69 lines
4.0 KiB
Plaintext
69 lines
4.0 KiB
Plaintext
#each collumn seperate with '\t'
|
|
#id (0~65535)
|
|
#name string
|
|
#type one of ip,expr,expr_plus,digest,intval,compile or plugin
|
|
#src_charset one of GBK,BIG5,UNICODE,UTF8
|
|
#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
|
|
#do_merege yes or no
|
|
#cross cache 0~max
|
|
#quickswitch quickon or quick off
|
|
#id name type src_charset dst_charset do_merge cross_cache quickswitch
|
|
0 TSG_SECURITY_COMPILE compile escape --
|
|
1 GROUP_COMPILE_RELATION group2compile --
|
|
2 GROUP_GROUP_RELATION group2group --
|
|
3 TSG_OBJ_IP_ADDR ip_plus UTF8 UTF8 no 0
|
|
3 TSG_OBJ_IP_LEARNING_ADDR ip_plus UTF8 UTF8 no 0
|
|
4 TSG_OBJ_SUBSCRIBER_ID expr UTF8 UTF8 yes 0
|
|
5 TSG_OBJ_ACCOUNT expr UTF8 UTF8 yes 0
|
|
6 TSG_OBJ_URL expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0
|
|
7 TSG_OBJ_FQDN expr UTF8 UTF8 yes 0
|
|
8 TSG_OBJ_FQDN_CAT intval UTF8 UTF8 yes 0
|
|
9 TSG_OBJ_KEYWORDS expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0
|
|
10 TSG_OBJ_APP_ID intval UTF8 UTF8 yes 0
|
|
11 TSG_OBJ_HTTP_SIGNATURE expr_plus UTF8 UTF8/GBK yes 0
|
|
12 TSG_FIELD_HTTP_HOST virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|
|
13 TSG_FIELD_HTTP_URL virtual TSG_OBJ_URL --
|
|
14 TSG_FIELD_HTTP_REQ_HDR virtual TSG_OBJ_HTTP_SIGNATURE --
|
|
15 TSG_FIELD_HTTP_RES_HDR virtual TSG_OBJ_HTTP_SIGNATURE --
|
|
16 TSG_FIELD_HTTP_REQ_BODY virtual TSG_OBJ_KEYWORDS --
|
|
17 TSG_FIELD_HTTP_RES_BODY virtual TSG_OBJ_KEYWORDS --
|
|
18 TSG_FIELD_SSL_SNI virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|
|
19 TSG_FIELD_SSL_CN virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|
|
20 TSG_FIELD_SSL_SAN virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|
|
21 TSG_FIELD_DNS_QNAME virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|
|
22 TSG_FIELD_QUIC_SNI virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|
|
23 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT --
|
|
24 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT --
|
|
25 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT --
|
|
26 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS --
|
|
27 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
28 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS --
|
|
29 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
30 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL --
|
|
31 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
32 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT --
|
|
33 TSG_SECURITY_SOURCE_ADDR virtual TSG_OBJ_IP_ADDR --
|
|
34 TSG_SECURITY_DESTINATION_ADDR virtual TSG_OBJ_IP_ADDR --
|
|
35 TSG_SECURITY_ADDR composition {"source":"TSG_SECURITY_SOURCE_ADDR","destination":"TSG_SECURITY_DESTINATION_ADDR"}
|
|
36 TSG_IP_ASN_BUILT_IN ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":7,"estimate_size":4194304}
|
|
37 TSG_IP_ASN_USER_DEFINED ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":7,"estimate_size":4194304}
|
|
38 TSG_IP_LOCATION_BUILT_IN ip_plugin {"row_id":1,"ip_type":3,"start_ip":4,"end_ip":5,"valid":19,"estimate_size":4194304}
|
|
39 TSG_IP_LOCATION_USER_DEFINED ip_plugin {"row_id":1,"ip_type":3,"start_ip":4,"end_ip":5,"valid":19,"estimate_size":4194304}
|
|
40 TSG_OBJ_AS_NUMBER expr UTF8 UTF8/GBK yes 0
|
|
41 TSG_SECURITY_SOURCE_ASN virtual TSG_OBJ_AS_NUMBER --
|
|
42 TSG_SECURITY_DESTINATION_ASN virtual TSG_OBJ_AS_NUMBER --
|
|
43 TSG_OBJ_GEO_LOCATION expr UTF8 UTF8/GBK yes 0
|
|
44 TSG_SECURITY_SOURCE_LOCATION virtual TSG_OBJ_GEO_LOCATION --
|
|
45 TSG_SECURITY_DESTINATION_LOCATION virtual TSG_OBJ_GEO_LOCATION --
|
|
46 TSG_FQDN_CATEGORY_BUILT_IN fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} --
|
|
47 TSG_FQDN_CATEGORY_USER_DEFINED fqdn_plugin {"row_id":1,"is_suffix_match":4,"fqdn":3,"valid":5} --
|
|
48 TSG_FIELD_SIP_ORIGINATOR_DESCRIPTION virtual TSG_OBJ_ACCOUNT --
|
|
49 TSG_FIELD_SIP_RESPONDER_DESCRIPTION virtual TSG_OBJ_ACCOUNT --
|
|
50 TSG_OBJ_IMSI expr UTF8 UTF8 yes 0
|
|
51 TSG_OBJ_PHONE_NUMBER expr UTF8 UTF8 yes 0
|
|
52 TSG_OBJ_APN expr UTF8 UTF8 yes 0
|
|
53 TSG_FILED_GTP_IMSI virtual TSG_OBJ_IMSI --
|
|
54 TSG_FILED_GTP_PHONE_NUMBER virtual TSG_OBJ_PHONE_NUMBER --
|
|
55 TSG_FILED_GTP_APN virtual TSG_OBJ_APN --
|
|
56 TSG_DECYPTION_EXCLUSION_SSL_SNI virtual ["TSG_OBJ_FQDN","TSG_OBJ_FQDN_CAT"] --
|