#each collumn seperate with '\t' #id (0~65535) #name string #type one of ip,expr,expr_plus,digest,intval,compile or plugin #src_charset one of GBK,BIG5,UNICODE,UTF8 #dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/' #do_merege [yes/no] #cross cache [number] #quick mode [quickon/quickoff], default [quickoff] #For ip/intval/digest/compile/group #id name type # #For plugin table #id name type json_descr # #For expr/expr_plus Table #id name type src_charset dst_charset do_merge cross_cache quick_mode 0 PXY_CTRL_COMPILE compile escape -- 1 GROUP_COMPILE_RELATION group -- 2 TSG_OBJ_IP_ADDR ip_plus --- 3 TSG_OBJ_URL expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 quickoff 4 TSG_FIELD_HTTP_URL virtual TSG_OBJ_URL -- 5 TSG_OBJ_FQDN expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 quickoff 5 TSG_OBJ_FQDN_CAT expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 quickoff 6 TSG_FIELD_HTTP_HOST virtual TSG_OBJ_FQDN -- 7 TSG_OBJ_HTTP_SIGNATURE expr_plus UTF8 UTF8 yes 0 quickoff 8 TSG_FIELD_HTTP_REQ_HDR virtual TSG_OBJ_HTTP_SIGNATURE -- 9 TSG_FIELD_HTTP_RES_HDR virtual TSG_OBJ_HTTP_SIGNATURE -- 10 TSG_OBJ_KEYWORDS expr UTF8 GBK/UNICODE/UTF8 yes 128 quickoff 11 TSG_FIELD_HTTP_REQ_CONTENT virtual TSG_OBJ_KEYWORDS -- 12 TSG_FIELD_HTTP_RES_CONTENT virtual TSG_OBJ_KEYWORDS -- 13 TSG_OBJ_SUBSCRIBER_ID expr UTF8 UTF8 yes 0 quickon 14 TSG_OBJ_APP_ID expr UTF8 UTF8 yes 0 15 TSG_SECURITY_SOURCE_ADDR virtual TSG_OBJ_IP_ADDR -- 16 TSG_SECURITY_DESTINATION_ADDR virtual TSG_OBJ_IP_ADDR -- 17 TSG_SECURITY_ADDR composition {"source":"TSG_SECURITY_SOURCE_ADDR","destination":"TSG_SECURITY_DESTINATION_ADDR"} #eliminate the alarm 18 TSG_OBJ_ACCOUNT expr UTF8 UTF8 yes 0 19 TSG_FIELD_SSL_SNI virtual TSG_OBJ_FQDN -- 20 TSG_FIELD_SSL_CN virtual TSG_OBJ_FQDN -- 21 TSG_FIELD_SSL_SAN virtual TSG_OBJ_FQDN -- 22 TSG_FIELD_DNS_QNAME virtual TSG_OBJ_FQDN -- 23 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT -- 24 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT -- 25 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT -- 26 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS -- 27 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS -- 28 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS -- 29 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS -- 30 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL -- 31 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS -- 32 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT --