Complete the following command string to ensure incoming packets are subjected to the CHNLOG chain.
1) -A INPUT
2) -j CHNLOG
3) -p tcp
4) -m tcp