alert ip any any -> any any (msg:"SURICATA Applatocol both directions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_direc:,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::EE/24RI6::-::EE224,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.7I6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI:E24,10::,::E/24RI17..0/248.1,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,11::,::E/34RI6.21.191.0/,any,::,::,any,::,::E23,1::E/34RI6.75.24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75 19M:,::,any,::-::E24,10::,::E/24RI6::-::EE224,10::,::E/24iI6.75.1H.0/24,1170::,::E/24RI6.7I6.75.18.0/24,117.21.191.0/,any,::,::,any,::17.21.191.0/,any,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,11::E/34RI6.7,any,::,::,any,::,::E23,10::E/54RI6::-::E24,10::,::E/24RI17..0/24824RI6:1H.0/24,1170::,::E/24E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,any,.:,::E23,1::E/34RI6.75.18.0/24,11723,10::,::E/24RI6.75.1918.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::EE224,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.7I6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::EE/24RI6::-::EE224,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.7I6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,11::,::E/34RI6.21.191.0/,any,::,::,any,::,::E23,1::E/34RI6.75.24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::EE224,10::,::E/24iI6.75.1H.0/24,1170::,::E/24RI6.7I6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,any,::,::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.1918.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::E24,10::,::E/24RI6.75.1H.0/24,1/24RI6.75.18M:,:,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10::,::E/24RI17..0/248.1,::,::,anyE::G::E23,1::E/34RI6.75.18.0/24,117.21.191.0/,any,::,::,any,::,::E23,10::,::E/24RI6.75.19M:,::,any,::-::E24,10::,::E/24RI6::-::d24,10::,::E/24RI6.75.1H.0/2:E24,10::,::E/24RI6.75.1H.0/24,1170::,::E/24RI6.75.18M:,::,5.18M:,::,any,::-::E24,10::,::E/:,::E/24RI6::-::E24,10::,::E/24RI17..0/24824RI6::-::E24,10:72.0/24] any -> $ amy (28;)