alert ip any any -> any any (msg:"SURICATA6Applayer Mismatch protocol both directions"; flow:established; app-layer-event:applayer_mismatch_prorectionsJ flowint:applaywint:applayer.anomal;8;)
