=head1 NAME
tethereal - Dump and analyze network traffic
=head1 SYNOPSYS
B<tethereal>
S<[ B<-a> capture autostop condition ] ...>
S<[ B<-b> number of ring buffer files ]>
S<[ B<-c> count ]>
S<[ B<-D> ]>
S<[ B<-f> capture filter expression ]>
S<[ B<-F> file format ]>
S<[ B<-h> ]>
S<[ B<-i> interface ]>
S<[ B<-l> ]>
S<[ B<-n> ]>
S<[ B<-N> resolving flags ]>
S<[ B<-o> preference setting ] ...>
S<[ B<-p> ]>
S<[ B<-r> infile ]>
S<[ B<-R> display filter expression ]>
S<[ B<-s> snaplen ]>
S<[ B<-t> time stamp format ]>
S<[ B<-v> ]>
S<[ B<-V> ]>
S<[ B<-w> savefile ]>
S<[ B<-x> ]>
S<[ filter expression ]>
=head1 DESCRIPTION
B<Tethereal> is a network protocol analyzer. It lets you capture packet
data from a live network, or read packets from a previously saved
capture file, either printing a decoded form of those packets to the
standard output or writing the packets to a file. B<Tethereal>'s native
capture file format is B<libpcap> format, which is also the format used
by B<tcpdump> and various other tools. In addition, B<Tethereal> can
read capture files from B<snoop> and B<atmsnoop>, Shomiti/Finisar
B<Surveyor>, Novell B<LANalyzer>, Network General/Network Associates
DOS-based B<Sniffer> (compressed or uncompressed), Microsoft B<Network
Monitor>, AIX's B<iptrace>, Cinco Networks B<NetXRay>, Network
Associates Windows-based B<Sniffer>, AG Group/WildPackets
B<EtherPeek>/B<TokenPeek>/B<AiroPeek>, B<RADCOM>'s WAN/LAN analyzer,
B<Lucent/Ascend> router debug output, HP-UX's B<nettl>, the dump output
from B<Toshiba's> ISDN routers, the output from B<i4btrace> from the
ISDN4BSD project, the output in B<IPLog> format from the Cisco Secure
Intrusion Detection System, B<pppd logs> (pppdump format), the output
from VMS's B<TCPIPtrace> utility, the text output from the B<DBS
Etherwatch> VMS utility, and traffic capture files from Visual Networks'
Visual UpTime. There is no need to tell B<Tethereal> what type of file
you are reading; it will determine the file type by itself.
B<Tethereal> is also capable of reading any of these file formats if
they are compressed using gzip. B<Tethereal> recognizes this directly
from the file; the '.gz' extension is not required for this purpose.
If the B<-w> flag is not specified, B<Tethereal> prints a decoded form
of the packets it captures or reads; otherwise, it writes those packets
to the file specified by that flag.
When printing a decoded form of packets, B<Tethereal> prints, by
default, a summary line containing the fields specified by the
preferences file (which are also the fields displayed in the packet list
pane in B<Ethereal>), although if it's printing packets as it captures
them, rather than printing packets from a saved capture file, it won't
print the "frame number" field. If the B<-V> flag is specified, it
prints intead a protocol tree, showing all the fields of all protocols
in the packet.
When writing packets to a file, B<Tethereal>, by default, writes the
file in B<libpcap> format, and writes all of the packets it sees to the
output file. The B<-F> flag can be used to specify the format in which
to write the file; it can write the file in B<libpcap> format (standard
B<libpcap> format, a modified format used by some patched versions of
B<libpcap>, or the format used by Red Hat Linux 6.1), B<snoop> format,
uncompressed B<Sniffer> format, Microsoft B<Network Monitor> 1.x format,
the format used by Windows-based versions of the B<Sniffer>
software, and the format used by Visual Networks' software.
Read filters in B<Tethereal>, which allow you to select which packets
are to be decoded or written to a file, are very powerful; more fields
are filterable in B<Tethereal> than in other protocol analyzers, and the
syntax you can use to create your filters is richer. As B<Tethereal>
progresses, expect more and more protocol fields to be allowed in read
filters.
Packet capturing is performed with the pcap library. The capture filter
syntax follows the rules of the pcap library. This syntax is different
from the read filter syntax. A read filter can also be specified when
capturing, and only packets that pass the read filter will be displayed
or saved to the output file; note, however, that capture filters are much
more efficient than read filters, and it may be more difficult for
B<Tethereal> to keep up with a busy network if a read filter is
specified for a live capture.
Compressed file support uses (and therefore requires) the zlib library.
If the zlib library is not present, B<Tethereal> will compile, but will
be unable to read compressed files.
