- bytes
- kbytes
- mbytes
- add
- create
- delete
- describe
- destroy
- flush
- get
- insert
- list
- monitor
- rename
- replace
- reset
- define
- redefine
- undefine
- arp
- bridge
- inet
- ip
- ip6
- netdev
- accept
- continue
- drop
- goto
- jump
- return
- ah
- arp
- chain
- comp
- counter
- counters
- ct
- dccp
- dnat
- dst
- dup
- element
- esp
- ether
- exthdr
- fib
- flow
- flowtable
- frag
- fwd
- geneve
- gre
- gretap
- hbh
- hooks
- icmp
- icmpv6
- igmp
- ip
- ip6
- ipsec
- jhash
- limit
- log
- map
- masquerade
- meta
- mh
- notrack
- numgen
- osf
- queue
- quota
- quotas
- redirect
- reject
- route
- rt
- rule
- ruleset
- sctp
- set
- snat
- socket
- srh
- symhash
- synproxy
- table
- tcp
- tproxy
- udp
- udplite
- vlan
- vmap
- vxlan
- xt
- ack
- addr-unreachable
- address-mask-reply
- address-mask-request
- admin-prohibited
- all
- assured
- bypass
- cgroupv2
- close
- closereq
- confirmed
- constant
- daddr
- data
- dataack
- destination-unreachable
- destroy
- dnat
- dormant
- dstnat
- dying
- dynamic
- echo-reply
- echo-request
- egress
- established
- ether
- exists
- expectation
- expectations
- expected
- fanout
- filter
- forward
- frag-needed
- fully-random
- helper
- host-prohibited
- host-unreachable
- iif
- ind-neighbor-advert
- ind-neighbor-solicit
- info-reply
- info-request
- ingress
- input
- interval
- invalid
- ip
- label
- loose
- mangle
- mark
- missing
- mld-listener-done
- mld-listener-query
- mld-listener-reduction
- mld-listener-report
- mld2-listener-report
- mss
- name
- nd-neighbor-advert
- nd-neighbor-solicit
- nd-redirect
- nd-router-advert
- nd-router-solicit
- net-prohibited
- net-unreachable
- new
- no-route
- oif
- oifname
- original
- out
- output
- owner
- packet-too-big
- parameter-problem
- persist
- persistent
- policy-fail
- port-unreachable
- postrouting
- prerouting
- prot-unreachable
- protoinfo
- random
- raw
- redirect
- reject-route
- related
- reply
- request
- reset
- response
- router-advertisement
- router-renumbering
- router-solicitation
- sack-perm
- saddr
- secmark
- security
- seen-reply
- seqadj
- skip
- skuid
- snat
- source-quench
- srcnat
- sync
- syncack
- tcp
- time-exceeded
- timeout
- timeouts
- timestamp
- timestamp-reply
- timestamp-request
- transparent
- ttl
- untracked
- version
- wildcard
- wscale
- comment
- eol
- expires
- group
- inc
- level
- lsrr
- maxseg
- mod
- more-fragments
- mptcp
- nop
- offset
- over
- prefix
- queue-threshold
- ra
- rr
- sack
- sack-perm
- sack0
- sack1
- sack2
- sack3
- seg-left
- snaplen
- spnum
- ssrr
- timeout
- timestamp
- until
- window
- with
- ackseq
- checksum
- chunk
- code
- cpi
- daddr
- dei
- doff
- dport
- dscp
- ecn
- flags
- flowlabel
- frag-off
- gateway
- group
- hdrlength
- hlen
- hoplimit
- htype
- id
- length
- max-delay
- mrt
- mtu
- nexthdr
- operation
- packet-too-big
- parameter-problem
- pcp
- plen
- protocol
- ptype
- reserved
- saddr
- sequence
- spi
- sport
- taddr
- ttl
- type
- urgptr
- version
- vni
- vtag
- window
- auto-merge
- avgpkt
- broute
- bytes
- cgroup
- classid
- comment
- count
- cpu
- daddr
- day
- device
- devices
- direction
- dport
- elements
- event
- expiration
- flags
- gc-interval
- handle
- helper
- hook
- hour
- ibrname
- id
- iif
- iifgroup
- iifkind
- iifname
- iiftype
- in
- inc
- ipsec
- l3proto
- l4proto
- label
- length
- mark
- mtu
- nexthop
- nfproto
- nftrace
- obrname
- oif
- oifgroup
- oifkind
- oifname
- oiftype
- out
- packets
- pkttype
- policy
- priority
- proto-dst
- proto-src
- protocol
- random
- realm
- reqid
- rtclassid
- saddr
- sdif
- sdifname
- seed
- size
- skgid
- skuid
- spi
- state
- status
- time
- timeout
- type
- typeof
- used
- value
- zone