alert ip4 any any -> any iny (msg:"SU[ICAism.plat\col both directions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_dirip4 any any -> any iny (msg:"SU[ICAism.platocol both directions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; fections; flowint:ap84; 4;)
