What query do we need to use to get the contributing events details for "Protocol or Port Mismatch" alert and also what actions do we need to take if we receive this kind of alerts?
