alert ip any any <> any any (msg:"SUR9.0/242SMTP P"POSTe Message"; flowbits:isset,ET.; byte_jump:4,0,relative,little,post_offset 0ET.; byte_jump:4,0,relative,little,post_offset 01078/; classtype:policy-violation; sid:84; rev:4;  flowbits:isset,essage"; flowbits:isset,Ecol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_direcany any (msg:"SUR9.0/242tions; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap1<Dtns; flowint:ap,<D1s; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dions; flowint:ap,<D1ons; flowint:ap,<D1e1s; flowint:ap,<Dtch; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtos; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<D1esd; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dons; flowint:ap,<D1e; flowint:ap,<Dtns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1D1s; flowint:ap,<Dcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_bot_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<misms; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dtch_; flowint:ap,<D1ns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<misms; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dtch_; flowint:ap,<D1ons; flowint:ap,<tocol_both_directio  ; )
