Cisco Cisco Firepower Management Center 4000
32-68
FireSIGHT System User Guide
Chapter 32 Understanding and Writing Intrusion Rules
Understanding Keywords and Arguments in Rules
78
N/A
N/A
pco
79
N/A
N/A
paa
80
N/A
N/A
bearer_qos
80
N/A
N/A
flow_qos
82
N/A
N/A
rat_type
83
N/A
N/A
serving_network
84
N/A
N/A
bearer_tft
85
N/A
N/A
tad
86
N/A
N/A
uli
87
N/A
N/A
f_teid
88
N/A
N/A
tmsi
89
N/A
N/A
cn_id
90
N/A
N/A
s103pdf
91
N/A
N/A
s1udf
92
N/A
N/A
delay_value
93
N/A
N/A
bearer_context
94
N/A
N/A
charging_id
95
N/A
N/A
charging_char
96
N/A
N/A
trace_info
97
N/A
N/A
bearer_flag
99
N/A
N/A
pdn_type
100
N/A
N/A
pti
101
N/A
N/A
drx_parameter
103
N/A
N/A
gsm_key_tri
104
N/A
N/A
umts_key_cipher_quin
105
N/A
N/A
gsm_key_cipher_quin
106
N/A
N/A
umts_key_quin
107
N/A
N/A
eps_quad
108
N/A
N/A
umts_key_quad_quin
109
N/A
N/A
pdn_connection
110
N/A
N/A
pdn_number
111
N/A
N/A
p_tmsi
112
N/A
N/A
p_tmsi_sig
113
N/A
N/A
hop_counter
114
N/A
N/A
ue_time_zone
115
N/A
N/A
trace_ref
Table 32-41
GTP Information Elements (continued)
Value
Version 0
Version 1
Version 2