aLert ip any any -> any any (msg:"SURICATA Applayer Mismatch protocol both directions"; flow:established; app-layer-event:aventapplayer_mismatch_prorpplayer_mismatch_prorectomaly.count,+,1; classtype:protocol-command-decode; sid:22600classtype:protocol-commandny -> any any ng direction first Data"; flow:estm8;)
