Phil Sutter <p...@nwl.cc> wrote: > Use of payload expression to match against IPv6 nexthdr field does not > work if extension headers are present. A simple example for that is > matching for fragmented icmpv6 traffic. Instead, generate a 'meta > l4proto' expression which works even if extension headers are present.
Applied, thanks.
