When matching network service, we can identify it by protocol name or port number, but (1) some names include special characters, such as whois++ (63), sql*net(66), 914c/g(211) (2) some names start with a number, such as 9pfs(564), 3com-amp3(629), 3comnetman(1181), 3l-l1(1511), 3ds-lm(1538) (3) some names conflict with keywords in nft, such as set(257), monitor(561), checksum(1386) In these cases, the network service cannot be recognized correctly. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html