'ct event set label' and 'ct event set new or label' work, but 'ct event set new, label' did not: nft add rule filter input ct event set new,label Error: syntax error, unexpected label First two patches do a bit of refactoring, 3rd patch makes the real change. I have a few more patches on top of this to avoid need of 'meta nfproto' to indicate address type when 'ct saddr' is used in inet family. I will followup with those once these patches are in. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html