From 4ae946d64e7336e0e612b13172b1b67191bddda9 Mon Sep 17 00:00:00 2001 From: rope Date: Sat, 12 Sep 2026 13:09:51 +0100 Subject: [PATCH] mediaserver: add tcpdump and conntrack-tools Router host had no packet-level diagnostics, so firewall rules couldn't be verified against actual traffic. Co-Authored-By: Claude Opus 5 --- hosts/FredOS-Mediaserver.nix | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/hosts/FredOS-Mediaserver.nix b/hosts/FredOS-Mediaserver.nix index 0559e3d..feb1d35 100644 --- a/hosts/FredOS-Mediaserver.nix +++ b/hosts/FredOS-Mediaserver.nix @@ -11,6 +11,12 @@ mergerfs wget util-linux + # This host is the router (services/router.nix) but shipped without any + # way to see a packet, so "is that nftables rule actually matching?" was + # unanswerable. Counters tell you a rule fired; these tell you what it + # fired on. + tcpdump + conntrack-tools javaPackages.compiler.temurin-bin.jre-25 unzip screen