A capture or read filter can either be specified with the B<-f> or B<-R>
option, respectively, in which case the entire filter expression must be
specified as a single argument (which means that if it contains spaces,
it must be quoted), or can be specified with command-line arguments
after the option arguments, in which case all the arguments after the
filter arguments are treated as a filter expression. If the filter is
specified with command-line arguments after the option arguments, it's a
capture filter if a capture is being done (i.e., if no B<-r> flag was
specified) and a read filter if a capture file is being read (i.e., if a
B<-r> flag was specified).
=head1 OPTIONS
=over 4
=item -a
Specify a criterion that specifies when B<Tethereal> is to stop writing
to a capture file. The criterion is of the form I<test>B<:>I<value>,
where I<test> is one of:
=for man .RS
=for html <P><DL>
=item duration
Stop writing to a capture file after I<value> seconds have elapsed.
=item filesize
Stop writing to a capture file after it reaches a size of I<value>
kilobytes (where a kilobyte is 1000 bytes, not 1024 bytes).
=for man .RE
=for html </DL>
=item -b
If a maximum capture file size was specified, causes B<Tethereal> to run
in "ring buffer" mode, with the specified number of files. In "ring
buffer" mode, B<Tethereal> will write to several capture files; the name
of the first file, while the capture is in progress, will be the name
specified by the B<-w> flag, and subsequent files with have .I<n>
appended, with I<n> counting up.
When the first capture file fills up, B<Tethereal> will switch to
writing to the next file, until it fills up the last file, at which
point it'll discard the data in the first file and start writing to that
file. When that file fills up, B<Tethereal> will discard the data in
the next file and start writing to it, and so on.
When the capture completes, the files will be renamed to have names
based on the number of the file and on the date and time at which
packets most recently started being written to the file.
You can only save files in B<libpcap> format when using a ring buffer.
=item -c
Sets the default number of packets to read when capturing live
data.
=item -D
Prints a list of the interfaces on which B<Tethereal> can capture, and
exits. Note that "can capture" means that B<Tethereal> was able to open
that device to do a live capture; if, on your system, a program doing a
network capture must be run from an account with special privileges (for
example, as root), then, if B<Tethereal> is run with the B<-D> flag and
is not run from such an account, it will not list any interfaces.
=item -f
Sets the capture filter expression.
=item -F
Sets the file format of the output capture file.
=item -h
Prints the version and options and exits.
=item -i
Sets the name of the network interface to use for live packet capture.
It should match one of the names listed in "B<netstat -i>" or
"B<ifconfig -a>". If no interface is specified, B<Tethereal> searches
the list of interfaces, choosing the first non-loopback interface if
there are any non-loopback interfaces, and choosing the first loopback
interface if there are no non-loopback interfaces; if there are no
interfaces, B<Tethereal> reports an error and doesn't start the capture.
=item -l
Flush the standard output after the information for each packet is
printed. (This is not, strictly speaking, line-buffered if B<-V>
was specified; however, it is the same as line-buffered if B<-V> wasn't
specified, as only one line is printed for each packet, and, as B<-l> is
normally used when piping a live capture to a program or script, so that
output for a packet shows up as soon as the packet is seen and
dissected, it should work just as well as true line-buffering. We do
this as a workaround for a deficiency in the Microsoft Visual C++ C
library.)
This may be useful when piping the output of B<Tethereal> to another
program, as it means that the program to which the output is piped will
see the dissected data for a packet as soon as B<Tethereal> sees the
packet and generates that output, rather than seeing it only when the
standard output buffer containing that data fills up.
=item -n
Disables network object name resolution (such as hostname, TCP and UDP port
names).
=item -N
Turns on name resolving for particular types of addresses and port
numbers; the argument is a string that may contain the letters B<m> to
enable MAC address resolution, B<n> to enable network address
resolution, and B<t> to enable transport-layer port number resolution.
This overrides B<-n> if both B<-N> and B<-n> are present.
=item -o
Sets a preference value, overriding the default value and any value read
from a preference file. The argument to the flag is a string of the
form I<prefname>B<:>I<value>, where I<prefname> is the name of the
preference (which is the same name that would appear in the preference
file), and I<value> is the value to which it should be set.
=item -p
I<Don't> put the interface into promiscuous mode. Note that the
interface might be in promiscuous mode for some other reason; hence,
B<-p> cannot be used to ensure that the only traffic that is captured is
traffic sent to or from the machine on which B<Tethereal> is running,
broadcast traffic, and multicast traffic to addresses received by that
machine.
=item -r
Reads packet data from I<infile>.
=item -R
Causes the specified filter (which uses the syntax of read filters,
rather than that of capture filters) to be applied before printing a
decoded form of packets or writing packets to a file; packets not
matching the filter are discarded rather than being printed or written.
=item -s
Sets the default snapshot length to use when capturing live data.
No more than I<snaplen> bytes of each network packet will be read into
memory, or saved to disk.
