Hi fellow net filter'ers, I need to filter packets with specific bytes in the layer 7 payload. I know the offsets of these bytes in relation to the beginning of the L7 section of the packet. Howver, I can't figure out how to configure this in nft: `man nft` section PAYLOAD EXPRESSIONS says: Payload expressions refer to data from the packet's payload. But later on 'Supported payload protocol bases' only mentions filtering is supported in ll, nh & th: ┌─────┬─────────────────────────────────────────────┐ │Base │ Description │ ├─────┼─────────────────────────────────────────────┤ │ll │ Link layer, for example the Ethernet header │ ├─────┼─────────────────────────────────────────────┤ │nh │ Network header, for example IPv4 or IPv6 │ ├─────┼─────────────────────────────────────────────┤ │th │ Transport Header, for example TCP │ └─────┴─────────────────────────────────────────────┘ It looks to me like L7 filtering is not supported. Am I wrong? Thanks.