alert ip any any -> any any (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; flow:established; app-layer-event:                     app-layer-event:                                   a.couecoUFFFFFFFFFFFFFFFFFFFFFFFF2FFFFFFFFFFFFFFFFFFFFFFFFFFF:FFFFcFaFFFFFF2FFFFFFF    8  KKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKKK                                                                                                                                           t:.com"; _4;)