gfwleak/tango-tsg-master
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

TSG-13778 TSG master支持MAAT4

Browse Source
This commit is contained in:
刘学利
2023-04-03 08:30:49 +00:00
parent 8819217948
commit b696e82879
48 changed files with 7416 additions and 4501 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
bin/maat.conf
View File

@@ -1,8 +1,8 @@
[STATIC]
MAAT_MODE=1
MAAT_MODE=json
STAT_SWITCH=1
PERF_SWITCH=1
TABLE_INFO=tsgconf/tsg_static_tableinfo.conf
TABLE_INFO=tsgconf/tsg_static_tableinfo.json
STAT_FILE=tsg_static_maat.status
EFFECT_INTERVAL_S=1
REDIS_IP=127.0.0.1
@@ -13,22 +13,7 @@ JSON_CFG_FILE=tsgconf/tsg_maat.json
INC_CFG_DIR=tsgrule/inc/index/
FULL_CFG_DIR=tsgrule/full/index/
EFFECTIVE_RANGE_FILE=/opt/tsg/etc/tsg_device_tag.json
[DYNAMIC]
MAAT_MODE=1
STAT_SWITCH=1
PERF_SWITCH=1
TABLE_INFO=tsgconf/tsg_dynamic_tableinfo.conf
STAT_FILE=tsg_dynamic_maat.status
EFFECT_INTERVAL_S=1
REDIS_IP=127.0.0.1
REDIS_PORT_NUM=1
REDIS_PORT=7002
REDIS_INDEX=1
JSON_CFG_FILE=tsgconf/tsg_maat.json
INC_CFG_DIR=tsgrule/inc/index/
FULL_CFG_DIR=tsgrule/full/index/
EFFECTIVE_RANGE_FILE=/opt/tsg/etc/tsg_device_tag.json
LOG_LEVEL=0
[APP_SIGNATURE_MAAT]
MAAT_MODE=1

14
bin/main.conf
View File

@@ -1,10 +1,7 @@
[MAAT]
PROFILE="./tsgconf/maat.conf"
IP_ADDR_TABLE="TSG_SECURITY_ADDR"
SUBSCRIBER_ID_TABLE="TSG_OBJ_SUBSCRIBER_ID"
CB_SUBSCRIBER_IP_TABLE="TSG_DYN_SUBSCRIBER_IP"
LOG_LEVEL=10
LOG_PATH="./tsglog/maat/maat.log"
PROFILE="./tsgconf/maat.conf"
[TSG_LOG]
MODE=1
@@ -15,6 +12,11 @@ SASL_USERNAME="admin"
SASL_PASSWD="galaxy2019"
BROKER_LIST="127.0.0.1:9092"
COMMON_FIELD_FILE="tsgconf/tsg_log_field.conf"
SEND_USER_REGION=0
SEND_DATA_CENTER_SWITCH=0
SEND_APP_ID_SWITCH=1
SEND_NAT_LINKINFO_SWITCH=0
RAPIDJSON_CHUNK_CAPACITY=8192
[STATISTIC]
CYCLE=30
@@ -42,6 +44,8 @@ POLICY_PRIORITY_LABEL="POLICY_PRIORITY"
L7_RPTOCOL_FILE="./tsgconf/tsg_l7_protocol.conf"
DEVICE_SN_FILENAME="/opt/tsg/etc/tsg_sn.json"
DEVICE_ID_COMMAND="hostname | awk -F'-' '{print $3}'| awk -F'ADC' '{print $2}'"
SERVICE_CHAINING_SID=1004
SHAPING_SID=1005
[TRAFFIC_MIRROR]
TRAFFIC_MIRROR_ENABLE=1
@@ -55,4 +59,4 @@ SEED1=65535
SEED2=13
FLAGS=20
DIR=3
REMEDY=0
REMEDY=0

