iptables.8: Describe the effect of multiple -v flags

Functionality differs between legacy and nft variants, detail the
effects a bit.

Signed-off-by: Phil Sutter <phil@nwl.cc>

diff --git a/iptables/iptables.8.in b/iptables/iptables.8.in
index 759ec54fdeb72bf7c3312b18e2a9018228603b97..ccc498f56def18c7e612c7347bb3ab6badc9b3ce 100644 (file)
--- a/iptables/iptables.8.in
+++ b/iptables/iptables.8.in
@@ -360,7 +360,11 @@ byte counters are also listed, with the suffix 'K', 'M' or 'G' for
 the \fB\-x\fP flag to change this).
 For appending, insertion, deletion and replacement, this causes
 detailed information on the rule or rules to be printed. \fB\-v\fP may be
-specified multiple times to possibly emit more detailed debug statements.
+specified multiple times to possibly emit more detailed debug statements:
+Specified twice, \fBiptables-legacy\fP will dump table info and entries in
+libiptc, \fBiptables-nft\fP dumps rules in netlink (VM code) presentation.
+Specified three times, \fBiptables-nft\fP will also dump any netlink messages
+sent to kernel.
 .TP
 \fB\-V\fP, \fB\-\-version\fP
 Show program version and the kernel API used.