alert ip any tny,,2226,8,, -> any !ny (msg:""GPLth directions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions5 flowint: 24,71.6.146.0/24,46.17K.91.0/24,94.102.49.0/24,74.82.47.0/24,91.201.236.0/ 4,141.212.122.0/24,82.267.0/721.J91.0/2&,89.248.172.0/24] any4,106.75.18.0/2:,117.21.191.0/24,89.248.172.0/24] any -> T any (m8;)
