#each collumn seperate with '\t' #id (0~65535) #name string #type one of ip,expr,expr_plus,digest,intval,compile or plugin #src_charset one of GBK,BIG5,UNICODE,UTF8 #dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/' #do_merege yes or no #cross cache 0~max #quickswitch quickon or quick off #id name type src_charset dst_charset do_merge cross_cache quickswitch 0 TSG_SECURITY_COMPILE compile escape -- 1 GROUP_COMPILE_RELATION group UTF8 UTF8 no 0 2 TSG_OBJ_IP_ADDR ip_plus UTF8 UTF8 no 0 3 TSG_OBJ_SUBSCRIBER_ID expr UTF8 UTF8 no 0 4 TSG_OBJ_ACCOUNT expr UTF8 UTF8 no 0 5 TSG_OBJ_URL expr UTF8 UTF8/GBK no 0 6 TSG_OBJ_FQDN expr UTF8 UTF8 no 0 7 TSG_OBJ_KEYWORDS expr UTF8 UTF8 no 0 8 TSG_OBJ_HTTP_SIGNATURE expr_plus UTF8 UTF8/GBK no 0 9 TSG_FIELD_HTTP_HOST virtual TSG_OBJ_FQDN -- 10 TSG_FIELD_HTTP_URL virtual TSG_OBJ_URL -- 11 TSG_FIELD_HTTP_REQ_HDR virtual TSG_OBJ_HTTP_SIGNATURE -- 12 TSG_FIELD_HTTP_RES_HDR virtual TSG_OBJ_HTTP_SIGNATURE -- 13 TSG_FIELD_HTTP_REQ_CONTENT virtual TSG_OBJ_KEYWORDS -- 14 TSG_FIELD_HTTP_RES_CONTENT virtual TSG_OBJ_KEYWORDS -- 15 TSG_FIELD_SSL_SNI virtual TSG_OBJ_FQDN -- 16 TSG_FIELD_SSL_CN virtual TSG_OBJ_FQDN -- 17 TSG_FIELD_SSL_SAN virtual TSG_OBJ_FQDN -- 18 TSG_FIELD_DNS_QNAME virtual TSG_OBJ_FQDN -- 19 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT -- 20 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT -- 21 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT -- 22 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS -- 23 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS -- 24 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS -- 25 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS -- 26 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL -- 27 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS -- 28 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT --