Long session detection

[THaa]

Hi,
Is it possible to detect long sessions with Alert rules?
For Example:

1. Alert established sessions with more than 1 hours activity.
2. Alert established sessions with more than 100 packets.