Comment 13 for bug 1468366

My suggestion would be to split this RFE between security groups and firewall: i.e. let's handle the feature enhancement separately even though the two could share some foundation elements. This is too big to be chewed in a single cycle.

Also, please clarify the use case: do not reference existing specs and ML threads. Do not reference design changes or Neutron internals. Please describe in your own words, what you would expect to happen?

If this is about providing an API to expose for administrators to fetch a list of events that relate to what security groups actions have taken place in the system, then this may be sensible, but anything more than that, I feel it's out of the scope of the project, especially logging actual packets.