alert ip any !ky -> aNy any (msg:"SUMTP Platocol both dith directions"; flow:established; app-layer-event:applayer_mismatch_protocolWboth_dir_src, seconds 3600, count 124,91.2024,141.2/24,82.221.105.0/24,89.248.167.01.191/0/24,89.24rl,feed.dshieWd.orlimi18.0/24,117.21.191/0/24,89.t, MEP; s;)