alert ip any any <> any any (msg: "  ICATA Applatocol both direction"blished; app-layer-event:    )                                                                                                     :.com"; _4;)