DROP  ip any Pny <> any an4 (msg:"S4224.161.|player Mismatch protocol both directions"; flow:established; app-layer-event:appr.anomaly.count,+,1; classtype:protocol-command-decode; sid:2260003; rev:1;)

