amazon-eks-ami icon indicating copy to clipboard operation
amazon-eks-ami copied to clipboard

Add raw table log for iptables to log collector script

Open hiraken-w opened this issue 2 years ago • 0 comments

Description of changes:

The command "iptables --list" output the result of filter table by default.

 iptables --list --help
iptables v1.8.4
(snip)
  --table	-t table	table to manipulate (default: `filter')

However, the result of filter table has already got in the file "iptables-filter.txt". So the file "iptables.txt" and the file "iptables-filter.txt" are same result.

I believe that the table we want is raw table. Therefore I added it. The raw table is used by security groups for pods.

Testing Done

For this verification, I added the following rules to the raw table.

sudo iptables -t raw -I PREROUTING -p tcp --dport 8888 -j TRACE
sudo iptables -t raw -I OUTPUT -p tcp --dport 8888  -j TRACE

I executed the following commands.

curl -O https://raw.githubusercontent.com/hiraken-w/amazon-eks-ami/7ad03c22ff99ba06cecc52c7c52ee1a931b99aa4/log-collector-script/linux/eks-log-collector.sh
sudo bash eks-log-collector.sh

As a result, the raw table was output successfully.

cat iptables-raw.txt
Chain PREROUTING (policy ACCEPT 1406 packets, 255K bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 TRACE      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:8888

Chain OUTPUT (policy ACCEPT 774 packets, 85475 bytes)
 pkts bytes target     prot opt in     out     source               destination
    0     0 TRACE      tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:8888
=======
Total Number of Rules: 2

hiraken-w avatar Aug 14 '22 19:08 hiraken-w