Can I modify Scan request packet at application layer?
Sorry for answering this late, you might have already figured it out. SCAN_REQ PDU is set completely by softdevice depending on previous settings of scanner device address and the advertiser device address from which scanner wants to get more data.