fwtk-input-filter-bpf is a utility that loads bpf into nftables Usage: sudo ~/go/bin/fwtk-input-filter-bpf [flags] Flags: -chain=<chain name> -table=<table name> -filter=<bpf path | tcpdump-style filter string | socket file descriptor> The command will load the filter in whatever format specified into a XT BPF Match rule in the nftables table and chain specified.

fwtk-input-filter-sets is a utility that manages nftables sets and rules Usage: sudo ~/go/bin/fwtk-input-filter-sets [flags] Flags: -chain=<chain name> -table=<table name> -mode=<oneshot (default) | manager> -iplist=<path> -portlist=<path> This command will create a inet table, chain and sets using the names and files specified by the flags above.