# DO NOT EDIT THIS FILE! It was created by Ethereal
@httptcp@ tcp.srcport == 80 or tcp.dstport == 80@[38385,62683,65534][0,0,0]
@DNS@dns@[19194,65534,32100][0,0,0]
@ARP@arp@[65202,65533,24456][0,0,0]
@icmp@icmp@[65534,8609,6712][0,0,0]
@STP@stp@[65534,65534,65534][8262,42200,9408]
@Netbios@tcp.srcport == 139 or tcp.dstport == 139 or tcp.srcport == 138 or tcp.dstport == 138 or tcp.srcport == 137 or tcp.dstport == 137 or udp.srcport == 139 or udp.dstport == 139 or udp.srcport == 138 or udp.dstport == 138 or udp.srcport == 137 or udp.dstport == 137@[7961,5947,65534][64045,65535,62556]
@smtp@ tcp.srcport == 25 or tcp.dstport == 25@[65534,10208,51170][62059,62059,62059]
@pop@ tcp.srcport == 110 or tcp.dstport == 110@[65534,7268,54440][0,0,0]
@nntp@nntp@[49886,47154,63549][992,992,992]
@snmp@snmp@[62556,52730,2142][7636,32644,64045]
@igmp@igmp@[45944,5999,65534][0,0,0]
@telnet@ tcp.srcport == 23 or tcp.dstport == 23@[9274,47661,3862][0,0,0]
@tftp@tftp@[59220,3637,65534][0,0,0]
@ftp@ftp@[62721,6393,65534][0,13490,65038]
@Q931@q931@[14275,65534,25039][0,0,0]
@rsvp@rsvp@[60324,7655,65534][63348,65535,9481]
@CMIP@ udp.srcport == 164 or udp.dstport == 164@[47957,9122,9122][60977,63600,0]
@tcp@tcp@[40555,49091,65534][0,0,0]
@udp@udp@[39040,49264,65534][64542,64542,64542]

# DO NOT EDIT THIS FILE! It was created by Ethereal
@Linksys Device@eth.addr contains 00:04:5A || eth.addr contains 00:06:25 || eth.addr contains 00:0C:41 || eth.addr contains 00:0F:66@[65535,50372,0][0,0,0]
@d-Link Device@eth.addr contains 00:05:5D || eth.addr contains 00:0D:88 || eth.addr contains 00:0F:3D || eth.addr contains 00:00:50:BA || eth.addr contains 00:80:C8@[65535,50372,0][0,0,0]
@Netgear Device@eth.addr contains 00:09:5B@[65535,50372,0][0,0,0]
@Unwanted Protocals@spx || ipx || aarp || aim@[65535,65535,65535][65535,0,0]
@SpanningTree Topology Change@stp.type == 0×80@[0,0,0][65535,63222,0]
@HSRP state change@ hsrp.state != 8 && hsrp.state != 16@[0,0,0][65535,63222,0]
@ospf state change@ ospf.msg != 1@[0,0,0][65535,63222,0]
@MS Master Browser election@browser.election.desire.master@[62965,63222,42148][65535,0,0]
@NW Traf@stp.protocol || cdp || hsrp || vrrp || ospf || bgp || eigrp || rip || rtmp || eth.addr == 01:00:0c:cc:cc:cc@[43573,39932,39932][0,0,0]
@IP Time-to-Live < 5@ip.ttl < 5@[63736,26728,34952][0,0,0]
@TCP Analysis@tcp.analysis.flags@[63736,26728,34952][0,0,0]
@Bad IP CRC@ip.checksum_bad@[63736,26728,34952][65535,65535,65535]
@Bad UDP CRC@udp.checksum_bad@[63736,26728,34952][65535,65535,65535]
@Bad TCP CRC@tcp.checksum_bad@[63736,26728,34952][65535,65535,65535]
@TCP Seg Overlap@tcp.segment.overlap@[63736,26728,34952][65535,65535,65535]
@TCP Seg Conflict@tcp.segment.overlap.conflict@[63736,26728,34952][65535,65535,65535]
@TCP Long Frag Seg@tcp.segment.toolongfragment@[63736,26728,34952][65535,65535,65535]
@SYN@tcp.flags & 0x02@[36663,59478,37540][607,3474,607]
@RST@tcp.flags & 0x04@[61717,47055,24609][0,0,0]
@FIN@tcp.flags & 0x01@[56433,42925,57086][0,0,0]
@HTTP@http@[30428,62589,62589][0,0,0]
@TCP@tcp@[57455,60592,62451][0,0,0]
@UDP@udp@[52264,63736,63736][0,0,0]
@arp@arp@[65140,65535,49151][0,2987,65535]

选一款喜欢的，然后开始绚色生活吧！
不过要是阿梅能帮忙配配色就更好了，呵呵！（题外）

无觅猜您也喜欢：
终于在forum里面贴起图了	Near Future…	附张魔兽的图图上来-和阿楠练的新号	IIS 5安全清单
无觅