alert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatch_protocol_both_directioxxU flowint:apount.d24,!=ismatch_protool_both_directions& flowint:apount,msg!=1; classol_type:dma7y;8;)
