local packet = require "suricata.packet"
local logger = require("suricata.log")

function init (args)
    return {}
end

function match (args)
    p = packet.get()
    if p:sp() == 6666 and p:dp() == 63 then
        ts = p:timestring_iso8601()

        logger.notice(string.format("%s %d->%d (pcap_cnt:%d) match!", ts, p:sp(), p:dp(), p:pcap_cnt()));
        return 1
    end

    return 0
end
