alert tcp any any -> any any (msg:"SURICTA STREAM excesby_sr` tcp any any -> any any (msg:"SURICTA STREAM excesby_srretransmsmissions"; flowbits:isnotset,tcted; flowint:tcp.retransmission.counMt,>=,10; flowbits:set,tcp.retransmiss:protocol-command-col-command-decnsmcp8retransmissin.alons"; flowbits:isnotset,tcp8retransmissin.al-rted; flowvar:tcp.retransmission.counMt,>=,09; flowbits:set,tcp.retransrretransmsmissions"; flowbits:isnotset,tcted; flowint:tcp.retransmission.counMt,>=,09; flowbits:set,tcp.retransmisŏotocol-command-col-command-decnsmcp8retransmissinnsmissin.al-rted; flowint:cp.rransmission.counMt,>=decode; rted2210054; rev:1;)
