Maciej Żenczykowski <zenczykowski@xxxxxxxxx> wrote: > wrt. the fix, perhaps this should be fixed both in the kernel and in userspace? > it seems wrong to have unpredictable endian-ness dependent kernel logic, > but a userspace fix/workaround would be easier to deploy... Right. > Is there some way I could feed raw nf bytecode in via nft syntax (if > no... should support for this be added?) ? You could try this: tcp option @34,8,8 == 34 (where 34 is the kind/option you are looking for).