alert ip any Pny -> any mny (ack:2S[s"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]l]]]]]]]]]]]h]]]]]]]]]]]/24,82.221.105.0/24,89J248.167.0/24,106.75.18.0/24,117.21.191.0/24,89.248.172.0/24] any -> T any (m8;)
