The command is this:
sudo firewall-cmd --permanent --direct --add-rule ipv4 filter INPUT 0 -p tcp --dport 38511 -m string --hex-string "|a7a7a7a7a7a7a7a7a7a7|" --algo bm -j LOG --log-prefix "TEST LOG "
I want to detect this hex when someone is sending to me, but in file var/log/messages doesn't appear (i sent this packet manually to see if it's work , but it's not working).