D:"Match Case"=00000001
Z:"Keyword List V2"=00000033
 "(?:Stub\-Routing|Process\-tag|Dual\-active|\(R\)|inactive\-\if\-config|snmp\-i
pv6\-dhcp\-relay|dot1q\-tunnel|route-tag|fddi\-default|H/W|hsrp\-Vl\d{1,4}\-\d{1
,4}|B,T|B,R|notify|A\.B\.C\.D|forwarding\-table|repair\-paths|forwarding\-adjace
ncy)",00ffffff,00000001
 "(?:passive\-interface)",00ffffff,00000001
 "((\d{1,5}:){2}[0-9A-F]{1,8}(\.[0-9A-F]{1,8}){3}|(::FFFF)?::?(?:(?:25[0-5]|2[0-
4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[
0-9]))",00ffff00,00000001
 "\[\d{1,10}:\d{1,10}\](?:(?:[0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}|(?=(?:[0-9A-F
a-f]{0,4}:){0,7}[0-9A-Fa-f]{0,4}(?![:.\w]))(([0-9A-Fa-f]{1,4}:){1,7}|:)((:[0-9A-
Fa-f]{1,4}){1,7}|:)|(?:[0-9A-Fa-f]{1,4}:){7}:|:(:[0-9A-Fa-f]{1,4}){7})(?![:.\w])
",00ffff00,00000001
 "\[\d{1,3}(\.\d{1,3}){3}:\d{1,10}\](?:(?:[0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}|
(?=(?:[0-9A-Fa-f]{0,4}:){0,7}[0-9A-Fa-f]{0,4}(?![:.\w]))(([0-9A-Fa-f]{1,4}:){1,7
}|:)((:[0-9A-Fa-f]{1,4}){1,7}|:)|(?:[0-9A-Fa-f]{1,4}:){7}:|:(:[0-9A-Fa-f]{1,4}){
7})(?![:.\w])",00ffff00,00000001
 "(\d{1,10}:){2}(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-
5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])",00ffff00,00000001
 "(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]
|1[0-9][0-9]|[1-9]?[0-9]):\d{1,10}:(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[
0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])",00ffff00,00000001
 "(?:(?:[0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4}|(?=(?:[0-9A-Fa-f]{0,4}:){0,7}[0-9A
-Fa-f]{0,4}(?![:.\w]))(([0-9A-Fa-f]{1,4}:){1,7}|:)((:[0-9A-Fa-f]{1,4}){1,7}|:)|(
?:[0-9A-Fa-f]{1,4}:){7}:|:(:[0-9A-Fa-f]{1,4}){7})(?![:.\w])",00ffff00,00000001
 "((\w{2}:){5}\w{2}|(\w{4}\.){2}\w{4}|SEP\w{12}|AP(\w{4}\.){2}\w{4}|(2[0-3]|[01]
[0-9])(:([0-5]?[0-9])){2,3}\.\d{3}|(2[0-3]|[01][0-9])(:([0-5]?[0-9])){1,2}|\dy\d
{1,2}w|\d{1,3}w\dd|\d{1,4}d\d{2}h|year(s)?|week(s)?|day(s)?|hour(s)?|minutes)",0
0b3b3b3,00000001
 "((RT:)?\d{1,10}:\d{2,10}|(RT:)?\d{1,10}:[1-9])",00ff8000,00000001
 "(RT:)?(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4
][0-9]|1[0-9][0-9]|[1-9]?[0-9]):\d{2,5}|(RT:)?(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0
-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]):[1-9])",00
ff8000,00000001
 "(?:(?:25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\.){3}(?:25[0-5]|2[0-4][0-9]
