alert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatch_protocol_batch_protojax/chat/send.php";http_header; reference:url,do4;content:"facebook.com"; http_header; rnc4;)
