#each collumn seperate with '\t' #id (0~65535) #name string #type one of ip,expr,expr_plus,digest,intval,compile or plugin #src_charset one of GBK,BIG5,UNICODE,UTF8 #dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/' #do_merege yes or no #cross cache 0~max #quickswitch quickon or quick off #id name type src_charset dst_charset do_merge cross_cache quickswitch 0 TSG_SECURITY_COMPILE compile escape -- 1 GROUP_COMPILE_RELATION group2compile -- 2 GROUP_GROUP_RELATION group2group -- 3 TSG_OBJ_IP_ADDR ip_plus UTF8 UTF8 no 0 3 TSG_OBJ_IP_LEARNING_ADDR ip_plus UTF8 UTF8 no 0 4 TSG_OBJ_SUBSCRIBER_ID expr UTF8 UTF8 yes 0 5 TSG_OBJ_ACCOUNT expr UTF8 UTF8 yes 0 6 TSG_OBJ_URL expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 7 TSG_OBJ_FQDN expr UTF8 UTF8 yes 0 8 TSG_OBJ_FQDN_CAT intval UTF8 UTF8 yes 0 9 TSG_OBJ_KEYWORDS expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 10 TSG_OBJ_APP_ID intval UTF8 UTF8 yes 0 11 TSG_OBJ_HTTP_SIGNATURE expr_plus UTF8 UTF8/GBK yes 0 12 TSG_FIELD_HTTP_HOST virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] -- 13 TSG_FIELD_HTTP_URL virtual TSG_OBJ_URL -- 14 TSG_FIELD_HTTP_REQ_HDR virtual TSG_OBJ_HTTP_SIGNATURE -- 15 TSG_FIELD_HTTP_RES_HDR virtual TSG_OBJ_HTTP_SIGNATURE -- 16 TSG_FIELD_HTTP_REQ_BODY virtual TSG_OBJ_KEYWORDS -- 17 TSG_FIELD_HTTP_RES_BODY virtual TSG_OBJ_KEYWORDS -- 18 TSG_FIELD_SSL_SNI virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] -- 19 TSG_FIELD_SSL_CN virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] -- 20 TSG_FIELD_SSL_SAN virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] -- 21 TSG_FIELD_DNS_QNAME virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] -- 22 TSG_FIELD_QUIC_SNI virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] -- 23 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT -- 24 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT -- 25 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT -- 26 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS -- 27 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS -- 28 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS -- 29 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS -- 30 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL -- 31 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS -- 32 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT -- 33 TSG_SECURITY_SOURCE_ADDR virtual TSG_OBJ_IP_ADDR -- 34 TSG_SECURITY_DESTINATION_ADDR virtual TSG_OBJ_IP_ADDR -- 35 TSG_SECURITY_ADDR composition {"source":"TSG_SECURITY_SOURCE_ADDR","destination":"TSG_SECURITY_DESTINATION_ADDR"} 36 TSG_IP_ASN_BUILT_IN ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":7,"estimate_size":4194304} 37 TSG_IP_ASN_USER_DEFINED ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":7,"estimate_size":4194304} 38 TSG_IP_LOCATION_BUILT_IN ip_plugin {"row_id":1,"ip_type":3,"start_ip":4,"end_ip":5,"valid":19,"estimate_size":4194304} 39 TSG_IP_LOCATION_USER_DEFINED ip_plugin {"row_id":1,"ip_type":3,"start_ip":4,"end_ip":5,"valid":19,"estimate_size":4194304} 40 TSG_OBJ_AS_NUMBER expr UTF8 UTF8/GBK yes 0 41 TSG_SECURITY_SOURCE_ASN virtual TSG_OBJ_AS_NUMBER -- 42 TSG_SECURITY_DESTINATION_ASN virtual TSG_OBJ_AS_NUMBER -- 43 TSG_OBJ_GEO_LOCATION expr UTF8 UTF8/GBK yes 0 44 TSG_SECURITY_SOURCE_LOCATION virtual TSG_OBJ_GEO_LOCATION -- 45 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION -- 46 TSG_FQDN_CATEGORY_BUILT_IN fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} -- 47 TSG_FQDN_CATEGORY_USER_DEFINED fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} -- 48 TSG_FIELD_SIP_ORIGINATOR_DESCRIPTION virtual TSG_OBJ_ACCOUNT -- 49 TSG_FIELD_SIP_RESPONDER_DESCRIPTION virtual TSG_OBJ_ACCOUNT -- 50 TSG_OBJ_IMSI expr UTF8 UTF8 yes 0 51 TSG_OBJ_PHONE_NUMBER expr UTF8 UTF8 yes 0 52 TSG_OBJ_APN expr UTF8 UTF8 yes 0 53 TSG_FILED_GTP_IMSI virtual TSG_OBJ_IMSI -- 54 TSG_FILED_GTP_PHONE_NUMBER virtual TSG_OBJ_PHONE_NUMBER -- 55 TSG_FILED_GTP_APN virtual TSG_OBJ_APN -- 56 TSG_DECYPTION_EXCLUSION_SSL_SNI virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --