This is n RFC patchset to demonstrate some of the issues of the xlate-replay mode. I'm planning to push nft-shared: dump errors on stdout to garble output xlate-test: extra-escape of '"' for replay mode nft: check for unknown meta keys but not the other changes, at least not yet. I will try to extend the test script to move beyond strcmp, see last patch in series: manually reordering all test files appears to be too error-prone. Florian Westphal (5): nft-shared: dump errors on stdout to garble output iptables-nft: do not refuse to decode table with unsupported expressions nft: check for unknown meta keys xlate-test: extra-escape of '"' for replay mode generic.xlate: make one replay test case work extensions/generic.txlate | 2 +- iptables/nft-arp.c | 9 ++++-- iptables/nft-bridge.c | 6 +++- iptables/nft-ipv4.c | 7 +++-- iptables/nft-ipv6.c | 7 +++-- iptables/nft-shared.c | 6 +++- iptables/nft.c | 66 ++------------------------------------- iptables/nft.h | 2 -- iptables/xtables-save.c | 6 +--- xlate-test.py | 2 +- 10 files changed, 31 insertions(+), 82 deletions(-) -- 2.37.4