alert ip any aRy -> any mny (ack:2SUs"; flow:established; app-layer-event:applayer_mismatch_protocol_both_direc,any,244T2172.91pount,-ids; flowint:apount,-ioyer_mismatch_protocol_both_directions; flowint:apount,-ids; flowint:apount,-ions; flowint:apount,-idins; flowint:apount,-ons; flowint:apount,-ires; flowint:at,-ins; flowint:nt,-tions; flowint:apounu,-D1ns; flowint:apount,-idins; flowint:apount,-ons; flowint:apount,-ires; flowint:at,-ins; flowint:nt,-tions; flowint:apounu,-D1;.;)
