|
|
@ -11,7 +11,8 @@ |
|
|
|
-- conntrack |
|
|
|
-- |
|
|
|
CREATE TABLE IF NOT EXISTS ct_logs ( |
|
|
|
ct_id bigint PRIMARY KEY UNIQUE NOT NULL, |
|
|
|
id SERIAL PRIMARY KEY, |
|
|
|
ct_id bigint NOT NULL, |
|
|
|
oob_family smallint default NULL, |
|
|
|
orig_ip_saddr_str inet default NULL, |
|
|
|
orig_ip_daddr_str inet default NULL, |
|
|
@ -70,16 +71,16 @@ CREATE TABLE ulog2_ct_model ( |
|
|
|
-- Additional INDEX |
|
|
|
-- |
|
|
|
|
|
|
|
-- CREATE INDEX ulog2_ct_oob_family ON ulog2_ct(oob_family); |
|
|
|
-- CREATE INDEX ulog2_ct_orig_ip_saddr ON ulog2_ct(orig_ip_saddr_str); |
|
|
|
-- CREATE INDEX ulog2_ct_orig_ip_daddr ON ulog2_ct(orig_ip_daddr_str); |
|
|
|
-- CREATE INDEX ulog2_ct_reply_ip_saddr ON ulog2_ct(reply_ip_saddr_str); |
|
|
|
-- CREATE INDEX ulog2_ct_reply_ip_daddr ON ulog2_ct(reply_ip_daddr_str); |
|
|
|
-- CREATE INDEX ulog2_ct_orig_l4_sport ON ulog2_ct(orig_l4_sport); |
|
|
|
-- CREATE INDEX ulog2_ct_orig_l4_dport ON ulog2_ct(orig_l4_dport); |
|
|
|
-- CREATE INDEX ulog2_ct_reply_l4_sport ON ulog2_ct(reply_l4_sport); |
|
|
|
-- CREATE INDEX ulog2_ct_reply_l4_dport ON ulog2_ct(reply_l4_dport); |
|
|
|
-- CREATE INDEX ulog2_ct_event ON ulog2_ct(ct_event); |
|
|
|
CREATE INDEX ct_logs_ct_id ON ct_logs(ct_id); |
|
|
|
-- CREATE INDEX ct_logs_orig_ip_saddr ON ct_logs(orig_ip_saddr_str); |
|
|
|
-- CREATE INDEX ct_logs_orig_ip_daddr ON ct_logs(orig_ip_daddr_str); |
|
|
|
-- CREATE INDEX ct_logs_reply_ip_saddr ON ct_logs(reply_ip_saddr_str); |
|
|
|
-- CREATE INDEX ct_logs_reply_ip_daddr ON ct_logs(reply_ip_daddr_str); |
|
|
|
-- CREATE INDEX ct_logs_orig_l4_sport ON ct_logs(orig_l4_sport); |
|
|
|
-- CREATE INDEX ct_logs_orig_l4_dport ON ct_logs(orig_l4_dport); |
|
|
|
-- CREATE INDEX ct_logs_reply_l4_sport ON ct_logs(reply_l4_sport); |
|
|
|
-- CREATE INDEX ct_logs_reply_l4_dport ON ct_logs(reply_l4_dport); |
|
|
|
-- CREATE INDEX ct_logs_event ON ct_logs(ct_event); |
|
|
|
|
|
|
|
-- |
|
|
|
-- Helper tables |
|
|
@ -122,6 +123,7 @@ INSERT INTO ct_event (event_id,event_name) VALUES |
|
|
|
|
|
|
|
CREATE OR REPLACE VIEW view_log AS |
|
|
|
SELECT |
|
|
|
id, |
|
|
|
ct_id, |
|
|
|
flow_start, |
|
|
|
flow_end, |
|
|
|