
|
"valid_column": 8,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"district": 3,
|
|
|
|
|
"keywords": 4,
|
|
|
|
|
"expr_type": 5,
|
|
|
|
|
"match_method": 6,
|
|
|
|
|
"is_hexbin": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 13,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_HOST",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_HTTP_HOST", "http.host"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 14,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_HOST_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 15,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_URL",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_HTTP_URL", "http.uri"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_URL"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 16,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_REQ_HDR",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_HTTP_REQ_HDR", "http.request.header"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_HTTP_SIGNATURE"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 17,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_RES_HDR",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_HTTP_RES_HDR", "http.response.header"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_HTTP_SIGNATURE"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 18,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_REQ_BODY",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 19,
|
|
|
|
|
"table_name": "TSG_FIELD_HTTP_RES_BODY",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 20,
|
|
|
|
|
"table_name": "TSG_FIELD_SSL_SNI",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_SSL_SNI", "ssl.handshake.extensions_server_name"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 21,
|
|
|
|
|
"table_name": "TSG_FIELD_SSL_SNI_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 22,
|
|
|
|
|
"table_name": "TSG_FIELD_SSL_CN",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_SSL_CN", "ssl.handshake.certificate.subject_common_name"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 23,
|
|
|
|
|
"table_name": "TSG_FIELD_SSL_CN_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 24,
|
|
|
|
|
"table_name": "TSG_FIELD_SSL_SAN",
|
2023-05-16 05:48:24 +00:00
|
|
|
"db_tables": ["TSG_FIELD_SSL_SAN"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 25,
|
|
|
|
|
"table_name": "TSG_FIELD_SSL_SAN_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 26,
|
|
|
|
|
"table_name": "TSG_FIELD_DNS_QNAME",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_DNS_QNAME", "dns.qry.name"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 27,
|
|
|
|
|
"table_name": "TSG_FIELD_DNS_QNAME_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 28,
|
|
|
|
|
"table_name": "TSG_FIELD_QUIC_SNI",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_FIELD_QUIC_SNI", "quic.sni"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 29,
|
|
|
|
|
"table_name": "TSG_FIELD_QUIC_SNI_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 30,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_ACCOUNT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_ACCOUNT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 31,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_FROM",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_ACCOUNT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 32,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_TO",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_ACCOUNT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 33,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_SUBJECT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 34,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_CONTENT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 35,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_ATT_NAME",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 36,
|
|
|
|
|
"table_name": "TSG_FIELD_MAIL_ATT_CONTENT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 37,
|
|
|
|
|
"table_name": "TSG_FIELD_FTP_URI",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_URL"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 38,
|
|
|
|
|
"table_name": "TSG_FIELD_FTP_CONTENT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 39,
|
|
|
|
|
"table_name": "TSG_FIELD_FTP_ACCOUNT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_ACCOUNT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 40,
|
|
|
|
|
"table_name": "TSG_SECURITY_SOURCE_ADDR",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_SECURITY_SOURCE_ADDR", "ip.src", "tcp.srcport", "udp.srcport"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_IP_ADDR"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 41,
|
|
|
|
|
"table_name": "TSG_SECURITY_DESTINATION_ADDR",
|
2023-04-04 17:15:36 +08:00
|
|
|
"db_tables": ["TSG_SECURITY_DESTINATION_ADDR", "ip.dst", "tcp.dstport", "udp.dstport"],
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_IP_ADDR"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 42,
