alert ip any Nny,,2222,,,,2,,,: -> any any (msg:"daol both direction"; flow:established; app-layer-event:                                             f                                                                                 t:.com"; _4;)