Florian Westphal <fw@xxxxxxxxx> wrote: > The kernel includes the packet dump once for each base hook. > This means that in case a table contained no matching rule(s), > the packet dump will be included in the base policy dump. > > Simply move the packet dump request out of the switch statement > so the debug output shows current packet even with no matched rule. Pushed this series with the one change (PRIx64) suggested by Phil.