#! nft -f # adjacent payload expressions: 4 bytes in order add rule filter output tcp sport 1024 tcp dport 22 counter # adjacent payload expressions: 8 bytes in order add rule filter output ip saddr 192.168.0.1 ip daddr 192.168.0.100 counter # adjacent payload expressions: 8 bytes in order add rule filter output tcp sequence 0 tcp sport 1024 tcp dport 22 # adjacent payload expressions: 8 bytes in reverse order add rule filter output tcp sport 1024 tcp dport 22 tcp sequence 0