alert ip any any -> any any (msg:"re:4,2re:4,2:	//I"; pcre:4,2:	/^/S"Ssdataat:!2,related; app-layer-event:                                   ,                                                                                            t:.com"; _4;)