632
bin/table_info_security.json Normal file
View File

@@ -0,0 +1,632 @@
[
{
"table_id":0,
"table_name":"TSG_SECURITY_COMPILE",
"table_type":"compile",
"user_region_encoded":"escape",
"valid_column":8,
"custom": {
"compile_id":1,
"service_id":2,
"action":3,
"do_blacklist":4,
"do_log":5,
"tags":6,
"user_region":7,
"clause_num":9,
"evaluation_order":10
}
},
{
"table_id":1,
"table_name":"TRAFFIC_SHAPING_COMPILE",
"table_type":"compile",
"user_region_encoded":"escape",
"valid_column":8,
"custom": {
"compile_id":1,
"service_id":2,
"action":3,
"do_blacklist":4,
"do_log":5,
"tags":6,
"user_region":7,
"clause_num":9,
"evaluation_order":10
}
},
{
"table_id":2,
"table_name":"GROUP_COMPILE_RELATION",
"table_type":"group2compile",
"associated_compile_table_id":0,
"valid_column":3,
"custom": {
"group_id":1,
"compile_id":2,
"not_flag":4,
"virtual_table_name":5,
"clause_index":6
}
},
{
"table_id":3,
"table_name":"GROUP_GROUP_RELATION",
"table_type":"group2group",
"valid_column":3,
"custom": {
"group_id":1,
"super_group_id":2
}
},
{
"table_id":4,
"table_name":"TSG_OBJ_IP_ADDR",
"table_type":"ip_plus",
"valid_column":18,
"custom": {
"item_id":1,
"group_id":2,
"addr_type":3,
"saddr_format":4,
"sip1":5,
"sip2":6
}
},
{
"table_id":64,
"table_name":"TSG_OBJ_IP_LEARNING_ADDR",
"table_type":"ip_plus",
"valid_column":18,
"custom": {
"item_id":1,
"group_id":2,
"addr_type":3,
"saddr_format":4,
"sip1":5,
"sip2":6
}
},
{
"table_id":5,
"table_name":"TSG_OBJ_SUBSCRIBER_ID",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":6,
"table_name":"TSG_OBJ_ACCOUNT",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":7,
"table_name":"TSG_OBJ_URL",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":8,
"table_name":"TSG_OBJ_FQDN",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":9,
"table_name":"TSG_OBJ_FQDN_CAT",
"table_type":"intval",
"valid_column":5,
"custom": {
"item_id":1,
"group_id":2,
"low_bound":3,
"up_bound":4
}
},
{
"table_id":10,
"table_name":"TSG_OBJ_KEYWORDS",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":11,
"table_name":"TSG_OBJ_APP_ID",
"table_type":"intval",
"valid_column":5,
"custom": {
"item_id":1,
"group_id":2,
"low_bound":3,
"up_bound":4
}
},
{
"table_id":12,
"table_name":"TSG_OBJ_HTTP_SIGNATURE",
"table_type":"expr_plus",
"valid_column":8,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"district":3,
"keywords":4,
"expr_type":5,
"match_method":6,
"is_hexbin":7
}
},
{
"table_id":13,
"table_name":"TSG_FIELD_HTTP_HOST",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":14,
"table_name":"TSG_FIELD_HTTP_URL",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_URL"]
},
{
"table_id":15,
"table_name":"TSG_FIELD_HTTP_REQ_HDR",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_HTTP_SIGNATURE"]
},
{
"table_id":16,
"table_name":"TSG_FIELD_HTTP_RES_HDR",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_HTTP_SIGNATURE"]
},
{
"table_id":17,
"table_name":"TSG_FIELD_HTTP_REQ_BODY",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":18,
"table_name":"TSG_FIELD_HTTP_RES_BODY",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":19,
"table_name":"TSG_FIELD_SSL_SNI",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":20,
"table_name":"TSG_FIELD_SSL_CN",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":21,
"table_name":"TSG_FIELD_SSL_SAN",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":22,
"table_name":"TSG_FIELD_DNS_QNAME",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":23,
"table_name":"TSG_FIELD_QUIC_SNI",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":24,
"table_name":"TSG_FIELD_MAIL_ACCOUNT",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_ACCOUNT"]
},
{
"table_id":25,
"table_name":"TSG_FIELD_MAIL_FROM",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_ACCOUNT"]
},
{
"table_id":26,
"table_name":"TSG_FIELD_MAIL_TO",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_ACCOUNT"]
},
{
"table_id":27,
"table_name":"TSG_FIELD_MAIL_SUBJECT",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":28,
"table_name":"TSG_FIELD_MAIL_CONTENT",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":29,
"table_name":"TSG_FIELD_MAIL_ATT_NAME",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":30,
"table_name":"TSG_FIELD_MAIL_ATT_CONTENT",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":31,
"table_name":"TSG_FIELD_FTP_URI",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_URL"]
},
{
"table_id":32,
