How to debug iptables?

Hello!
I’m wondering if it’s possible to debug iptables somehow?
I see from the code that there is an iptables-trace-logging flag. Can anyone please tell me if I can use it via istioctl install --set ... ?

I’ve tried inserting the logs manually, but for mysterious reasons I can’t see the logs from the NAT table (even PREROUTING) when responding to a client request. Though the request from the client is normally logged.

I would appreciate any help, thanks!

So, I was eventually able to use this configuration:

apiVersion: install.istio.io/v1alpha1
kind: IstioOperator
spec:
  meshConfig:
    defaultConfig:
      proxyMetadata:
        IPTABLES_TRACE_LOGGING: "true"

And I see IPTABLES logs.

But the second part of the question is still relevant