=item -t
Sets the format of the packet timestamp printed in summary lines. The
format can be one of 'r' (relative), 'a' (absolute), 'ad' (absolute with
date), or 'd' (delta). The relative time is the time elapsed between
the first packet and the current packet. The absolute time is the
actual time the packet was captured, with no date displayed; the
absolute date and time is the actual time and date the packet was
captured. The delta time is the time since the previous packet was
captured. The default is relative.
=item -v
Prints the version and exits.
=item -V
Causes B<Tethereal> to print a protocol tree for each packet rather than
a one-line summary of the packet.
=item -w
Writes packet data to I<savefile>.
=item -x
Causes B<Tethereal> to print a hex and ASCII dump of the packet data
after printing the summary or protocol tree.
=back
=head1 CAPTURE FILTER SYNTAX
See manual page of tcpdump(8).
=head1 READ FILTER SYNTAX
Read filters help you remove the noise from a packet trace and let you
see only the packets that interest you. If a packet meets the
requirements expressed in your read filter, then it is printed. Read
filters let you compare the fields within a protocol against a specific
value, compare fields against fields, and to check the existence of
specified fields or protocols.
The simplest read filter allows you to check for the existence of a
protocol or field. If you want to see all packets which contain the IPX
protocol, the filter would be "ipx". (Without the quotation marks) To
see all packets that contain a Token-Ring RIF field, use "tr.rif".
Fields can also be compared against values. The comparison operators
can be expressed either through C-like symbols, or through English-like
abbreviations:
eq, == Equal
ne, != Not equal
gt, > Greater than
lt, < Less Than
ge, >= Greater than or Equal to
le, <= Less than or Equal to
Furthermore, each protocol field is typed. The types are:
Unsigned integer (either 8-bit, 16-bit, 24-bit, or 32-bit)
Signed integer (either 8-bit, 16-bit, 24-bit, or 32-bit)
Boolean
Ethernet address (6 bytes)
Byte string (n-number of bytes)
IPv4 address
IPv6 address
IPX network number
String (text)
Double-precision floating point number
An integer may be expressed in decimal, octal, or hexadecimal notation.
The following three read filters are equivalent:
frame.pkt_len > 10
frame.pkt_len > 012
frame.pkt_len > 0xa
Boolean values are either true or false. In a read filter expression
testing the value of a Boolean field, "true" is expressed as 1 or any
other non-zero value, and "false" is expressed as zero. For example, a
token-ring packet's source route field is boolean. To find any
source-routed packets, a read filter would be:
tr.sr == 1
Non source-routed packets can be found with:
tr.sr == 0
Ethernet addresses, as well as a string of bytes, are represented in hex
digits. The hex digits may be separated by colons, periods, or hyphens:
fddi.dst eq ff:ff:ff:ff:ff:ff
ipx.srcnode == 0.0.0.0.0.1
eth.src == aa-aa-aa-aa-aa-aa
If a string of bytes contains only one byte, then it is represented as
an unsigned integer. That is, if you are testing for hex value 'ff' in
a one-byte byte-string, you must compare it agains '0xff' and not 'ff'.
IPv4 addresses can be represented in either dotted decimal notation, or
by using the hostname:
ip.dst eq www.mit.edu
ip.src == 192.168.1.1
IPv4 addresses can be compared with the same logical relations as numbers:
eq, ne, gt, ge, lt, and le. The IPv4 address is stored in host order,
so you do not have to worry about how the endianness of an IPv4 address
when using it in a read filter.
Classless InterDomain Routing (CIDR) notation can be used to test if an
IPv4 address is in a certain subnet. For example, this display filter
will find all packets in the 129.111 Class-B network:
ip.addr == 129.111.0.0/16
Remember, the number after the slash represents the number of bits used
to represent the network. CIDR notation can also be used with
hostnames, in this example of finding IP addresses on the same Class C
network as 'sneezy':
ip.addr eq sneezy/24
The CIDR notation can only be used on IP addresses or hostnames, not in
variable names. So, a display filter like "ip.src/24 == ip.dst/24" is
not valid. (yet)
IPX networks are represented by unsigned 32-bit integers. Most likely
you will be using hexadecimal when testing for IPX network values:
ipx.srcnet == 0xc0a82c00
A slice operator also exists. You can check the substring
(byte-string) of any protocol or field. For example, you can filter on
the vendor portion of an ethernet address (the first three bytes) like
this:
eth.src[0:3] == 00:00:83
If the length of your byte-slice is only one byte, then it is still
represented in hex, but without the preceding "0x":
llc[3] == aa
You can use the slice operator on a protocol name, too. And
remember, the "frame" protocol encompasses the entire packet, allowing
you to look at the nth byte of a packet regardless of its frame type
(Ethernet, token-ring, etc.).
token[0:5] ne 0.0.0.1.1
ipx[0:2] == ff:ff
llc[3:1] eq 0xaa
The following syntax governs slices:
[i:j] i = start_offset, j = length
[i-j] i = start_offet, j = end_offset, inclusive.
