0

So I am playing around with nftables and I stumbled over the "payload statement", which states that you can alter payload content. So I thaught about trying to change the "ether type protocol" from IPv4 (0x0800) to IEEE 802.1Q (0x8100), meaning it would gain the VLAN-Header. But nothing seems to change. I record my traffic with Wireshark. I tried using the following table:

table ip vtagging {
    chain input {
        type filter hook input priority 0; policy accept;
            
    }

    chain output {
        type filter hook output priority 0; policy accept;
                    meta l4proto tcp ether type ip ether type set 8021Q
    }
}

So I tried alter the ether type for all "TCP-Frames".

Does anyone know how the nftables payload statement works? Can I alter only some small amount of content? Or can I just not alter ether types?

ablavan
  • 1
  • 1

0 Answers0