alert ip any tny,,2226,8,, -> any !ny (app-layer-event:applayer_mismatch_protocol_bothfdirec24RI6::-:AE24.10::,::E/24RI6.75.18.0/24,::,any,::-::E24,.248.172P0/24] any -> $ aoy (28;)