probe::netfilter.ip.post_routing
Prev Chapter 13. Networking Tapset Next

Name

probe::netfilter.ip.post_routing — Called immediately before an outgoing IP packet leaves the computer

Synopsis

netfilter.ip.post_routing

Values

nf_queue

Constant used to signify a 'queue' verdict

data_str

A string representing the packet buffer contents

protocol

Packet protocol from driver (ipv4 only)

outdev_name

Name of network device packet will be routed to (if known)

dport

TCP or UDP destination port (ipv4 only)

length

The length of the packet buffer contents, in bytes

rst

TCP RST flag (if protocol is TCP; ipv4 only)

syn

TCP SYN flag (if protocol is TCP; ipv4 only)

saddr

A string representing the source IP address

nf_stop

Constant used to signify a 'stop' verdict

sport

TCP or UDP source port (ipv4 only)

nf_stolen

Constant used to signify a 'stolen' verdict

iphdr

Address of IP header

psh

TCP PSH flag (if protocol is TCP; ipv4 only)

outdev

Address of net_device representing output device, 0 if unknown

urg

TCP URG flag (if protocol is TCP; ipv4 only)

nf_accept

Constant used to signify an 'accept' verdict

indev_name

Name of network device packet was received on (if known)

fin

TCP FIN flag (if protocol is TCP; ipv4 only)

pf

Protocol family -- either “ipv4” or “ipv6”

family

IP address family

ipproto_udp

Constant used to signify that the packet protocol is UDP

data_hex

A hexadecimal string representing the packet buffer contents

daddr

A string representing the destination IP address

nf_drop

Constant used to signify a 'drop' verdict

ipproto_tcp

Constant used to signify that the packet protocol is TCP

indev

Address of net_device representing input device, 0 if unknown

ack

TCP ACK flag (if protocol is TCP; ipv4 only)

nf_repeat

Constant used to signify a 'repeat' verdict

Prev Up Next
probe::netfilter.ip.local_out Home probe::netfilter.ip.pre_routing