alert ip any a`````````````````````````````````````````````````````````````````````````````````````````````````````````ny -> any any (msg:"SURICATA Applatocol both directions"; flow:established; app-layer-event:applayer_mismatch24[[[[[[[[[[[[[[[[[[[[]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]\]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]].172.9/24,94.102.49.0/24,74.82.47.0/24[[[[[[[[[[[[[[[[[[[[[[[[[[2.122.0/24,82.221.105.0/2].172.9/24,94.1]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]<]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]].17[[[[[[[[[[[[[[[]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]p]]]]]]]]]]]]]]]]]]]]]}]]]]]]0/24,89.248.167.0/4[[[[[[[[[[[[[[[[[0/24.185.324,106.75.18.0/24,117.21.191.0/24,89.@48.172.0/24] any -> $ any (ms8;)