NPF(7)              NetBSD Miscellaneous Information Manual             NPF(7)

NAME
     NPF -- NetBSD packet filter

DESCRIPTION
     NPF is a layer 3 packet filter, supporting IPv4 and IPv6 as well as layer
     4 protocols such as TCP, UDP, and ICMP.  It was designed with a focus on
     high performance, scalability, and modularity.

FEATURES
     NPF offers the traditional set of features provided by packet filters.
     Some key features are:

              Stateful inspection (connection tracking).

              Network address translation (NAT).  This includes static
               (stateless) and dynamic (stateful) translation, port transla-
               tion, bi-directional NAT, etc.

              IPv6-to-IPv6 network prefix translation (NPTv6).

              Tables for efficient IP sets.

              Application Level Gateways (e.g., to support traceroute).

              Use of BPF with just-in-time (JIT) compilation.

              Rule procedures and a framework for NPF extensions.

              Traffic normalisation (extension).

              Packet logging (extension).

     For a full set of features and their description, see the NPF documenta-
     tion website and other manual pages.

SEE ALSO
     libnpf(3), bpf(4), bpfjit(4), npf.conf(5), pcap-filter(7), npfctl(8),
     npfd(8)

     NPF documentation website:
           http://www.netbsd.org/~rmind/npf/

HISTORY
     NPF was written from scratch in 2009 and is distributed under the
     2-clause BSD license.  It first appeared in NetBSD 6.0.

AUTHORS
     NPF was designed and implemented by Mindaugas Rasiukevicius.

NetBSD 8.0                      August 2, 2018                      NetBSD 8.0

You can also request any man page by name and (optionally) by section:

Command: 
Section: 
Architecture: 
Collection: 
 

Use the DEFAULT collection to view manual pages for third-party software.


©1994 Man-cgi 1.15, Panagiotis Christias
©1996-2018 Modified for NetBSD by Kimmo Suominen