probe::netfilter.arp.in — - Called for each incoming ARP packet
netfilter.arp.in
ar_sip
Ethernet+IP only (ar_pro==0x800): source IP address
ar_tip
Ethernet+IP only (ar_pro==0x800): target IP address
ar_hrd
Format of hardware address
ar_tha
Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address
ar_op
ARP opcode (command)
nf_repeat
Constant used to signify a 'repeat' verdict
outdev_name
Name of network device packet will be routed to (if known)
arphdr
Address of ARP header
length
The length of the packet buffer contents, in bytes
indev
Address of net_device representing input device, 0 if unknown
nf_accept
Constant used to signify an 'accept' verdict
nf_queue
Constant used to signify a 'queue' verdict
nf_drop
Constant used to signify a 'drop' verdict
ar_sha
Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address
indev_name
Name of network device packet was received on (if known)
nf_stop
Constant used to signify a 'stop' verdict
ar_pro
Format of protocol address
pf
Protocol family -- always “arp”
ar_data
Address of ARP packet data region (after the header)
outdev
Address of net_device representing output device, 0 if unknown
ar_pln
Length of protocol address
nf_stolen
Constant used to signify a 'stolen' verdict
ar_hln
Length of hardware address