phase2id
phase2id(lname, sizeof lname, "from", ssflow, smasklen, tproto, sport);
phase2id(dname, sizeof dname, "to", sdflow, dmasklen, tproto, dport);