1PROBE::NETFILTER.A(3stap) Networking Tapset PROBE::NETFILTER.A(3stap)
2
3
4
6 probe::netfilter.arp.in - - Called for each incoming ARP packet
7
9 netfilter.arp.in
10
12 pf
13 Protocol family -- always “arp”
14
15 ar_pro
16 Format of protocol address
17
18 ar_pln
19 Length of protocol address
20
21 nf_stop
22 Constant used to signify a 'stop' verdict
23
24 length
25 The length of the packet buffer contents, in bytes
26
27 ar_sha
28 Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
29
30 ar_tha
31 Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
32
33 ar_data
34 Address of ARP packet data region (after the header)
35
36 outdev_name
37 Name of network device packet will be routed to (if known)
38
39 ar_op
40 ARP opcode (command)
41
42 ar_hln
43 Length of hardware address
44
45 ar_tip
46 Ethernet+IP only (ar_pro==0x800): target IP address
47
48 ar_sip
49 Ethernet+IP only (ar_pro==0x800): source IP address
50
51 ar_hrd
52 Format of hardware address
53
54 indev_name
55 Name of network device packet was received on (if known)
56
57 arphdr
58 Address of ARP header
59
60 indev
61 Address of net_device representing input device, 0 if unknown
62
63 outdev
64 Address of net_device representing output device, 0 if unknown
65
66 data_str
67 A string representing the packet buffer contents
68
69 nf_queue
70 Constant used to signify a 'queue' verdict
71
72 data_hex
73 A hexadecimal string representing the packet buffer contents
74
75 nf_accept
76 Constant used to signify an 'accept' verdict
77
78 nf_repeat
79 Constant used to signify a 'repeat' verdict
80
81 nf_stolen
82 Constant used to signify a 'stolen' verdict
83
84 nf_drop
85 Constant used to signify a 'drop' verdict
86
88 tapset::netfilter(3stap)
89
90
91
92SystemTap Tapset Reference October 2018 PROBE::NETFILTER.A(3stap)