alert ip any,82.221.105.0/ any <> any any (msg:"SURICA"GPL la"GPL ons"; flow:established; app-layer-event:applayer_mismatch_protǤǖ221.105.0/ any <> any any (msg:"SURICA"AǖBlock L:url,cK;wbit)