<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Discretely resetting anonymous counters is impossible"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1401">1401</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Discretely resetting anonymous counters is impossible
</td>
</tr>
<tr>
<th>Product</th>
<td>nftables
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>enhancement
</td>
</tr>
<tr>
<th>Priority</th>
<td>P5
</td>
</tr>
<tr>
<th>Component</th>
<td>nft
</td>
</tr>
<tr>
<th>Assignee</th>
<td>pablo@netfilter.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>kfm@plushkava.net
</td>
</tr></table>
<p>
<div>
<pre>As compared to iptables, this is the most surprising limitation of nftables
that I've encountered yet. Per the summary, there appears to be no way of
resetting anonymous counters.
I'm aware of the existence of named counters and that's a fine feature.
However, the use of named counters adds unnecessary complexity to rulesets that
would otherwise have no need of them. I realise that the design of nftables
might not lend itself as well to working with anonymous counters, but to anyone
familiar with iptables -Z, this would seem like a significant feature
ommission.
As an aside, the documentation for the functionality that currently is
supported is unclear. The grammar for the reset verb is described as:
{add | delete | list | reset} type [family] table object
It took some trial and error on my part to realise that "nft reset counters" is
actually a supported command, although it only works for named counters. Here
are the issues with the man page:
• it makes it look as though table and object are mandatory (but they are not)
• it does not make it apparent that "counters" is supported as the type
In fact, there are only two incidences of the word, counters, in the entire man
page. One of these is is in reference to the "list counters" command and the
other is in an incidental sentence concerning the "monitor ruleset" command.
My enhancement request is as follows:
• "nft reset counters" resets all counters (not just the named ones)
• "nft reset counters [family] table" resets anonmyous counters in the given
table
• "nft reset counters [family] table object" resets anonymous counters in the
given chain object
• if possible, add a means to reset the anonymous counters of a given rule</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>