alert ip any Pny <> any any ( flowbits:set,ET1"\ ; flowbits:set,E35.62.35.6nce:"1"\ ; flowbits:set,E35.62.35:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::blished; app-layer-event:pplayer_proto_detection_skipped+ flowint:applayer.anomaly.count,+,1; clastype:protocol-command-decode; sid:2260003; rev:1;)

