TAPSET::NETFILTER(3stap)

💖 NAME 💖

tapset::netfilter — the systemtap netfilter tapset, chilling in the 3stap manual like the queen it is 👑

---

✨ DESCRIPTION ✨

okay so bestie, listen up 🫶 this tapset is literally the group chat of every netfilter hook SystemTap can slide into. Each one is a probe point you can attach to, and each one has its own lil' page with the full tea. The way netfilter hands you packets at every single stage of their lil' journey? iconic. 💅

Here's the whole roster, no cap:

• netfilter.ip.pre_routing — called before an IP packet is routed. 💫 the whole story lives in probe::netfilter.ip.pre_routing(3stap).
• netfilter.ip.local_in — called on an incoming IP packet addressed to the local computer. 🏠 details in probe::netfilter.ip.local_in(3stap).
• netfilter.ip.forward — called on an incoming IP packet addressed to some other computer. 📬 yes you're literally just the middleman. see probe::netfilter.ip.forward(3stap).
• netfilter.ip.local_out — called on an outgoing IP packet. 🚀 probe::netfilter.ip.local_out(3stap) has the details.
• netfilter.ip.post_routing — called immediately before an outgoing IP packet leaves the computer. 👋 byeee. see probe::netfilter.ip.post_routing(3stap).
• netfilter.bridge.local_in — called on a bridging packet destined for the local computer. 🌉 details at probe::netfilter.bridge.local_in(3stap).
• netfilter.bridge.forward — called on an incoming bridging packet destined for some other computer. 🔀 see probe::netfilter.bridge.forward(3stap).
• netfilter.bridge.local_out — called on a bridging packet coming from a local process. 🍓 probe::netfilter.bridge.local_out(3stap) for details.

---

👀 SEE ALSO 👀

the full friend group, go say hi 💜

• probe::netfilter.ip.pre_routing(3stap)
• probe::netfilter.ip.local_in(3stap)
• probe::netfilter.ip.forward(3stap)
• probe::netfilter.ip.local_out(3stap)
• probe::netfilter.ip.post_routing(3stap)
• probe::netfilter.arp.in(3stap)
• probe::netfilter.arp.out(3stap)
• probe::netfilter.arp.forward(3stap)
• probe::netfilter.bridge.pre_routing(3stap)
• probe::netfilter.bridge.local_in(3stap)
• probe::netfilter.bridge.forward(3stap)
• probe::netfilter.bridge.local_out(3stap)
• probe::netfilter.bridge.post_routing(3stap)
• stap(1)
• stapprobes(3stap)

---

SystemTap Tapset Reference · September 2026 — that's the vibe check, bestie, we're done here. mwah 💋✨🦋