(
	:anyobj (Any
		:color (Blue)
	)
	:superanyobj (
		: Any
	)
	:netobj (netobj
		:default Any
		:menu_selection (show_netobj)
	)
	:servobj (
		:default Any
		: (FW1
			:type (Tcp)
			:port (256)
			:src_port_from ()
			:src_port_to ()
			:color (FireBrick)
		)
		: (FW1_log
			:type (tcp)
			:port (257)
			:src_port_from ()
			:src_port_to ()
			:color (FireBrick)
		)
		: (FW1_manager
			:type (tcp)
			:port (258)
			:src_port_from ()
			:src_port_to ()
			:color (FireBrick)
		)
		: (FW1_clntauth
			:type (tcp)
			:port (259)
			:src_port_from ()
			:src_port_to ()
			:color (FireBrick)
		)
		: (RDP
			:type (udp)
			:port (259)
			:timeout (0)
			:src_port_from ()
			:src_port_to ()
			:reply (false)
			:color (FireBrick)
		)
		: (FW1_snmp
			:type (udp)
			:port (260)
			:timeout (0)
			:src_port_from ()
			:src_port_to ()
			:reply (false)
			:color (FireBrick)
		)
		: (snmp
			:type (udp)
			:port (161)
			:timeout (0)
			:src_port_from ()
			:src_port_to ()
			:reply (false)
			:color (FireBrick)
		)
		: (snmp-read
			:type (other)
			:exp (snmpv1_ro)
			:inexp ()
			:outexp ()
			:prolog ("<= all@all accept udp, sport=161;")
			:comments ()
			:color (FireBrick)
		)
		: (snmp-trap
			:type (udp)
			:port (162)
			:color (FireBrick)
			:timeout (0)
			:src_port_from ()
			:src_port_to ()
			:reply (false)
		)
		: (X11
			:type (Tcp)
			:port (6000-6099)
			:color (Red)
		)
		: (OpenWindows
			:type (Tcp)
			:port (2000)
			:color (Red)
		)
		: (nfsprog
			:type (Rpc)
			:port (100003)
			:broadcast (false)
			:timeout (0)
			:color (Red)
		)
		: (nfsd
			:type (Udp)
			:port (2049)
			:timeout (0)
			:src_port_from ()
			:src_port_to ()
			:reply (false)
			:color (Red)
		)
		: (mountd
			:type (Rpc)
			:port (100005)
			:broadcast (false)
			:timeout (0)
			:color (Red)
		)
		: (nlockmgr
			:type (Rpc)
			:port (100021)
			:broadcast (false)
			:timeout (0)
			:color (Red)
		)
		: (pcnfsd
			:type (Rpc)
			:port (150001)
			:broadcast (false)
			:timeout (0)
			:color (Red)
		)
		: (tftp
			:type (Udp)
			:port (69)
			:timeout (0)
			:reply (false)
			:color (Red)
		)
		: (login
			:type (Tcp)
			:port (513)
			:color (Red)
		)
		: (exec
			:type (Tcp)
			:port (512)
			:color (Red)
		)
		: (shell
			:type (Tcp)
			:port (514)
			:src_port_from ()
			:src_port_to ()
			:color (Red)
		)
		: (ypserv
			:type (Rpc)
			:port (100004)
			:broadcast (false)
			:timeout (0)
			:color ("Navy Blue")
		)
		: (ypbind
			:type (Rpc)
			:port (100007)
			:broadcast (false)
			:timeout (0)
			:color ("Navy Blue")
		)
		: (yppasswd
			:type (Rpc)
			:port (100009)
			:broadcast (false)
			:timeout (0)
			:color ("Navy Blue")
		)
		: (ypupdated
			:type (Rpc)
			:port (100028)
			:broadcast (false)
			:timeout (0)
			:color ("Navy Blue")
		)
		: (ypxfrd
			:type (Rpc)
			:port (100069)
			:broadcast (false)
			:timeout (0)
			:color ("Navy Blue")
		)
		: (nisplus
			:type (Rpc)
			:port (100300)
			:broadcase (false)
			:timeout (0)
			:color ("Navy Blue")
		)
		: (ospf
			:type (other)
			:exp (_ospf)
			:color ("Medium Slate Blue")
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
		)
		: (ggp
			:type (other)
			:exp (_ggp)
			:color ("Medium Slate Blue")
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
		)
		: (igrp
			:type (Other)
			:exp (_igrp)
