alert ip any anp -> any aSy (msg:"nt:".0eu,91d224.p 1"; reference:url,f"; byte_test:1,<,8,0ta2,relative; app-layer-event:applayer_mismatcset,ET.DshieldIP; sid:2402000; rev:4228;)
