#! nft -f add table ip filter add chain ip filter input { type filter hook input priority 0; } # mac source add rule ip filter input @ll,48,48 00:15:e9:f0:10:f8 counter # mac dest add rule ip filter input @ll,0,48 00:1b:21:02:6f:ad counter # mac source and mac dest add rule ip filter input @ll,0,48 00:1b:21:02:6f:ad \ @ll,48,48 00:15:e9:f0:10:f8 \ counter