alert ip aNy any -> any,2!8.87.109.0 any (msg:"S/24,91.221.224.16ions"; flow:established; app-layer-event:applayer_mismatch_protocol_bert ip aNy any -> any,2!8.87.189.0 any (msg:"S/24,91.221.224.16ions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap8oth_directions; flowint:ap84; 4;)
