Re: [Fwd: Re: Shortcuts to counting rules?]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Jan Engelhardt wrote:
On Friday 2008-10-31 19:54, Rick Jones wrote:

iptables-save | grep ^- | wc -l

Here is where I cop to being a luddite who prefers straight C to calling
system() :)


But there is no C library. And libiptc is so strongly internal that
it does not fall under libraries-to-use.

I'm willing to code without a library, I just need to know how to parse the set of entries I suspect.

Someone in netfilter suggested the getsockopt() calls were part of the ABI, which implies what the getsockopt() calls return is reasonably "stable." Is that actually the case, or can one not even ass-u-me the getsockopt() calls themselves are stable?

And strace should not be taught that. We have seen at least one
change of the interpretation of the binary stream.

How about at least the option name(s) so it can present something other than
the 0x40/0x41 etc?


I do not mind that. Turn to the strace maintainer about getting that
implemented.

Will do.

rick jones
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux