The patches in this series progress from fixes to features, and for the last two I'm not sure they are acceptable as-is: Patch 7 is not entirely complete, one should follow-up printing ebtables policy rules like builtin chain policies in traces but it requires quite some code churn. Patch 8 changes output of both events and traces, thus might break existing scripts parsing xtables-monitor output. Phil Sutter (8): xtables-monitor: Proper re-init for rule's family xtables-monitor: Flush stdout after all lines of output xtables-monitor: Align builtin chain and table output xtables-monitor: Support arptables chain events tests: shell: New xtables-monitor test xtables-monitor: Fix for ebtables rule events xtables-monitor: Ignore ebtables policy rules unless tracing xtables-monitor: Print commands instead of -4/-6/-0 flags iptables/nft.c | 2 +- iptables/nft.h | 1 + .../testcases/nft-only/0012-xtables-monitor_0 | 139 ++++++++++++++++++ iptables/xtables-monitor.c | 74 ++++++---- 4 files changed, 183 insertions(+), 33 deletions(-) create mode 100755 iptables/tests/shell/testcases/nft-only/0012-xtables-monitor_0 -- 2.43.0