NAME

       probe::netfilter.ip.forward - Called on an incoming IP packet addressed to some other
       computer

SYNOPSIS

       netfilter.ip.forward

VALUES

       fin
           TCP FIN flag (if protocol is TCP; ipv4 only)

       length
           The length of the packet buffer contents, in bytes

       nf_queue
           Constant used to signify a 'queue' verdict

       data_str
           A string representing the packet buffer contents

       saddr
           A string representing the source IP address

       indev_name
           Name of network device packet was received on (if known)

       nf_drop
           Constant used to signify a 'drop' verdict

       syn
           TCP SYN flag (if protocol is TCP; ipv4 only)

       pf
           Protocol family -- either “ipv4” or “ipv6”

       outdev_name
           Name of network device packet will be routed to (if known)

       psh
           TCP PSH flag (if protocol is TCP; ipv4 only)

       daddr
           A string representing the destination IP address

       nf_stop
           Constant used to signify a 'stop' verdict

       protocol
           Packet protocol from driver (ipv4 only)

       urg
           TCP URG flag (if protocol is TCP; ipv4 only)

       dport
           TCP or UDP destination port (ipv4 only)

       family
           IP address family

       rst
           TCP RST flag (if protocol is TCP; ipv4 only)

       ack
           TCP ACK flag (if protocol is TCP; ipv4 only)

       nf_stolen
           Constant used to signify a 'stolen' verdict

       ipproto_udp
           Constant used to signify that the packet protocol is UDP

       nf_repeat
           Constant used to signify a 'repeat' verdict

       ipproto_tcp
           Constant used to signify that the packet protocol is TCP

       iphdr
           Address of IP header

       indev
           Address of net_device representing input device, 0 if unknown

       data_hex
           A hexadecimal string representing the packet buffer contents

       nf_accept
           Constant used to signify an 'accept' verdict

       sport
           TCP or UDP source port (ipv4 only)

       outdev
           Address of net_device representing output device, 0 if unknown

SEE ALSO

       tapset::netfilter(3stap)