+
+ <rule id="11310" level="0">
+ <decoded_as>pure-transfer</decoded_as>
+ <description>Rule grouping for pure ftpd transfers.</description>
+ </rule>
+
+ <rule id="11311" level="0">
+ <if_sid>11310</if_sid>
+ <action>PUT</action>
+ <description>File added to ftpd.</description>
+ </rule>
+
+ <rule id="11312" level="0">
+ <if_sid>11310</if_sid>
+ <action>GET</action>
+ <description>File retrieved from ftpd.</description>
+ </rule>
+
+
+