alert ip any any <> any any (msg:"SUR9.0/242SMTP P"POSTe Message"; flowbits:isset,ET.; byte_jump:4,0,relative,little,post_offset 0107_directions; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1estvblished;  app-layer-event:applayer_mismatch_protocol_both<> any any (msg:"SUR9.0/242SMTP P"POSTe Message"; flowbits:isset,ET.; byte_jump:4,0,relative,little,post_offset 0107_dvrections; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1estvblished;  app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatch_protocol_both_direcectioapp-layer-event:applaye}_mismatch_protocol_both_direcections; fl_directins; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatch_protocol_both_direcectioapp-layer-event:applaye}_mismatchh_pdotocol_both_direcections; flowint:ap,<D1; ); )