[i] i = start_offset, length = 1
[:j] start_offset = 0, length = j
[i:] start_offset = i, end_offset = end_of_field
Offsets and lengths can be negative, in which case they indicate the
offset from the B<end> of the field. Here's how to check the last 4
bytes of a frame:
frame[-4:4] == 0.1.2.3
or
frame[-4:] == 0.1.2.3
You can create complex concatenations of slices using the comma operator:
field[1,3-5,9:] == 01:03:04:05:09:0a:0b
All the above tests can be combined together with logical expressions.
These too are expressable in C-like syntax or with English-like
abbreviations:
and, && Logical AND
or, || Logical OR
not, ! Logical NOT
Expressions can be grouped by parentheses as well. The following are
all valid read filter expression:
tcp.port == 80 and ip.src == 192.168.2.1
not llc
(ipx.srcnet == 0xbad && ipx.srnode == 0.0.0.0.0.1) || ip
tr.dst[0:3] == 0.6.29 xor tr.src[0:3] == 0.6.29
A special caveat must be given regarding fields that occur more than
once per packet. "ip.addr" occurs twice per IP packet, once for the
source address, and once for the destination address. Likewise,
tr.rif.ring fields can occur more than once per packet. The following
two expressions are not equivalent:
ip.addr ne 192.168.4.1
not ip.addr eq 192.168.4.1
The first filter says "show me all packets where an ip.addr exists that
does not equal 192.168.4.1". That is, as long as one ip.addr in the
packet does not equal 192.168.44.1, the packet passes the display
filter. The second filter "don't show me any packets that have at least
one ip.addr field equal to 192.168.4.1". If one ip.addr is 192.168.4.1,
the packet does not pass. If B<neither> ip.addr fields is 192.168.4.1,
then the packet passes.
It is easy to think of the 'ne' and 'eq' operators as having an implict
"exists" modifier when dealing with multiply-recurring fields. "ip.addr
ne 192.168.4.1" can be thought of as "there exists an ip.addr that does
not equal 192.168.4.1".
Be careful with multiply-recurring fields; they can be confusing.
The following is a table of protocol and protocol fields that are
filterable in B<Tethereal>. The abbreviation of the protocol or field is
given. This abbreviation is what you use in the read filter. The
type of the field is also given.
=head2 802.1q Virtual LAN (vlan)
vlan.cfi CFI
Unsigned 16-bit integer
vlan.etype Type
Unsigned 16-bit integer
vlan.id ID
Unsigned 16-bit integer
vlan.len Length
Unsigned 16-bit integer
vlan.priority Priority
Unsigned 16-bit integer
vlan.trailer Trailer
Byte array
=head2 802.1x Authentication (eapol)
eapol.keydes.index.indexnum Index Number
Unsigned 8-bit integer
eapol.keydes.index.keytype Key Type
Boolean
eapol.keydes.key Key
Byte array
eapol.keydes.key_iv Key IV
Byte array
eapol.keydes.key_signature Key Signature
Byte array
eapol.keydes.keylen Key Length
Unsigned 16-bit integer
eapol.keydes.replay_counter Replay Counter
eapol.keydes.type Descriptor Type
Unsigned 8-bit integer
eapol.len Length
Unsigned 16-bit integer
eapol.type Type
Unsigned 8-bit integer
eapol.version Version
Unsigned 8-bit integer
=head2 AOL Instant Messenger (aim)
aim.channel Channel ID
Unsigned 8-bit integer
aim.cmd_start Command Start
Unsigned 8-bit integer
aim.datalen Data Field Length
Unsigned 16-bit integer
aim.fnac.family FNAC Family ID
Unsigned 16-bit integer
aim.fnac.subtype FNAC Subtype ID
Unsigned 16-bit integer
aim.seqno Sequence Number
Unsigned 16-bit integer
=head2 ATM (atm)
atm.vci VCI
Unsigned 16-bit integer
atm.vpi VPI
Unsigned 8-bit integer
=head2 ATM LAN Emulation (lane)
=head2 Address Resolution Protocol (arp)
arp.dst.atm_num_e164 Target ATM number (E.164)
String
arp.dst.atm_num_nsap Target ATM number (NSAP)
Byte array
arp.dst.atm_subaddr Target ATM subaddress
Byte array