|1[0-9][0-9]|[1-9]?[0-9])",00ffff00,00000001
 "((Hundred|TwentyFive)GigE\d{1,3}(/\d{1,3})*(\.\d{1,10})*|((Forty|Ten)*Gigabit|
Fast)*Ethernet\d{1,3}(/\d{1,3})*(\.\d{1,10})*|(Internal\-(Control|Data)|Manageme
nt|Serial|Twe|Eth|Hu|Tw|Fo|Te|Gi|Fa|Et|Se)\d{1,3}(/\d{1,3})*(\.\d{1,10})*)",00ff
cc66,00000001
 "(Virtual\-(Template|Access)|(P|p)ort-channel|Multilink|Loopback|Tunnel|Dialer|
Vlan|mgmt|Null|NVI|BVI|Po|Mu|Lo|Tu|Di|Vl)\d{1,4}",00ffcc66,00000001
 "(?:((E|e)rr(ors|or)?)|reset|act/unsup|dhcp|DHCP|mismatch|drop(s|ped|ping)?|run
ts|CRC|collision(s)?|LRN|learning|listening|LIS|unsynchronized|(R|r)eason|SYN(SE
NT|RCVD))",0000ffff,00000001
 "(?:Peer\(STP\)|Shr|pvst|ieee|mstp|Bound\(PVST\)|INIT|TFTP|Mbgp|LAPB|l2ckt\(\d{
1,10}\)|DCE|DTE|passive|\[ANY\]|RIB\-failure|discriminator|Standby|disable(d)?|u
nnumbered)",0000ffff,00000001
 "(?:aggregate(d|\/\w*)|atomic\-aggregate|\[V\]|ATTEMPT|INIT|2WAY|EXCHANGE|LOADI
NG|\(global\)|(T|t)ag|key-chain|backup\/repair|repair|v2\/D|v2\/SD|(W|w)arning)"
,0000ffff,00000001
 "(?:Condition\-map|Advertise\-map|no\-advertise|no\-export|local\-AS|internet|r
eached\(\d*\)|n-802.1q|monitoring|inactive|config(.*)?\)|notconnec(t)?|notificat
ions)",0000ffff,00000001
 "(?:(D|d)own|DOWN|(F|f)ail(ed|ure)?|not(.*)?|bad|never|BLK|fddi|n\-isl|isl|bloc
king|\(tdp\)|tdp|TDP|(I|i)nvalid|err\-disable(d)?|unusable|a\-half|half|a\-10|\(
SD\)|\(D\))",001a1aff,00000001
 "(?:denied|DENIED|deny|infinity|inaccessible|\*ROOT_Inc|BKN\*|\*LOOP_Inc|wrong|
K[2456]=1|cannot|MM_NO_STATE|MM_KEY_EXCH|UP\-NO\-IKE|Idle|ERROR:)",001a1aff,0000
0001
 "(?:rstp|best|CIST|QM_IDLE|(IP|L|CDP)CP\+|CHAP\+|PAP\+|(IP|L|CDP)CP\[Open\]|our
_master|UP\-ACTIVE|permit|(G|g)ood|(O|o)k|uptime|0x2102|0x102|Established|ESTAB|
enable(d)?|READY|AUTHORIZED|SUCCESS(FUL)?|CONNECT(ION|ED)?)",0000ff00,00000001
 "(?:\*\>|FWD|(R|r)oot|802\.1q|dot1q|connected|LocalT|yes|\(SU\)|\(RU\)|\(bndl\)
|\(P\)|forwarding|synchronized|(A|a)ctive|ACTIVE|rapid\-pvst|(U|u)p|UP|FULL|.*\.
(?:bin|img|pkg|packages\.conf|vm)|.*\-mz\..*)",0000ff00,00000001
 "(Cost:pre\-bestpath|0x880\d):\d{1,10}:\d{1,10}",00b3b3b3,00000001
 "(bgp|BGP|B|IGP|incomplete|\d{2,7}\/nolabel\(\w*\)|RR\-client|Originato|cluster
\-id|Cluster\-id|Cluster|Route\-Reflector)",00ff8000,00000001
 "%BGP\-\d\-\w*",00ff8000,00000001
 "%BGP_SESSION\-\d\-\w*",00ff8000,00000001
 "(OSPF_VL\d{1,2}|OSPF_SL\d{1,2}|VL\d{1,2}|SL\d{1,2}|Type\-\d|ospf|OSPF|O|IA|E[1