			:color ("Medium Slate Blue")
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
		)
		: (egp
			:type (other)
			:exp (_egp)
			:color ("Medium Slate Blue")
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
		)
		: (rip
			:type (Udp)
			:port (520)
			:timeout (0)
			:reply (false)
			:color ("Medium Slate Blue")
			:src_port_from ()
			:src_port_to ()
		)
		: (rip-response
			:type (other)
			:exp ("dport=520,udp,rip_cmd=RIPCMD_RESPONSE")
			:color ("Medium Slate Blue")
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
		)
		: (telnet
			:type (Tcp)
			:port (23)
			:color ("Forest Green")
			:src_port_from ()
			:src_port_to ()
		)
		: (ftp
			:type (Tcp)
			:port (21)
			:color ("Forest Green")
		)
		: (uucp
			:type (Tcp)
			:port (540)
			:src_port_from ()
			:src_port_to ()
			:color ("Forest Green")
		)
		: (http
			:type (Tcp)
			:port (80)
			:src_port_from ()
			:src_port_to ()
			:color ("Forest Green")
		)
		: (gopher
			:type (Tcp)
			:port (70)
			:src_port_from ()
			:src_port_to ()
			:color ("Forest Green")
		)
		: (archie
			:type (Udp)
			:port (1525)
			:src_port_from ()
			:src_port_to ()
			:color ("Forest Green")
		)
		: (wais
			:type (Tcp)
			:port (210)
			:src_port_from ()
			:src_port_to ()
			:color ("Forest Green")
		)
		: (rsh-out-going
			:type (Other)
			:prolog ("rsh_table_store; rsh_table_update; rsh_table_test")
			:exp ("dport=shell, tcp")
			:color ("Forest Green")
		)
		: (X11-verify
			:type (Other)
			:prolog ("x11verify_tab = dynamic expires 120 refresh;")
			:exp ("x11verify_code(x11verify_tab)")
			:color (Red)
			:inexp ()
			:outexp ()
			:comments ()
			:needruleinfo (true)
			:weight (100)
			:show_in_menus (false)
		)
		: (smtp
			:type (Tcp)
			:port (25)
			:src_port_from ()
			:src_port_to ()
			:color (Magenta)
		)
		: (pop-2
			:type (Tcp)
			:port (109)
			:src_port_from ()
			:src_port_to ()
			:color (Magenta)
		)
		: (pop-3
			:type (Tcp)
			:port (110)
			:src_port_from ()
			:src_port_to ()
			:color (Magenta)
		)
		: (nntp
			:type (Tcp)
			:port (119)
			:color (Magenta)
			:src_port_from ()
			:src_port_to ()
		)
		: (tcp-high-ports
			:type (tcp)
			:port (">1023")
			:src_port_from ()
			:src_port_to ()
			:color (Yellow)
		)
		: (udp-high-ports
			:type (udp)
			:port (">1023")
			:src_port_from ()
			:src_port_to ()
			:color (Yellow)
		)
		: (who
			:type (Udp)
			:port (513)
			:timeout (0)
			:reply (false)
			:color (Blue)
		)
		: (syslog
			:type (Udp)
			:port (514)
			:timeout (0)
			:reply (false)
			:color (Blue)
		)
		: (netstat
			:type (Tcp)
			:port (15)
			:color (Blue)
			:src_port_from ()
			:src_port_to ()
		)
		: (finger
			:type (Tcp)
			:port (79)
			:color (Blue)
			:src_port_from ()
			:src_port_to ()
		)
		: (rwall
			:type (Rpc)
			:port (100008)
			:broadcast (false)
			:timeout (0)
			:color (Blue)
		)
		: (rstat
			:type (Rpc)
			:port (100001)
			:broadcast (false)
			:timeout (0)
			:color (Blue)
		)
		: (name
			:type (Udp)
			:port (42)
			:timeout (0)
			:reply (false)
			:color (Black)
		)
		: (biff
			:type (Udp)
			:port (512)
			:timeout (0)
			:reply (false)
			:color (Black)
		)
		: (traceroute
			:type (other)
			:exp ("udp, uh_dport > 33000, ip_ttl < 30")
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
			:color (Black)
