A string which opaquely encodes various aspects about a machine's operating system, hardware, and kernel attributes.

字符串，对机器的操作系统，硬件，和内属性进行隐意编码。

Linux system kenel adopts the Netfilter mechanism ,which is a structural bottom frame for expanding various network service after 2.4 version.

Linux的系统内自2.4.版本之后采用了Netfilter机制，它是在内扩展各种网络服务的结构化底层框架。