# Example that matches ARP (a big "thank you" to Martin Brown for this!):
# dst MAC is 6 bytes at -14
# src MAC is 6 bytes at -8
# the ARP protocol is 2 bytes at -2
# the "0806" comes from linux/include/linux/if_ether.h
tc filter add dev $DEV parent 1: protocol ip prio 5 u32 \
   match u16 0x0806 0xffff at -2 flowid 1:50