netfilter
E255517
netfilter is a framework within the Linux kernel that provides packet filtering, network address translation (NAT), and other networking-related operations for implementing firewalls and traffic control.
All labels observed (4)
| Label | Occurrences |
|---|---|
| netfilter canonical | 5 |
| Linux kernel NAT subsystem | 1 |
| Netfilter core team | 1 |
| netfilter project | 1 |
How this entity was disambiguated
This entity first appeared as the object of triple T2313711 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.
NED1
Entity disambiguation (via context triple)
gpt-5-mini-2025-08-07
Target entity: netfilter Context triple: [Harald Welte, notableWork, netfilter]
-
A.
Windows Filtering Platform
Windows Filtering Platform is a set of APIs and system services in Microsoft Windows that enables developers and the operating system to create, manage, and filter network traffic at various layers of the networking stack.
-
B.
NetFlow
NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
-
C.
NAT-T
NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
-
D.
Netcat
Netcat is a versatile command-line networking utility used for reading from and writing to network connections, often referred to as the "Swiss Army knife" of TCP/IP.
-
E.
NSS
The National Security Strategy of the United States (NSS) is a periodic policy document that outlines the U.S. government's overarching national security priorities, objectives, and approaches to global challenges.
- F. None of above. chosen
- G. Unsure - the case is ambiguous/there is not enough information to decide.
NED2
Entity disambiguation (via description)
gpt-5-mini-2025-08-07
Target entity: netfilter Target entity description: netfilter is a framework within the Linux kernel that provides packet filtering, network address translation (NAT), and other networking-related operations for implementing firewalls and traffic control.
-
A.
Windows Filtering Platform
Windows Filtering Platform is a set of APIs and system services in Microsoft Windows that enables developers and the operating system to create, manage, and filter network traffic at various layers of the networking stack.
-
B.
NetFlow
NetFlow is a network protocol developed by Cisco for collecting and analyzing IP traffic flow data to support monitoring, accounting, and security.
-
C.
NAT-T
NAT-T (NAT Traversal) is an IPsec extension that enables VPN traffic to pass through Network Address Translation devices by encapsulating IPsec packets in UDP.
-
D.
Netcat
Netcat is a versatile command-line networking utility used for reading from and writing to network connections, often referred to as the "Swiss Army knife" of TCP/IP.
-
E.
NSS
The National Security Strategy of the United States (NSS) is a periodic policy document that outlines the U.S. government's overarching national security priorities, objectives, and approaches to global challenges.
- F. None of above. chosen
Statements (52)
| Predicate | Object |
|---|---|
| instanceOf |
Linux kernel framework
ⓘ
packet filtering framework ⓘ |
| category |
Linux networking subsystem
ⓘ
firewall software ⓘ packet filtering software ⓘ |
| developedInLanguage | C ⓘ |
| developer |
Linux kernel community
ⓘ
Netfilter core team ⓘ
linked to:
netfilter
|
| hasComponent |
arptables
ⓘ
ebtables ⓘ ip6tables ⓘ
linked to:
iptables
iptables ⓘ nftables ⓘ |
| hasHook |
FORWARD
ⓘ
INPUT ⓘ OUTPUT ⓘ POSTROUTING ⓘ PREROUTING ⓘ |
| hasInterface |
iptables userspace utility
ⓘ
nft userspace utility ⓘ |
| introducedInKernelVersion |
Linux 2.4 series
ⓘ
linked to:
Linux kernel
|
| license | GNU General Public License ⓘ |
| operatingSystem | Linux ⓘ |
| partOf | Linux kernel ⓘ |
| providesFunction |
NAT
ⓘ
connection tracking ⓘ mangling of packets ⓘ network address translation ⓘ packet filtering ⓘ stateful packet inspection ⓘ traffic control support ⓘ |
| replaced |
ipchains
ⓘ
linked to:
iptables
ipfwadm ⓘ |
| replacedBy | nftables ⓘ |
| supportsExtension |
conntrack helpers
ⓘ
match modules ⓘ target modules ⓘ |
| supportsFeature |
IPv4
ⓘ
IPv6 ⓘ bridged IPv4 filtering ⓘ bridged IPv6 filtering ⓘ |
| usedFor |
DoS mitigation
ⓘ
destination NAT ⓘ firewall implementation ⓘ logging network packets ⓘ masquerading ⓘ packet filtering rules ⓘ port forwarding ⓘ rate limiting ⓘ source NAT ⓘ traffic shaping support ⓘ |
| website | https://www.netfilter.org/ ⓘ |
How these facts were elicited
The pipeline generated the facts above by prompting gpt-5.1 with this entity's name + description and the instruction below.
Instruction
You are a knowledge base construction expert. Given a subject entity and a description of it, return factual statements that you know for the subject as a JSON list of dictionaries(triples), where keys must be "subject", "predicate" and "object". The number of facts may be very high, between 25 to 50 or more, for very popular subjects. For less popular subjects, the number of facts can be very low, like 5 or 10. # Requirements - If you don't know the subject at all, return an empty list. - If the subject is not a named entity, return an empty list. - Include at least one triple where predicate is "instanceOf". - Do not get too wordy. - Separate several objects into multiple triples with one object.
Input
Subject: netfilter Description of subject: netfilter is a framework within the Linux kernel that provides packet filtering, network address translation (NAT), and other networking-related operations for implementing firewalls and traffic control.
Referenced by (8)
Full triples — surface form annotated when it differs from this entity's canonical label.