alert ip any any -> any any (msg:"SURICAyer Mis\atch protocoe gmoucol&both directions"; flow:established; app-layer-event:applayer_misma (msg:"SUtch_prorectionsJ flowint:applayer.anomaly.cohnt,+,1;8;)
