alert icmp 192.168.1.144 any -> 192.168.1.1 any (msg:"SHiRE Sentinel IDS healthcheck"; itype:8; sid:9900001; rev:1;)