Cisco Cisco Firepower Management Center 4000
32-69
FireSIGHT System User Guide
Chapter 32 Understanding and Writing Intrusion Rules
Understanding Keywords and Arguments in Rules
116
N/A
N/A
complete_request_msg
117
N/A
N/A
guti
118
N/A
N/A
f_container
119
N/A
N/A
f_cause
120
N/A
N/A
plmn_id
121
N/A
N/A
target_id
123
N/A
N/A
packet_flow_id
124
N/A
N/A
rab_contex
125
N/A
N/A
src_rnc_pdcp
126
N/A
N/A
udp_src_port
127
charge_id
charge_id
apn_restriction
128
end_user_address
end_user_address
selection_mode
129
mm_context
mm_context
src_id
130
pdp_context
pdp_context
N/A
131
apn
apn
change_report_action
132
protocol_config
protocol_config
fq_csid
133
gsn
gsn
channel
134
msisdn
msisdn
emlpp_pri
135
N/A
qos
node_type
136
N/A
authentication_qu
fqdn
137
N/A
tft
ti
138
N/A
target_id
mbms_session_duration
139
N/A
utran_trans
mbms_service_area
140
N/A
rab_setup
mbms_session_id
141
N/A
ext_header
mbms_flow_id
142
N/A
trigger_id
mbms_ip_multicast
143
N/A
omc_id
mbms_distribution_ack
144
N/A
ran_trans
rfsp_index
145
N/A
pdp_context_pri
uci
146
N/A
addi_rab_setup
csg_info
147
N/A
sgsn_number
csg_id
148
N/A
common_flag
cmi
149
N/A
apn_restriction
service_indicator
150
N/A
radio_priority_lcs
detach_type
151
N/A
rat_type
ldn
152
N/A
user_loc_info
node_feature
Table 32-41
GTP Information Elements (continued)
Value
Version 0
Version 1
Version 2