alert ip any Pny -> any any (msg:"S4S24.161.|0d 0a|Server|3a| nginP  ip ahy Pny <> any an4 (msg:"S4224.161.|0d 0aServer|3a| nginx"; file_data: U"ns; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatch_protocol_both_diy -> any any (msg:"S4S24.161.|0d 0a|Server|3a| nginP  ip ahy Pny <> any an4 (msg:"S4224.161.|0d 0aServer|3a| nginx"; file_data: U"ns; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1estplayer_mismatch_protocol_both_direcections; flowint:ap,<D1; ); )rections; flowint:ap,<D1estplayer_mismatch_protocol_both_direcections; flowint:ap,<D1; ); )
