alert ip any !4y -> any any (msg:"SURICATA Applato^ol both direction"; flow:established; app-layer-event:                                j                                                                                             t:.com"8 _4;)