On Sat, Nov 19, 2016 at 07:31:15PM +0800, Liping Zhang wrote: > From: Liping Zhang <zlpnobody@xxxxxxxxx> > > Now NF_LOG_XXX is exposed to the userspace, we can set it explicitly. > Like iptables LOG target, we can log TCP sequence numbers, TCP options, > IP options, UID owning local socket and decode MAC header. Note the > log flags are mutually exclusive with group. > > Some examples are listed below: > # nft add rule t c log flags tcp sequence,options > # nft add rule t c log flags ip options > # nft add rule t c log flags skuid > # nft add rule t c log flags ether > # nft add rule t c log flags all > # nft add rule t c log flags all group 1 > <cmdline>:1:14-16: Error: flags and group are mutually exclusive > add rule t c log flags all group 1 > ^^^ Applied, thanks Liping. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
