Example

This example looks for an ICMP ID of 0.

    icmp_id:0;