		)
		: (ident
			:type (tcp)
			:port (113)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
		)
		: (bootp
			:type (udp)
			:port (67)
			:color (Black)
			:timeout (0)
			:src_port_from ()
			:src_port_to ()
			:reply (false)
		)
		: (securid-udp
			:type (Udp)
			:port (1024)
			:timeout (0)
			:reply (false)
			:color (FireBrick)
			:show_in_menus false
		)
		: (securidprop
			:type (Tcp)
			:port (5510)
			:color (FireBrick)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (echo-tcp
			:type (Tcp)
			:port (7)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (echo-udp
			:type (Udp)
			:port (7)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (domain-tcp
			:type (Tcp)
			:port (53)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (domain-udp
			:type (Udp)
			:port (53)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (kerberos-tcp
			:type (Tcp)
			:port (750)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (kerberos-udp
			:type (Udp)
			:port (750)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (discard-tcp
			:type (Tcp)
			:port (9)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (discard-udp
			:type (Udp)
			:port (9)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (time-tcp
			:type (Tcp)
			:port (37)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (time-udp
			:type (Udp)
			:port (37)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (daytime-tcp
			:type (Tcp)
			:port (13)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (daytime-udp
			:type (Udp)
			:port (13)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (ntp-tcp
			:type (Tcp)
			:port (123)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (ntp-udp
			:type (Udp)
			:port (123)
			:timeout (0)
			:reply (false)
			:color (Black)
			:show_in_menus false
		)
		: (icmp-proto
			:type (icmp)
			:exp (1)
			:inexp ()
			:outexp ()
			:prolog ()
			:comments ()
			:color ("Dark Orchid")
		)
		: (echo-reply
			:type (Icmp)
			:exp ("icmp_type=ICMP_ECHOREPLY")
			:color ("Dark Orchid")
		)
		: (dest-unreach
			:type (Icmp)
			:exp ("icmp_type=ICMP_UNREACH")
			:color ("Dark Orchid")
		)
		: (redirect
			:type (Icmp)
			:exp ("icmp_type=ICMP_REDIRECT")
			:color ("Dark Orchid")
		)
		: (echo-request
			:type (Icmp)
			:exp ("icmp_type=ICMP_ECHO")
			:color ("Dark Orchid")
		)
		: (source-quench
			:type (Icmp)
			:exp ("icmp_type=ICMP_SOURCEQUENCH")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (time-exceeded
			:type (Icmp)
			:exp ("icmp_type=ICMP_TIMXCEED")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (param-prblm
			:type (Icmp)
			:exp ("icmp_type=ICMP_PARAMPROB")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (timestamp
			:type (Icmp)
			:exp ("icmp_type=ICMP_TSTAMP")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (timestamp-reply
			:type (Icmp)
			:exp ("icmp_type=ICMP_TSTAMPREPLY")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (info-req
			:type (Icmp)
			:exp ("icmp_type=ICMP_IREQ")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (info-reply
			:type (Icmp)
			:exp ("icmp_type=ICMP_IREQREPLY")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (mask-request
			:type (Icmp)
			:exp ("icmp_type=ICMP_MASKREQ")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (mask-reply
			:type (Icmp)
