How to write simple custom Suricata rules