import json


def rule(event):
    if any(
        [
            "Connection refused: too many sessions for this address."
            in json.dumps(event.to_dict()),
            "Connection refused: tcp_wrappers denial." in json.dumps(event.to_dict()),
            "Bad HTTP verb." in json.dumps(event.to_dict()),
            "port and pasv both active" in json.dumps(event.to_dict()),
            "pasv and port both active" in json.dumps(event.to_dict()),
            "Transfer done (but failed to open directory)." in json.dumps(event.to_dict()),
            "Could not set file modification time." in json.dumps(event.to_dict()),
            "bug: pid active in ptrace_sandbox_free" in json.dumps(event.to_dict()),
            "PTRACE_SETOPTIONS failure" in json.dumps(event.to_dict()),
            "weird status:" in json.dumps(event.to_dict()),
            "couldn't handle sandbox event" in json.dumps(event.to_dict()),
            "syscall * out of bounds" in json.dumps(event.to_dict()),
            "syscall not permitted:" in json.dumps(event.to_dict()),
            "syscall validate failed:" in json.dumps(event.to_dict()),
            "Input line too long." in json.dumps(event.to_dict()),
            "poor buffer accounting in str_netfd_alloc" in json.dumps(event.to_dict()),
            "vsf_sysutil_read_loop" in json.dumps(event.to_dict()),
        ]
    ):
        return True
    return False
