netdev - "nft list hooks" in older kernels?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Thu, 22 Dec 2022 14:09:33 -0800
From:   Simon Kirby <sim@...tway.ca>
To:     Florian Westphal <fw@...len.de>, netdev@...r.kernel.org,
        netfilter-devel@...r.kernel.org
Subject: "nft list hooks" in older kernels?

Hello!

I'm once again running into some fun with IPVS and nftables NAT, and I
was curious if there's any way in earlier kernel to get a list similar to
"nft list hooks" provided by e2cf17d3774c323ef6dab6e9f7c0cfc5e742afd9
(in >= 5.14), as I'm attempting to compare with 4.14 (LTS) which we're
still stuck on in some instances (see "Inability to IPVS DR with nft dnat
since 9971a514ed26").

I attempted to backport this commit to v4.14, but it relies on quite a
lot of changes since then.

Also, where do the priorities for "type nat" chains actually end up being
stored? Are they printable?

Simon-