|
|
|
|
|
"table_name": "TSG_IP_ASN_BUILT_IN",
|
|
|
|
|
"table_type": "ip_plugin",
|
|
|
|
|
"valid_column": 19,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"ip_type": 3,
|
|
|
|
|
"start_ip": 4,
|
|
|
|
|
"end_ip": 5,
|
|
|
|
|
"addr_format": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 43,
|
|
|
|
|
"table_name": "TSG_IP_ASN_USER_DEFINED",
|
|
|
|
|
"table_type": "ip_plugin",
|
|
|
|
|
"valid_column": 19,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"ip_type": 3,
|
|
|
|
|
"start_ip": 4,
|
|
|
|
|
"end_ip": 5,
|
|
|
|
|
"addr_format": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 44,
|
|
|
|
|
"table_name": "TSG_IP_LOCATION_BUILT_IN",
|
|
|
|
|
"table_type": "ip_plugin",
|
|
|
|
|
"valid_column": 19,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"ip_type": 3,
|
|
|
|
|
"start_ip": 4,
|
|
|
|
|
"end_ip": 5,
|
|
|
|
|
"addr_format": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 45,
|
|
|
|
|
"table_name": "TSG_IP_LOCATION_USER_DEFINED",
|
|
|
|
|
"table_type": "ip_plugin",
|
|
|
|
|
"valid_column": 19,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"ip_type": 3,
|
|
|
|
|
"start_ip": 4,
|
|
|
|
|
"end_ip": 5,
|
|
|
|
|
"addr_format": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 46,
|
|
|
|
|
"table_name": "TSG_OBJ_AS_NUMBER",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 47,
|
|
|
|
|
"table_name": "TSG_SECURITY_SOURCE_ASN",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_AS_NUMBER"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 48,
|
|
|
|
|
"table_name": "TSG_SECURITY_DESTINATION_ASN",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_AS_NUMBER"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 49,
|
|
|
|
|
"table_name": "TSG_OBJ_GEO_LOCATION",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 50,
|
|
|
|
|
"table_name": "TSG_SECURITY_SOURCE_LOCATION",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_GEO_LOCATION"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 51,
|
|
|
|
|
"table_name": "TSG_SECURITY_DESTINATION_LOCATION",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_GEO_LOCATION"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 52,
|
|
|
|
|
"table_name": "TSG_FQDN_CATEGORY_BUILT_IN",
|
|
|
|
|
"table_type": "fqdn_plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"suffix_match_method": 4,
|
2023-06-19 17:35:17 +08:00
|
|
|
"fqdn": 3,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 53,
|
|
|
|
|
"table_name": "TSG_FQDN_CATEGORY_USER_DEFINED",
|
|
|
|
|
"table_type": "fqdn_plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"suffix_match_method": 4,
|
2023-06-19 17:35:17 +08:00
|
|
|
"fqdn": 3,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 54,
|
|
|
|
|
"table_name": "TSG_FIELD_SIP_ORIGINATOR_DESCRIPTION",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_ACCOUNT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 55,
|
|
|
|
|
"table_name": "TSG_FIELD_SIP_RESPONDER_DESCRIPTION",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_ACCOUNT"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 56,
|
|
|
|
|
"table_name": "TSG_OBJ_IMSI",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 57,
|
|
|
|
|
"table_name": "TSG_OBJ_PHONE_NUMBER",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 58,
|
|
|
|
|
"table_name": "TSG_OBJ_APN",
|
|
|
|
|
"table_type": "expr",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"keywords": 3,
|
|
|
|
|
"expr_type": 4,
|
|
|
|
|
"match_method": 5,
|
|
|
|
|
"is_hexbin": 6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 59,
|
|
|
|
|
"table_name": "TSG_FILED_GTP_IMSI",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_IMSI"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 60,
|
|
|
|
|
"table_name": "TSG_FILED_GTP_PHONE_NUMBER",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_PHONE_NUMBER"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 61,
|
|
|
|
|
"table_name": "TSG_FILED_GTP_APN",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_APN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 62,
|
|
|
|
|
"table_name": "TSG_DECYPTION_EXCLUSION_SSL_SNI",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 63,
|
|
|
|
|
"table_name": "TSG_OBJ_TUNNEL_ID",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"low_bound": 3,
|
|
|
|
|
"up_bound": 4
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 64,
|
|
|
|
|
"table_name": "TSG_TUNNEL_CATALOG",
|
|
|
|
|
"table_type": "bool_plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "integer",
|
2023-06-19 17:35:17 +08:00
|
|
|
"bool_expr": 4,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 65,
|
|
|
|
|
"table_name": "TSG_TUNNEL_ENDPOINT",
|
|
|
|
|
"table_type": "ip_plugin",
|
|
|
|
|
"valid_column": 6,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"key_type": "pointer",
|
|
|
|
|
"ip_type": 2,
|
|
|
|
|
"start_ip": 3,
|
|
|
|
|
"end_ip": 4,
|
|
|
|
|
"addr_format": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 66,
|
|
|
|
|
