Red Hat Training
A Red Hat training course is available for Red Hat Enterprise Linux
probe::netfilter.arp.in
Name
probe::netfilter.arp.in — - Called for each incoming ARP packet
Synopsis
netfilter.arp.in
Values
ar_hln- Length of hardware address
nf_stop- Constant used to signify a 'stop' verdict
nf_accept- Constant used to signify an 'accept' verdict
ar_tha- Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
ar_data- Address of ARP packet data region (after the header)
outdev_name- Name of network device packet will be routed to (if known)
outdev- Address of net_device representing output device, 0 if unknown
nf_repeat- Constant used to signify a 'repeat' verdict
arphdr- Address of ARP header
indev_name- Name of network device packet was received on (if known)
nf_stolen- Constant used to signify a 'stolen' verdict
length- The length of the packet buffer contents, in bytes
ar_pln- Length of protocol address
ar_sha- Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
pf- Protocol family -- always “arp”
nf_drop- Constant used to signify a 'drop' verdict
ar_pro- Format of protocol address
ar_sip- Ethernet+IP only (ar_pro==0x800): source IP address
indev- Address of net_device representing input device, 0 if unknown
ar_tip- Ethernet+IP only (ar_pro==0x800): target IP address
ar_hrd- Format of hardware address
ar_op- ARP opcode (command)
nf_queue- Constant used to signify a 'queue' verdict
