NAME

       probe::netfilter.arp.in - - Called for each incoming ARP packet

SYNOPSIS

       netfilter.arp.in

VALUES

       data_str
           A string representing the packet buffer contents

       ar_op
           ARP opcode (command)

       ar_sha
           Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address

       nf_accept
           Constant used to signify an 'accept' verdict

       indev_name
           Name of network device packet was received on (if known)

       outdev_name
           Name of network device packet will be routed to (if known)

       indev
           Address of net_device representing input device, 0 if unknown

       ar_sip
           Ethernet+IP only (ar_pro==0x800): source IP address

       nf_stop
           Constant used to signify a 'stop' verdict

       pf
           Protocol family -- always “arp”

       length
           The length of the packet buffer contents, in bytes

       ar_hrd
           Format of hardware address

       arphdr
           Address of ARP header

       nf_repeat
           Constant used to signify a 'repeat' verdict

       nf_stolen
           Constant used to signify a 'stolen' verdict

       ar_hln
           Length of hardware address

       ar_pln
           Length of protocol address

       ar_tip
           Ethernet+IP only (ar_pro==0x800): target IP address

       outdev
           Address of net_device representing output device, 0 if unknown

       data_hex
           A hexadecimal string representing the packet buffer contents

       ar_tha
           Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address

       nf_drop
           Constant used to signify a 'drop' verdict

       ar_data
           Address of ARP packet data region (after the header)

       nf_queue
           Constant used to signify a 'queue' verdict

       ar_pro
           Format of protocol address

SEE ALSO

       tapset::netfilter(3stap)