1PROBE::NETFILTER.A(3stap) Networking Tapset PROBE::NETFILTER.A(3stap)
2
3
4
6 probe::netfilter.arp.in - - Called for each incoming ARP packet
7
9 netfilter.arp.in
10
12 ar_sip
13 Ethernet+IP only (ar_pro==0x800): source IP address
14
15 ar_hrd
16 Format of hardware address
17
18 ar_pro
19 Format of protocol address
20
21 nf_stop
22 Constant used to signify a 'stop' verdict
23
24 ar_tip
25 Ethernet+IP only (ar_pro==0x800): target IP address
26
27 nf_stolen
28 Constant used to signify a 'stolen' verdict
29
30 ar_hln
31 Length of hardware address
32
33 indev
34 Address of net_device representing input device, 0 if unknown
35
36 data_hex
37 A hexadecimal string representing the packet buffer contents
38
39 pf
40 Protocol family -- always “arp”
41
42 ar_sha
43 Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
44
45 nf_repeat
46 Constant used to signify a 'repeat' verdict
47
48 length
49 The length of the packet buffer contents, in bytes
50
51 data_str
52 A string representing the packet buffer contents
53
54 ar_pln
55 Length of protocol address
56
57 outdev_name
58 Name of network device packet will be routed to (if known)
59
60 arphdr
61 Address of ARP header
62
63 ar_data
64 Address of ARP packet data region (after the header)
65
66 ar_tha
67 Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
68
69 nf_drop
70 Constant used to signify a 'drop' verdict
71
72 ar_op
73 ARP opcode (command)
74
75 nf_queue
76 Constant used to signify a 'queue' verdict
77
78 indev_name
79 Name of network device packet was received on (if known)
80
81 outdev
82 Address of net_device representing output device, 0 if unknown
83
84 nf_accept
85 Constant used to signify an 'accept' verdict
86
88 tapset::netfilter(3stap)
89
90
91
92SystemTap Tapset Reference November 2021 PROBE::NETFILTER.A(3stap)