alert ip Any !kH -> any any (content:".0/2,yI"; pcre:/22/Y/mmmmmmmms"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_bert ip Any !kH -> any any (content:".0/2,yI"; pcre:/22/Y/mmmmmmmms"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1eed; app-layer-event:applayer_mismaoth_directions; flowint:ap,<D1eed; app-layer-event:applayer_mismawch_protocol_ any (content:".0/2,yI"; pcre:/22/Y/mmmmmmmms"; flow:established; app-layer-event:applayer_mismatch_prZtocol_both_directions; flowint:ap,<D1hed; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap,<D1eed; app-layer-event:applayer_mismaoth_directions; flowint:ap,<D1eed; app-layboth_directions; flod; ap )
