>From https://bugzilla.netfilter.org/show_bug.cgi?id=1374:

  Listing an entire ruleset or a table with 'nft list ...' will also
  print all elements of all set definitions within the ruleset or
  requested table. Seeing the full set contents is not often necessary
  especially when requesting to see someone's ruleset for help and
  support purposes. It would be helpful if there was an option/flag for
  the nft tool to suppress set contents when listing.

This patch series implements the request by adding a new option: `-t`,
`--terse`.

Since v2:

  * changed the short option for `--numeric-time` from `-t` to `-T`;
  * used a new option (`-t`, `--terse`) instead of extending
    `--stateless`.

Since v1:

  * updated man-page and usage;
  * dropped 'dynamic' as a possible parameter-value.

Jeremy Sowden (2):
  src: use `-T` as the short option for `--numeric-time`.
  src: add --terse to suppress output of set elements.

 doc/libnftables.adoc           | 21 ++++++++++++---------
 doc/nft.txt                    |  6 +++++-
 include/nftables.h             |  5 +++++
 include/nftables/libnftables.h |  1 +
 src/main.c                     | 15 ++++++++++++---
 src/rule.c                     |  3 ++-
 6 files changed, 37 insertions(+), 14 deletions(-)

-- 
2.23.0

Reply via email to