Show Table of Contents
probe::netfilter.ip.local_in
Name
probe::netfilter.ip.local_in — Called on an incoming IP packet addressed to the local computer
Synopsis
netfilter.ip.local_in
Values
nf_stolen- Constant used to signify a 'stolen' verdict
length- The length of the packet buffer contents, in bytes
urg- TCP URG flag (if protocol is TCP; ipv4 only)
psh- TCP PSH flag (if protocol is TCP; ipv4 only)
nf_repeat- Constant used to signify a 'repeat' verdict
family- IP address family
outdev- Address of net_device representing output device, 0 if unknown
ipproto_tcp- Constant used to signify that the packet protocol is TCP
indev_name- Name of network device packet was received on (if known)
nf_accept- Constant used to signify an 'accept' verdict
outdev_name- Name of network device packet will be routed to (if known)
protocol- Packet protocol from driver (ipv4 only)
rst- TCP RST flag (if protocol is TCP; ipv4 only)
nf_stop- Constant used to signify a 'stop' verdict
nf_queue- Constant used to signify a 'queue' verdict
dport- TCP or UDP destination port (ipv4 only)
iphdr- Address of IP header
fin- TCP FIN flag (if protocol is TCP; ipv4 only)
syn- TCP SYN flag (if protocol is TCP; ipv4 only)
ack- TCP ACK flag (if protocol is TCP; ipv4 only)
ipproto_udp- Constant used to signify that the packet protocol is UDP
saddr- A string representing the source IP address
sport- TCP or UDP source port (ipv4 only)
pf- Protocol family -- either “ipv4” or “ipv6”
daddr- A string representing the destination IP address
nf_drop- Constant used to signify a 'drop' verdict
indev- Address of net_device representing input device, 0 if unknown

Where did the comment section go?
Red Hat's documentation publication system recently went through an upgrade to enable speedier, more mobile-friendly content. We decided to re-evaluate our commenting platform to ensure that it meets your expectations and serves as an optimal feedback mechanism. During this redesign, we invite your input on providing feedback on Red Hat documentation via the discussion platform.