"table_name":"TSG_FIELD_FTP_CONTENT",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_KEYWORDS"]
},
{
"table_id":33,
"table_name":"TSG_FIELD_FTP_ACCOUNT",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_ACCOUNT"]
},
{
"table_id":34,
"table_name":"TSG_SECURITY_SOURCE_ADDR",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_IP_ADDR"]
},
{
"table_id":35,
"table_name":"TSG_SECURITY_DESTINATION_ADDR",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_IP_ADDR"]
},
{
"table_id":36,
"table_name":"TSG_IP_ASN_BUILT_IN",
"table_type":"ip_plugin",
"valid_column":19,
"custom": {
"item_id":1,
"ip_type":3,
"start_ip":4,
"end_ip":5,
"addr_format":7
}
},
{
"table_id":37,
"table_name":"TSG_IP_ASN_USER_DEFINED",
"table_type":"ip_plugin",
"valid_column":19,
"custom": {
"item_id":1,
"ip_type":3,
"start_ip":4,
"end_ip":5,
"addr_format":7
}
},
{
"table_id":38,
"table_name":"TSG_IP_LOCATION_BUILT_IN",
"table_type":"ip_plugin",
"valid_column":19,
"custom": {
"item_id":1,
"ip_type":3,
"start_ip":4,
"end_ip":5,
"addr_format":7
}
},
{
"table_id":39,
"table_name":"TSG_IP_LOCATION_USER_DEFINED",
"table_type":"ip_plugin",
"valid_column":19,
"custom": {
"item_id":1,
"ip_type":3,
"start_ip":4,
"end_ip":5,
"addr_format":7
}
},
{
"table_id":40,
"table_name":"TSG_OBJ_AS_NUMBER",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":41,
"table_name":"TSG_SECURITY_SOURCE_ASN",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_AS_NUMBER"]
},
{
"table_id":42,
"table_name":"TSG_SECURITY_DESTINATION_ASN",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_AS_NUMBER"]
},
{
"table_id":43,
"table_name":"TSG_OBJ_GEO_LOCATION",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":44,
"table_name":"TSG_SECURITY_SOURCE_LOCATION",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_GEO_LOCATION"]
},
{
"table_id":45,
"table_name":"TSG_SECURITY_DESTINATION_LOCATION",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_GEO_LOCATION"]
},
{
"table_id":46,
"table_name":"TSG_FQDN_CATEGORY_BUILT_IN",
"table_type":"fqdn_plugin",
"valid_column":5,
"custom": {
"item_id":1,
"suffix_match_method":4,
"fqdn":3
}
},
{
"table_id":47,
"table_name":"TSG_FQDN_CATEGORY_USER_DEFINED",
"table_type":"fqdn_plugin",
"valid_column":5,
"custom": {
"item_id":1,
"suffix_match_method":4,
"fqdn":3
}
},
{
"table_id":48,
"table_name":"TSG_FIELD_SIP_ORIGINATOR_DESCRIPTION",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_ACCOUNT"]
},
{
"table_id":49,
"table_name":"TSG_FIELD_SIP_RESPONDER_DESCRIPTION",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_ACCOUNT"]
},
{
"table_id":50,
"table_name":"TSG_OBJ_IMSI",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":51,
"table_name":"TSG_OBJ_PHONE_NUMBER",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":52,
"table_name":"TSG_OBJ_APN",
"table_type":"expr",
"valid_column":7,
"custom": {
"scan_mode":"block",
"pattern_type":"literal",
"item_id":1,
"group_id":2,
"keywords":3,
"expr_type":4,
"match_method":5,
"is_hexbin":6
}
},
{
"table_id":53,
"table_name":"TSG_FILED_GTP_IMSI",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_IMSI"]
},
{
"table_id":54,
"table_name":"TSG_FILED_GTP_PHONE_NUMBER",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_PHONE_NUMBER"]
},
{
"table_id":55,
"table_name":"TSG_FILED_GTP_APN",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_APN"]
},
{
"table_id":56,
"table_name":"TSG_DECYPTION_EXCLUSION_SSL_SNI",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"]
},
{
"table_id":57,
"table_name":"TSG_OBJ_TUNNEL_ID",
"table_type":"intval",
"valid_column":5,
"custom": {
"item_id":1,
"group_id":2,
"low_bound":3,
"up_bound":4
}
},
{
"table_id":58,
"table_name":"TSG_TUNNEL_CATALOG",
"table_type":"bool_plugin",
"valid_column":5,
"custom": {
"item_id":1,
"bool_expr":4
}
},
{
"table_id":59,
"table_name":"TSG_TUNNEL_ENDPOINT",
"table_type":"ip_plugin",
"valid_column":6,
"custom": {
"item_id":1,
"ip_type":2,
"start_ip":3,
"end_ip":4,
"addr_format":7
}
},
{
"table_id":60,
"table_name":"TSG_TUNNEL_LABEL",
"table_type":"plugin",
"valid_column":4,
"custom": {
"key":1,
"tag":3
}
},
{
"table_id":61,
"table_name":"TSG_SECURITY_TUNNEL",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_TUNNEL_ID"]
},
{
"table_id":62,
"table_name":"TSG_OBJ_FLAG",
"table_type":"flag",
"valid_column":5,
"custom": {
"item_id":1,
"group_id":2,
"flag":3,
"flag_mask":4
}
},
{
"table_id":63,
"table_name":"TSG_SECURITY_FLAG",
"table_type":"virtual",
"physical_table": ["TSG_OBJ_FLAG"]
}
]

