Display Filter Reference: Linux netlink sock diag protocol
Protocol field name: netlink-sock_diag
Versions: 1.12.0 to 2.6.1
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| netlink-sock_diag.cookie | Cookie | Unsigned integer, 8 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.family | Family | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| netlink-sock_diag.fwd_alloc | Forward allocation | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_attr | Type | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_dest_ip4 | Dest IP | IPv4 address | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_dest_ip6 | Dest IP | IPv6 address | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_dport | Dest port | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_interface | Interface | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_protocol | Protocol | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_sport | Source port | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_src_ip4 | Source IP | IPv4 address | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inet_src_ip6 | Source IP | IPv6 address | 1.12.0 to 2.6.1 |
| netlink-sock_diag.inode | Inode | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_attr | Type | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_dst_portid | Dest Port ID | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_portid | Port ID | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_protocol | Protocol | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_show | Show | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_show.groups | Groups of a netlink socket | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_show.meminfo | Memory info of a socket | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.netlink_show.ring_cfg | Ring configuration | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.nltype | Message type | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_protocol | Protocol | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show | Show | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show.fanout | Fanout | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show.filter | Filter | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show.info | Basic packet_sk information | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show.mclist | Set of packet_diag_mclist-s | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show.meminfo | memory info | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.packet_show.ring_cfg | Rings configuration parameters | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.rcvbuf | Recv buffer | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.recv_queue | Recv Queue | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.rmem_alloc | Read allocation | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.send_queue | Send Queue | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.shutdown | Shutdown flag | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| netlink-sock_diag.sndbuf | Send buffer | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.state | State | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| netlink-sock_diag.type | Type | Unsigned integer, 1 byte | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_attr | Type | Unsigned integer, 2 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_name | Name | Character string | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_peer_inode | Peer inode | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_show | Show | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_show.icons | Pending connections | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_show.name | Name | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_show.peer | Peer socket info | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_show.rqlen | skb receive queue len | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.unix_show.vfs | VFS inode info | Boolean | 1.12.0 to 2.6.1 |
| netlink-sock_diag.wmem_alloc | Write allocation | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
| netlink-sock_diag.wmem_queued | Write allocation queued | Unsigned integer, 4 bytes | 1.12.0 to 2.6.1 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ NetShark appliance
- • Troubleshoot problems faster
- • Quickly identify the applications running on your network
- • Monitor your virtual machine traffic