1Allows a process to use raw networking: 2 - RAW sockets 3 - PACKET sockets 4 - binding to any address for transparent proxying 5 (also permitted via CAP_NET_ADMIN) 6