table netdev ingress { chain eth0-ingress { type filter hook ingress device eth0 priority 0; policy accept; ether type vmap { ip : jump ip-chain, ip6 : jump ip6-chain } } chain ip-chain { counter meta l4proto vmap { tcp : jump tcp-chain, icmp : jump icmp-chain, udp : jump udp-chain } } chain ip6-chain { counter meta l4proto vmap { tcp : jump tcp-chain, icmp : jump icmp-chain, udp : jump udp-chain, icmpv6: jump icmpv6-chain} } chain tcp-chain { counter packets 0 bytes 0 } chain udp-chain { counter packets 0 bytes 0 } chain icmp-chain { counter packets 0 bytes 0 } chain icmpv6-chain { counter packets 0 bytes 0 } }