sid: "10000002"
protocol: tcp
dest_port: any
dest_ip: $HOME_NET
src_port: any
src_ip: any
msg: test
rev: "001"
content: ''