Add options provided by log statements, that let packets be delivered to user-space:
https://manpages.debian.org/buster/nftables/nft.8.en.html#LOG_STATEMENT
If the group number is specified, the Linux kernel will pass the packet to nfnetlink_log which will multicast the packet through a netlink socket to the specified multicast group. One or more userspace processes may subscribe to the group to receive the packets, see libnetfilter_queue documentation for details. This is a non-terminating statement, so the rule evaluation continues after the packet is logged.