pub const FL_ALARM: u64 = 0x0002000000000000;
pcapd and PD_ALARM=1: if set dumps the packets from this flow to a new pcap