Probe TCP NULL q||
match good m|^Asterisk Call Manager/([\d.]+)\r\n| p/a/ v/$1/
match good m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test:::::de/ i/German/
# Other templates are irrelevant.
match good m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test:::::de/ v/1.00/ i/German/
match good m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test:::::de/ i/German; unauthorized/
# No cpe: is okay.
match good m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ i/German/
# Should have i/German/.
match bad m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test:::::de/
# cpe should end in :de.
match bad  m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test/ i/German/
# Doesn't match.
match bad m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test:::::de/ i/French/
match bad m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| p/a/ cpe:/test:test:::::de/ i/French; unauthorized/
match good m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| cpe:/at%26t:product/
match good m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| cpe:/a%3ab:c/
#Bad one 
match bad m|^Response: Follows\r\nPrivilege: Command\r\n--END COMMAND--\r\n| cpe:/1:2:3:4:5:6:7:8/