ioc: tokenizer rules