# DO NOT EDIT THIS FILE!  It was created by Ethereal
@HSRP state [email protected] != 8 && hsrp.state != [email protected][0,0,0][65535,63222,0]
@SpanningTree Topology  [email protected] == [email protected][0,0,0][65535,63222,0]
@ospf state [email protected] != [email protected][0,0,0][65535,63222,0]
@TCP [email protected]@[37008,0,0][65535,65535,65535]
@Low [email protected] < [email protected][37008,0,0][65535,65535,65535]
@Bad IP [email protected][email protected][37008,0,0][65535,65535,65535]
@Bad UDP [email protected][email protected][37008,0,0][65535,65535,65535]
@Bad TCP [email protected][email protected][37008,0,0][65535,65535,65535]
@TCP Seg [email protected]@[37008,0,0][65535,65535,65535]
@TCP Long Frag [email protected]@[37008,0,0][65535,65535,65535]
@TCP Seg [email protected]@[37008,0,0][65535,65535,65535]
@TCP Seg [email protected]@[37008,0,0][65535,65535,65535]
@ICMP Destination [email protected] == [email protected][65535,26214,26214][65535,65535,65535]
@ICMP Source [email protected] == [email protected][65535,26214,26214][65535,65535,65535]
@ICMP Time [email protected] == [email protected][65535,26214,26214][65535,65535,65535]
@ICMP Parameter [email protected] == [email protected][65535,26214,26214][65535,65535,65535]
@HTTP Server [email protected] >= 500 and http.response.code < [email protected][65535,43690,43690][514,0,27756]
@HTTP Client [email protected] >= 400 and http.response.code < [email protected][65535,65535,43690][514,0,27756]
@FTP [email protected] >= 500 and ftp.response.code < [email protected][65535,43690,43690][514,0,27756]
@FTP [email protected] >= 400 and ftp.response.code < [email protected][65535,65535,43690][514,0,27756]
@SMTP [email protected] >= 500 and smtp.response.code < [email protected][65535,43690,43690][514,0,27756]
@SMTP [email protected] >= 400 and smtp.response.code < [email protected][65535,65535,43690][514,0,27756]
@DNS [email protected] > [email protected][64250,43690,43690][514,0,27756]
@LDAP [email protected] > [email protected][64250,43690,43690][514,0,27756]
@SSL [email protected][email protected][64250,43690,43690][0,0,0]
@[email protected][email protected][65021,56797,56797][0,0,0]
@Unwanted [email protected] || ipx || aarp || [email protected][65535,65535,65535][65535,0,0]
@from my [email protected] == Yo:ur:MA:C_:ad:[email protected][62194,65535,65535][36739,2963,0]
@to my [email protected] == Yo:ur:MA:C_:ad:[email protected][62194,65535,65535][457,0,27802]
@http [email protected]@[65535,65535,65535][36751,3084,0]
@http [email protected]@[65535,65535,65535][514,0,27756]
@TCP General [email protected] >= 1024 && tcp.dstport <= [email protected][65535,65535,65535][36751,3084,0]
@TCP General [email protected] <= 1024 && tcp.dstport >[email protected][65535,65535,65535][514,0,27756]
@ICMP [email protected] && icmp.type == 8 || icmp.type == 13 || icmp.type == 15 || icmp.type == 17 || icmp.type == 35 || icmp.type == [email protected][65535,65535,65535][36751,3084,0]
@ICMP [email protected] && icmp.type == 0 || icmp.type == 14 || icmp.type == 16 || icmp.type == 18 || icmp.type == 36 || icmp.type == [email protected][65535,65535,65535][514,0,27756]
@DNS [email protected] == [email protected][65535,65535,65535][36751,3084,0]
@DNS [email protected] == [email protected][65535,65535,65535][514,0,27756]
@BOOTP/DHCP [email protected] == [email protected][65535,65535,65535][36751,3084,0]
@BOOTP/DHCP [email protected] == [email protected][65535,65535,65535][514,0,27756]
@NW [email protected] || cdp || hsrp || vrrp || ospf || bgp || eigrp || rip || rtmp || eth.addr == 01:00:0c:cc:cc:[email protected][65535,65535,65535][21845,21845,21845]