table ip test { chain test { tcp dport 22 counter packets 0 bytes 0 accept } }