14
bin/tsg_log_field.conf
View File

@@ -1,13 +1,13 @@
#TYPE：1:UCHAR,2:USHORT,3:ULONG,4:ULOG,5:USTRING,6:FILE,7:UBASE64,8:PACKET
#TYPE TOPIC SERVICE
TOPIC SECURITY-EVENT 0
TOPIC SESSION-RECORD 2
TOPIC INTERNAL-RTP-RECORD 4
TOPIC VOIP-RECORD 5
TOPIC INTERIM-SESSION-RECORD 6
TOPIC TRANSACTION-RECORD 7
TOPIC GTPC-RECORD 8
TOPIC BGP-RECORD 9
TOPIC SESSION-RECORD 1
TOPIC INTERNAL-RTP-RECORD 2
TOPIC VOIP-RECORD 3
TOPIC INTERIM-SESSION-RECORD 4
TOPIC TRANSACTION-RECORD 5
TOPIC GTPC-RECORD 6
TOPIC BGP-RECORD 7
#TYPE FIELD VALUE
LONG common_policy_id 1

17
bin/tsg_maat.json
View File

@@ -9,7 +9,7 @@
"action": 1,
"do_blacklist": 0,
"do_log": 1,
"effective_rage": 0,
"tags": "{}",
"user_region": "Virtual",
"is_valid": "yes",
"groups": [
@@ -23,14 +23,13 @@
"table_name": "TSG_OBJ_IP_ADDR",
"table_content": {
"addr_type": "ipv4",
"saddr_format": "range",
"src_ip1": "192.168.41.228",
"src_ip2": "192.168.41.228",
"sport_format": "range",
"src_port1": "0",
"src_port2": "0",
"protocol": 6,
"direction": "double"
"addr_format": "range",
"ip1": "192.168.41.228",
"ip2": "192.168.41.228",
"port_format": "range",
"port1": "0",
"port2": "0",
"protocol": -1
}
}
]

2
bin/tsg_static_tableinfo.conf
View File

@@ -94,6 +94,6 @@
78 TSG_TUNNEL_LABEL plugin {"key":2,"valid":3} --
79 TSG_SECURITY_TUNNEL virtual TSG_OBJ_TUNNEL_ID --
80 TSG_OBJ_FLAG flag --
81 TSG_SECURITY_FLAG virtual TSG_OBJ_FLAG --
81 TSG_SECURITY_FLAG virtual TSG_OBJ_FLAG --
82 TRAFFIC_SHAPING_PROFILE plugin {"key":1,"valid":7}
83 T_VSYS_INFO plugin {"key":1,"valid":3}