			:exp ("icmp_type=ICMP_MASKREPLY")
			:color ("Dark Orchid")
			:show_in_menus (false)
		)
		: (nbname
			:type (Udp)
			:port (137)
			:timeout (0)
			:reply (false)
			:color (Magenta)
		)
		: (nbdatagram
			:type (Udp)
			:port (138)
			:timeout (0)
			:reply (false)
			:color (Magenta)
		)
		: (nbsession
			:type (Tcp)
			:port (139)
			:color (Magenta)
			:src_port_from ()
			:src_port_to ()
		)
		: (irc1
			:type (Tcp)
			:port (6670)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (irc2
			:type (Tcp)
			:port (6680)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
			:show_in_menus (false)
		)
		: (lotus
			:type (Tcp)
			:port (1352)
			:color (Black)
			:src_port_from ()
			:src_port_to ()
		)
		: (interphone
			:type (Udp)
			:port (22555)
			:src_port_from 22555
			:src_port_to 22555
			:color (Blue)
		)
		: (VDO-Live
			:type (Tcp)
			:port (7000)
			:color (Red)
			:src_port_from ()
			:src_port_to ()
		)
		: (Real-Audio
			:type (Tcp)
			:port (7070)
			:color (Red)
			:src_port_from ()
			:src_port_to ()
		)
		: (securid
			:type (group)
			:color (FireBrick)
			: securid-udp
			: securidprop
		)
		: (FireWall1
			:type (group)
			:color (FireBrick)
			: FW1
			: FW1_log
			: FW1_manager
			: FW1_clntauth
			: FW1_snmp
			: RDP
			: snmp
		)
		: (Authenticated
			:type (group)
			:color ("Forest Green")
			: telnet
			: ftp
			: http
		)
		: (mosaic
			:type (group)
			:color ("Forest Green")
			: http
			: gopher
			: ftp
			: archie
		)
		: (echo
			:type (group)
			:color (Black)
			: echo-tcp
			: echo-udp
		)
		: (dns
			:type (group)
			:color (Black)
			: domain-tcp
			: domain-udp
		)
		: (kerberos
			:type (group)
			:color (Black)
			: kerberos-tcp
			: kerberos-udp
		)
		: (discard
			:type (group)
			:color (Black)
			: discard-tcp
			: discard-udp
		)
		: (time
			:type (group)
			:color (Black)
			: time-tcp
			: time-udp
		)
		: (daytime
			:type (group)
			:color (Black)
			: daytime-tcp
			: daytime-udp
		)
		: (ntp
			:type (group)
			:color (Black)
			: ntp-tcp
			: ntp-udp
		)
		: (NetBeui
			:type (Group)
			:color (Magenta)
			: nbname
			: nbdatagram
			: nbsession
		)
		: (NIS
			:type (Group)
			:color ("Navy Blue")
			: ypbind
			: yppasswd
			: ypserv
			: ypupdated
			: ypxfrd
		)
		: (NFS
			:type (Group)
			:color (Red)
			: mountd
			: nfsd
			: nfsprog
			: nlockmgr
			: pcnfsd
		)
		: (irc
			:type (Group)
			:color (Black)
			: irc1
			: irc2
		)
	)
	:translations (translations)
	:tracks (tracks
		: (Short
			:type (log)
			:color (Blue)
			:icon-name (icon-log-short)
			:text-rid (61467)
		)
		: (Long
			:type (log)
			:color ("Navy Blue")
			:icon-name (icon-log-long)
			:text-rid (61466)
		)
		: (Alert
			:type (alert)
			:color (Red)
			:format (long)
			:alert alert
			:icon-name (icon-alert)
			:text-rid (61469)
		)
		: (SnmpTrap
			:type (alert)
			:color ("Medium Slate Blue")
			:format (long)
			:alert (snmptrap)
			:icon-name (icon-snmp-trap)
			:text-rid (61467)
		)
		: (Mail
			:type (alert)
			:color (FireBrick)
			:alert (mail)
			:format (long)
			:icon-name (icon-mail)
			:text-rid (61468)
		)
		: (UserDefined
			:type (alert)
			:color ("Dark Orchid")
			:alert (useralert)
			:icon-name (icon-user)
			:text-rid (61470)
			:format (long)
		)
		: (spoof
			:type (log)
