Each record returned identifies a single stack that is active on the system. Each record has the following sections:

• One section, NMsecStack, describes attributes of the stack.

  Table 1. NMsecStack structure

  Field	Offset	Length	Format	Description
  NMsStackIPSecurity	0, bit 0	1 bit	Binary	If set, IP security is enabled for this stack.
  NMsStackIPv6Security	0, bit 1	1 bit	Binary	If set, IPv6 IP security is enabled for this stack.
  NMsStackDVIPSec	0, bit 2	1 bit	Binary	If set, sysplex-wide security associations (DVIPSEC) is enabled for this stack.
  NMsStackLogging	0, bit 3	1 bit	Binary	If set, filter logging is enabled for this stack.
  NMsStackPreDecap	0, bit 4	1 bit	Binary	If set, pre-decapsulation filtering is enabled for this stack.
  NMsStackFilterSet	0, bit 5	1 bit	Binary	Current filter set indicator. Possible values are: NMsec_FLT_DEFAULT (0) Default filters are currently in effect. The default filters originate from the TCP⁄IP profile. NMsec_FLT_POLICY (1) Policy filters are currently in effect. The policy filters originate in the Policy Agent configuration.
  NMsStackFIPS140	0, bit 6	1 bit	Binary	FIPS 140 mode indicator. If this field is set, cryptographic operations for this stack are performed by using cryptographic algorithms and modules that are designed to meet the FIPS 140 requirements; otherwise, cryptographic algorithms and modules that do not meet the FIPS 140 requirements might be used.
  NMsStackRsvd1	0, bit 7	25 bits	Binary	Reserved bits.
  NMsStackName	4	24 bytes	EBCDIC	The job name of the TCP⁄IP stack.
  NMsStackNATKeepAlive	28	4 bytes	Binary	NAT keepalive interval, in seconds, used to regulate sending NAT keepalive messages for a NAT traversal tunnel when a NAT device is detected in front of the local host.
  NMsStackFilterCount	32	4 bytes	Binary	Number of configured filters in the current filter set. This number does not include any dynamic filters.
  NMsStackDefFltCount	36	4 bytes	Binary	Number of defensive filters that are currently installed in the TCP/IP stack.
  NMsStackDefFltMode	40	1 byte	Binary	Defensive filtering mode. Possible values are: NMsec_DEFFLT_INACTIVE (0) Defensive filtering is inactive for the stack. NMsec_DEFFLT_ACTIVE (1) Defensive filtering is active for the stack. The filter mode of block or simulate that is specified in the individual defensive filters is honored. NMsec_DEFFLT_SIMULATE (2) Defensive filtering is active for the stack. The filter mode, simulate, overrides the mode that is specified in the individual defensive filters.
  NMsStackRsvd2	41	3 bytes	Binary	Reserved bytes.

• Zero to ten NMsecStackExclAddr sections that contain the defensive filtering exclusion list.

  Table 2. NMsecStackExclAddr structure

  Field	Offset	Length	Format	Description
  NMsStackExclAddrFlagIsSingle	0, bit 0	1 bit	Binary	Single exclusion address indicator. If set, the exclusion address is indicated by the NMsStackExclAddr4 or NMsStackExclAddr6 field.
  NMsStackExclAddrFlagIsPrefix	0, bit 1	1 bit	Binary	Prefixed exclusion address indicator. If set, the exclusion address is indicated by the NMsStackExclAddr4 or NMsStackExclAddr6 field, and the exclusion address prefix length is indicated by the NMsStackExclAddrPrefix field.
  NMsStackExclAddrFlagIPv6	0, bit 2	1 bit	Binary	IPv6 indicator. If set, exclusion addresses are IPv6; otherwise they are IPv4.
  NMsStackExclAddrRsvd1	0, bit 3	5 bits	Binary	Reserved bits.
  NMsStackExclAddrRsvd2	1	2 bytes	Binary	Reserved.
  NMsStackExclAddrPrefix	3	1 byte	Binary	If the NMsStackExclAddrIsPrefix field is set, this value is the length of the defensive filter exclusion address prefix, in bits.
  NMsStackExclAddr4	4	4 bytes	Binary	If the NMsStackExclAddrFlagIsSingle field is set, this value is a defensive filter IPv4 or IPv6 exclusion address. If the NMsStackExclAddrFlagIsPrefix field is set, this value is a defensive filter IPv4 or IPv6 exclusion address base
  NMsStackExclAddr6	4	16 bytes	Binary