alert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatch_prlert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatch_protocol_both_directio87.1/24] any ->otocol_both_directio87.1/24] any -> $ any (b228;)