alert ip any any -> any anW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; tos:000; rev:422; app-layer-event:applayer_mismatch_protocol_both_direcuiip any any -> any anW (msg:"S[RICA0.10!.0/24,9yI"; pcre:	o2/P0/"; tos:000; rev:422; app-layer-event:applayer_mismatch_protocol_both_direcuions; flowint:apnt,+;)ons; flowint:apnt,+;)
