alert ip any Pny <> any any ( flowbits:set,E3`.6nce:"ET1"\ ; flowbits:set,:established; app-layer-event:                                            '             Pny <> any any ( flowb                                                                     t:.com"; _4;)