PROBE::NETFILTER.B(3stap)

💖 PROBE::NETFILTER.B(3stap) — Networking Tapset 💖

okay bestie, pull up a chair, because we're talking about probe::netfilter.bridge.pre_routing from the Networking Tapset (manual section 3stap, yes we're fancy like that). This is the moment before a bridging packet gets routed. Not during, not after — before. main character energy, truly. 🦋

---

✨ NAME ✨

probe::netfilter.bridge.pre_routing — - Called before a bridging packet is routed

---

🌸 SYNOPSIS 🌸

probe netfilter.bridge.pre_routing {}

that's it. that's the whole vibe. no args, no drama, just the probe showing up. periodt. 💅

---

🎀 VALUES 🎀

bestie there are 32 of these and I am NOT skipping a single one, so here we go, hold my iced coffee 🍓

• llcpdu — Address of LLC Protocol Data Unit
• br_poid — Port identifier
• protocol — Packet protocol
• indev_name — Name of network device packet was received on (if known)
• nf_stop — Constant used to signify a 'stop' verdict
• length — The length of the packet buffer contents, in bytes
• br_rid — Identity of root bridge
• br_cost — Total cost from transmitting bridge to root
• outdev_name — Name of network device packet will be routed to (if known)
• brhdr — Address of bridge header
• data_hex — A hexadecimal string representing the packet buffer contents
• data_str — A string representing the packet buffer contents
• br_msg — Message age in 1/256 secs
• llcproto_stp — Constant used to signify Bridge Spanning Tree Protocol packet
• nf_stolen — Constant used to signify a 'stolen' verdict
• nf_queue — Constant used to signify a 'queue' verdict
• br_vid — Protocol version identifier
• br_flags — BPDU flags
• br_bid — Identity of bridge
• nf_drop — Constant used to signify a 'drop' verdict
• br_htime — Hello time in 1/256 secs
• br_fd — Forward delay in 1/256 secs
• br_type — BPDU type
• indev — Address of net_device representing input device, 0 if unknown
• pf — Protocol family -- always "bridge"
• br_mac — Bridge MAC address
• outdev — Address of net_device representing output device, 0 if unknown
• br_rmac — Root bridge MAC address
• br_prid — Protocol identifier
• br_max — Max age in 1/256 secs
• nf_accept — Constant used to signify an 'accept' verdict
• nf_repeat — Constant used to signify a 'repeat' verdict

ngl the sheer amount of BPDU lore in here is giving "I memorized the whole spanning tree spec for fun" and honestly? iconic. 👑

---

🔥 SEE ALSO 🔥

• tapset::netfilter(3stap)

---

and that's the whole page, bestie! this one's from the SystemTap Tapset Reference, dated September 2026, and it lives in manual section 3stap under the Networking Tapset. go forth and probe responsibly 🫶💜