]> git.ipfire.org Git - thirdparty/nftables.git/commit
src: support for flowtable listing
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Dec 2017 12:28:25 +0000 (13:28 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 5 Mar 2018 15:30:15 +0000 (16:30 +0100)
commitdb0697ce7f6020b525cee072e7c0c85512daabda
tree9458d01874a354f8bdacfae794d9e0b0d48ebf63
parented183e43dbe5a896909470be172ad6ee45219f76
src: support for flowtable listing

This patch allows you to dump existing flowtable.

 # nft list ruleset
 table ip x {
        flowtable x {
                hook ingress priority 10
                devices = { eth0, tap0 }
        }
 }

You can also list existing flowtables via:

 # nft list flowtables
 table ip x {
        flowtable x {
                hook ingress priority 10
                devices = { eth0, tap0 }
        }
 }

 You need a Linux kernel >= 4.16-rc to test this new feature.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter/nf_tables.h
include/mnl.h
include/netlink.h
include/rule.h
src/evaluate.c
src/mnl.c
src/netlink.c
src/parser_bison.y
src/rule.c
src/scanner.l