event new_packet(c: connection, p: pkt_hdr) { print fmt("%d %d", p$ip$id, p$tcp$flags); }