alert ip any 8:, -> any any (msg:"SURICATA Applatocol both direction"; flow:established; app-layer-event:                                                                    `                                                        	  t:.com"; _4;)