Re: [Fwd: Re: Shortcuts to counting rules?]

[Rick Jones <rick.jones2@hp.com>]

Jan Engelhardt wrote:
> On Friday 2008-10-31 19:54, Rick Jones wrote:
> 
>>>iptables-save | grep ^- | wc -l
>>
>>Here is where I cop to being a luddite who prefers straight C to calling
>>system() :)
> 
> 
> But there is no C library. And libiptc is so strongly internal that
> it does not fall under libraries-to-use.

I'm willing to code without a library, I just need to know how to parse 
the set of entries I suspect.

Someone in netfilter suggested the getsockopt() calls were part of the 
ABI, which implies what the getsockopt() calls return is reasonably 
"stable."  Is that actually the case, or can one not even ass-u-me the 
getsockopt() calls themselves are stable?

>>>And strace should not be taught that. We have seen at least one
>>>change of the interpretation of the binary stream.
>>
>>How about at least the option name(s) so it can present something other than
>>the 0x40/0x41 etc?
> 
> 
> I do not mind that. Turn to the strace maintainer about getting that
> implemented.

Will do.

rick jones