nf_stop
Constant used to signify a 'stop' verdict
outdev_name
Name of network device packet will be routed to (if
known)
pf
Protocol family -- always “arp”
ar_tha
Ethernet+IP only (ar_pro==0x800): target hardware (MAC)
address
ar_hln
Length of hardware address
nf_drop
Constant used to signify a 'drop' verdict
ar_sha
Ethernet+IP only (ar_pro==0x800): source hardware (MAC)
address
indev_name
Name of network device packet was received on (if
known)
data_str
A string representing the packet buffer contents
nf_queue
Constant used to signify a 'queue' verdict
length
The length of the packet buffer contents, in bytes
outdev
Address of net_device representing output device, 0 if
unknown
nf_accept
Constant used to signify an 'accept' verdict
ar_tip
Ethernet+IP only (ar_pro==0x800): target IP address
ar_pro
Format of protocol address
data_hex
A hexadecimal string representing the packet buffer
contents
indev
Address of net_device representing input device, 0 if
unknown
ar_op
ARP opcode (command)
nf_repeat
Constant used to signify a 'repeat' verdict
arphdr
Address of ARP header
nf_stolen
Constant used to signify a 'stolen' verdict
ar_pln
Length of protocol address
ar_data
Address of ARP packet data region (after the
header)
ar_sip
Ethernet+IP only (ar_pro==0x800): source IP address
ar_hrd
Format of hardware address