WFilter NGF的数据库结构

1 网页浏览websurflog

create table IF NOT EXISTS websurflog
(
ip              varchar(50),
group1		varchar(200),
acct		varchar(200),
mac		varchar(20),
happentime      varchar(20),
host            varchar(200),
url             varchar(512),
webtitle        varchar(512),
tls		char(1),
useragent	varchar(512),
remark		varchar(100),
targetip	varchar(50)
)

2 网页粘贴webpostlog

create table IF NOT EXISTS webpostlog
(
ip              varchar(50),
group1		varchar(200),
acct		varchar(200),
mac		varchar(20),
happentime      varchar(20),
host            varchar(200),
webtitle        varchar(512),
postsize        varchar(20),
posturl         varchar(512),
fileid          varchar(50),
refer		varchar(512),
useragent	varchar(512),
tls		char(1),
remark		varchar(100),
targetip	varchar(50)
)

3 邮件收发maillog

create table IF NOT EXISTS maillog
(
ip              varchar(50),
group1		varchar(200),
acct		varchar(200),
mac		varchar(20),
happentime      varchar(20),
direction       char(1) NOT NULL,
fromid          varchar(100),
toid            varchar(500),
subject         varchar(500),
messageid       varchar(200),
fileid          varchar(50),
proto		varchar(20),
remark		varchar(100),
targetip	varchar(50)
)

4 ipmac历史ipmaclog

create table IF NOT EXISTS ipmaclog
(
ip              varchar(50),
group1		varchar(200),
acct		varchar(200),
mac		varchar(20),
happentime      varchar(20),
hostname	varchar(50)
)

5 文件传输ftplog

create table IF NOT EXISTS ftplog
(
ip              varchar(50),
group1		varchar(200),
acct		varchar(200),
mac		varchar(20),
happentime      varchar(20),
direction       char(1) NOT NULL,
type		varchar(10) NOT NULL,
target		varchar(200),
filesize	varchar(20),
refer		varchar(512),
filename	varchar(512),
title		varchar(512),
useragent	varchar(512),
fileid		varchar(50),
remark		varchar(100),
targetip	varchar(50)
)

6 ftp/telnet历史sessionslog

create table IF NOT EXISTS sessionslog
(
ip              varchar(50),
group1		varchar(200),
acct		varchar(200),
mac		varchar(20),
happentime      varchar(20),
direction       char(1) NOT NULL,
proto		varchar(20),
target		varchar(200),
cmd		varchar(512),
remark		varchar(100)
)