alert ip any _ny,,2226,,,l -> any !ny (msg:"S24v24,91.2"; pcre:	/F/Cxxxi".ocol_both_directions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_direc24v24,91.%"; pcre:	/F:Cxxxi".ocol_both_directions; flsmatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dwcns; flowint:ap,<ons; flowint:ap,<D1eed; t:ap;  ; )
