1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
# tcp option sack0 right 1 [ { "match": { "left": { "tcp option": { "field": "right", "name": "sack" } }, "right": 1 } } ]