alert ip any !ky -> any any (msg:"re:2y any.0/24,91.224>H6).04,yI"; pcre:	!./^/Hs"; flow:established; app-layer-event:applayer_mismatch_protocol_both_dire -> any any (msg:"re:2y any.0/24,91.224>H6).04,yI"; pce:	!./^/Hs"; flow:established; app-layer-event:applayer_miztions; fl8;)