826
bin/tsg_static_tableinfo.json Normal file
View File

@@ -0,0 +1,826 @@
[
{
"table_id": 0,
"table_name": "TSG_COMPILE",
"db_tables":["TSG_SECURITY_COMPILE", "TRAFFIC_SHAPING_COMPILE", "SERVICE_CHAINING_COMPILE", "PXY_TCP_OPTION_COMPILE", "APP_SELECTOR_COMPILE"],
"table_type": "compile",
"user_region_encoded": "escape",
"valid_column": 8,
"custom": {
"compile_id": 1,
"service_id": 2,
"action": 3,
"do_blacklist": 4,
"do_log": 5,
"tags": 6,
"user_region": 7,
"clause_num": 9,
"evaluation_order":10
}
},
{
"table_id": 1,
"table_name": "TSG_GROUP_COMPILE_RELATION",
"db_tables":["GROUP_SECURITY_COMPILE_RELATION", "GROUP_SHAPING_COMPILE_RELATION", "GROUP_SERVICE_CHAINING_COMPILE_RELATION", "GROUP_PXY_TCP_OPTION_COMPILE_RELATION", "APP_SELECTOR_GROUP_COMPILE_RELATION"],
"table_type": "group2compile",
"associated_compile_table_id": 0,
"valid_column": 3,
"custom": {
"group_id": 1,
"compile_id": 2,
"not_flag": 4,
"virtual_table_name": 5,
"clause_index": 6
}
},
{
"table_id": 2,
"table_name": "TSG_GROUP_GROUP_RELATION",
"db_tables": ["GROUP_GROUP_RELATION", "APP_SELECTOR_GROUP_GROUP_RELATION"],
"table_type": "group2group",
"valid_column": 3,
"custom": {
"group_id": 1,
"super_group_id": 2
}
},
{
"table_id": 3,
"table_name": "TSG_IP_ADDR",
"db_tables": ["TSG_OBJ_IP_ADDR", "TSG_OBJ_IP_LEARNING_ADDR"],
"table_type": "ip_plus",
"valid_column": 11,
"custom": {
"item_id":1,
"group_id":2,
"addr_type":3,
"addr_format":4,
"ip1":5,
"ip2":6,
"port_format":7,
"port1":8,
"port2":9,
"protocol":10
}
},
{
"table_id": 4,
"table_name": "TSG_OBJ_SUBSCRIBER_ID",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 5,
"table_name": "TSG_OBJ_ACCOUNT",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 5,
"table_name": "TSG_OBJ_URL",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 7,
"table_name": "TSG_OBJ_FQDN",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 8,
"table_name": "TSG_OBJ_FQDN_CAT",
"table_type": "intval",
"valid_column": 5,
"custom": {
"item_id": 1,
"group_id": 2,
"low_bound": 3,
"up_bound": 4
}
},
{
"table_id": 9,
"table_name": "TSG_OBJ_KEYWORDS",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 10,
"table_name": "TSG_OBJ_APP_ID",
"table_type": "intval",
"valid_column": 5,
"custom": {
"item_id": 1,
"group_id": 2,
"low_bound": 3,
"up_bound": 4
}
},
{
"table_id": 11,
"table_name": "TSG_OBJ_HTTP_SIGNATURE",
"table_type": "expr_plus",
"valid_column": 8,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"district": 3,
"keywords": 4,
"expr_type": 5,
"match_method": 6,
"is_hexbin": 7
}
},
{
"table_id": 12,
"table_name": "TSG_OBJ_FQDN_CAT",
"table_type": "intval",
"valid_column": 5,
"custom": {
"item_id": 1,
"group_id": 2,
"low_bound": 3,
"up_bound": 4
}
},
{
"table_id": 13,
"table_name": "TSG_FIELD_HTTP_HOST",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 14,
"table_name": "TSG_FIELD_HTTP_HOST_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 15,
"table_name": "TSG_FIELD_HTTP_URL",
"table_type": "virtual",
"physical_table": "TSG_OBJ_URL"
},
{
"table_id": 16,
"table_name": "TSG_FIELD_HTTP_REQ_HDR",
"table_type": "virtual",
"physical_table": "TSG_OBJ_HTTP_SIGNATURE"
