Re: [PATCH nft] src: netlink: Subscribe nft monitor and nft monitor trace to respective groups.

[Pablo Neira Ayuso <pablo@netfilter.org>]

Hi Varsha,

On Tue, Jul 25, 2017 at 10:55:00AM +0530, Varsha Rao wrote:
> Subscribe nft monitor only to NFNLGRP_NFTABLES and nft monitor trace
> only to NFNLGRP_NFTRACE. In netlink_monitor() depending on the command
> call setsockopt() once.

Could you enhance this patch in a way that things work like the
following:

#1 nft monitor

This prints all events, both nftrace and nftables.

#2 nft monitor trace

This prints only trace events.

#3 nft monitor ruleset

This prints only ruleset events.

for #3, you have to extend the bison parser I think, it should be not
too complicated.

>+       if (monhandler->monitor_flags == (unsigned int)-1)

I think there must be a way to make this more readable, as well as
make it work in the way I propose above.

Thanks!