simpler
Merge branch 'alt-abd' of github.com:seplogic/corestar into alt-abd
turned off match_rule