Kernel-3.10.0-957.el7_netfilter-sysctl

/proc/sys/net/netfilter/* Variables:

nf_log_all_netns - BOOLEAN
0 - disabled (default)
not 0 - enabled

By default, only init_net namespace can log packets into kernel log
with LOG target; this aims to prevent containers from flooding host
kernel log. If enabled, this target also works in other network
namespaces. This variable is only accessible from init_net.