Sign up ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have enabled logging with iptables. Now, I need to understand some of the abbreviations.

Feb 23 20:43:08 spiderman kernel [ 2905.992450]: IN=wlan0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:06:25:09:6a:b5:08:00 SRC= DST= LEN=241 TOS=0x00 PREC=0x00 TTL=64 ID=64564 DF PROTO=UDP SPT=138 DPT=138

What does each of the following mean:

  • [ 2905.992450]
  • TOS=0x00
  • PREC=0x00
  • ID=64564
  • DF

Any help is appreciated. Thanks.

share|improve this question

1 Answer 1

up vote 4 down vote accepted

[ 2905.992450] - kernel timestamp

TOS=0x00 - The Type of Service of the IP packet.

PREC=0x00 - The Precedence of the IP packet.

ID=64564 - The id of the IP packet.

DF - Fragment Flags. Can have "CE" (congestion), "DF" (don't fragment), or "MF" (more fragments are coming).

share|improve this answer
Wow, thanks for the info :) –  Question Overflow Jan 6 '13 at 8:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.