diff options
| author | Elise Lennion <elise.lennion@gmail.com> | 2017-01-16 18:40:40 -0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-01-16 21:51:20 +0100 |
| commit | c5a3c8918330f3b5af883ee5b071989e8917177b (patch) | |
| tree | eb1afab56c3bd72c526f61e2ef3309ad4850a842 /include | |
| parent | e3ec9362f0edad08834cb8ba66bc45fdb0bf33f5 (diff) | |
src: Allow to list ruleset without stateful information
Currently only counter and quota have stateful information.
For named counters, packets and bytes are displayed as 0.
Standard list ruleset:
table ip filter {
counter https {
packets 161942 bytes 10253353
}
chain output {
type filter hook output priority 0; policy accept;
counter name tcp dport map { https : "https"}
tcp dport https counter packets 171211 bytes 10869045
tcp dport https quota 25 mbytes used 10 mbytes
}
}
With stateless option, -s:
table ip filter {
counter https {
packets 0 bytes 0
}
chain output {
type filter hook output priority 0; policy accept;
counter name tcp dport map { https : "https"}
tcp dport https counter
tcp dport https quota 25 mbytes
}
}
Signed-off-by: Elise Lennion <elise.lennion@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/nftables.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/nftables.h b/include/nftables.h index d3f471b7..760bbff5 100644 --- a/include/nftables.h +++ b/include/nftables.h @@ -29,6 +29,7 @@ extern unsigned int numeric_output; extern unsigned int ip2name_output; extern unsigned int handle_output; extern unsigned int debug_level; +extern bool stateless_output; extern const char *include_paths[INCLUDE_PATHS_MAX]; enum nftables_exit_codes { |