"table_name": "TSG_TUNNEL_LABEL",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 4,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
|
|
|
|
"key_len": 2
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 67,
|
|
|
|
|
"table_name": "TSG_SECURITY_TUNNEL",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_TUNNEL_ID"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 68,
|
|
|
|
|
"table_name": "TSG_OBJ_FLAG",
|
|
|
|
|
"table_type": "flag",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"flag": 3,
|
|
|
|
|
"flag_mask": 4
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 69,
|
|
|
|
|
"table_name": "TSG_SECURITY_FLAG",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FLAG"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 70,
|
|
|
|
|
"table_name": "APP_SELECTOR_ID",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"low_bound": 3,
|
|
|
|
|
"up_bound": 4
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 71,
|
|
|
|
|
"table_name": "APP_SELECTOR_PROPERTIES",
|
|
|
|
|
"table_type": "expr_plus",
|
|
|
|
|
"valid_column": 8,
|
|
|
|
|
"custom": {
|
|
|
|
|
"scan_mode": "block",
|
|
|
|
|
"pattern_type": "literal",
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"district": 3,
|
|
|
|
|
"keywords": 4,
|
|
|
|
|
"expr_type": 5,
|
|
|
|
|
"match_method": 6,
|
|
|
|
|
"is_hexbin": 7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 72,
|
|
|
|
|
"table_name": "APP_ID_DICT",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 18,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
2023-06-16 20:13:39 +08:00
|
|
|
"key_len": 8,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 73,
|
|
|
|
|
"table_name": "APP_SIGNATURE_UPDATE_PROFILE",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-04-04 17:15:36 +08:00
|
|
|
"key_type": "pointer",
|
2023-04-03 08:30:49 +00:00
|
|
|
"foreign": [
|
|
|
|
|
2,
|
|
|
|
|
3
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 74,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TRAFFIC_SHAPING_PROFILE",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
|
|
|
|
"key_len": 8
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 75,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_DYN_MOBILE_IDENTITY_APN_TEID",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 2,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
|
|
|
|
"key_len": 4
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 76,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_DYN_SUBSCRIBER_IP",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 3,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "ip_addr",
|
|
|
|
|
"addr_type": 2
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 77,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_PROFILE_DNS_RECORDS",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
2023-06-19 17:35:17 +08:00
|
|
|
"key_len": 8,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 78,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_PROFILE_RESPONSE_PAGES",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
|
|
|
|
"key_type": "integer",
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_len": 8,
|
2023-04-03 08:30:49 +00:00
|
|
|
"foreign": [
|
|
|
|
|
4
|
2023-06-19 17:35:17 +08:00
|
|
|
],
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 79,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_PROFILE_TRAFFIC_MIRROR",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 4,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
2023-06-19 17:35:17 +08:00
|
|
|
"key_len": 4,
|
|
|
|
|
"gc_timeout_s":10
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 80,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "T_VSYS_INFO",
|
|
|
|
|
"table_type": "plugin",
|
|
|
|
|
"valid_column": 3,
|
|
|
|
|
"custom": {
|
|
|
|
|
"key": 1,
|
2023-06-08 09:17:53 +00:00
|
|
|
"key_type": "integer",
|
|
|
|
|
"key_len": 4
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 81,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_FIELD_DTLS_SNI",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 82,
|
2023-04-03 08:30:49 +00:00
|
|
|
"table_name": "TSG_FIELD_DTLS_SNI_CAT",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_FQDN_CAT"
|
2023-04-04 17:15:36 +08:00
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 83,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.payload.c2s_first_data",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 84,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.payload.s2c_first_data",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 85,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.payload.c2s_first_data_len",
|
|
|
|
|
"table_type": "virtual",
|
2023-05-16 05:48:24 +00:00
|
|
|
"physical_table": "TSG_OBJ_INTERVAL"
|
2023-04-04 17:15:36 +08:00
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 86,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.payload.s2c_first_data_len",
|
|
|
|
|
"table_type": "virtual",
|
2023-05-16 05:48:24 +00:00
|
|
|
"physical_table": "TSG_OBJ_INTERVAL"
|
2023-04-04 17:15:36 +08:00
