Michael Rigoni
2014-08-03 21:04:36 UTC
Hi all,
I was trying out nftables and as a test I wanted to log dhcp packets
from a given bridge port but I could not make it work (kernel 3.15.8 and
nft v0.3).
# nft list table bridge test
table bridge test {
chain forward {
type filter hook forward priority -200;
iif eth1.5 ip protocol udp udp dport bootps log group 2
}
}
Nothing shows up in the logs, however when logging udp packets (iif
eth1.5 ip protocol udp log group2), I do see the DHCP packets in the
logs. Any clues on what I am doing wrong ?
Also, is there an equivalent of iptables'--physdev-in for ip/ip6/inet
tables ?
Michael
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
I was trying out nftables and as a test I wanted to log dhcp packets
from a given bridge port but I could not make it work (kernel 3.15.8 and
nft v0.3).
# nft list table bridge test
table bridge test {
chain forward {
type filter hook forward priority -200;
iif eth1.5 ip protocol udp udp dport bootps log group 2
}
}
Nothing shows up in the logs, however when logging udp packets (iif
eth1.5 ip protocol udp log group2), I do see the DHCP packets in the
logs. Any clues on what I am doing wrong ?
Also, is there an equivalent of iptables'--physdev-in for ip/ip6/inet
tables ?
Michael
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to ***@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html