search

coreos / mayday

A diagnostics tool for capturing system state.
Apache License 2.0
80 stars 27 forks source link

Save iptables rules #50

Closed cgag closed 7 years ago

cgag commented 7 years ago

iptables-save dumps the rules to stdout, i think there are prettier commands that could be run as well, I don't actually know iptables very well. I think @bison might.

We might already do this I just wanted to write the idea down before I forget.

bison commented 7 years ago

Yeah, iptables-save dumps the raw rules. You can pipe that to iptables-xml to get XML. You can also just run something like iptables -vnL to list the rules with packet counts and things. That will only show the filter table by default.

No idea what the most relevant format for mayday is though.

tschuy commented 7 years ago

I'll just have it run iptables -vnL for now. If support or someone else using it wants a more specific format, we can easily change it.

Hopefully I don't decide this is the most important information for me to want to parse later on...

brianredbeard commented 7 years ago

Resolved as per #52