foobar.pdb

<?xml version='1.0' encoding='UTF-8'?>
<patterndb version='4' pub_date='2013-08-29'>
  <ruleset name='imapd' id='foobar'>
    <patterns>
        <pattern>imapd(@ESTRING:FOOA:)@</pattern>
        <pattern>imapd/@ESTRING:FOOB:/@</pattern>
   </patterns>
    <rules>
      <rule provider="patterndb" id="foobaz" class="system">
        <patterns>
          <pattern>connect from @ESTRING:IPA: @(@ESTRING:IPB:)@</pattern>
        </patterns>
        <examples>
          <example>
            <test_message program="imapd(foo)">connect from 192.168.2.179 (192.168.2.179)</test_message>
            <test_values>
              <test_value name="IPA">192.168.2.179</test_value>
              <test_value name="IPB">192.168.2.179</test_value>
              <test_value name="FOOA">foo</test_value>
              <test_value name="FOOB">foo</test_value>
            </test_values>
          </example>
        </examples>
      </rule>
    </rules>
  </ruleset>
</patterndb>