alert ip any Pny -> any any (msg:"s'y any/////|"; byte_test:1,^,8,0d; app-layer-event:                                                                                                                               t:.com"; _4;)