CREATE TABLE sensor (
    id serial primary key,
    name character varying
);

CREATE TABLE alarm (
    id serial primary key,
    network_time timestamp with time zone,
    notice_type character varying,
    notice_action character varying,
    message text,
    src_addr character varying,
    src_port character varying,
    dst_addr character varying,
    dst_port character varying,
    tag character varying,
    method character varying,
    url text,
    num integer,
    sensor_id integer references sensor(id) references sensor(id),
    file character varying,
    sub character varying
);

CREATE TABLE conn (
    id serial primary key,
    start_time timestamp with time zone,
    duration decimal default null,
    orig_h character varying,
    resp_h character varying,
    service character varying,
    orig_p character varying,
    resp_p character varying,
    proto character varying,
    orig_s bigint default null,
    resp_s bigint default null,
    state character varying,
    direction character varying,
    tag character varying,
    sensor_id integer references sensor(id)
);

CREATE TABLE ftp (
    id serial primary key,
    start_time timestamp with time zone,
    session_num character varying,
    message text,
    sensor_id integer references sensor(id)
);

CREATE TABLE http (
    id serial primary key,
    network_time timestamp with time zone,
    http_tag character varying,
    message text,
    sensor_id integer references sensor(id)
);

CREATE TABLE irc (
    id serial primary key,
    network_time timestamp with time zone,
    irc_tag_no character varying,
    message text,
    sensor_id integer references sensor(id)
);

CREATE TABLE irc_bot (
    id serial primary key,
    network_time timestamp with time zone,
    src_addr character varying,
    src_port character varying,
    dst_addr character varying,
    dst_port character varying,
    irc_tag_no character varying,
    conn_tag_no character varying,
    sensor_id integer references sensor(id),
    msg character varying
);

CREATE TABLE irc_detailed (
    id serial primary key,
    network_time timestamp with time zone,
    src_addr character varying,
    dst_addr character varying,
    irc_message text,
    sensor_id integer references sensor(id),
    direction "char",
    src_port character varying,
    dst_port character varying
);

CREATE TABLE notice (
    id serial primary key,
    network_time timestamp with time zone,
    notice_type character varying,
    notice_action character varying,
    message text,
    src_addr character varying,
    src_port character varying,
    dst_addr character varying,
    dst_port character varying,
    tag character varying,
    method character varying,
    url text,
    num character varying,
    sensor_id integer references sensor(id),
    file character varying,
    sub character varying
);

CREATE TABLE signature (
    id serial primary key,
    network_time timestamp with time zone,
    signature_note character varying,
    src_addr character varying,
    src_port character varying,
    dst_addr character varying,
    dst_port character varying,
    sigid character varying,
    event_msg character varying,
    sub_msg character varying,
    sig_count integer default null,
    host_count integer default null,
    sensor_id integer references sensor(id)
);

CREATE TABLE smtp (
    id serial primary key,
    network_time timestamp with time zone,
    session_num character varying,
    message text,
    sensor_id integer references sensor(id)
);

CREATE TABLE ssh (
    id serial primary key,
    addr character varying,
    "type" character varying,
    version character varying,
    sensor_id integer references sensor(id)
);

CREATE TABLE weird (
    id serial primary key,
    network_time timestamp with time zone,
    src_addr character varying,
    src_port character varying,
    dst_addr character varying,
    dst_port character varying,
    msg text,
    sensor_id integer references sensor(id)
);