arp.dst.hlen Target ATM number length
Unsigned 8-bit integer
arp.dst.htype Target ATM number type
Boolean
arp.dst.hw Target hardware address
Byte array
arp.dst.hw_mac Target MAC address
6-byte Hardware (MAC) Address
arp.dst.pln Target protocol size
Unsigned 8-bit integer
arp.dst.proto Target protocol address
Byte array
arp.dst.proto_ipv4 Target IP address
IPv4 address
arp.dst.slen Target ATM subaddress length
Unsigned 8-bit integer
arp.dst.stype Target ATM subaddress type
Boolean
arp.hw.size Hardware size
Unsigned 8-bit integer
arp.hw.type Hardware type
Unsigned 16-bit integer
arp.opcode Opcode
Unsigned 16-bit integer
arp.proto.size Protocol size
Unsigned 8-bit integer
arp.proto.type Protocol type
Unsigned 16-bit integer
arp.src.atm_num_e164 Sender ATM number (E.164)
String
arp.src.atm_num_nsap Sender ATM number (NSAP)
Byte array
arp.src.atm_subaddr Sender ATM subaddress
Byte array
arp.src.hlen Sender ATM number length
Unsigned 8-bit integer
arp.src.htype Sender ATM number type
Boolean
arp.src.hw Sender hardware address
Byte array
arp.src.hw_mac Sender MAC address
6-byte Hardware (MAC) Address
arp.src.pln Sender protocol size
Unsigned 8-bit integer
arp.src.proto Sender protocol address
Byte array
arp.src.proto_ipv4 Sender IP address
IPv4 address
arp.src.slen Sender ATM subaddress length
Unsigned 8-bit integer
arp.src.stype Sender ATM subaddress type
Boolean
=head2 AiroPeek radio information (airopeek)
airopeek.channel Channel
Unsigned 8-bit integer
airopeek.data_rate Data Rate
Unsigned 8-bit integer
airopeek.signal_strength Signal Strength
Unsigned 8-bit integer
=head2 Andrew File System (AFS) (afs)
afs.backup Backup
Boolean
afs.backup.errcode Error Code
Unsigned 32-bit integer
afs.backup.opcode Operation
Unsigned 32-bit integer
afs.bos BOS
Boolean
afs.bos.baktime Backup Time
Date/Time stamp
afs.bos.cell Cell
String
afs.bos.cmd Command
String
afs.bos.content Content
String
afs.bos.data Data
Byte array
afs.bos.date Date
Unsigned 32-bit integer
afs.bos.errcode Error Code
Unsigned 32-bit integer
afs.bos.error Error
String
afs.bos.file File
String
afs.bos.flags Flags
Unsigned 32-bit integer
afs.bos.host Host
String
afs.bos.instance Instance
String
afs.bos.key Key
Byte array
afs.bos.keychecksum Key Checksum
Unsigned 32-bit integer
afs.bos.keymodtime Key Modification Time
Date/Time stamp
afs.bos.keyspare2 Key Spare 2
Unsigned 32-bit integer
afs.bos.kvno Key Version Number
Unsigned 32-bit integer
afs.bos.newtime New Time
Date/Time stamp
afs.bos.number Number
Unsigned 32-bit integer
afs.bos.oldtime Old Time
Date/Time stamp
afs.bos.opcode Operation
Unsigned 32-bit integer
afs.bos.parm Parm
String
afs.bos.path Path
String
afs.bos.size Size
Unsigned 32-bit integer
afs.bos.spare1 Spare1
String
afs.bos.spare2 Spare2
String
afs.bos.spare3 Spare3
String
afs.bos.status Status
Signed 32-bit integer
afs.bos.statusdesc Status Description
String
afs.bos.type Type
String
afs.bos.user User
String
afs.cb Callback
Boolean
afs.cb.callback.expires Expires
Date/Time stamp
afs.cb.callback.type Type
Unsigned 32-bit integer
afs.cb.callback.version Version
Unsigned 32-bit integer
afs.cb.errcode Error Code
Unsigned 32-bit integer
afs.cb.fid.uniq FileID (Uniqifier)
Unsigned 32-bit integer
afs.cb.fid.vnode FileID (VNode)
Unsigned 32-bit integer
afs.cb.fid.volume FileID (Volume)
Unsigned 32-bit integer
afs.cb.opcode Operation
Unsigned 32-bit integer
afs.error Error
Boolean
afs.error.opcode Operation
Unsigned 32-bit integer
afs.fs File Server
Boolean
afs.fs.acl.a _A_dminister
Boolean
afs.fs.acl.count.negative ACL Count (Negative)
Unsigned 32-bit integer
afs.fs.acl.count.positive ACL Count (Positive)
Unsigned 32-bit integer
afs.fs.acl.d _D_elete
Boolean
afs.fs.acl.datasize ACL Size
Unsigned 32-bit integer
