Hi, On Thu, Mar 14, 2019 at 12:14:23PM +0100, Fernando Fernandez Mancera wrote: > Hi, > > I have been thinking more about this today. I don't know how access to > the right-hand-side string from the kernel if it is possible. Sorry if > the question is very dumb, but I may lack experience with the nft > registers and RHS data of an expression. I think you can hide flags from json, which is what Phil suggests, I mean, just infer version flags from the syntax, ie. if "genre::version" is used, then set of the version flag. I think Phil is not suggesting kernel changes.