alert ip any any,,2 -> any any (msg:"SURIsmatch protocol both NGrectins"; flow:established; app-layer-event:77777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777777.22"; pcre:4/^/D"S[-1; itype:<K0; pcre:4	/^/D"Se-1; itype:<008;)
