. "The trigger can indicate a rule for identifying traffic of interest, such as a source IP, a destination IP, a source port, a destination port, a network protocol, or other information contained within packet headers." . . . . .