afs.fs.acl.entity Entity (User/Group)
String
afs.fs.acl.i _I_nsert
Boolean
afs.fs.acl.k _L_ock
Boolean
afs.fs.acl.l _L_ookup
Boolean
afs.fs.acl.r _R_ead
Boolean
afs.fs.acl.w _W_rite
Boolean
afs.fs.callback.expires Expires
Date/Time stamp
afs.fs.callback.type Type
Unsigned 32-bit integer
afs.fs.callback.version Version
Unsigned 32-bit integer
afs.fs.cps.spare1 CPS Spare1
Unsigned 32-bit integer
afs.fs.cps.spare2 CPS Spare2
Unsigned 32-bit integer
afs.fs.cps.spare3 CPS Spare3
Unsigned 32-bit integer
afs.fs.data Data
Byte array
afs.fs.errcode Error Code
Unsigned 32-bit integer
afs.fs.fid.uniq FileID (Uniqifier)
Unsigned 32-bit integer
afs.fs.fid.vnode FileID (VNode)
Unsigned 32-bit integer
afs.fs.fid.volume FileID (Volume)
Unsigned 32-bit integer
afs.fs.flength FLength
Unsigned 32-bit integer
afs.fs.ipaddr IP Address
IPv4 address
afs.fs.length Length
Unsigned 32-bit integer
afs.fs.motd Message of the Day
String
afs.fs.name Name
String
afs.fs.newname New Name
String
afs.fs.offlinemsg Offline Message
String
afs.fs.offset Offset
Unsigned 32-bit integer
afs.fs.oldname Old Name
String
afs.fs.opcode Operation
Unsigned 32-bit integer
afs.fs.status.anonymousaccess Anonymous Access
Unsigned 32-bit integer
afs.fs.status.author Author
Unsigned 32-bit integer
afs.fs.status.calleraccess Caller Access
Unsigned 32-bit integer
afs.fs.status.clientmodtime Client Modification Time
Date/Time stamp
afs.fs.status.dataversion Data Version
Unsigned 32-bit integer
afs.fs.status.dataversionhigh Data Version (High)
Unsigned 32-bit integer
afs.fs.status.filetype File Type
Unsigned 32-bit integer
afs.fs.status.group Group
Unsigned 32-bit integer
afs.fs.status.interfaceversion Interface Version
Unsigned 32-bit integer
afs.fs.status.length Length
Unsigned 32-bit integer
afs.fs.status.linkcount Link Count
Unsigned 32-bit integer
afs.fs.status.mask Mask
Unsigned 32-bit integer
afs.fs.status.mask.fsync FSync
Boolean
afs.fs.status.mask.setgroup Set Group
Boolean
afs.fs.status.mask.setmode Set Mode
Boolean
afs.fs.status.mask.setmodtime Set Modification Time
Boolean
afs.fs.status.mask.setowner Set Owner
Boolean
afs.fs.status.mask.setsegsize Set Segment Size
Boolean
afs.fs.status.mode Unix Mode
Unsigned 32-bit integer
afs.fs.status.owner Owner
Unsigned 32-bit integer
afs.fs.status.parentunique Parent Unique
Unsigned 32-bit integer
afs.fs.status.parentvnode Parent VNode
Unsigned 32-bit integer
afs.fs.status.segsize Segment Size
Unsigned 32-bit integer
afs.fs.status.servermodtime Server Modification Time
Date/Time stamp
afs.fs.status.spare2 Spare 2
Unsigned 32-bit integer
afs.fs.status.spare3 Spare 3
Unsigned 32-bit integer
afs.fs.status.spare4 Spare 4
Unsigned 32-bit integer
afs.fs.status.synccounter Sync Counter
Unsigned 32-bit integer
afs.fs.symlink.content Symlink Content
String
afs.fs.symlink.name Symlink Name
String
afs.fs.timestamp Timestamp
Date/Time stamp
afs.fs.token Token
Byte array
afs.fs.viceid Vice ID
Unsigned 32-bit integer
afs.fs.vicelocktype Vice Lock Type
Unsigned 32-bit integer
afs.fs.volid Volume ID
Unsigned 32-bit integer
afs.fs.volname Volume Name
String
afs.fs.volsync.spare1 Volume Creation Timestamp
Date/Time stamp
afs.fs.volsync.spare2 Spare 2
Unsigned 32-bit integer
afs.fs.volsync.spare3 Spare 3
Unsigned 32-bit integer
afs.fs.volsync.spare4 Spare 4
Unsigned 32-bit integer
afs.fs.volsync.spare5 Spare 5
Unsigned 32-bit integer
afs.fs.volsync.spare6 Spare 6
Unsigned 32-bit integer
afs.fs.xstats.clientversion Client Version
Unsigned 32-bit integer
afs.fs.xstats.collnumber Collection Number
Unsigned 32-bit integer
afs.fs.xstats.timestamp XStats Timestamp
Unsigned 32-bit integer
afs.fs.xstats.version XStats Version
Unsigned 32-bit integer
afs.kauth KAuth
Boolean
afs.kauth.data Data
Byte array
