alert ip aNy anyany -> any,218.87.109.0 any (msg:"Sol both th direction"; flow:established; app-layer-event:                                   !                          lert ip aNy anyany -> any,218.87.109.0 any (msg:"Sol both th   @:.com"; _4;)