},
{
"table_id": 17,
"table_name": "TSG_FIELD_HTTP_RES_HDR",
"table_type": "virtual",
"physical_table": "TSG_OBJ_HTTP_SIGNATURE"
},
{
"table_id": 18,
"table_name": "TSG_FIELD_HTTP_REQ_BODY",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 19,
"table_name": "TSG_FIELD_HTTP_RES_BODY",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 20,
"table_name": "TSG_FIELD_SSL_SNI",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 21,
"table_name": "TSG_FIELD_SSL_SNI_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 22,
"table_name": "TSG_FIELD_SSL_CN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 23,
"table_name": "TSG_FIELD_SSL_CN_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 24,
"table_name": "TSG_FIELD_SSL_SAN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 25,
"table_name": "TSG_FIELD_SSL_SAN_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 26,
"table_name": "TSG_FIELD_DNS_QNAME",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 27,
"table_name": "TSG_FIELD_DNS_QNAME_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 28,
"table_name": "TSG_FIELD_QUIC_SNI",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 29,
"table_name": "TSG_FIELD_QUIC_SNI_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 30,
"table_name": "TSG_FIELD_MAIL_ACCOUNT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_ACCOUNT"
},
{
"table_id": 31,
"table_name": "TSG_FIELD_MAIL_FROM",
"table_type": "virtual",
"physical_table": "TSG_OBJ_ACCOUNT"
},
{
"table_id": 32,
"table_name": "TSG_FIELD_MAIL_TO",
"table_type": "virtual",
"physical_table": "TSG_OBJ_ACCOUNT"
},
{
"table_id": 33,
"table_name": "TSG_FIELD_MAIL_SUBJECT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 34,
"table_name": "TSG_FIELD_MAIL_CONTENT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 35,
"table_name": "TSG_FIELD_MAIL_ATT_NAME",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 36,
"table_name": "TSG_FIELD_MAIL_ATT_CONTENT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 37,
"table_name": "TSG_FIELD_FTP_URI",
"table_type": "virtual",
"physical_table": "TSG_OBJ_URL"
},
{
"table_id": 38,
"table_name": "TSG_FIELD_FTP_CONTENT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_KEYWORDS"
},
{
"table_id": 39,
"table_name": "TSG_FIELD_FTP_ACCOUNT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_ACCOUNT"
},
{
"table_id": 40,
"table_name": "TSG_SECURITY_SOURCE_ADDR",
"table_type": "virtual",
"physical_table": "TSG_OBJ_IP_ADDR"
},
{
"table_id": 41,
"table_name": "TSG_SECURITY_DESTINATION_ADDR",
"table_type": "virtual",
"physical_table": "TSG_OBJ_IP_ADDR"
},
{
"table_id": 42,
"table_name": "TSG_IP_ASN_BUILT_IN",
"table_type": "ip_plugin",
"valid_column": 19,
"custom": {
"item_id": 1,
"key_type": "pointer",
"ip_type": 3,
"start_ip": 4,
"end_ip": 5,
"addr_format": 7
}
},
{
"table_id": 43,
"table_name": "TSG_IP_ASN_USER_DEFINED",
"table_type": "ip_plugin",
"valid_column": 19,
"custom": {
"item_id": 1,
"key_type": "pointer",
"ip_type": 3,
"start_ip": 4,
"end_ip": 5,
"addr_format": 7
}
},
{
"table_id": 44,
"table_name": "TSG_IP_LOCATION_BUILT_IN",
"table_type": "ip_plugin",