			:icon (log.pr)
			:format (long)
			:color ("Navy Blue")
		)
		: (spoofalert
			:type (alert)
			:icon (alert.pr)
			:color (red)
			:format (long)
			:alert (spoofalert)
		)
		: ("IP Options"
			:type (log)
			:icon (log.pr)
			:color ("Dark Orchid")
			:format (badip_form)
		)
		: ("IP Options Alert"
			:type (alert)
			:icon (alert.pr)
			:color (Red)
			:format (badip_form)
			:alert alert
		)
		: (Auth
			:type (log)
			:color (Blue)
			:icon (log.pr)
		)
		: (AuthAlert
			:icon (alert.pr)
			:type (alert)
			:color (Red)
			:format (auth)
			:alert (userauthalert)
		)
		: (Duplicate
			:type (log)
			:color ("Navy Blue")
			:icon-name (icon-log-long)
			:text-rid (61466)
			:macro (DUP_LOG)
		)
	)
	:layout (
		:basewin (basewin
			:show (true)
			:x (360)
			:y (16)
			:width (776)
			:height (393)
		)
		:serviceswin (serviceswin
			:show (false)
			:x (14)
			:y (480)
			:width (328)
			:height (393)
		)
		:netobjwin (netobjwin
			:show (true)
			:x (14)
			:y (16)
			:width (328)
			:height (413)
		)
		:viewwin (viewwin
			:show (true)
			:x (360)
			:y (480)
			:width (776)
			:height (373)
		)
		:users (users
			:show (true)
			:x (14)
			:y (480)
			:width (328)
			:height (393)
		)
	)
	:props (
		:tcptimeout (3600)
		:fw1enable (true)
		:fw1_enable_p (first)
		:udpreply true
		:udptimeout (40)
		:rip true
		:domain_udp true
		:domain_tcp true
		:loopudp true
		:looptcp true
		:established true
		:outgoing true
		:rpcenable true
		:icmpenable true
		:ftpdata true
		:ftppasv (false)
		:vdolivenable false
		:raudioenable false
		:rshstderr false
		:rip_p first
		:domain_udp_p first
		:domain_tcp_p first
		:loopudp_p first
		:looptcp_p first
		:established_p first
		:outgoing_p (last)
		:rpcenable_p first
		:icmpenable_p ("before last")
		:ftpdata_p first
		:ftppasv_p first
		:vdolivenable_p first
		:raudioenable_p first
		:udpreply_p first
		:rshstderr_p first
		:loggrace (62)
		:mailcmd ("sendmail -s Alert -t mailer root")
		:alertcmd (alert)
		:snmptrapcmd ("snmp_trap localhost")
		:useralertcmd alert
		:spoofalertcmd alert
		:userauthalertcmd alert
		:default_track (AuthAlert
			:icon (alert.pr)
			:type alert
			:color (Red)
			:format (auth)
			:alert (userauthalert)
		)
		:ipoptslog ()
		:maxprocess (256)
		:au_timeout (15)
		:gatewaydir (inbound)
		:resolver_1 ("sys (current system settings)")
		:resolver_2 (none)
		:resolver_3 none
		:resolver_4 none
		:timeout (10)
		:retries (1)
		:pagetimeout (20)
		:established_router true
		:rip_router true
		:domain_udp_router true
		:domain_tcp_router true
		:icmpenable_router true
		:established_router_p first
		:rip_router_p first
		:domain_udp_router_p first
		:domain_tcp_router_p first
		:icmpenable_router_p "before last"
		:log_established_tcp true
		:block_reverse_tcp false
		:block_reverse_udp false
		:block_reverse_tcp_p first
		:block_reverse_udp_p first
		:http_next_proxy_host ()
		:http_next_proxy_port ()
	)
	:superobj (
		: netobj
		: tracks
	)
	:servgen ()
	:log-props ()
	:state-act (
		:comannd_notinst2inst ()
		:command_notinst2dis ()
		:command_ins2notinst (status_alert)
		:command_inst2dis status_alert
		:command_dis2inst ()
		:command_dis2notinst ()
	)
	:convert_to_fws (true)
	:fwrand_seed1 ("15f06906 ff38de5b c1641932")
	:fwrand_seed2 (8b37949290fe2f8aa444f7a8112dc646)
)
