netfilter.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* nftables: udp port matching on bridge
@ 2014-08-03 21:04 Michael Rigoni
  0 siblings, 0 replies; only message in thread
From: Michael Rigoni @ 2014-08-03 21:04 UTC (permalink / raw)
  To: netfilter

Hi all,

I was trying out nftables and as a test I wanted to log dhcp packets 
from a given bridge port but I could not make it work (kernel 3.15.8 and 
nft  v0.3).
# nft list table bridge test
table bridge test {
     chain forward {
          type filter hook forward priority -200;
          iif eth1.5 ip protocol udp udp dport bootps log group 2
     }
}

Nothing shows up in the logs, however when logging udp packets (iif 
eth1.5 ip protocol udp log group2), I do see the DHCP packets in the 
logs. Any clues on what I am doing wrong ?

Also, is there an equivalent of iptables'--physdev-in  for ip/ip6/inet 
tables ?

Michael

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2014-08-03 21:04 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2014-08-03 21:04 nftables: udp port matching on bridge Michael Rigoni

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).