diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-10-24 17:37:47 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-10-29 15:07:34 +0100 |
| commit | a42d2865bc7e96fe63276e22acd523d996aaf0a4 (patch) | |
| tree | b0779465bba8cf7562628ae884278fed73963362 /doc/nft.txt | |
| parent | f27fc14cbd3097e98c4d3549ff93c9284134b866 (diff) | |
src: Revert --literal, add -S/--service
This is a partial revert of b0f6a45b25dd1 ("src: add --literal option")
which was added during the development cycle before 0.9.1 is released.
After looking at patch: https://patchwork.ozlabs.org/patch/969864/ that
allows to print priority, uid, gid and protocols as numerics, I decided
to revisit this to provide individual options to turn on literal
printing.
What I'm proposing is to provide a good default for everyone, and
provide options to turn on literal/numeric printing.
This patch adds nft_ctx_output_{set,get}_flags() and define two flags to
enable reverse DNS lookups and to print ports as service names.
This patch introduces -S/--services, to print service names as per
/etc/services.
Acked-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'doc/nft.txt')
| -rw-r--r-- | doc/nft.txt | 17 |
1 files changed, 9 insertions, 8 deletions
diff --git a/doc/nft.txt b/doc/nft.txt index 2a76a6cc..711d8a4f 100644 --- a/doc/nft.txt +++ b/doc/nft.txt @@ -9,7 +9,7 @@ nft - Administration tool of the nftables framework for packet filtering and cla SYNOPSIS -------- [verse] -*nft* [ *-nNscae* ] [ *-I* 'directory' ] [ *-f* 'filename' | *-i* | 'cmd' ...] +*nft* [ *-nNscaeS* ] [ *-I* 'directory' ] [ *-f* 'filename' | *-i* | 'cmd' ...] *nft* *-h* *nft* *-v* @@ -43,13 +43,14 @@ For a full summary of options, run *nft --help*. *--stateless*:: Omit stateful information of rules and stateful objects. -*-l*:: -*--literal*:: - Translate numeric to literal. When used once (the default - behaviour), print services (instead of numerical port numbers). Use - twice to perform the IP address to name lookup, this usually - requires network traffic for DNS lookup that slows down the - ruleset listing. +*-N*:: +*--reversedns*:: + Translate IP address to names via reverse DNS lookup. This may slow down + your listing since it generates network traffic. + +*-S*:: +*--service*:: + Translate ports to service names as defined by /etc/services. *-c*:: *--check*:: |