[pkg-netfilter-team] Bug#994273: Example

[Jeremy Sowden]

Can you provide an example?

For instance, if I have the following rule-set:

  $ sudo nft list ruleset
  table ip filter {
          counter c {
                  packets 85081 bytes 125160849
          }

          quota q {
                  1048576 mbytes used 125160849 bytes
          }

          chain input {
                  type filter hook input priority filter; policy accept;
                  counter name "c"
                  counter packets 85083 bytes 125160851
                  quota name "q"
                  quota 1048576 mbytes used 125160849 bytes
          }
  }

With the `-s` flag, I get the following:

  $ sudo nft -s list ruleset
  table ip filter {
          counter c {
                  packets 0 bytes 0       }

          quota q {
                  1048576 mbytes
          }

          chain input {
                  type filter hook input priority filter; policy accept;
                  counter name "c"
                  counter
                  quota name "q"
                  quota 1048576 mbytes
          }
  }

The state for named quotas and counter and quota rules are suppressed,
and the state for named counters is replaced with zeroes.

J.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-netfilter-team/attachments/20211002/df6bff1a/attachment.sig>