afs.kauth.domain Domain
String
afs.kauth.errcode Error Code
Unsigned 32-bit integer
afs.kauth.kvno Key Version Number
Unsigned 32-bit integer
afs.kauth.name Name
String
afs.kauth.opcode Operation
Unsigned 32-bit integer
afs.kauth.princ Principal
String
afs.kauth.realm Realm
String
afs.prot Protection
Boolean
afs.prot.count Count
Unsigned 32-bit integer
afs.prot.errcode Error Code
Unsigned 32-bit integer
afs.prot.flag Flag
Unsigned 32-bit integer
afs.prot.gid Group ID
Unsigned 32-bit integer
afs.prot.id ID
Unsigned 32-bit integer
afs.prot.maxgid Maximum Group ID
Unsigned 32-bit integer
afs.prot.maxuid Maximum User ID
Unsigned 32-bit integer
afs.prot.name Name
String
afs.prot.newid New ID
Unsigned 32-bit integer
afs.prot.oldid Old ID
Unsigned 32-bit integer
afs.prot.opcode Operation
Unsigned 32-bit integer
afs.prot.pos Position
Unsigned 32-bit integer
afs.prot.uid User ID
Unsigned 32-bit integer
afs.rmtsys Rmtsys
Boolean
afs.rmtsys.opcode Operation
Unsigned 32-bit integer
afs.ubik Ubik
Boolean
afs.ubik.activewrite Active Write
Unsigned 32-bit integer
afs.ubik.addr Address
IPv4 address
afs.ubik.amsyncsite Am Sync Site
Unsigned 32-bit integer
afs.ubik.anyreadlocks Any Read Locks
Unsigned 32-bit integer
afs.ubik.anywritelocks Any Write Locks
Unsigned 32-bit integer
afs.ubik.beaconsincedown Beacon Since Down
Unsigned 32-bit integer
afs.ubik.currentdb Current DB
Unsigned 32-bit integer
afs.ubik.currenttran Current Transaction
Unsigned 32-bit integer
afs.ubik.epochtime Epoch Time
Date/Time stamp
afs.ubik.errcode Error Code
Unsigned 32-bit integer
afs.ubik.file File
Unsigned 32-bit integer
afs.ubik.interface Interface Address
IPv4 address
afs.ubik.isclone Is Clone
Unsigned 32-bit integer
afs.ubik.lastbeaconsent Last Beacon Sent
Date/Time stamp
afs.ubik.lastvote Last Vote
Unsigned 32-bit integer
afs.ubik.lastvotetime Last Vote Time
Date/Time stamp
afs.ubik.lastyesclaim Last Yes Claim
Date/Time stamp
afs.ubik.lastyeshost Last Yes Host
IPv4 address
afs.ubik.lastyesstate Last Yes State
Unsigned 32-bit integer
afs.ubik.lastyesttime Last Yes Time
Date/Time stamp
afs.ubik.length Length
Unsigned 32-bit integer
afs.ubik.lockedpages Locked Pages
Unsigned 32-bit integer
afs.ubik.locktype Lock Type
Unsigned 32-bit integer
afs.ubik.lowesthost Lowest Host
IPv4 address
afs.ubik.lowesttime Lowest Time
Date/Time stamp
afs.ubik.now Now
Date/Time stamp
afs.ubik.nservers Number of Servers
Unsigned 32-bit integer
afs.ubik.opcode Operation
Unsigned 32-bit integer
afs.ubik.position Position
Unsigned 32-bit integer
afs.ubik.recoverystate Recovery State
Unsigned 32-bit integer
afs.ubik.site Site
IPv4 address
afs.ubik.state State
Unsigned 32-bit integer
afs.ubik.synchost Sync Host
IPv4 address
afs.ubik.syncsiteuntil Sync Site Until
Date/Time stamp
afs.ubik.synctime Sync Time
Date/Time stamp
afs.ubik.tidcounter TID Counter
Unsigned 32-bit integer
afs.ubik.up Up
Unsigned 32-bit integer
afs.ubik.version.counter Counter
Unsigned 32-bit integer
afs.ubik.version.epoch Epoch
Date/Time stamp
afs.ubik.voteend Vote Ends
Date/Time stamp
afs.ubik.votestart Vote Started
Date/Time stamp
afs.ubik.votetype Vote Type
Unsigned 32-bit integer
afs.ubik.writelockedpages Write Locked Pages
Unsigned 32-bit integer
afs.ubik.writetran Write Transaction
Unsigned 32-bit integer
afs.update Update
Boolean
afs.update.opcode Operation
Unsigned 32-bit integer
afs.vldb VLDB
Boolean
afs.vldb.bkvol Backup Volume ID
Unsigned 32-bit integer
afs.vldb.bump Bumped Volume ID
Unsigned 32-bit integer
afs.vldb.clonevol Clone Volume ID
Unsigned 32-bit integer
afs.vldb.count Volume Count
Unsigned 32-bit integer
afs.vldb.errcode Error Code
Unsigned 32-bit integer
afs.vldb.flags Flags
Unsigned 32-bit integer
afs.vldb.flags.bkexists Backup Exists
Boolean
