1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
#each collumn seperate with '\t'
#id (0~65535)
#name string
#type one of ip, ip_plus, expr, expr_plus, digest, intval, compile or plugin
#src_charset one of GBK,BIG5,UNICODE,UTF8
#dst_charset combined by GBK,BIG5,UNICODE,UTF8,seperate with '/'
#do_merege [yes/no]
#cross cache [number]
#For ip/intval/digest/compile/group table.
#id name type
#
#For plugin table. The first column's id is 1. 0 as not speicified.
#id name type column_define
#
#For virtual Table
#id name type real_table_name
#
#For expr/expr_plus Table
#id name type src_charset dst_charset do_merge cross_cache
0 COMPILE compile escape --
1 GROUP2COMPILE group2compile --
2 GROUP2GROUP group2group --
3 HTTP_URL expr UTF8 GBK/BIG5/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 128
3 HTTP_HOST expr UTF8 GBK/BIG5/UNICODE/UTF8/url_encode_gb2312/url_encode_utf8 yes 128
4 KEYWORDS_TABLE expr UTF8 GBK/BIG5/UNICODE/UTF8/unicode_ascii_esc/unicode_ascii_aligned/unicode_ncr_dec/unicode_ncr_hex/windows-1251 yes 0
5 IP_CONFIG ip --
6 CONTENT_SIZE intval --
7 QD_ENTRY_INFO plugin 4 --
8 FILE_DIGEST digest --
9 HTTP_SIGNATURE expr_plus GBK GBK yes 0
10 SIM_URL similar --
11 IMAGE_FP expr UTF8 UTF8 yes 128
12 TEST_EFFECTIVE_RANGE_TABLE plugin {"valid":4,"tag":5} --
13 TEST_FOREIGN_KEY plugin {"valid":4,"foreign":[6,8],"tag":3} --
14 COMPILE_ALIAS compile escape --
15 TEST_PLUGIN_EXDATA_TABLE plugin {"key":2,"valid":4,"tag":5,"estimate_size":1024} --
16 IR_INTERCEPT_IP plugin {"valid":14,"tag":18}
17 APP_PAYLOAD expr_plus UTF8 UTF8 yes 0
18 TROJAN_PAYLOAD expr UTF8 UTF8 yes 0
19 MAIL_ADDR expr UTF8 UTF8 yes 0
20 IP_PLUS_CONFIG ip_plus --
21 HTTP_RESPONSE_KEYWORDS virtual KEYWORDS_TABLE --
22 HTTP_REQUEST_HEADER virtual HTTP_SIGNATURE --
23 HTTP_RESPONSE_HEADER virtual HTTP_SIGNATURE --
24 VIRTUAL_IP_PLUS_TABLE virtual IP_PLUS_CONFIG --
24 VIRTUAL_IP_PLUS_SOURCE virtual IP_PLUS_CONFIG --
24 VIRTUAL_IP_PLUS_DESTINATION virtual IP_PLUS_CONFIG --
25 COMPOSITION_IP_SOURCE virtual IP_PLUS_CONFIG --
26 COMPOSITION_IP_DESTINATION virtual IP_PLUS_CONFIG --
27 COMPOSITION_IP_SESSION virtual IP_PLUS_CONFIG --
28 COMPOSITION_IP composition {"source":"COMPOSITION_IP_SOURCE","destination":"COMPOSITION_IP_DESTINATION","session":"COMPOSITION_IP_SESSION"}
29 TEST_IP_PLUGIN_WITH_EXDATA ip_plugin {"row_id":1,"ip_type":2,"start_ip":3,"end_ip":4,"valid":6} --
30 AS_NUMBER expr UTF8 UTF8 yes 0
31 SOURCE_IP_ASN virtual AS_NUMBER --
32 DESTINATION_IP_ASN virtual AS_NUMBER --
33 GeoLocation expr UTF8 UTF8 yes 0
34 SOURCE_IP_GEO virtual GeoLocation --
35 INTERGER_PLUS intval_plus --
36 TEST_FQDN_PLUGIN_WITH_EXDATA fqdn_plugin {"row_id":1,"is_suffix_match":2,"fqdn":3,"valid":5} --
37 VIRTUAL_SSL_SNI virtual ["KEYWORDS_TABLE","INTERGER_PLUS"] --
38 APP_ID intval --
39 EMPTY_KEYWORD expr UTF8 UTF8 yes 0
40 EMPTY_INTERGER intval UTF8 UTF8 yes 0
10 EMPTY_SIMILAR similar --
41 TEST_BOOL_PLUGIN_WITH_EXDATA bool_plugin {"row_id":1,"bool_expr":2,"valid":4} --
42 FLAG_CONFIG flag --
|
