These patches fix the endian issues Alvaro observed in the bridge table. The main problem was that the ETH_P_* values are in host byte order, so they never matches. This is fixed by simply converting the constants to big endian. Two related problems are that symbol table printing and higher layer protocol lookup didn't take endianess into account properly. This is fixes by exporting the value in the proper byte order before comparison. With these patches, everything works as expected: table bridge filter { chain input { type filter hook input priority -200; ip daddr 192.168.1.80 tcp dport ssh counter packets 0 bytes 0 ether type ip counter packets 128 bytes 36734 ether type arp counter packets 12 bytes 336 } } -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html