Scroll to navigation

PROBE::NETFILTER.A(3stap) Networking Tapset PROBE::NETFILTER.A(3stap)

NAME

probe::netfilter.arp.in - - Called for each incoming ARP packet

SYNOPSIS

netfilter.arp.in 

VALUES

length
The length of the packet buffer contents, in bytes

ar_sip

Ethernet+IP only (ar_pro==0x800): source IP address

nf_queue

Constant used to signify a 'queue' verdict

outdev_name

Name of network device packet will be routed to (if known)

indev

Address of net_device representing input device, 0 if unknown

ar_hrd

Format of hardware address

ar_data

Address of ARP packet data region (after the header)

nf_accept

Constant used to signify an 'accept' verdict

outdev

Address of net_device representing output device, 0 if unknown

indev_name

Name of network device packet was received on (if known)

ar_tip

Ethernet+IP only (ar_pro==0x800): target IP address

ar_op

ARP opcode (command)

ar_pln

Length of protocol address

pf

Protocol family -- always “arp”

ar_hln

Length of hardware address

arphdr

Address of ARP header

nf_stop

Constant used to signify a 'stop' verdict

ar_sha

Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address

nf_drop

Constant used to signify a 'drop' verdict

data_hex

A hexadecimal string representing the packet buffer contents

data_str

A string representing the packet buffer contents

ar_tha

Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address

nf_repeat

Constant used to signify a 'repeat' verdict

nf_stolen

Constant used to signify a 'stolen' verdict

ar_pro

Format of protocol address

SEE ALSO0

tapset::netfilter(3stap)
May 2021 SystemTap Tapset Reference