1 @tcp.analysis.flags@tcp.analysis.flags@[65535,0,19789][0,0,0]
2 @ARP@arp@[55011,59486,65534][0,0,0]
3 @ICMP@icmp@[31062,31186,65534][0,0,0]
4 @SMB@smb || nbss || nbns || nbipx || ipxsap || netbios@[65534,64008,39339][0,0,0]
5 @HTTP@http || tcp.port == 80@[26820,65534,22193][0,0,0]
6 @IPX@ipx || stp@[65534,58325,58808][0,0,0]
7 @Routing@hsrp || eigrp || cdp || vrrp || gvrp || igmp || ismp@[65534,62325,54808][0,0,0]
8 @DCERPC@dcerpc@[51199,38706,65533][0,0,0]
9 @TCP syn/fin@tcp.flags.syn == 1 || tcp.flags.fin == 1 || tcp.flags.reset == 1@[39040,49264,65534][0,0,0]
10 @TCP@tcp@[59345,58980,65534][0,0,0]
11 @TCP@udp@[28834,57427,65533][0,0,0]