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 87,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.payload",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 88,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.syn.fingerprint",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 89,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "tcp.sack.fingerprint",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 90,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "udp.payload.c2s_first_data",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 91,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "udp.payload.s2c_first_data",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 92,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "udp.payload.c2s_first_data_len",
|
|
|
|
|
"table_type": "virtual",
|
2023-05-16 05:48:24 +00:00
|
|
|
"physical_table": "TSG_OBJ_INTERVAL"
|
2023-04-04 17:15:36 +08:00
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 93,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "udp.payload.s2c_first_data_len",
|
|
|
|
|
"table_type": "virtual",
|
2023-05-16 05:48:24 +00:00
|
|
|
"physical_table": "TSG_OBJ_INTERVAL"
|
2023-04-04 17:15:36 +08:00
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 94,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "udp.payload",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 95,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.analysis.ja3",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 96,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.handshake.cert.fingerprint",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 97,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.handshake.cert.serial_number",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 98,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.handshake.certificate.issuer_common_name",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 99,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.handshake.certificate.issuer_organization_name",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 100,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.handshake.certificate.issuer_country_name",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 101,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "ssl.handshake.certificate.subject_country_name",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 102,
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_name": "ssl.handshake.certificate.subject_organization_name",
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 103,
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_name": "ssl.handshake.certificate.not_valid_before",
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 104,
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_name": "ssl.handshake.certificate.not_valid_after",
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_id": 105,
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_name": "ssl.handshake.certificate.algorithm_id",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_KEYWORDS"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 106,
|
2023-04-04 17:15:36 +08:00
|
|
|
"table_name": "general.session.analysis.app_id",
|
|
|
|
|
"table_type": "virtual",
|
|
|
|
|
"physical_table": "TSG_OBJ_APP_ID"
|
2023-04-06 08:39:08 +00:00
|
|
|
},
|
|
|
|
|
{
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_id":107,
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_name":"APP_SIG_SESSION_ATTRIBUTE_STRING",
|
|
|
|
|
"table_type":"expr_plus",
|
|
|
|
|
"valid_column":8,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id":1,
|
|
|
|
|
"group_id":2,
|
|
|
|
|
"district":3,
|
|
|
|
|
"keywords":4,
|
|
|
|
|
"expr_type":5,
|
|
|
|
|
"match_method":6,
|
|
|
|
|
"is_hexbin":7
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_id":108,
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_name":"APP_SIG_SESSION_ATTRIBUTE_FLAG",
|
|
|
|
|
"table_type":"expr",
|
|
|
|
|
"valid_column":7,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id":1,
|
|
|
|
|
"group_id":2,
|
|
|
|
|
"keywords":3,
|
|
|
|
|
"expr_type":4,
|
|
|
|
|
"match_method":5,
|
|
|
|
|
"is_hexbin":6
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
2023-05-16 05:48:24 +00:00
|
|
|
"table_id":109,
|
2023-04-06 08:39:08 +00:00
|
|
|
"table_name":"APP_SIG_SESSION_ATTRIBUTE_INTEGER",
|
|
|
|
|
"table_type":"intval_plus",
|
|
|
|
|
"valid_column":6,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id":1,
|
|
|
|
|
"group_id":2,
|
|
|
|
|
"district":3,
|
|
|
|
|
"low_bound":4,
|
|
|
|
|
"up_bound":5
|
|
|
|
|
}
|
2023-05-16 05:48:24 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"table_id": 110,
|
|
|
|
|
"table_name": "TSG_OBJ_INTERVAL",
|
|
|
|
|
"table_type": "intval",
|
|
|
|
|
"valid_column": 5,
|
|
|
|
|
"custom": {
|
|
|
|
|
"item_id": 1,
|
|
|
|
|
"group_id": 2,
|
|
|
|
|
"low_bound": 3,
|
|
|
|
|
"up_bound": 4
|
|
|
|
|
}
|
2023-04-03 08:30:49 +00:00
|
|
|
}
|
|
|
|
|
]
|