<?xml version="1.0" encoding="UTF-8"?>
<simef:SIMEF-Message version="1.2" xmlns:simef="http://iana.org/simef/">
  <Connect ident="1008380" criticality="normal">
    <Device Deviceid="TTA-FW" model="FW1000">
      <Node>
        <Address category="ipv4-addr">
          <address>1.1.1.1</address>
        </Address>
      </Node>
    </Device>
    <CreateTime ntpstamp="0xaaaaaaaaaaaaaaaaaa">
      2010-08-18T15:41:28+00:00
    </CreateTime>
    <Policy Ruleid="45" action="pass"></Policy>
    <Source>
      <Node>
        <Address category="ipv4-addr">
          <address>2.2.2.2</address>
        </Address>
      </Node>
      <Service duration="9" size="144">
        <port>38168</port>
        <protocol>17</protocol>
      </Service>
    </Source>
    <Target>
      <Node>
        <Address category="ipv4-addr">
          <address>3.3.3.3</address>
        </Address>
      </Node>
      <Service duration="9" size="0">
        <name>dns</name>
        <port>53</port>
        <protocol>17</protocol>
      </Service>
    </Target>
    <Classification origin="vendor-specific">
      <name>45</name>
    </Classification>
  </Connect>
</simef:SIMEF-Message >