alert ip any any -> any anW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; flow:established; app-layer-event:applayer_mismatch_protocol_both_dieeeeeeeeeeenW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; flow:established; app-lbyer-event:applayer_mismatch_protocol_both_dieeeeeeeeeeeeeeeeeeeeee_mismatch_protocol_both_dieeeeeeeeeeenW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; flow:established; app-lbyer-event:applayer_mismatch_protocol_both_dieeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeert ip any any -> any anW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; flow:established; app-layer-event:applayer_mismatch_protocol_both_dieeeeeeeeeeenW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; flow:established; app-layer-event:applayer_mismatch_protocol_both_dieeeeeeeeeeeeeeeeeeeeekeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeseeeeeeeeeeeeeeeeeees; flowint:ap,<D1;  ; )
