Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Display Filter Reference: Linux Netfilter NFLOG

Protocol field name: nflog

Versions: 1.8.0 to 4.2.4

Back to Display Filter Reference

Field name Description Type Versions
nflog.encodingEncodingUnsigned integer (32 bits)1.8.0 to 1.10.14
nflog.familyFamilyUnsigned integer (8 bits)1.8.0 to 4.2.4
nflog.gidGIDSigned integer (32 bits)1.8.0 to 4.2.4
nflog.hookNetfilter hookUnsigned integer (8 bits)2.4.0 to 4.2.4
nflog.ifindex_indevIFINDEX_INDEVUnsigned integer (32 bits)2.4.0 to 4.2.4
nflog.ifindex_outdevIFINDEX_OUTDEVUnsigned integer (32 bits)2.4.0 to 4.2.4
nflog.ifindex_physindevIFINDEX_PHYSINDEVUnsigned integer (32 bits)2.4.0 to 4.2.4
nflog.ifindex_physoutdevIFINDEX_PHYSOUTDEVUnsigned integer (32 bits)2.4.0 to 4.2.4
nflog.prefixPrefixCharacter string1.8.0 to 4.2.4
nflog.protocolHW protocolUnsigned integer (16 bits)2.4.0 to 4.2.4
nflog.res_idResource idUnsigned integer (16 bits)1.8.0 to 4.2.4
nflog.timestampTimestampDate and time1.8.0 to 4.2.4
nflog.tlvTLVByte sequence1.8.0 to 4.2.4
nflog.tlv_lengthLengthUnsigned integer (16 bits)1.8.0 to 4.2.4
nflog.tlv_typeTypeUnsigned integer (16 bits)1.8.0 to 4.2.4
nflog.tlv_valueValueByte sequence1.8.0 to 4.2.4
nflog.uidUIDSigned integer (32 bits)1.8.0 to 4.2.4
nflog.versionVersionUnsigned integer (8 bits)1.8.0 to 4.2.4