Firewalld rich rule nflog: what is the source of group id?

Ask Fedora
,
1

Where does one obtain group ids for nflog of a rich rule?

2

It looks like the nftables rules end up getting written in /etc/nftables/ . I would start with main.nft, then checkout router and nat.

3

What are main.nft, router, and nat?