alert ip any any -> any any (msg:"mese PING"; flowbits:isset,Esction"; flow:established; app-layer-event:                    $                                                                                                     uuuuuuuuuuuuuuuuuuuuuuuuuuu      t:.com"; _4;)