Scroll to navigation

PROBE::NETFILTER.I(3stap) Networking Tapset PROBE::NETFILTER.I(3stap)

NAME

probe::netfilter.ip.pre_routing - Called before an IP packet is routed

SYNOPSIS

probe netfilter.ip.pre_routing {}

VALUES

pf

Protocol family - either 'ipv4' or 'ipv6'

indev

Address of net_device representing input device, 0 if unknown

sport

TCP or UDP source port (ipv4 only)

ack

TCP ACK flag (if protocol is TCP; ipv4 only)

psh

TCP PSH flag (if protocol is TCP; ipv4 only)

nf_accept

Constant used to signify an 'accept' verdict

nf_repeat

Constant used to signify a 'repeat' verdict

outdev

Address of net_device representing output device, 0 if unknown

saddr

A string representing the source IP address

data_hex

A hexadecimal string representing the packet buffer contents

outdev_name

Name of network device packet will be routed to (if known)

nf_stolen

Constant used to signify a 'stolen' verdict

urg

TCP URG flag (if protocol is TCP; ipv4 only)

data_str

A string representing the packet buffer contents

ipproto_tcp

Constant used to signify that the packet protocol is TCP

nf_stop

Constant used to signify a 'stop' verdict

protocol

Packet protocol from driver (ipv4 only)

fin

TCP FIN flag (if protocol is TCP; ipv4 only)

indev_name

Name of network device packet was received on (if known)

family

IP address family

dport

TCP or UDP destination port (ipv4 only)

rst

TCP RST flag (if protocol is TCP; ipv4 only)

length

The length of the packet buffer contents, in bytes

ipproto_udp

Constant used to signify that the packet protocol is UDP

syn

TCP SYN flag (if protocol is TCP; ipv4 only)

iphdr

Address of IP header

nf_drop

Constant used to signify a 'drop' verdict

nf_queue

Constant used to signify a 'queue' verdict

daddr

A string representing the destination IP address

SEE ALSO0

tapset::netfilter(3stap)

September 2026 SystemTap Tapset Reference Ver