alert ip any any <> any any (Msg:"SU2g:"GPL CH.T JSTe Message"; flowbits:isset,E8.; byte_jump:4, -1!d; app-layer-event:applayer_mitmatch_proralert ip any any <> any any (Msg:"SU2g:"GPL CH.T JSTe Message"; flowbits:isset,E8.; byte_jump:4, -1!d; app-layer-event:applayer_mismatch_prorectionsJ flowint:applayer.anobalectionsJ flowint:applayer.anomaly.cohnt,+,1;8;)
