From Wikimedia Commons, the free media repository
Jump to navigation Jump to search
Original file(SVG file, nominally 1,450 × 475 pixels, file size: 95 KB)



Schematic for the packet flow paths through Linux networking and Xtables

Date last updated 2011-December-18
Source Own work, Origin SVG PNG
Author Jan Engelhardt
This W3C-unspecified vector image was created with Inkscapeimportant.


I, the copyright holder of this work, hereby publish it under the following license:
w:en:Creative Commons

attribution share alike

This file is licensed under the Creative Commons Attribution-Share Alike 3.0 Unported license.
You are free:
  • to share – to copy, distribute and transmit the work
  • to remix – to adapt the work
Under the following conditions:
  • attribution – You must attribute the work in the manner specified by the author or licensor (but not in any way that suggests that they endorse you or your use of the work).
  • share alike – If you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

File history

Click on a date/time to view the file as it appeared at that time.

current02:15, 28 February 2014Thumbnail for version as of 02:15, 28 February 20141,450 × 475 (95 KB)Jengelh (talk | contribs)NF permit hooking at any point. The image merely shows the basic/principial set of well-known filtering opportunities, and not every possible action.
01:16, 10 October 2013Thumbnail for version as of 01:16, 10 October 20131,450 × 475 (95 KB)IlyaBobyr (talk | contribs)Packet is actually rerouted after any changes in the nat.OUTPUT change. I assume, filter.OUTPUT is also happening before the "reroute check". It makes sense, at least for nat.OUTPUT - if you nat your packet and change its destination IP, normally, you...
00:41, 12 November 2012Thumbnail for version as of 00:41, 12 November 20121,450 × 475 (95 KB)Jengelh (talk | contribs)Wikipedia's SVG->PNG converter fails to support path-following text, therefore replace it by normal text.
00:37, 12 November 2012Thumbnail for version as of 00:37, 12 November 20121,450 × 475 (94 KB)Jengelh (talk | contribs)Added AF_PACKET socket (used by e.g. tcpdump/iptraf-ng/dhcpd)
15:35, 2 August 2012Thumbnail for version as of 15:35, 2 August 20121,400 × 475 (86 KB)Jengelh (talk | contribs)Separate protocol layer; move all boxes closer together and reduce arrow length.
09:00, 10 February 2012Thumbnail for version as of 09:00, 10 February 20121,600 × 550 (79 KB)Jengelh (talk | contribs)The original image was conveyed and so marked by josh<at>imagestream, but that email does not actually belong to J.Triplett as I thought, but J.Snyder.
14:51, 18 December 2011Thumbnail for version as of 14:51, 18 December 20111,600 × 550 (79 KB)Jengelh (talk | contribs)Move "routing decision" out from L5 to L3. Reduce height of graph by reordering output path L3 elements.
11:38, 27 November 2009Thumbnail for version as of 11:38, 27 November 20091,600 × 1,000 (81 KB)Jengelh (talk | contribs)any packets from a non-NEW connection skip nat
13:42, 26 November 2009Thumbnail for version as of 13:42, 26 November 20091,600 × 1,000 (81 KB)Jengelh (talk | contribs){{Information |Description=Schematic for the packet flow paths through Linux networking and Xtables |Source={{own}}, Origin [ SVG] [ PNG] |Date=2008-Dece
  • You cannot overwrite this file.

The following page links to this file:

File usage on other wikis

The following other wikis use this file: