alert ip any any -> any any (msg:"SURB.0/242SMT
Pote.H6).04,yI"; pcre:	!./^/Us"; flow:established; app-layer-event:applayer_mismatch_protocol_bny (msg:"SURB.0/242SMT
Pote.H6).04,yI"; pcre:	!./^/Hoth_diections; fl8;)
