Hi Jan, On Tue, Mar 19, 2019 at 08:44:12PM +0100, Jan Engelhardt wrote: > On Tuesday 2019-03-19 20:09, Phil Sutter wrote: > > >This is a barn find from Fedora package, actually spooking around in > >various places in the internet. No idea who wrote it, but it seems to be > >used. So add it for the time being. > > Not sure, but I added some people in the Cc that may know more (and the > hope is that the ibm address still delivers). > > > * xt_AUDIT made its appearance around January 2011 > https://lwn.net/Articles/423402/ (tgraf@) > > * "ebtables --audit-type" made an appearence in the audit-test code > repository https://sourceforge.net/p/audit-test/code/ref/master/ in > June 2011 (czyzak@). This means that ebt_audit existed in some form > at that time already. > > * Fedora ebtables (only) gained the patch 2013-March-21 (spot@) Thanks a lot for your historic research. In RHEL, ebtables got AUDIT support with bz#642394 (private). Thomas provided the patch, so hopefully he either wrote it or knows where it came from. Thanks, Phil