#alert icmp any any -> any any (msg:"ICMP packet"; sid:10000001; rev:001;) #alert tcp any any -> any any (msg:"TCP packet"; sid:10000002; rev:001;) #alert ip any any -> any any (msg:"IP packet"; sid:10000003; rev:001;) #alert udp any any -> any any (msg:"UDP packet"; sid:10000004; rev:001;) #alert tcp any any -> any 80 (content:"HTTP"; msg:"http test"; sid:10000005; rev:001;) #alert tcp any any -> any 443 (content:"HTTPS"; msg:"https test"; sid:10000006; rev:001;) #alert tcp any any -> any 22 (content:"SSH"; msg:"ssh test"; sid:10000007; rev:001;) #alert udp any any -> any 4789 (msg:"VXLAN packet"; sid:10000008; rev:001;)