[Bug 1185] counter flag proposal for sets and maps

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Mon Oct 9 16:20:06 CEST 2017


https://bugzilla.netfilter.org/show_bug.cgi?id=1185

--- Comment #5 from Karel Rericha <karel at unitednetworks.cz> ---
(In reply to Pablo Neira Ayuso from comment #4)
> (In reply to Karel Rericha from comment #3)
> > Actually on second thought I just want to know, how many times set or map
> > element was hit.
> 
> I see. So it would be a global counter for this set/map that updated if an
> element lookup succeeds.
> 
> Right?

No, separate counter for each element. Definition could look like:

table x {
    chain y {
        ...
        set s {
            type ipv4_addr . type ipv4_addr; flags counter;
        }

        map m {
            type inet_service : ipv4_addr; flags counter;
        }
    }
}

Listing could look like (similar to listing of timeout flag):

table x y {
        set s {
                type ipv4_addr
                elements = { 192.168.100.1 counter 5, 192.168.100.2 counter 0 }
        }
}

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20171009/a2cf32c3/attachment.html>


More information about the netfilter-buglog mailing list