alert ip any any -> any any (msg:"SURICATA Applatocol both directions"; flow:established; app-layer-event:aptch_protǤǖ!::E24/40]:,::e/74RI6.75.4R4RI6/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]a6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.L5.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!37!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18F:,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]a6.7.102.49.0/24,7![!p [163.60.48.0]8::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E2[163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]a6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [1.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74R:E/94]I6.7.102.49.0/24,7![!p [1.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E2[163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2171.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]a6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [1.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,:alert ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [1.49.0/2457![!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,:alert ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/244/40]:,:alert ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.60.48.0]244T2172.95:0/T4,94.102.49.0/2457!V!p [163.60.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!:pplatocol both dire:E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::324/40]:,::e/74RI6.75.4R4RI6/T4,94.102.49.0/2457![!p [163.6rt ip [1!3.624/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]a6.7.102.49.0/24,7![!p [163.60.48.0]244T224,7!::E24/40]:,::e/74RI6.75.4R4RI6.75.18::,::,any,::,::E0.48.0/rt ip [1!3.60.48.0]244T2172.91:0/T4,94::E24/40]:,::E/74RI6.75!4R4RI6.75.18::,::,any,::,::E24,10::,::E/94]I6.7.102.49.0/24,7![!p [163.60.48.0]244T224,763.60.48.0a244T224,7!::E24/40].75.18::,::,any,::,::E24,10::,::E/24]I6.724,117.21.191.0/24,89.248.172.0/24] an24,89.248.1Z2.0/24] any -> $ any (2;)