From e56a7c86ecb83390a881ec7f4e0207bed2c75557 Mon Sep 17 00:00:00 2001 From: Nicolas Fort Date: Fri, 17 Mar 2023 08:00:58 -0300 Subject: T5050: firewall: add log-options in firewall docs --- docs/configuration/firewall/general.rst | 31 +++++++++++++++++++++++++++---- 1 file changed, 27 insertions(+), 4 deletions(-) (limited to 'docs/configuration') diff --git a/docs/configuration/firewall/general.rst b/docs/configuration/firewall/general.rst index 9cd747b5..c217ba6c 100644 --- a/docs/configuration/firewall/general.rst +++ b/docs/configuration/firewall/general.rst @@ -335,13 +335,36 @@ the action of the rule will be executed. Enable or disable logging for the matched packet. -.. cfgcmd:: set firewall name rule <1-999999> log-level [emerg | - alert | crit | err | warn | notice | info | debug] -.. cfgcmd:: set firewall ipv6-name rule <1-999999> log-level [emerg | - alert | crit | err | warn | notice | info | debug] +.. cfgcmd:: set firewall name rule <1-999999> log-options level + [emerg | alert | crit | err | warn | notice | info | debug] +.. cfgcmd:: set firewall ipv6-name rule <1-999999> log-options level + [emerg | alert | crit | err | warn | notice | info | debug] Define log-level. Only applicable if rule log is enable. +.. cfgcmd:: set firewall name rule <1-999999> log-options group + <0-65535> +.. cfgcmd:: set firewall ipv6-name rule <1-999999> log-options group + <0-65535> + + Define log group to send message to. Only applicable if rule log is enable. + +.. cfgcmd:: set firewall name rule <1-999999> log-options snaplen + <0-9000> +.. cfgcmd:: set firewall ipv6-name rule <1-999999> log-options snaplen + <0-9000> + + Define length of packet payload to include in netlink message. Only + applicable if rule log is enable and log group is defined. + +.. cfgcmd:: set firewall name rule <1-999999> log-options + queue-threshold <0-65535> +.. cfgcmd:: set firewall ipv6-name rule <1-999999> log-options + queue-threshold <0-65535> + + Define number of packets to queue inside the kernel before sending them to + userspace. Only applicable if rule log is enable and log group is defined. + .. cfgcmd:: set firewall name rule <1-999999> disable .. cfgcmd:: set firewall ipv6-name rule <1-999999> disable -- cgit v1.2.3