On Tue, Oct 29, 2019 at 8:00 AM Trent W. Buck <trentbuck@xxxxxxxxx> wrote: > [...] > > I think you are right, but see this recent commit (in 0.9.2+): > > 24f33c7 2019-06-17 18:15 +0200 LGL > src: enable set expiration date for set elements > > https://git.netfilter.org/nftables/commit/?id=24f33c7 > > ...which sounds like there is a new (as-yet-undocumented?) keyword for > changing (as opposed to initializing) the timeout of a set element. > Hi, No new or undocumented keyword, it uses the already created syntax to dump expiration values in order to modify it. Please refer to [1] and [2]. As Duncan states, "update" is what you're looking for. Please check the first example of [2]. [1] https://wiki.nftables.org/wiki-nftables/index.php/Element_timeouts [2] https://wiki.nftables.org/wiki-nftables/index.php/Updating_sets_from_the_packet_path Cheers.
