Module linux.nf
Linux kernel constants exposed under linux.nf.
Values are populated at build time from the kernel headers.
Tables
| action | Netfilter hook verdicts. |
| arp | Netfilter hook positions in the ARP family. |
| br | Netfilter hook positions in the BRIDGE family. |
| br.pri | Netfilter hook priorities in the BRIDGE family. |
| ct.dir | Conntrack tuple directions. |
| ct.info | Conntrack per-packet states (IS_REPLY is the reply-direction threshold, not a state). |
| ct.status | Conntrack status flags (NAT_CLASH is the in-kernel meaning of the obsolete UNTRACKED bit). |
| ct.tcp | TCP conntrack states (SYN_SENT2 is the live name for the obsolete LISTEN). |
| inet | Netfilter hook positions in the INET family. |
| ip.pri | Netfilter hook priorities in the IP family. |
| netdev | Netfilter hook positions in the NETDEV family. |
| proto | Netfilter protocol families. |
Tables
- action
-
Netfilter hook verdicts.
Mirrors
NF_*defines in<uapi/linux/netfilter.h>. - arp
-
Netfilter hook positions in the ARP family.
Mirrors
NF_ARP_*defines in<uapi/linux/netfilter_arp.h>. - br
-
Netfilter hook positions in the BRIDGE family.
Mirrors
NF_BR_*defines in<uapi/linux/netfilter_bridge.h>. - br.pri
-
Netfilter hook priorities in the BRIDGE family.
Mirrors
NF_BR_PRI_*defines in<uapi/linux/netfilter_bridge.h>. - ct.dir
-
Conntrack tuple directions.
Mirrors
IP_CT_DIR_*defines in<uapi/linux/netfilter/nf_conntrack_tuple_common.h>. - ct.info
-
Conntrack per-packet states (IS_REPLY is the reply-direction threshold, not a state).
Mirrors
IP_CT_*defines in<uapi/linux/netfilter/nf_conntrack_common.h>. - ct.status
-
Conntrack status flags (NAT_CLASH is the in-kernel meaning of the obsolete UNTRACKED bit).
Mirrors
IPS_*defines in<uapi/linux/netfilter/nf_conntrack_common.h>. - ct.tcp
-
TCP conntrack states (SYN_SENT2 is the live name for the obsolete LISTEN).
Mirrors
TCP_CONNTRACK_*defines in<uapi/linux/netfilter/nf_conntrack_tcp.h>. - inet
-
Netfilter hook positions in the INET family.
Mirrors
NF_INET_*defines in<uapi/linux/netfilter.h>. - ip.pri
-
Netfilter hook priorities in the IP family.
Mirrors
NF_IP_PRI_*defines in<uapi/linux/netfilter_ipv4.h>. - netdev
-
Netfilter hook positions in the NETDEV family.
Mirrors
NF_NETDEV_*defines in<uapi/linux/netfilter.h>. - proto
-
Netfilter protocol families.
Mirrors
NFPROTO_*defines in<uapi/linux/netfilter.h>.