PROBE::NETFILTER.I(3stap) Networking TapsetPROBE::NETFILTER.I(3stap)probe::netfilter.ip.post_routing - Called immediately before an outgoing IP packet leaves the computer
netfilter.ip.post_routing
saddr A string representing the source IP addressfin TCP FIN flag (if protocol is TCP; ipv4 only)syn TCP SYN flag (if protocol is TCP; ipv4 only)daddr A string representing the destination IP addressurg TCP URG flag (if protocol is TCP; ipv4 only)nf_queue Constant used to signify a 'queue' verdictrst TCP RST flag (if protocol is TCP; ipv4 only)outdev_name Name of network device packet will be routed to (if known)ipproto_tcp Constant used to signify that the packet protocol is TCPnf_stolen Constant used to signify a 'stolen' verdictindev_name Name of network device packet was received on (if known)sport TCP or UDP source port (ipv4 only)pf Protocol family -- either “ipv4” or “ipv6”iphdr Address of IP headerdport TCP or UDP destination port (ipv4 only)psh TCP PSH flag (if protocol is TCP; ipv4 only)length The length of the packet buffer contents, in bytesipproto_udp Constant used to signify that the packet protocol is UDPnf_drop Constant used to signify a 'drop' verdictfamily IP address familydata_str A string representing the packet buffer contentsnf_repeat Constant used to signify a 'repeat' verdictindev Address of net_device representing input device, 0 if unknownprotocol Packet protocol from driver (ipv4 only)ack TCP ACK flag (if protocol is TCP; ipv4 only)outdev Address of net_device representing output device, 0 if unknowndata_hex A hexadecimal string representing the packet buffer contentsnf_accept Constant used to signify an 'accept' verdictnf_stop Constant used to signify a 'stop' verdict
tapset::netfilter(3stap)
This page is part of thesystemtap (a tracing and live-system analysis tool) project. Information about the project can be found at ⟨https://sourceware.org/systemtap/⟩. If you have a bug report for this manual page, send it to systemtap@sourceware.org. This page was obtained from the project's upstream Git repository ⟨git://sourceware.org/git/systemtap.git⟩ on 2025-08-11. (At that time, the date of the most recent commit that was found in the repository was 2025-07-24.) If you discover any rendering problems in this HTML version of the page, or you believe there is a better or more up-to-date source for the page, or you have corrections or improvements to the information in this COLOPHON (which isnot part of the original manual page), send a mail to man-pages@man7.orgSystemTap Tapset Reference April 2025PROBE::NETFILTER.I(3stap)Pages that refer to this page:tapset::netfilter(3stap)
HTML rendering created 2025-09-06 byMichael Kerrisk, author ofThe Linux Programming Interface. For details of in-depthLinux/UNIX system programming training courses that I teach, lookhere. Hosting byjambit GmbH. | ![]() |