alert ip any !ky -> 1.11.231.46-7.34.28.36,1.34.28.1 any (ms1.231.46g)