ListChain returns a single chain configured in the specified table

ListTablesOfFamily returns currently configured tables for the specified table family in the kernel. It lists all tables if family is TableFamilyUnspe

Marshal a Match or Target Info type into its binary representation.

MustConcatSetType does the same as ConcatSetType, but panics instead of an error. It simplifies safe initialization of global variables.

NetFirstAndLastIP takes the beginning address of an entire network in CIDR notation (e.g. 192.168.1.0/24) and returns the first and last IP addresses

NewMonitor returns a Monitor with options to be started. Note that NewMonitor only prepares a Monitor. To install the monitor, call [Conn.AddMonitor]

For dealing with types not supported by the encoding/binary interface

PutInt32 marshals an int32 in native endianess and alignment.

PutString marshals a string.

Unmarshal Info binary payload into its corresponding dedicated type as indicated by the name argument. In several cases, unmarshalling depends on the

netlinkConnUnderLock works like netlinkConn but must be called while holding the Conn.mu lock.

nfdump returns a hexdump of 4 bytes per line (like nft --debug=all), allowing users to make sense of large byte literals more easily.

Conn opens an nftables connection that records netlink messages into the Recorder.

DelChain deletes the specified Chain. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains#Deleting_chains

DelRule deletes the specified Rule, rule's handle cannot be 0

DelSet deletes a specific set, along with all elements it contains.

DelTable deletes a specific table, along with all chains/rules it contains.

Diff returns the first difference between the specified netlink messages and the expected netlink message payloads.

FlushChain removes all rules within the specified Chain. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_chains#Flushing_chain

FlushSet deletes all data points from an nftables set.

FlushTable removes all rules in all chains within the specified Table. See also https://wiki.nftables.org/wiki-nftables/index.php/Configuring_tables#F

GetRule returns the rules in the specified table and chain. Deprecated: use GetRules instead.

GetSetByName returns the set in the specified table if matching name is found.

Int32 unmarshals an int32 in native endianess and alignment. It returns ErrEOF when trying to read beyond the payload.

ListChains returns currently configured chains in the kernel

ListChainsOfTableFamily returns currently configured chains for the specified family in the kernel. It lists all chains ins all tables if family is Ta

MatchRulesetBytes is a test helper that ensures the fillRuleset modifications correspond to the provided want netlink message payloads

NewRecorder returns a ready-to-use Recorder.

PutUint16 marshals an uint16 in native endianess and alignment.

PutUint32 marshals an uint32 in native endianess and alignment.

PutUint64 marshals an uint64 in native endianess and alignment.

Requests returns the recorded netlink messages (typically nftables requests).

ResetNamedObjects reset all the Obj that belongs to the given table This function always return NamedObj types

SetDeleteElements deletes data points from an nftables set.

StringWithLength unmarshals a string of a given length (for non-null terminated strings)

Uint16 unmarshals an uint16 in native endianess and alignment. It returns ErrEOF when trying to read beyond the payload.

Uint32 unmarshals an uint32 in native endianess and alignment. It returns ErrEOF when trying to read beyond the payload.

Uint64 unmarshals an uint64 in native endianess and alignment. It returns ErrEOF when trying to read beyond the payload.

WithSockOptions sets the specified socket options when creating a new netlink connection.

exprsBytesFromName parses raw expressions bytes based on provided expr name

exprsFromBytes parses nested raw expressions bytes to construct nftables expressions

linediff returns a side-by-side diff of two nfdump() return values, flagging lines which are not equal with an exclamation point prefix.