ip and not (
            dst port 53 or 
            tcp dst port 25 or 
            tcp dst port 113 or 
            icmp[0] == 3) and 
(dst relay.nswc.navy.mil or
dst relay2.nswc.navy.mil or 
dst ns1.nswc.navy.mil or 
ns2.nswc.navy.mil)
