NFTables: Can not add logs

NFTables: Can not add logs

[Andreas Hoefler]

Hi 

I am trying to figure out why I sometimes lose connection during some test activites.
Therefore I would like to use the logging option to see what has been dropped.

But I get:
nft add rule x y log
Error: Could not process rule: No such file or directory
add rule x y log
^^^^^^^^^^^^^^^^^

My config looks like this:
root@cpm:/lib/modules/5.4.58-rt35-gec079e118e# cat /proc/config.gz | gunzip | grep NFT
# CONFIG_NFT_NUMGEN is not set
CONFIG_NFT_CT=y
# CONFIG_NFT_FLOW_OFFLOAD is not set
CONFIG_NFT_COUNTER=y
# CONFIG_NFT_CONNLIMIT is not set
CONFIG_NFT_LOG=y
CONFIG_NFT_LIMIT=y
# CONFIG_NFT_MASQ is not set
# CONFIG_NFT_REDIR is not set
CONFIG_NFT_NAT=y
# CONFIG_NFT_TUNNEL is not set
# CONFIG_NFT_OBJREF is not set
# CONFIG_NFT_QUOTA is not set
# CONFIG_NFT_REJECT is not set
# CONFIG_NFT_COMPAT is not set
CONFIG_NFT_HASH=y
# CONFIG_NFT_XFRM is not set
# CONFIG_NFT_SOCKET is not set
# CONFIG_NFT_OSF is not set
# CONFIG_NFT_TPROXY is not set
# CONFIG_NFT_SYNPROXY is not set
# CONFIG_NFT_DUP_NETDEV is not set
# CONFIG_NFT_FWD_NETDEV is not set
# CONFIG_NFT_DUP_IPV4 is not set
# CONFIG_NFT_FIB_IPV4 is not set
# CONFIG_NFT_DUP_IPV6 is not set
# CONFIG_NFT_FIB_IPV6 is not set
# CONFIG_NFT_BRIDGE_META is not set
# CONFIG_NFTL is not set
# CONFIG_INFTL is not set

Is there anything I am missing or should the above work?

Thx
Andy

Re: NFTables: Can not add logs

[Florian Westphal]

Andreas Hoefler <andreas.hoefler@hitachi-powergrids.com> wrote:
> Hi 
> 
> I am trying to figure out why I sometimes lose connection during some test activites.
> Therefore I would like to use the logging option to see what has been dropped.
> 
> But I get:
> nft add rule x y log
> Error: Could not process rule: No such file or directory
> add rule x y log
^^^^^^^^^^^^^^^^^
> CONFIG_NFT_LOG=y

Missing CONFIG_NF_LOG_IPV4?

RE: NFTables: Can not add logs

[Andreas Hoefler]

>Andreas Hoefler <andreas.hoefler@hitachi-powergrids.com> wrote:
>> Hi
>>
>> I am trying to figure out why I sometimes lose connection during some test activites.
>> Therefore I would like to use the logging option to see what has been dropped.
>>
>> But I get:
>> nft add rule x y log
>> Error: Could not process rule: No such file or directory add rule x y 
>> log
>^^^^^^^^^^^^^^^^^
>> CONFIG_NFT_LOG=y
>
>Missing CONFIG_NF_LOG_IPV4?
Absolutely! Thx a lot.

Cheers
Andy