# DO NOT EDIT THIS FILE! It was created by Ethereal @HSRP state [email protected] != 8 && hsrp.state != 16@[0,0,0][65535,63222,0] @SpanningTree Topology [email protected] == 0x80@[0,0,0][65535,63222,0] @ospf state [email protected] != 1@[0,0,0][65535,63222,0] @TCP [email protected]@[37008,0,0][65535,65535,65535] @Low [email protected] < 5@[37008,0,0][65535,65535,65535] @Bad IP [email protected]_bad@[37008,0,0][65535,65535,65535] @Bad UDP [email protected]_bad@[37008,0,0][65535,65535,65535] @Bad TCP [email protected]_bad@[37008,0,0][65535,65535,65535] @TCP Seg [email protected]@[37008,0,0][65535,65535,65535] @TCP Long Frag [email protected]@[37008,0,0][65535,65535,65535] @TCP Seg [email protected]@[37008,0,0][65535,65535,65535] @TCP Seg [email protected]@[37008,0,0][65535,65535,65535] @ICMP Destination [email protected] == 3@[65535,26214,26214][65535,65535,65535] @ICMP Source [email protected] == 4@[65535,26214,26214][65535,65535,65535] @ICMP Time [email protected] == 11@[65535,26214,26214][65535,65535,65535] @ICMP Parameter [email protected] == 12@[65535,26214,26214][65535,65535,65535] @HTTP Server [email protected] >= 500 and http.response.code < 600@[65535,43690,43690][514,0,27756] @HTTP Client [email protected] >= 400 and http.response.code < 500@[65535,65535,43690][514,0,27756] @FTP [email protected] >= 500 and ftp.response.code < 600@[65535,43690,43690][514,0,27756] @FTP [email protected] >= 400 and ftp.response.code < 500@[65535,65535,43690][514,0,27756] @SMTP [email protected] >= 500 and smtp.response.code < 600@[65535,43690,43690][514,0,27756] @SMTP [email protected] >= 400 and smtp.response.code < 500@[65535,65535,43690][514,0,27756] @DNS [email protected] > 0@[64250,43690,43690][514,0,27756] @LDAP [email protected] > 0x0@[64250,43690,43690][514,0,27756] @SSL [email protected]_error_code@[64250,43690,43690][0,0,0] @[email protected]==1@[65021,56797,56797][0,0,0] @Unwanted Protocols@spx || ipx || aarp || aim@[65535,65535,65535][65535,0,0] @from my [email protected] == Yo:ur:MA:C_:ad:dr@[62194,65535,65535][36739,2963,0] @to my [email protected] == Yo:ur:MA:C_:ad:dr@[62194,65535,65535][457,0,27802] @http [email protected]@[65535,65535,65535][36751,3084,0] @http [email protected]@[65535,65535,65535][514,0,27756] @TCP General [email protected] >= 1024 && tcp.dstport <= 1024@[65535,65535,65535][36751,3084,0] @TCP General [email protected] <= 1024 && tcp.dstport >=1024@[65535,65535,65535][514,0,27756] @ICMP request@icmp && icmp.type == 8 || icmp.type == 13 || icmp.type == 15 || icmp.type == 17 || icmp.type == 35 || icmp.type == 37@[65535,65535,65535][36751,3084,0] @ICMP response@icmp && icmp.type == 0 || icmp.type == 14 || icmp.type == 16 || icmp.type == 18 || icmp.type == 36 || icmp.type == 38@[65535,65535,65535][514,0,27756] @DNS [email protected] == 0@[65535,65535,65535][36751,3084,0] @DNS [email protected] == 1@[65535,65535,65535][514,0,27756] @BOOTP/DHCP [email protected] == 1@[65535,65535,65535][36751,3084,0] @BOOTP/DHCP [email protected] == 2@[65535,65535,65535][514,0,27756] @NW [email protected] || cdp || hsrp || vrrp || ospf || bgp || eigrp || rip || rtmp || eth.addr == 01:00:0c:cc:cc:cc@[65535,65535,65535][21845,21845,21845]
