summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--include/nftables.h1
-rw-r--r--src/main.c12
-rw-r--r--src/rule.c3
3 files changed, 15 insertions, 1 deletions
diff --git a/include/nftables.h b/include/nftables.h
index 0eab1e50..ff91d934 100644
--- a/include/nftables.h
+++ b/include/nftables.h
@@ -21,6 +21,7 @@ enum debug_level {
#define INCLUDE_PATHS_MAX 16
extern unsigned int numeric_output;
+extern unsigned int handle_output;
extern unsigned int debug_level;
extern const char *include_paths[INCLUDE_PATHS_MAX];
diff --git a/src/main.c b/src/main.c
index 283ec289..48d4e038 100644
--- a/src/main.c
+++ b/src/main.c
@@ -26,6 +26,7 @@
#include <erec.h>
unsigned int numeric_output;
+unsigned int handle_output;
#ifdef DEBUG
unsigned int debug_level;
#endif
@@ -41,10 +42,11 @@ enum opt_vals {
OPT_INCLUDEPATH = 'I',
OPT_NUMERIC = 'n',
OPT_DEBUG = 'd',
+ OPT_HANDLE_OUTPUT = 'a',
OPT_INVALID = '?',
};
-#define OPTSTRING "hvf:iI:vn"
+#define OPTSTRING "hvf:iI:vna"
static const struct option options[] = {
{
@@ -81,6 +83,10 @@ static const struct option options[] = {
},
#endif
{
+ .name = "handle",
+ .val = OPT_HANDLE_OUTPUT,
+ },
+ {
.name = NULL
}
};
@@ -100,6 +106,7 @@ static void show_help(const char *name)
" -n/--numeric When specified once, show network addresses numerically.\n"
" When specified twice, also show Internet protocols,\n"
" Internet services, user IDs and group IDs numerically.\n"
+" -a/--handle Output rule handle.\n"
" -I/--includepath <directory> Add <directory> to the paths searched for include files.\n"
#ifdef DEBUG
" --debug <level [,level...]> Specify debugging level (scanner, parser, eval, netlink, all)\n"
@@ -244,6 +251,9 @@ int main(int argc, char * const *argv)
}
break;
#endif
+ case OPT_HANDLE_OUTPUT:
+ handle_output++;
+ break;
case OPT_INVALID:
exit(NFT_EXIT_FAILURE);
}
diff --git a/src/rule.c b/src/rule.c
index 9d9eaee3..e77323d8 100644
--- a/src/rule.c
+++ b/src/rule.c
@@ -13,6 +13,7 @@
#include <stdio.h>
#include <stdint.h>
#include <string.h>
+#include <inttypes.h>
#include <statement.h>
#include <rule.h>
@@ -136,6 +137,8 @@ void rule_print(const struct rule *rule)
printf(" ");
stmt->ops->print(stmt);
}
+ if (handle_output > 0)
+ printf(" # handle %" PRIu64, rule->handle.handle);
printf("\n");
}