probe::netfilter.arp.in

Length of hardware address

Constant used to signify a 'stop' verdict

Constant used to signify an 'accept' verdict

Ethernet+IP only (ar_pro==0x800): target hardware (MAC) address

Address of ARP packet data region (after the header)

Name of network device packet will be routed to (if known)

Address of net_device representing output device, 0 if unknown

Constant used to signify a 'repeat' verdict

Address of ARP header

Name of network device packet was received on (if known)

Constant used to signify a 'stolen' verdict

The length of the packet buffer contents, in bytes

Length of protocol address

Ethernet+IP only (ar_pro==0x800): source hardware (MAC) address

Protocol family -- always “arp”

Constant used to signify a 'drop' verdict

Format of protocol address

Ethernet+IP only (ar_pro==0x800): source IP address

Address of net_device representing input device, 0 if unknown

Ethernet+IP only (ar_pro==0x800): target IP address

Format of hardware address

ARP opcode (command)

Constant used to signify a 'queue' verdict