alert ip any,141.21.62.0/24,71.6.122.0/24,82.221.105.0/24 any -> any any (msg:"SURICATA Applaye Mismatch protocol both direction6.0/24,218ipped"; flow:established; app-layer-event:applayer_proto_detection_skippedB flowint:applayer.anomaly.count,+,1; classtype:protocol-command-decode; sid:2260003; rev:1;)

