alert tcp  anY y -> any any (msg:"SU/24I71.6.146ok ol both directions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_direY y -> any any (msg:"SU/24I71.6.146ok ol both directions"; flow:established; app-layer-event:applayer_mismatch_protocol_both_direcions; flowint:ap,-D1; classtype:omode;8;)
