probe::netfilter.ip.post_routing(3stap) — Linux manual page

NAME | SYNOPSIS | VALUES | SEE ALSO | COLOPHON

PROBE::NETFILTER.I(3stap)   Networking Tapset  PROBE::NETFILTER.I(3stap)

NAME         top

       probe::netfilter.ip.post_routing - Called immediately before an
       outgoing IP packet leaves the computer

SYNOPSIS         top

       netfilter.ip.post_routing

VALUES         top

       ipproto_udp
           Constant used to signify that the packet protocol is UDP

       fin
           TCP FIN flag (if protocol is TCP; ipv4 only)

       data_str
           A string representing the packet buffer contents

       iphdr
           Address of IP header

       psh
           TCP PSH flag (if protocol is TCP; ipv4 only)

       daddr
           A string representing the destination IP address

       nf_stop
           Constant used to signify a 'stop' verdict

       nf_queue
           Constant used to signify a 'queue' verdict

       protocol
           Packet protocol from driver (ipv4 only)

       ack
           TCP ACK flag (if protocol is TCP; ipv4 only)

       saddr
           A string representing the source IP address

       outdev_name
           Name of network device packet will be routed to (if known)

       outdev
           Address of net_device representing output device, 0 if
           unknown

       pf
           Protocol family -- either “ipv4” or “ipv6”

       sport
           TCP or UDP source port (ipv4 only)

       indev
           Address of net_device representing input device, 0 if unknown

       nf_stolen
           Constant used to signify a 'stolen' verdict

       syn
           TCP SYN flag (if protocol is TCP; ipv4 only)

       dport
           TCP or UDP destination port (ipv4 only)

       family
           IP address family

       ipproto_tcp
           Constant used to signify that the packet protocol is TCP

       nf_accept
           Constant used to signify an 'accept' verdict

       data_hex
           A hexadecimal string representing the packet buffer contents

       nf_repeat
           Constant used to signify a 'repeat' verdict

       length
           The length of the packet buffer contents, in bytes

       nf_drop
           Constant used to signify a 'drop' verdict

       rst
           TCP RST flag (if protocol is TCP; ipv4 only)

       urg
           TCP URG flag (if protocol is TCP; ipv4 only)

       indev_name
           Name of network device packet was received on (if known)

SEE ALSO         top

       tapset::netfilter(3stap)

COLOPHON         top

       This page is part of the systemtap (a tracing and live-system
       analysis tool) project.  Information about the project can be
       found at ⟨https://sourceware.org/systemtap/⟩.  If you have a bug
       report for this manual page, send it to [email protected].
       This page was obtained from the project's upstream Git repository
       ⟨git://sourceware.org/git/systemtap.git⟩ on 2024-06-14.  (At that
       time, the date of the most recent commit that was found in the
       repository was 2024-06-13.)  If you discover any rendering
       problems in this HTML version of the page, or you believe there
       is a better or more up-to-date source for the page, or you have
       corrections or improvements to the information in this COLOPHON
       (which is not part of the original manual page), send a mail to
       [email protected]

SystemTap Tapset Reference     April 2024      PROBE::NETFILTER.I(3stap)

Pages that refer to this page: tapset::netfilter(3stap)