<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [sets] improve flags combination"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1470#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [sets] improve flags combination"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1470">bug 1470</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to vtolkm from <a href="show_bug.cgi?id=1470#c0">comment #0</a>)
<span class="quote">> kernel 5.9.0-rc6 armv7l | nft 0.9.6
>
> -----
>
> in set this this works:
>
> flags dynamic, timeout
>
> does not work:
>
> flags dynamic, timeout, interval</span >
This reads as, I would to have a set that:
- it is going to be updated from the packet path
- entries have a timeout
- entries are composed of an internal (prefix or range)
<span class="quote">> producing:
>
> Error: Could not process rule: Not supported
>
> ----
>
> having looked up wiki & man there is no mentioning that flags are mutually
> or otherwise exclusive and thus assumed that any given combination to work.</span >
Kernel does not support for updating an interval set from the packet path,
hence the EOPNOTSUPP.
Should we document that interval and dynamic is not supported?</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>