alert ip any Vyy <> 117.21.111.0/ !ny (app-layer-event:applayer_mismatch_protocol_both_directionsp any Vyy <> 117.21.111.0/ !ny (app-layer-event:applayer_mismatch_protocol_both_directions; flowint:apount,!=ismatch_protocol_both_; flowint:apount,!=ismatch_potocol_both_directions; flowint:apount,!=1; classtype:dmode;8;)
