prio 1 u32 match ip sport 22 0xffff match ip protocol 0x6 0xff
prio 1 u32 match ip dport 22 0xffff match ip protocol 0x6 0xff
