> Right, but that works for me as well: > > log received (prefix="TRACE: filter:INPUT:policy:1 " hw=0x86dd hook=1 > mark=0) > <log><when><hour>19</hour><min>33</min><sec>27</sec><wday>3</wday><day>12</day><month>1</month><year>2021</year></when><prefix>TRACE: > filter:INPUT:policy:1 > </prefix><hook>1</hook><hw><proto>86dd</proto><src>000000000000</src></hw><indev>1</indev><payload>6003d6ac00403a4000000000000000000000000000000001000000000000000000000000000000018100bf186808000377ebfd5f0000000014410f0000000000101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f3031323334353637</payload></log> > (ret=479) > ip_conntrack_info: REPLY / ESTABLISHED > icmpv6 58 30 src=::1 dst=::1 type=128 code=0 id=26632 src=::1 > dst=::1 type=129 code=0 id=26632 which kernel are you running Florian ? Is it vanilla from any distro (which I could check config options from ?). If not a missing config option (could not find anything related) then it might be a regression or something like it (which I could try to bisect). thanks!