Display Filter Reference: Linux netlink netfilter protocol

Protocol field name: netlink-netfilter

Versions: 1.12.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
netlink-netfilter.ct.attr Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.id ID Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status Status Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.assured Assured Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.confirmed Confirmed Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.dst_nat Destination NAT Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.dst_nat_done Destination NAT done Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.dying Dying Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.expected Expected Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.fixed_timeout Fixed timeout Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.helper Helper Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.seen_reply Seen reply Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.seq_adjust Sequence adjust Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.src_nat Source NAT Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.src_nat_done Source NAT done Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.template Template Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.status.untracked Untracked Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_attr.timeout Timeout Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_help_attr Helper Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_help_attr.help_name Helper name Character string 2.6.0 to 2.6.5
netlink-netfilter.ct_seqadj_attr Adjustment Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_seqadj_correction_pos Position Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_seqadj_offset_after Offset Signed integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.ct_seqadj_offset_before Offset Signed integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.exp.attr Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.exp_type Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.family Address family Unsigned integer, 1 byte 2.4.0 to 2.6.5
netlink-netfilter.ipset.cadt_flags Flags Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset.cidr CIDR Unsigned integer, 1 byte 2.4.0 to 2.6.5
netlink-netfilter.ipset.comment Comment Character string 2.4.0 to 2.6.5
netlink-netfilter.ipset.family Settype family Unsigned integer, 1 byte 2.4.0 to 2.6.5
netlink-netfilter.ipset.flags Flags Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset.ip6_addr IPv6 address IPv6 address 2.4.0 to 2.6.5
netlink-netfilter.ipset.ip_addr IPv4 address IPv4 address 2.4.0 to 2.6.5
netlink-netfilter.ipset.setname Setname Character string 2.4.0 to 2.6.5
netlink-netfilter.ipset.timeout Timeout Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset.typename Typename Character string 2.4.0 to 2.6.5
netlink-netfilter.ipset_adt_attr Type Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset_attr Type Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset_cadt_attr Type Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset_command Command Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.ipset_ip_attr Type Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.nfct_tuple Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.ip Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.ip.ip6_addr IPv6 address IPv6 address 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.ip.ip_addr IPv4 address IPv4 address 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.proto Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.proto.dst_port Port Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.proto.num Protocol Unsigned integer, 1 byte 2.6.0 to 2.6.5
netlink-netfilter.nfct_tuple.proto.src_port Port Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.class Class Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.flags Flags Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.flags.inactive Inactive Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.flags.permanent Permanent Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.flags.userspace Userspace Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.fn Name Character string 2.6.0 to 2.6.5
netlink-netfilter.nfexp.id ID Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.nat Type Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.nat.dir Direction Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.timeout Timeout Unsigned integer, 4 bytes 2.6.0 to 2.6.5
netlink-netfilter.nfexp.zone Zone Unsigned integer, 2 bytes 2.6.0 to 2.6.5
netlink-netfilter.queue.attr Type Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.caplen Length of captured packet Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.config.command.command Command Unsigned integer, 1 byte 2.4.0 to 2.6.5
netlink-netfilter.queue.config.command.pf Protocol family Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.config.flags Flags Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.config.mask Flags mask Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.config.params.copy_mode Copy mode Unsigned integer, 1 byte 2.4.0 to 2.6.5
netlink-netfilter.queue.config.params.copy_range Copy range Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.config.queue_maxlen Maximum queue length Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.config_attr Type Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.ct_info Conntrack info Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.gid GID Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.hwaddr.addr Address Ethernet or other MAC address 2.4.0 to 2.6.5
netlink-netfilter.queue.hwaddr.len Address length Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.ifindex_indev IFINDEX_INDEV Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.ifindex_outdev IFINDEX_OUTDEV Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.ifindex_physindev IFINDEX_PHYSINDEV Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.ifindex_physoutdev IFINDEX_PHYSOUTDEV Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.nfmark Mark Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.packet.hook Netfilter hook Unsigned integer, 1 byte 2.4.0 to 2.6.5
netlink-netfilter.queue.packet.id Packet ID Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.packet.protocol HW protocol Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.timestamp Timestamp Date and time 2.4.0 to 2.6.5
netlink-netfilter.queue.uid UID Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.verdict.id Verdict ID Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue.verdict.verdict Verdict Unsigned integer, 4 bytes 2.4.0 to 2.6.5
netlink-netfilter.queue_type Type Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-netfilter.res_id Resource id Unsigned integer, 2 bytes 2.4.0 to 2.6.5
netlink-netfilter.subsys Subsystem Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-netfilter.ulog_type Type Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-netfilter.version Version Unsigned integer, 1 byte 2.4.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More