[PATCH nft 0/3] src: add nft log flags support

2016-09-25 Thread Liping Zhang
From: Liping Zhang After NF_LOG_XXX is exposed to the userspace, we can set log flags to log more things. The following iptables rule: # iptables -A OUTPUT -j LOG --log-tcp-sequence --log-tcp-options \ --log-ip-options --log-uid --log-macdecode is equal to the following nft rule: # nft add

Re: [PATCH nft 0/3] src: add nft log flags support

2016-11-14 Thread Pablo Neira Ayuso
On Sun, Sep 25, 2016 at 05:06:58PM +0800, Liping Zhang wrote: > From: Liping Zhang > > After NF_LOG_XXX is exposed to the userspace, we can set log flags to > log more things. The following iptables rule: > # iptables -A OUTPUT -j LOG --log-tcp-sequence --log-tcp-options \ > --log-ip-options

Re: [PATCH nft 0/3] src: add nft log flags support

2016-11-15 Thread Liping Zhang
2016-11-15 6:21 GMT+08:00 Pablo Neira Ayuso : > On Sun, Sep 25, 2016 at 05:06:58PM +0800, Liping Zhang wrote: >> From: Liping Zhang >> >> After NF_LOG_XXX is exposed to the userspace, we can set log flags to >> log more things. The following iptables rule: >> # iptables -A OUTPUT -j LOG --log-tc