1iptables-translate -t raw -A PREROUTING -j TRACE 2nft add rule ip raw PREROUTING counter nftrace set 1 3