Display Filter Reference: Linux netlink protocol

Protocol field name: netlink

Versions: 1.12.0 to 3.4.3

Back to Display Filter Reference

Field name Description Type Versions
netlink.attr_data Data Sequence of bytes 2.4.0 to 3.4.3
netlink.attr_index Index Unsigned integer, 2 bytes 2.4.0 to 3.4.3
netlink.attr_len Len Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.attr_type Type Unsigned integer, 2 bytes 2.4.0 to 3.4.3
netlink.attr_type.nested Nested Boolean 2.4.0 to 3.4.3
netlink.attr_type.net_byteorder Network byte order Boolean 2.4.0 to 3.4.3
netlink.error Error code Signed integer, 4 bytes 2.4.0 to 3.4.3
netlink.family Family Unsigned integer, 2 bytes 1.12.0 to 3.4.3
netlink.hatype Link-layer address type Unsigned integer, 2 bytes 1.12.0 to 3.4.3
netlink.hdr_flags Flags Unsigned integer, 2 bytes 1.12.0 to 3.4.3
netlink.hdr_flags.ack Ack Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.append Append Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.atomic Atomic Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.create Create Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.dump_filtered Dump filtered Unsigned integer, 2 bytes 2.4.0 to 3.4.3
netlink.hdr_flags.dump_intr Dump inconsistent Unsigned integer, 2 bytes 2.4.0 to 3.4.3
netlink.hdr_flags.echo Echo Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.excl Excl Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.match Return all matching Unsigned integer, 2 bytes 2.4.0 to 3.4.3
netlink.hdr_flags.match_all Return all matching Unsigned integer, 2 bytes 2.0.0 to 2.2.17
netlink.hdr_flags.multi Multipart message Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.replace Replace Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.request Request Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_flags.root Specify tree root Unsigned integer, 2 bytes 2.0.0 to 3.4.3
netlink.hdr_len Length Unsigned integer, 4 bytes 1.12.0 to 3.4.3
netlink.hdr_pid Port ID Unsigned integer, 4 bytes 1.12.0 to 3.4.3
netlink.hdr_seq Sequence Unsigned integer, 4 bytes 1.12.0 to 3.4.3
netlink.hdr_type Message type Unsigned integer, 2 bytes 1.12.0 to 3.4.3
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More