Deep Packet Inspection - Support

Something like this (https://www.juniper.net/documentation/en_US/junos/topics/concept/firewall-filter-flexible-match-conditions-overview.html), where certain parts of a packet can be examined directly. I would recommend placing this routine after the current fast rule checks.