1PROBE::NETFILTER.A(3stap) Networking Tapset PROBE::NETFILTER.A(3stap)
2
3
4
6 probe::netfilter.arp.in - - Called for each incoming ARP packet
7
9 netfilter.arp.in
10
12 pf
13 Protocol family -- always “arp”
14
15 indev_name
16 Name of network device packet was received on (if known)
17
18 ar_tha
19 Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
20
21 nf_stop
22 Constant used to signify a 'stop' verdict
23
24 data_str
25 A string representing the packet buffer contents
26
27 length
28 The length of the packet buffer contents, in bytes
29
30 nf_stolen
31 Constant used to signify a 'stolen' verdict
32
33 ar_hln
34 Length of hardware address
35
36 ar_sha
37 Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
38
39 data_hex
40 A hexadecimal string representing the packet buffer contents
41
42 nf_queue
43 Constant used to signify a 'queue' verdict
44
45 nf_drop
46 Constant used to signify a 'drop' verdict
47
48 outdev
49 Address of net_device representing output device, 0 if unknown
50
51 ar_sip
52 Ethernet+IP only (ar_pro==0x800): source IP address
53
54 arphdr
55 Address of ARP header
56
57 outdev_name
58 Name of network device packet will be routed to (if known)
59
60 ar_pro
61 Format of protocol address
62
63 ar_tip
64 Ethernet+IP only (ar_pro==0x800): target IP address
65
66 ar_op
67 ARP opcode (command)
68
69 nf_accept
70 Constant used to signify an 'accept' verdict
71
72 indev
73 Address of net_device representing input device, 0 if unknown
74
75 ar_pln
76 Length of protocol address
77
78 ar_data
79 Address of ARP packet data region (after the header)
80
81 ar_hrd
82 Format of hardware address
83
84 nf_repeat
85 Constant used to signify a 'repeat' verdict
86
88 tapset::netfilter(3stap)
89
90
91
92SystemTap Tapset Reference April 2023 PROBE::NETFILTER.A(3stap)