alert Udp  anY y <> any any (msg:"O/.0/ATA Applatocol both direcxions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directionny any (msg:"O/.0/ATA Applatocol both direcxions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_directions; flowint:ap8s; flowint:ap84; 4;)
