调整扫描的属地表名称,同时调整table_info,IP归属地表不能使用composition聚合表
支持扫描quic协议,增加相关代码 调整发送IP归属地字段的位置,保证拦截日志能正常填充IP归属地字段
This commit is contained in:
@@ -49,12 +49,10 @@
|
||||
37 TSG_IP_ASN_USER_DEFINED ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":7}
|
||||
38 TSG_IP_LOCATION_BUILT_IN ip_plugin {"row_id":1,"ip_type":3,"start_ip":4,"end_ip":5,"valid":18}
|
||||
39 TSG_IP_LOCATION_USER_DEFINED ip_plugin {"row_id":1,"ip_type":3,"start_ip":4,"end_ip":5,"valid":18}
|
||||
40 TSG_OBJ_IP_ASN expr UTF8 UTF8/GBK yes 0
|
||||
41 TSG_SECURITY_SOURCE_ASN virtual TSG_OBJ_IP_ASN --
|
||||
42 TSG_SECURITY_DESTINATION_ASN virtual TSG_OBJ_IP_ASN --
|
||||
43 TSG_SECURITY_ASN composition {"source":"TSG_SECURITY_SOURCE_ASN","destination":"TSG_SECURITY_DESTINATION_ASN"}
|
||||
44 TSG_OBJ_IP_LOCATION expr UTF8 UTF8/GBK yes 0
|
||||
45 TSG_SECURITY_SOURCE_LOCATION virtual TSG_OBJ_IP_LOCATION --
|
||||
46 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_IP_LOCATION --
|
||||
47 TSG_SECURITY_LOCATION composition {"source":"TSG_SECURITY_SOURCE_LOCATION","destination":"TSG_SECURITY_DESTINATION_LOCATION"}
|
||||
48 TSG_FIELD_QUIC_SNI virtual TSG_OBJ_FQDN --
|
||||
40 TSG_OBJ_AS_NUMBER expr UTF8 UTF8/GBK yes 0
|
||||
41 TSG_SECURITY_SOURCE_ASN virtual TSG_OBJ_AS_NUMBER --
|
||||
42 TSG_SECURITY_DESTINATION_ASN virtual TSG_OBJ_AS_NUMBER --
|
||||
43 TSG_OBJ_GEO_LOCATION expr UTF8 UTF8/GBK yes 0
|
||||
44 TSG_SECURITY_SOURCE_LOCATION virtual TSG_OBJ_GEO_LOCATION --
|
||||
45 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION --
|
||||
46 TSG_FIELD_QUIC_SNI virtual TSG_OBJ_FQDN --
|
||||
|
||||
Reference in New Issue
Block a user