| Critical | GTP-in-GTP |
| GTP-U tunnel alert limit |
| High | GTPv1 message failed stateful inspection |
| Abnormal GTPv1-C message with missing mandatory
IE |
| Abnormal GTPv1-C message with invalid IE |
| Abnormal GTPv1-C message with invalid header |
| Abnormal GTPv1-C message with out of order
IE |
| Abnormal GTPv1-C message with unsupported message
type |
| Other abnormal GTPv1-C message |
| GTPv2 message failed stateful inspection |
| Abnormal GTPv2-C message with invalid header |
| Abnormal GTPv2-C message with missing mandatory
IE |
| Abnormal GTPv2-C message with invalid IE |
| Abnormal GTPv2-C message with out of order
IE |
| Abnormal GTPv2-C message with unsupported message
type |
| Other abnormal GTPv2-C message |
| Abnormal GTP-U message with missing mandatory
IE |
| Abnormal GTP-U message with invalid IE |
| Abnormal GTP-U message with invalid header |
| Abnormal GTP-U message with out of order IE |
| Abnormal GTP-U message with unsupported message
type |
| Other abnormal GTP-U message |
| GTP-U tunnel block limit |
| End user IP address spoofing |
| Low | GTP message matched by IMSI-Prefix filter |
| GTP message matched by RAT filter |
| GTP message matched by APN filter |
| Informational | GTPv1-C tunnel management message |
| GTPv1-C path management message |
| GTPv1-C other message |
| GTPv2-C tunnel management message |
| GTPv2-C path management message |
| GTPv2-C other message |
| GTP-U tunnel management message |
| GTP-U path management message |
| GTP-U G-PDU message |
| GTP session start |
| GTP session end |