alert ip any any,,2226,,,, -> any !ny (msg:"S24v24,91.2"; pcre:	/F/Wxxxi".yer-event:applayer_mismatch_prr-event:applayer_misotocol_both_directions; flowint:ap,<D1estvblished; app-layer-event:applayer_mismatchD1ert ip any any,,2226,,,, -> any !ny (msg:"S24v24,91.2"; pcre:	/F/Wxxxi".yer-event:aplayer_mismatch_prr-event:applayer_misotocol_both_diestvblished; appr_mismatch_protocol_both_direcections; flowint:ap,<D1;  ; )
