| Option | Description |
| to_client | Trigger on server responses from A to B |
| to_server | Trigger on client requests from A to B |
| from_client | Trigger on client requests from A to B |
| from_server | Trigger on server responses from A to B |
| established | Trigger only on established TCP connections |
| not_established | Trigger only when no TCP connection is established |
| stateless | Trigger regardless of the state of the stream processor (useful for packets that are designed to cause machines to crash) |
| no_stream | Do not trigger on rebuilt stream packets (useful for dsize and stream5) |
| only_stream | Only trigger on rebuilt stream packets |
| no_frag | Do not trigger on rebuilt frag packets |
| only_frag | Only trigger on rebuilt frag packets |