probe::netfilter.arp.out — - Called for each outgoing ARP packet
netfilter.arp.out
data_strA string representing the packet buffer contents
ar_plnLength of protocol address
data_hexA hexadecimal string representing the packet buffer contents
nf_acceptConstant used to signify an 'accept' verdict
arphdrAddress of ARP header
nf_queueConstant used to signify a 'queue' verdict
outdevAddress of net_device representing output device, 0 if unknown
nf_dropConstant used to signify a 'drop' verdict
outdev_nameName of network device packet will be routed to (if known)
lengthThe length of the packet buffer contents, in bytes
nf_stopConstant used to signify a 'stop' verdict
indev_nameName of network device packet was received on (if known)
nf_stolenConstant used to signify a 'stolen' verdict
pfProtocol family -- always “arp”
ar_tipEthernet+IP only (ar_pro==0x800): target IP address
ar_proFormat of protocol address
ar_thaEthernet+IP only (ar_pro==0x800): target hardware (MAC) address
ar_dataAddress of ARP packet data region (after the header)
ar_opARP opcode (command)
indevAddress of net_device representing input device, 0 if unknown
ar_hlnLength of hardware address
ar_sipEthernet+IP only (ar_pro==0x800): source IP address
ar_shaEthernet+IP only (ar_pro==0x800): source hardware (MAC) address
ar_hrdFormat of hardware address
nf_repeatConstant used to signify a 'repeat' verdict