root mac[a-zA-Z0-9_\.:\-]{0,9} stp[a-zA-Z0-9_\.:\-]{0,9} vlan[a-zA-Z0-9_\.:\-]{0,8} arp[a-zA-Z0-9_\.:\-]{0,9} rarp[a-zA-Z0-9_\.:\-]{0,8} ipv4[a-zA-Z0-9_\.:\-]{0,8} ipv6[a-zA-Z0-9_\.:\-]{0,8} yes no $[a-zA-Z0-9_]+(\[[ ]*[@]?[0-9]+[ ]*\])? ([a-fA-F0-9]{1,2}:){5}[a-fA-F0-9]{1,2} ([0-2]?[0-9]?[0-9]\.){3}[0-2]?[0-9]?[0-9] ([a-fA-F0-9]{0,4}:){2,7}([a-fA-F0-9]*)(([0-2]?[0-9]?[0-9]\.){3}[0-2]?[0-9]?[0-9])? 0 32 ([0-2]?[0-9]?[0-9]\.){3}[0-2]?[0-9]?[0-9] 0 128 ([a-fA-F0-9]{0,4}:){2,7}([a-fA-F0-9]*) 0x([0-3][0-9a-fA-F]|[0-9a-fA-F]) 0 63 0x([6-9a-fA-F][0-9a-fA-F]{2}|[0-9a-fA-F]{4}) 1536 65535 arp rarp ipv4 ipv6 vlan 0x([0-9a-fA-F]{1,3}) 0 4095 0x[0-9a-fA-F]{1,4} 0 65535 0x[0-9a-fA-F]{1,8} yes no true false 1 0 0 65535 ([Rr]eply|[Rr]equest|[Rr]equest_[Rr]everse|[Rr]eply_[Rr]everse|DRARP_[Rr]equest|DRARP_[Rr]eply|DRARP_[Ee]rror|InARP_[Rr]equest|ARP_NAK) 0x[0-9a-fA-F]{1,2} 0 255 tcp udp udplite esp ah icmp igmp sctp icmpv6 [a-zA-Z0-9_]+ [a-zA-Z0-9_\.:]+ drop accept reject continue return in out inout -1000 1000 ([Ff][Aa][Ll][Ss][Ee]|0) ((NEW|ESTABLISHED|RELATED|INVALID)(,(NEW|ESTABLISHED|RELATED|INVALID))*|NONE) ((SYN|ACK|URG|PSH|FIN|RST)(,(SYN|ACK|URG|PSH|FIN|RST))*|ALL|NONE)/((SYN|ACK|URG|PSH|FIN|RST)(,(SYN|ACK|URG|PSH|FIN|RST))*|ALL|NONE) [a-zA-Z0-9_\.:\-\+ ]{1,31} (src|dst)(,(src|dst)){0,5}