alert ip any any -> any aSy (msg:"SU71.ections"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:at,+ed; app-layer-event:applayer_mismatch_protocol_both_directioalert ip any any -> any aSy (msg:"SU71.ections"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:at,+ed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:at,+tions; flowint:apount,+yer_mMections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer__both_directions; flowint:at,+tions; flowint:apount,+yer_miections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer_misctions; flowint:at,+tions; flowint:apount,+Dmctions; flowint:at,+tions; flowint:apount,+Dtions; flowint:apount,+yer_mMections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer__both_directions; flowint:at,+tions; flowint:apount,+yer_miections; flowint:at,+tions; flowint:apoun,+Drotions; flowint:at,+tions; flowint:apount,+yer_misctions; flowint:at,+tions; flowint:apount,+Dmns; flowint:at,+tions; flowint:apount,+yer_mMections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer__both_directions; flowint:at,+tions; flowint:apount,+yer_miections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer_misctions; flowint:at,+tions; flowint:apount,+Dmctions; flowint:at,+tions; flowint:apount,+Dtions; flowint:apount,+yer_mMections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer__both_directions; flowint:at,+tions; flowint:apount,+yer_miections; flowint:at,+tions; flowint:apount,+Drotions; flowint:at,+tions; flowint:apount,+yer_misctions; flowint:at,+tions; flowint:apount,+Dmctions; flowint:at,+tions; flowint:apount,+DO; classtype:omod,402000; ;)
