probe::netfilter.ip.post_routing(3stap)

1PROBE::NETFILTER.I(3stap)      Networking Tapset     PROBE::NETFILTER.I(3stap)
2
3
4

NAME

6       probe::netfilter.ip.post_routing - Called immediately before an
7       outgoing IP packet leaves the computer
8

SYNOPSIS

10       netfilter.ip.post_routing
11

VALUES

13       nf_stop
14           Constant used to signify a 'stop' verdict
15
16       indev_name
17           Name of network device packet was received on (if known)
18
19       iphdr
20           Address of IP header
21
22       nf_repeat
23           Constant used to signify a 'repeat' verdict
24
25       outdev_name
26           Name of network device packet will be routed to (if known)
27
28       ipproto_tcp
29           Constant used to signify that the packet protocol is TCP
30
31       pf
32           Protocol family -- either “ipv4” or “ipv6”
33
34       ipproto_udp
35           Constant used to signify that the packet protocol is UDP
36
37       daddr
38           A string representing the destination IP address
39
40       sport
41           TCP or UDP source port (ipv4 only)
42
43       fin
44           TCP FIN flag (if protocol is TCP; ipv4 only)
45
46       data_str
47           A string representing the packet buffer contents
48
49       family
50           IP address family
51
52       length
53           The length of the packet buffer contents, in bytes
54
55       nf_queue
56           Constant used to signify a 'queue' verdict
57
58       ack
59           TCP ACK flag (if protocol is TCP; ipv4 only)
60
61       rst
62           TCP RST flag (if protocol is TCP; ipv4 only)
63
64       psh
65           TCP PSH flag (if protocol is TCP; ipv4 only)
66
67       urg
68           TCP URG flag (if protocol is TCP; ipv4 only)
69
70       data_hex
71           A hexadecimal string representing the packet buffer contents
72
73       outdev
74           Address of net_device representing output device, 0 if unknown
75
76       syn
77           TCP SYN flag (if protocol is TCP; ipv4 only)
78
79       nf_stolen
80           Constant used to signify a 'stolen' verdict
81
82       nf_drop
83           Constant used to signify a 'drop' verdict
84
85       protocol
86           Packet protocol from driver (ipv4 only)
87
88       indev
89           Address of net_device representing input device, 0 if unknown
90
91       dport
92           TCP or UDP destination port (ipv4 only)
93
94       nf_accept
95           Constant used to signify an 'accept' verdict
96
97       saddr
98           A string representing the source IP address
99

NAME

SYNOPSIS

VALUES

SEE ALSO