53 lines
2.8 KiB
Plaintext
53 lines
2.8 KiB
Plaintext
#each collumn seperate with '\t'
|
|
#id (0~65535)
|
|
#name string
|
|
#type one of ip,expr,expr_plus,digest,intval,compile or plugin
|
|
#src_charset one of GBK,BIG5,UNICODE,UTF8
|
|
#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
|
|
#do_merege [yes/no]
|
|
#cross cache [number]
|
|
#quick mode [quickon/quickoff], default [quickoff]
|
|
#For ip/intval/digest/compile/group
|
|
#id name type
|
|
#
|
|
#For plugin table
|
|
#id name type json_descr
|
|
#
|
|
#For expr/expr_plus Table
|
|
#id name type src_charset dst_charset do_merge cross_cache quick_mode
|
|
0 PXY_CTRL_COMPILE compile escape --
|
|
1 GROUP_COMPILE_RELATION group --
|
|
2 TSG_OBJ_IP_ADDR ip_plus ---
|
|
3 TSG_OBJ_URL expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 quickoff
|
|
4 TSG_FIELD_HTTP_URL virtual TSG_OBJ_URL --
|
|
5 TSG_OBJ_FQDN expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 quickoff
|
|
5 TSG_OBJ_FQDN_CAT expr UTF8 GBK/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 0 quickoff
|
|
6 TSG_FIELD_HTTP_HOST virtual TSG_OBJ_FQDN --
|
|
7 TSG_OBJ_HTTP_SIGNATURE expr_plus UTF8 UTF8 yes 0 quickoff
|
|
8 TSG_FIELD_HTTP_REQ_HDR virtual TSG_OBJ_HTTP_SIGNATURE --
|
|
9 TSG_FIELD_HTTP_RES_HDR virtual TSG_OBJ_HTTP_SIGNATURE --
|
|
10 TSG_OBJ_KEYWORDS expr UTF8 GBK/UNICODE/UTF8 yes 128 quickoff
|
|
11 TSG_FIELD_HTTP_REQ_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
12 TSG_FIELD_HTTP_RES_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
13 TSG_OBJ_SUBSCRIBER_ID expr UTF8 UTF8 yes 0 quickon
|
|
14 TSG_OBJ_APP_ID expr UTF8 UTF8 yes 0
|
|
15 TSG_SECURITY_SOURCE_ADDR virtual TSG_OBJ_IP_ADDR --
|
|
16 TSG_SECURITY_DESTINATION_ADDR virtual TSG_OBJ_IP_ADDR --
|
|
17 TSG_SECURITY_ADDR composition {"source":"TSG_SECURITY_SOURCE_ADDR","destination":"TSG_SECURITY_DESTINATION_ADDR"}
|
|
#eliminate the alarm
|
|
18 TSG_OBJ_ACCOUNT expr UTF8 UTF8 yes 0
|
|
19 TSG_FIELD_SSL_SNI virtual TSG_OBJ_FQDN --
|
|
20 TSG_FIELD_SSL_CN virtual TSG_OBJ_FQDN --
|
|
21 TSG_FIELD_SSL_SAN virtual TSG_OBJ_FQDN --
|
|
22 TSG_FIELD_DNS_QNAME virtual TSG_OBJ_FQDN --
|
|
23 TSG_FIELD_MAIL_ACCOUNT virtual TSG_OBJ_ACCOUNT --
|
|
24 TSG_FIELD_MAIL_FROM virtual TSG_OBJ_ACCOUNT --
|
|
25 TSG_FIELD_MAIL_TO virtual TSG_OBJ_ACCOUNT --
|
|
26 TSG_FIELD_MAIL_SUBJECT virtual TSG_OBJ_KEYWORDS --
|
|
27 TSG_FIELD_MAIL_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
28 TSG_FIELD_MAIL_ATT_NAME virtual TSG_OBJ_KEYWORDS --
|
|
29 TSG_FIELD_MAIL_ATT_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
30 TSG_FIELD_FTP_URI virtual TSG_OBJ_URL --
|
|
31 TSG_FIELD_FTP_CONTENT virtual TSG_OBJ_KEYWORDS --
|
|
32 TSG_FIELD_FTP_ACCOUNT virtual TSG_OBJ_ACCOUNT --
|