[
	{
		"name": "ip",
		"field": {
			"type": "field_type_ip",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "srcip",
		"field": {
			"type": "field_type_ip",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "dstip",
		"field": {
			"type": "field_type_ip",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "port",
		"field": {
			"type": "field_type_netorder_uint",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": ">",
					"description": "greater than"
				},
				{
					"operator": "<=",
					"description": "lower than or equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "dport",
		"field": {
			"type": "field_type_netorder_uint",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": ">",
					"description": "greater than"
				},
				{
					"operator": "<=",
					"description": "lower than or equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "sport",
		"field": {
			"type": "field_type_netorder_uint",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": ">",
					"description": "greater than"
				},
				{
					"operator": "<=",
					"description": "lower than or equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "proto",
		"field": {
			"type": "field_type_netorder_uint",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": ">",
					"description": "greater than"
				},
				{
					"operator": "<=",
					"description": "lower than or equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		},
		"enum_options": [
			"HOPOPT",
			"ICMP",
			"IGMP",
			"GGP",
			"IP_in_IP",
			"ST",
			"TCP",
			"CBT",
			"EGP",
			"IGP",
			"BBN_RCC_MON",
			"NVP_II",
			"PUP",
			"ARGUS",
			"EMCON",
			"XNET",
			"CHAOS",
			"UDP",
			"MUX",
			"DCN_MEAS",
			"HMP",
			"PRM",
			"XNS_IDP",
			"TRUNK_1",
			"TRUNK_2",
			"LEAF_1",
			"LEAF_2",
			"RDP",
			"IRTP",
			"ISO_TP4",
			"NETBLT",
			"MFE_NSP",
			"MERIT_INP",
			"DCCP",
			"THREEPC",
			"IDPR",
			"XTP",
			"DDP",
			"IDPR_CMTP",
			"TPPLUSPLUS",
			"IL",
			"IPv6",
			"SDRP",
			"IPv6_Route",
			"IPv6_Frag",
			"IDRP",
			"RSVP",
			"GRE",
			"MHRP",
			"BNA",
			"ESP",
			"AH",
			"I_NLSP",
			"SWIPE",
			"NARP",
			"MOBILE",
			"TLSP",
			"SKIP",
			"IPv6_ICMP",
			"IPv6_NoNxt",
			"IPv6_Opts",
			"CFTP",
			"SAT_EXPAK",
			"KRYPTOLAN",
			"RVD",
			"IPPC",
			"SAT_MON",
			"VISA",
			"IPCU",
			"CPNX",
			"CPHB",
			"WSN",
			"PVP",
			"BR_SAT_MON",
			"SUN_ND",
			"WB_MON",
			"WB_EXPAK",
			"ISO_IP",
			"VMTP",
			"SECURE_VMTP",
			"VINES",
			"TTP",
			"NSFNET_IGP",
			"DGP",
			"TCF",
			"EIGRP",
			"OSPF",
			"Sprite_RPC",
			"LARP",
			"MTP",
			"AX_TWENTY_FIVE",
			"IPIP",
			"MICP",
			"SCC_SP",
			"ETHERIP",
			"ENCAP",
			"GMTP",
			"IFMP",
			"PNNI",
			"PIM",
			"ARIS",
			"SCPS",
			"QNX",
			"IPComp",
			"SNP",
			"Compaq_Peer",
			"IPX_in_IP",
			"VRRP",
			"PGM",
			"L2TP",
			"DDX",
			"IATP",
			"STP",
			"SRP",
			"UTI",
			"SMP",
			"SM",
			"PTP",
			"IS_IS_over_IPv4",
			"FIRE",
			"CRTP",
			"CRUDP",
			"SSCOPMCE",
			"IPLT",
			"SPS",
			"PIPE",
			"SCTP",
			"FC",
			"RSVP_E2E_IGNORE",
			"Mobility_Header",
			"UDPLite",
			"MPLS_in_IP",
			"manet",
			"HIP",
			"Shim6",
			"WESP",
			"ROHC"
		]
	},
	{
		"name": "l3_proto",
		"field": {
			"type": "field_type_hostorder_uint64",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": ">",
					"description": "greater than"
				},
				{
					"operator": "<=",
					"description": "lower than or equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		},
		"enum_options": [
			"LOOP",
			"PUP_ETH",
			"PUPAT",
			"P_802_3_MIN",
			"IP",
			"X25",
			"ARP",
			"BPQ",
			"IEEEPUP",
			"IEEEPUPAT",
			"ERSPAN2",
			"TSN",
			"BATMAN",
			"DEC",
			"DNA_DL",
			"DNA_RC",
			"DNA_RT",
			"LAT",
			"DIAG",
			"CUST",
			"SCA",
			"EB",
			"RARP",
			"ATALK",
			"AARP",
			"P_8021Q",
			"IPX",
			"IPV6",
			"PAUSE",
			"SLOW",
			"WCCP",
			"MPLS_UC",
			"MPLS_MC",
			"ATMMPOA",
			"PPP_DISC",
			"PPP_SES",
			"LINK_CTL",
			"ATMFATE",
			"PAE",
			"AOE",
			"P_8021AD",
			"P_802_EX1",
			"ERSPAN",
			"PREAUTH",
			"TIPC",
			"LLDP",
			"MRP",
			"MACSEC",
			"P_8021AH",
			"MVRP",
			"P_1588",
			"NCSI",
			"PRP",
			"CFM",
			"FCOE",
			"TDLS",
			"FIP",
			"IBOE",
			"P_80221",
			"HSR",
			"NSH",
			"LOOPBACK",
			"QINQ1",
			"QINQ2",
			"QINQ3",
			"EDSA",
			"DSA_8021Q",
			"IFE",
			"AF_IUCV"
		]
	},
	{
		"name": "server_ip",
		"field": {
			"type": "field_type_ip",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	},
	{
		"name": "client_ip",
		"field": {
			"type": "field_type_ip",
			"possible_operators": [
				{
					"operator": "==",
					"description": "equal"
				},
				{
					"operator": "!=",
					"description": "not equal"
				},
				{
					"operator": "<>",
					"description": "in range"
				},
				{
					"operator": "not_in_range",
					"description": "not in range"
				}
			]
		}
	}
]