{
  "description": "Event contains one or more entries part of the IPv6 link local prefix (RFC 4291)",
  "list": [
    "FE80::/10"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-dst|port",
    "ip-src|port"
  ],
  "name": "List of IPv6 link local blocks",
  "type": "cidr",
  "version": 3
}