PROBE::NETFILTER.B(3stap)

✨ NAME ✨

probe::netfilter.bridge.post_routing β€” okay bestie, this one fires right before a bridging packet hits the wire πŸ’…


🌸 SYNOPSIS 🌸

probe netfilter.bridge.post_routing {}

πŸŽ€ VALUES πŸŽ€

okay so here's everything this probe hands you, no cap, all of it πŸ‘‘

  • br_type β€” the BPDU type, periodt
  • br_fd β€” forward delay, measured in 1/256 secs
  • br_bid β€” identity of the bridge
  • br_flags β€” the BPDU flags
  • br_vid β€” protocol version identifier
  • nf_queue β€” the constant that signifies a 'queue' verdict
  • nf_drop β€” the constant that signifies a 'drop' verdict πŸ’€
  • br_htime β€” hello time, in 1/256 secs
  • llcproto_stp β€” the constant that signifies a Bridge Spanning Tree Protocol packet
  • data_str β€” a string representing the packet buffer contents
  • br_msg β€” message age, in 1/256 secs
  • nf_stolen β€” the constant that signifies a 'stolen' verdict
  • outdev_name β€” name of the network device the packet will be routed to (if known)
  • data_hex β€” a hexadecimal string representing the packet buffer contents
  • brhdr β€” address of the bridge header
  • length β€” the length of the packet buffer contents, in bytes
  • br_cost β€” total cost from transmitting bridge to root
  • br_rid β€” identity of the root bridge
  • indev_name β€” name of the network device the packet was received on (if known)
  • br_poid β€” port identifier
  • protocol β€” packet protocol
  • llcpdu β€” address of the LLC Protocol Data Unit
  • nf_stop β€” the constant that signifies a 'stop' verdict
  • nf_repeat β€” the constant that signifies a 'repeat' verdict
  • nf_accept β€” the constant that signifies an 'accept' verdict
  • br_max β€” max age, in 1/256 secs
  • br_rmac β€” root bridge MAC address
  • outdev β€” address of the net_device representing the output device, 0 if unknown
  • br_prid β€” protocol identifier
  • pf β€” protocol family β€” always β€œbridge” πŸ¦‹
  • br_mac β€” bridge MAC address
  • indev β€” address of the net_device representing the input device, 0 if unknown
ngl, that's a lot of bridge-flavored constants, but they're all yours now 🫢

πŸ’– SEE ALSO πŸ’–


and that's the whole vibe ✨ this lil slice of the SystemTap Tapset Reference is dated September 2026 β€” the version column got squished down to just Ver πŸ™ˆ but whatever, she's iconic, slay, go read the netfilter tapset bestie πŸ‘‘πŸ’…

πŸ“¦ where this page comes from