alert ipv4 anY y -> any any (msg:"SURICATA Applatocol both direction"; flow:established; app-layer-event:                                               !                                                                        :.com"; _4;)