Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have enabled logging with iptables. Now, I need to understand some of the abbreviations.

Feb 23 20:43:08 spiderman kernel [ 2905.992450]: IN=wlan0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:06:25:09:6a:b5:08:00 SRC= DST= LEN=241 TOS=0x00 PREC=0x00 TTL=64 ID=64564 DF PROTO=UDP SPT=138 DPT=138

What does each of the following mean:

  • [ 2905.992450]
  • TOS=0x00
  • PREC=0x00
  • ID=64564
  • DF

Any help is appreciated. Thanks.

share|improve this question
up vote 4 down vote accepted

[ 2905.992450] - kernel timestamp

TOS=0x00 - The Type of Service of the IP packet.

PREC=0x00 - The Precedence of the IP packet.

ID=64564 - The id of the IP packet.

DF - Fragment Flags. Can have "CE" (congestion), "DF" (don't fragment), or "MF" (more fragments are coming).

share|improve this answer
Wow, thanks for the info :) – Question Overflow Jan 6 '13 at 8:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.