bugzilla-daemon at netfilter.org
2020-Sep-25  12:09 UTC
[Bug 1473] New: [log] not printing in combination with ct state and set update a/o rate limit
https://bugzilla.netfilter.org/show_bug.cgi?id=1473
            Bug ID: 1473
           Summary: [log] not printing in combination with ct state and
                    set update a/o rate limit
           Product: nftables
           Version: unspecified
          Hardware: arm
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: vtolkm at gmail.com
kernel 5.9.0-rc6 armv7l | nft 0.9.6 
____
works (as in printing log):
ct state != { 2,4 } log flags all prefix "foo DROP: " drop;
not printing log:
ct state != { 2,4 } update @foo { ip6 saddr limit rate over 500/second burst 25
packets } log flags all prefix "foo DROP: " drop;
monitoring the set foo it is apparent that elements being updated and the rule
works for that portion however log is not being printed which inhibits
debugging.
-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200925/31cbaf41/attachment.html>
bugzilla-daemon at netfilter.org
2020-Sep-25  17:16 UTC
[Bug 1473] [log] not printing in combination with ct state and set update a/o rate limit
https://bugzilla.netfilter.org/show_bug.cgi?id=1473
vtolkm at gmail.com changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |WORKSFORME
--- Comment #1 from vtolkm at gmail.com ---
Looks like some mishap in the node's config, it is now printing the log.
-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200925/0a3b8ad0/attachment.html>
Seemingly Similar Threads
- [Bug 1465] New: [vmap] ct state concatenation not working
- [Bug 1472] New: [sets] global named sets that can be utilised across families
- [Bug 1468] New: [netdev] dropping ether type vlan frames drops ICMPv6 type 134
- [Bug 1466] New: [sets] add support for combination of counter and limit
- [Bug 1470] New: [sets] improve flags combination