Display Filter Reference: Linux netlink sock diag protocol

Protocol field name: netlink-sock_diag

Versions: 1.12.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
netlink-sock_diag.cookie Cookie Unsigned integer, 8 bytes 1.12.0 to 2.6.5
netlink-sock_diag.family Family Unsigned integer, 1 byte 1.12.0 to 2.6.5
netlink-sock_diag.fwd_alloc Forward allocation Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.inet_attr Type Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.inet_dest_ip4 Dest IP IPv4 address 1.12.0 to 2.6.5
netlink-sock_diag.inet_dest_ip6 Dest IP IPv6 address 1.12.0 to 2.6.5
netlink-sock_diag.inet_dport Dest port Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.inet_interface Interface Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.inet_protocol Protocol Unsigned integer, 1 byte 1.12.0 to 2.6.5
netlink-sock_diag.inet_sport Source port Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.inet_src_ip4 Source IP IPv4 address 1.12.0 to 2.6.5
netlink-sock_diag.inet_src_ip6 Source IP IPv6 address 1.12.0 to 2.6.5
netlink-sock_diag.inode Inode Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.netlink_attr Type Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.netlink_dst_portid Dest Port ID Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.netlink_portid Port ID Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.netlink_protocol Protocol Unsigned integer, 1 byte 1.12.0 to 2.6.5
netlink-sock_diag.netlink_show Show Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.netlink_show.groups Groups of a netlink socket Boolean 1.12.0 to 2.6.5
netlink-sock_diag.netlink_show.meminfo Memory info of a socket Boolean 1.12.0 to 2.6.5
netlink-sock_diag.netlink_show.ring_cfg Ring configuration Boolean 1.12.0 to 2.6.5
netlink-sock_diag.nltype Message type Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.packet_protocol Protocol Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.packet_show Show Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.packet_show.fanout Fanout Boolean 1.12.0 to 2.6.5
netlink-sock_diag.packet_show.filter Filter Boolean 1.12.0 to 2.6.5
netlink-sock_diag.packet_show.info Basic packet_sk information Boolean 1.12.0 to 2.6.5
netlink-sock_diag.packet_show.mclist Set of packet_diag_mclist-s Boolean 1.12.0 to 2.6.5
netlink-sock_diag.packet_show.meminfo memory info Boolean 1.12.0 to 2.6.5
netlink-sock_diag.packet_show.ring_cfg Rings configuration parameters Boolean 1.12.0 to 2.6.5
netlink-sock_diag.rcvbuf Recv buffer Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.recv_queue Recv Queue Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.rmem_alloc Read allocation Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.send_queue Send Queue Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.shutdown Shutdown flag Unsigned integer, 1 byte 1.12.0 to 2.6.5
netlink-sock_diag.sndbuf Send buffer Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.state State Unsigned integer, 1 byte 1.12.0 to 2.6.5
netlink-sock_diag.type Type Unsigned integer, 1 byte 1.12.0 to 2.6.5
netlink-sock_diag.unix_attr Type Unsigned integer, 2 bytes 1.12.0 to 2.6.5
netlink-sock_diag.unix_name Name Character string 1.12.0 to 2.6.5
netlink-sock_diag.unix_peer_inode Peer inode Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.unix_show Show Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.unix_show.icons Pending connections Boolean 1.12.0 to 2.6.5
netlink-sock_diag.unix_show.name Name Boolean 1.12.0 to 2.6.5
netlink-sock_diag.unix_show.peer Peer socket info Boolean 1.12.0 to 2.6.5
netlink-sock_diag.unix_show.rqlen skb receive queue len Boolean 1.12.0 to 2.6.5
netlink-sock_diag.unix_show.vfs VFS inode info Boolean 1.12.0 to 2.6.5
netlink-sock_diag.wmem_alloc Write allocation Unsigned integer, 4 bytes 1.12.0 to 2.6.5
netlink-sock_diag.wmem_queued Write allocation queued Unsigned integer, 4 bytes 1.12.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More