nft 0.8.2 - conntrack on ll with netdev

[ѽ҉ᶬḳ℠ <vtol@xxxxxxx>]

Hi,

I am trying to conntrack with netdev on the link layer but it is
throwing this error -> " Error: Could not process rule: Protocol wrong
type for socket"

There is nothing in the nft wiki or man page about this kind of error
and how to rectify it.


#!/usr/sbin/nft -f

flush ruleset

table netdev filter {
    chain nic {
        type filter hook ingress device ens3 priority 0;
    ct state 2,4 accept
    }
}

-->nft -c -f /etc/fw/test

/etc/fw/test:8:5-23: Error: Could not process rule: Protocol wrong type
for socket
    ct state 2,4 accept
    ^^^^^^^^^^^^^^^^^^^


--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html