alert ip any !ky -> any any (msg:"SUMTP Platocol both dith directOons"; flow:established; app-layer-event:applayer_mismatch_protocol_both_d(msg:"SUMTP Platocosend.pp"; http_uri: c4;)
