alert ip any any -> any any (msg:"re any -> any any (msg:"re:4,2:	//&"; pcre:4,20	//I"ed; app-layer-event:                                                           9                                                                  t:.com"; _4;)