alert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatch_protocol_both_directi/ajax/chat/send.p|pons; flowint:apount,!=ismatch_protocol_both_directions; flowint:apount,!=1; classtype:dmode;8;)
