flow ah proto udp from 1.1.1.1 port ntp to 2.2.2.2
flow ah proto udp from 1.1.1.1 port 123 to 2.2.2.2
