I can see this helping in instances when you need to debug something, and don’t want to force anyone to download wireshark or tcpdump. Being able to grab all tr

I can see this helping in instances when you need to debug something, and don’t want to force anyone to download wireshark or tcpdump. Being able to grab all traffic for a specific port is pretty cool. Also, if your doing a pen test / war game. I wonder if an added rule is persistent between reboots.