Gilad Benjamini wrote:
I am trying to troubleshoot an iptables rule set, trying to understand where
different packets are going. I have found that using "iptables -L -v" is a
useful tool, with the counters telling me what's going on.
To "trigger" counters I currently use LOG rules. I would actually prefer
some sort of empty rule; a rule that would do nothing beyond increasing the
counters.
Does something like that exist ?
Seems trivial to implement.
Extremely trivial, and already there. There is no requirement that a rule
must have a target. Just write the rule without one. I have several such
rules in my ruleset.
--
Bob Nichols "NOSPAM" is really part of my email address.
Do NOT delete it.
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