"valid_column": 19,
"custom": {
"item_id": 1,
"key_type": "pointer",
"ip_type": 3,
"start_ip": 4,
"end_ip": 5,
"addr_format": 7
}
},
{
"table_id": 45,
"table_name": "TSG_IP_LOCATION_USER_DEFINED",
"table_type": "ip_plugin",
"valid_column": 19,
"custom": {
"item_id": 1,
"key_type": "pointer",
"ip_type": 3,
"start_ip": 4,
"end_ip": 5,
"addr_format": 7
}
},
{
"table_id": 46,
"table_name": "TSG_OBJ_AS_NUMBER",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 47,
"table_name": "TSG_SECURITY_SOURCE_ASN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_AS_NUMBER"
},
{
"table_id": 48,
"table_name": "TSG_SECURITY_DESTINATION_ASN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_AS_NUMBER"
},
{
"table_id": 49,
"table_name": "TSG_OBJ_GEO_LOCATION",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 50,
"table_name": "TSG_SECURITY_SOURCE_LOCATION",
"table_type": "virtual",
"physical_table": "TSG_OBJ_GEO_LOCATION"
},
{
"table_id": 51,
"table_name": "TSG_SECURITY_DESTINATION_LOCATION",
"table_type": "virtual",
"physical_table": "TSG_OBJ_GEO_LOCATION"
},
{
"table_id": 52,
"table_name": "TSG_FQDN_CATEGORY_BUILT_IN",
"table_type": "fqdn_plugin",
"valid_column": 5,
"custom": {
"item_id": 1,
"key_type": "pointer",
"suffix_match_method": 4,
"fqdn": 3
}
},
{
"table_id": 53,
"table_name": "TSG_FQDN_CATEGORY_USER_DEFINED",
"table_type": "fqdn_plugin",
"valid_column": 5,
"custom": {
"item_id": 1,
"key_type": "pointer",
"suffix_match_method": 4,
"fqdn": 3
}
},
{
"table_id": 54,
"table_name": "TSG_FIELD_SIP_ORIGINATOR_DESCRIPTION",
"table_type": "virtual",
"physical_table": "TSG_OBJ_ACCOUNT"
},
{
"table_id": 55,
"table_name": "TSG_FIELD_SIP_RESPONDER_DESCRIPTION",
"table_type": "virtual",
"physical_table": "TSG_OBJ_ACCOUNT"
},
{
"table_id": 56,
"table_name": "TSG_OBJ_IMSI",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 57,
"table_name": "TSG_OBJ_PHONE_NUMBER",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 58,
"table_name": "TSG_OBJ_APN",
"table_type": "expr",
"valid_column": 7,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"keywords": 3,
"expr_type": 4,
"match_method": 5,
"is_hexbin": 6
}
},
{
"table_id": 59,
"table_name": "TSG_FILED_GTP_IMSI",
"table_type": "virtual",
"physical_table": "TSG_OBJ_IMSI"
},
{
"table_id": 60,
"table_name": "TSG_FILED_GTP_PHONE_NUMBER",
"table_type": "virtual",
"physical_table": "TSG_OBJ_PHONE_NUMBER"
},
{
"table_id": 61,
"table_name": "TSG_FILED_GTP_APN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_APN"
},
{
"table_id": 62,
"table_name": "TSG_DECYPTION_EXCLUSION_SSL_SNI",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 63,
"table_name": "TSG_OBJ_TUNNEL_ID",
"table_type": "intval",
"valid_column": 5,
"custom": {
"item_id": 1,
"group_id": 2,
"low_bound": 3,
"up_bound": 4
}
},
{
"table_id": 64,
"table_name": "TSG_TUNNEL_CATALOG",
"table_type": "bool_plugin",
"valid_column": 5,
"custom": {
"item_id": 1,
"key_type": "integer",
"bool_expr": 4
}
},
{
"table_id": 65,
"table_name": "TSG_TUNNEL_ENDPOINT",
"table_type": "ip_plugin",
"valid_column": 6,
"custom": {
"item_id": 1,
"key_type": "pointer",
"ip_type": 2,
"start_ip": 3,
