From ab648af4c07e8a09e0a1236b661ac0ec0639ff17 Mon Sep 17 00:00:00 2001
From: l0crian1 <143656816+l0crian1@users.noreply.github.com>
Date: Fri, 18 Apr 2025 06:56:45 -0400
Subject: firewall: T7370: Add conntrack log commands (#4459)

* firewall: T7370: Add conntrack log commands

Added the following commands:

show log conntrack
show log conntrack event new
show log conntrack event update
show log conntrack event destroy

* firewall: T7370: Add conntrack log commands

Added the following commands:

show log conntrack
show log conntrack event new
show log conntrack event update
show log conntrack event destroy

* firewall: T7370: Add conntrack log commands

Added the following commands:

show log conntrack
show log conntrack event new
show log conntrack event update
show log conntrack event destroy

* Fix capitalization

---------

Co-authored-by: l0crian1 <ryan.claridge13@gmail.com>
Co-authored-by: Daniil Baturin <daniil@baturin.org>
---
 op-mode-definitions/show-log.xml.in | 33 +++++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)

diff --git a/op-mode-definitions/show-log.xml.in b/op-mode-definitions/show-log.xml.in
index 0e6113af0..ee2e2bf70 100755
--- a/op-mode-definitions/show-log.xml.in
+++ b/op-mode-definitions/show-log.xml.in
@@ -50,6 +50,39 @@
             </properties>
             <command>cat $(printf "%s\n" /var/log/messages* | sort -nr) | grep -e heartbeat -e cl_status -e mach_down -e ha_log</command>
           </leafNode>
+          <node name="conntrack">
+            <properties>
+              <help>Show log for conntrack events</help>
+            </properties>
+            <command>journalctl --no-hostname --boot -t vyos-conntrack-logger --grep='\[(NEW|UPDATE|DESTROY)\]'</command>
+            <children>
+              <node name="event">
+                <properties>
+                  <help>Show log for conntrack events</help>
+                </properties>
+                <children>
+                  <leafNode name="new">
+                    <properties>
+                      <help>Show log for conntrack events</help>
+                    </properties>
+                    <command>journalctl --no-hostname --boot -t vyos-conntrack-logger --grep='\[(NEW)\]'</command>
+                  </leafNode>
+                  <leafNode name="update">
+                    <properties>
+                      <help>Show log for conntrack events</help>
+                    </properties>
+                    <command>journalctl --no-hostname --boot -t vyos-conntrack-logger --grep='\[(UPDATE)\]'</command>
+                  </leafNode>
+                  <leafNode name="destroy">
+                    <properties>
+                      <help>Show log for Conntrack Events</help>
+                    </properties>
+                    <command>journalctl --no-hostname --boot -t vyos-conntrack-logger --grep='\[(DESTROY)\]'</command>
+                  </leafNode>
+                </children>
+              </node>
+            </children>
+          </node>
           <leafNode name="conntrack-sync">
             <properties>
               <help>Show log for Conntrack-sync</help>
-- 
cgit v1.2.3