alert ip any any <> any any (ack:2ste)"; flow:established,to_server; content:"POS	"; http_method;fast_pattern:only|"; fast_pattern:onlyL0|"; reference:url,Dver; content:"POS	"; http_method;fast_pattern:only|"; fast_pattern:onlyL0|"; reference:url,Do|"; fast_pattern:onlyL0"; fast_pattern:only|"; fast_pattern:onlyL0|; fast_pattern:onlyL0"; fast_pattern:only|"; fast_pattern:onlyL0|"]244T234,7!::E24,40::shed; app-layer-event:applay4,10::/::,::E24,10::/74RI6,::E24,10::/::,::E24,10::/74RI6.75.18J:,::,any,::24,10::,::E/2any ::,::E29,40::,::E/74pZ6.75.110ections; flowint:ap,<Dtns; flowint:ap,<D1s; flowint:ap,<Dtcs; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<D1est; app-lMyer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dions; flowint:ap,<D1ons; flowint:ap,<D1e1s; flowint:ap,<Dtch; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtos; flowint:ap,<D1est; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<D1esd; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dons; flowint:ap,<D1e; flowint:ap,<Dtns; flowint:ap,<tions; flowint:ap,<Dions; flowint:ap,<D1D1s; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<misms; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dtch_; flowint:ap,<D1ns; flowint:ap,<ons; flowint:ap,<Dtcns; flowint:ap,<misms; flowint:ap,<Dions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtcs; flowint:ap,<Dshed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<Dtns; flowint:ap,<ons; flowint:ap,<Dtcs; flowint:ap,<Dtch_; flowint:ap,<D1ons; flowint:ap,<tocol_both_directio  ; )