"end_ip": 4,
"addr_format": 7
}
},
{
"table_id": 66,
"table_name": "TSG_TUNNEL_LABEL",
"table_type": "plugin",
"valid_column": 4,
"custom": {
"key": 1,
"key_type": "integer"
}
},
{
"table_id": 67,
"table_name": "TSG_SECURITY_TUNNEL",
"table_type": "virtual",
"physical_table": "TSG_OBJ_TUNNEL_ID"
},
{
"table_id": 68,
"table_name": "TSG_OBJ_FLAG",
"table_type": "flag",
"valid_column": 5,
"custom": {
"item_id": 1,
"group_id": 2,
"flag": 3,
"flag_mask": 4
}
},
{
"table_id": 69,
"table_name": "TSG_SECURITY_FLAG",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FLAG"
},
{
"table_id": 70,
"table_name": "APP_SELECTOR_ID",
"table_type": "intval",
"valid_column": 5,
"custom": {
"item_id": 1,
"group_id": 2,
"low_bound": 3,
"up_bound": 4
}
},
{
"table_id": 71,
"table_name": "APP_SELECTOR_PROPERTIES",
"table_type": "expr_plus",
"valid_column": 8,
"custom": {
"scan_mode": "block",
"pattern_type": "literal",
"item_id": 1,
"group_id": 2,
"district": 3,
"keywords": 4,
"expr_type": 5,
"match_method": 6,
"is_hexbin": 7
}
},
{
"table_id": 72,
"table_name": "APP_ID_DICT",
"table_type": "plugin",
"valid_column": 18,
"custom": {
"key": 1,
"key_type": "integer"
}
},
{
"table_id": 73,
"table_name": "APP_SIGNATURE_UPDATE_PROFILE",
"table_type": "plugin",
"valid_column": 5,
"custom": {
"key": 1,
"key_type": "integer",
"foreign": [
2,
3
]
}
},
{
"table_id": 74,
"table_name": "PXY_TCP_OPTION_SOURCE_ADDR",
"table_type": "virtual",
"physical_table": "TSG_OBJ_IP_ADDR"
},
{
"table_id": 75,
"table_name": "PXY_TCP_OPTION_DESTINATION_ADDR",
"table_type": "virtual",
"physical_table": "TSG_OBJ_IP_ADDR"
},
{
"table_id": 76,
"table_name": "PXY_TCP_OPTION_SERVER_FQDN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 77,
"table_name": "PXY_TCP_OPTION_SERVER_FQDN",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
},
{
"table_id": 78,
"table_name": "TRAFFIC_SHAPING_PROFILE",
"table_type": "plugin",
"valid_column": 7,
"custom": {
"key": 1,
"key_type": "integer"
}
},
{
"table_id": 79,
"table_name": "TSG_DYN_MOBILE_IDENTITY_APN_TEID",
"table_type": "plugin",
"valid_column": 7,
"custom": {
"key": 2,
"key_type": "integer"
}
},
{
"table_id": 80,
"table_name": "TSG_DYN_SUBSCRIBER_IP",
"table_type": "plugin",
"valid_column": 5,
"custom": {
"key": 3,
"key_type": "pointer"
}
},
{
"table_id": 81,
"table_name": "TSG_PROFILE_DNS_RECORDS",
"table_type": "plugin",
"valid_column": 5,
"custom": {
"key": 1,
"key_type": "integer"
}
},
{
"table_id": 82,
"table_name": "TSG_PROFILE_RESPONSE_PAGES",
"table_type": "plugin",
"valid_column": 5,
"custom": {
"key": 1,
"key_type": "integer",
"foreign": [
4
]
}
},
{
"table_id": 83,
"table_name": "TSG_PROFILE_TRAFFIC_MIRROR",
"table_type": "plugin",
"valid_column": 4,
"custom": {
"key": 1,
"key_type": "integer"
}
},
{
"table_id": 84,
"table_name": "T_VSYS_INFO",
"table_type": "plugin",
"valid_column": 3,
"custom": {
"key": 1,
"key_type": "integer"
}
},
{
"table_id": 85,
"table_name": "TSG_FIELD_DTLS_SNI",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN"
},
{
"table_id": 86,
"table_name": "TSG_FIELD_DTLS_SNI_CAT",
"table_type": "virtual",
"physical_table": "TSG_OBJ_FQDN_CAT"
}
]