-

netflow/iptables.sh

@@ -19,12 +19,19 @@ __get_mount_paths_cgroup_id() {
 }
 # __get_mount_paths_cgroup_id
 
+__get_in_cgroup_ids() {
+	awk '$0 != 1' /sys/fs/cgroup/net_cls,net_prio/*/net_cls.classid
+}
+
 __main() {
 	update-alternatives --set iptables /usr/sbin/iptables-legacy 2>/dev/null
 	update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy 2>/dev/null
 
 	readarray -t _cgroup_ids < <(__get_mount_paths_cgroup_id)
-	:
+
+	if [[ ${#_cgroup_ids[@]} -eq 0 ]]; then
+		readarray -t _cgroup_ids < <(__get_in_cgroup_ids)
+	fi
 
 	_owner_id=52000
 	_chain="output_netflow_owner_${_owner_id}"