probe::netfilter.arp.in

probe::netfilter.arp.in
Prev	Chapter 13. Networking Tapset	Next

Name

probe::netfilter.arp.in — - Called for each incoming ARP packet

Synopsis

netfilter.arp.in

Values

nf_accept: Constant used to signify an 'accept' verdict
length: The length of the packet buffer contents, in bytes
nf_stolen: Constant used to signify a 'stolen' verdict
nf_drop: Constant used to signify a 'drop' verdict
ar_sip: Ethernet+IP only (ar_pro==0x800): source IP address
nf_stop: Constant used to signify a 'stop' verdict
ar_hln: Length of hardware address
indev_name: Name of network device packet was received on (if known)
arphdr: Address of ARP header
ar_tha: Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
outdev_name: Name of network device packet will be routed to (if known)
outdev: Address of net_device representing output device, 0 if unknown
ar_sha: Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
data_str: A string representing the packet buffer contents
nf_queue: Constant used to signify a 'queue' verdict
ar_pln: Length of protocol address
ar_data: Address of ARP packet data region (after the header)
ar_hrd: Format of hardware address
ar_pro: Format of protocol address
data_hex: A hexadecimal string representing the packet buffer contents
nf_repeat: Constant used to signify a 'repeat' verdict
indev: Address of net_device representing input device, 0 if unknown
pf: Protocol family -- always “arp”
ar_op: ARP opcode (command)
ar_tip: Ethernet+IP only (ar_pro==0x800): target IP address

Prev	Up	Next
probe::netfilter.arp.forward	Home	probe::netfilter.arp.out