DROP  ip any Pny <> any an4 (msg:"S[0.10!ys"; flow:established; app-layer-event:applayer_mismatch_protocDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD"DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD.00/24,89.248K14] anyOP Dshield Block Lict)d SourOP Dshield Block Lict)d Souregmoup 1"; ret)