2]|N[12]|P2P|P2MP|BDR|DR|ABR|ASBR|LOOP)",000080ff,00000001
 "(DROTHER|POINT_TO_POINT|POINT_TO_MULTIPOINT|BROADCAST|NON_BROADCAST|LOOPBACK|S
HAM_LINK|3101|1587|transit|Transit|nssa|NSSA|stub|Stub|Superbackbone)",000080ff,
00000001
 "(OSPFv3_VL\d{1,2}|OSPFv3\-\d{1,5}\-IPv6|ospfv3|OSPFv3|OI|OE[12]|ON[12]|V6\-Bit
|E\-Bit|R\-bit|DC\-Bit|opaque|DROTH)",000080ff,00000001
 "(%OSPF\-\d\-\w*|%OSPFV3\-\d\-\w*|%ROUTING\-OSPF\-\d\-\w*|%ROUTING\-OSPFv3_RIB\
-\d\-\w*)",000080ff,00000001
 "(DT[12]|T2|NHRP|H|p|EXp|IX|D/ur|(multi\-)?GRE/IP(v6)?|%DOMAIN\-\d\-\w*)",00ff0
0ff,00000001
 "(EIGRP\-(IPv|SFv)(4|6)|eigrp\-\w*|eigrp|((IP|IPv6)\-)?EIGRP|EX|D|K[13]=1|K[245
6]=0|(I|i)nternal|(E|e)xternal|VR\(\w*\)|VR\(#AUTOCFG#\)|AS\(\d{1,5}\)|Passive)"
,0033cc99,00000001
 "(%DUAL\-\d\-\w*|%ROUTING\-\EIGRP\-\d\-\w*)",0033cc99,00000001
 "(rip|RIP|R)",001a1aff,00000001
 "(PIM\/IPv4|RP\:|v2\/S|BSR)",00ff6666,00000001
 "(%PIM\-\d\-\w*|%MSDP\-\d\-\w*|%IGMP\-\d\-\w*|%ROUTING\-IPV4_IGMP\-\d\-\w*|%ROU
TING\-\MSDP\-\d\-\w*)",00ff6666,00000001
 "(^[A-Za-z0-9\-\(\)_/:]+\(|^[A-Za-z0-9\-\(\)_/:]+#)",0000ff00,00000001
 "\[\d{1,3}/\d{1,12}\]",0000ffff,00000001
 "\(\d{1,12}/\d{1,12}\)",0000ffff,00000001
 "%\w*\-[012]\-\w*",001a1aff,00000001
 "(\(ldp\)|ldp|imp\-null|Pop|Label|Stack|%LDP\-\d\-\w*|%LSD\-\d\-\w*|%ROUTING\-L
DP\-\d\-\w*|%ROUTING\-\MPLS_TE\-\d\-\w*)",00ff66cc,00000001
 "%IPV6_ND\-\d\-\w*",00ffff00,00000001
 "(%AUTHMGR\-\d\-SUCCESS|%DOT1X\-\d\-SUCCESS|%MAB\-\d\-SUCCESS)",0000ff00,000000
01
 "(%AUTHMGR\-\d\-SECURITY_VIOLATION|%AUTHMGR\-\d\-FAIL|%DOT1X\-\d\-FAIL|%MAB\-\d
\-FAIL|%CRYPTO\-\d\-RECVD_PKT_NOT_IPSEC)",001a1aff,00000001
 "(%CDP\-\d\-\w*|%DHCP\-\d\-\w*|%SPANTREE\-\d\-\w*|%TDP\-\d\-\w*|%SW_DAI\-\d\-\w
*|%SW_VLAN\-\d\-\w*)",0000ffff,00000001
 "(%PM\-d\-\w*|%STORM_CONTROL\-\d-\w*|%PV\-\d\-\w*|%SPANTREE_FAST\-\d\-\w*|%TRAC
K\-\d\-\w*|%REDUNDANCY\-\d\-\w*)",0000ffff,00000001
 "(%TRACKING\-\d\-\w*|%FR_EEK\-\d\-\w*|%HSRP\-\d\-\w*|%SNAT\-\d\-\w*|%SEC\-\d\-\
w*|%IPRT\-\d\-\w*|%HA_CONFIG_SYNC\-\d\-\w*)",0000ffff,00000001
 "(%SYS\-\d\-\w*|%PARSER\-\d\-cfglog\w*|%ENVMON\-\d\-\w*|%EC\-\d\-\w*|%GLDP\-\d\
-\w*|%PLATFORM_PM\-\d\-\w*)",0000ffff,00000001
 "(%CRYPTO\-\d\-\w*|%NHRP\-\d\-\w*|%SNMP\-\d\-\w*|%CP\-\d\-\w*|%HA_EM\-\d\-\w*|%
TCP\-\d\-\w*|%STACKMGR\-\d\-\w*)",0000ffff,00000001
 "(%IP\-\d\-\w*|%ADJ\-\d\-\w*|%IKEV2\-\d\-\w*|%DHCP_SNOOPING\-\d\-\w*|%SEC_LOGIN
\-\d\-\w*|%ILPOWER\-\d\-\w*)",0000ffff,00000001
 "%\w*\-\d\-\w*",00ff66ff,00000001