afs.vldb.flags.dfsfileset DFS Fileset
Boolean
afs.vldb.flags.roexists Read-Only Exists
Boolean
afs.vldb.flags.rwexists Read/Write Exists
Boolean
afs.vldb.id Volume ID
Unsigned 32-bit integer
afs.vldb.index Volume Index
Unsigned 32-bit integer
afs.vldb.name Volume Name
String
afs.vldb.nextindex Next Volume Index
Unsigned 32-bit integer
afs.vldb.numservers Number of Servers
Unsigned 32-bit integer
afs.vldb.opcode Operation
Unsigned 32-bit integer
afs.vldb.partition Partition
String
afs.vldb.rovol Read-Only Volume ID
Unsigned 32-bit integer
afs.vldb.rwvol Read-Write Volume ID
Unsigned 32-bit integer
afs.vldb.server Server
IPv4 address
afs.vldb.serverflags Server Flags
Unsigned 32-bit integer
afs.vldb.serverip Server IP
IPv4 address
afs.vldb.serveruniq Server Unique Address
Unsigned 32-bit integer
afs.vldb.serveruuid Server UUID
Byte array
afs.vldb.spare1 Spare 1
Unsigned 32-bit integer
afs.vldb.spare2 Spare 2
Unsigned 32-bit integer
afs.vldb.spare3 Spare 3
Unsigned 32-bit integer
afs.vldb.spare4 Spare 4
Unsigned 32-bit integer
afs.vldb.spare5 Spare 5
Unsigned 32-bit integer
afs.vldb.spare6 Spare 6
Unsigned 32-bit integer
afs.vldb.spare7 Spare 7
Unsigned 32-bit integer
afs.vldb.spare8 Spare 8
Unsigned 32-bit integer
afs.vldb.spare9 Spare 9
Unsigned 32-bit integer
afs.vldb.type Volume Type
Unsigned 32-bit integer
afs.vol Volume Server
Boolean
afs.vol.count Volume Count
Unsigned 32-bit integer
afs.vol.errcode Error Code
Unsigned 32-bit integer
afs.vol.id Volume ID
Unsigned 32-bit integer
afs.vol.name Volume Name
String
afs.vol.opcode Operation
Unsigned 32-bit integer
=head2 Appletalk Address Resolution Protocol (aarp)
aarp.dst.hw Target hardware address
Byte array
aarp.dst.hw_mac Target MAC address
6-byte Hardware (MAC) Address
aarp.dst.proto Target protocol address
Byte array
aarp.dst.proto_id Target ID
Byte array
aarp.hard.size Hardware size
Unsigned 8-bit integer
aarp.hard.type Hardware type
Unsigned 16-bit integer
aarp.opcode Opcode
Unsigned 16-bit integer
aarp.proto.size Protocol size
Unsigned 8-bit integer
aarp.proto.type Protocol type
Unsigned 16-bit integer
aarp.src.hw Sender hardware address
Byte array
aarp.src.hw_mac Sender MAC address
6-byte Hardware (MAC) Address
aarp.src.proto Sender protocol address
Byte array
aarp.src.proto_id Sender ID
Byte array
=head2 Async data over ISDN (V.120) (v120)
v120.address Link Address
Unsigned 16-bit integer
v120.control Control Field
Unsigned 16-bit integer
v120.header Header Field
String
=head2 Authentication Header (ah)
ah.sequence Sequence
Unsigned 32-bit integer
ah.spi SPI
Unsigned 32-bit integer
=head2 BACnet Virtual Link Control (bvlc)
bvlc.bdt_ip IP
IPv4 address
bvlc.bdt_mask Mask
Byte array
bvlc.bdt_port Port
Unsigned 16-bit integer
bvlc.fdt_ip IP
IPv4 address
bvlc.fdt_port Port
Unsigned 16-bit integer
bvlc.fdt_timeout Timeout
Unsigned 16-bit integer
bvlc.fdt_ttl TTL
Unsigned 16-bit integer
bvlc.function Function
Unsigned 8-bit integer
bvlc.fwd_ip IP
IPv4 address
bvlc.fwd_port Port
Unsigned 16-bit integer
bvlc.length Length
Unsigned 16-bit integer
bvlc.reg_ttl TTL
Unsigned 16-bit integer
bvlc.result Result
Unsigned 16-bit integer
bvlc.type Type
Unsigned 8-bit integer
=head2 Banyan Vines (vines)
vines.protocol Protocol
Unsigned 8-bit integer
=head2 Banyan Vines Fragmentation Protocol (vines_frp)
=head2 Banyan Vines SPP (vines_spp)
=head2 Blocks Extensible Exchange Protocol (beep)
beep.ansno Ansno
Unsigned 32-bit integer
beep.channel Channel
Unsigned 32-bit integer
beep.end End
Boolean
beep.more.complete Complete
Boolean
beep.more.intermediate Intermediate
Boolean
beep.msgno Msgno
Unsigned 32-bit integer
beep.req Request
Boolean
beep.req.channel Request Channel Number
Unsigned 32-bit integer
beep.rsp Response
Boolean
beep.rsp.channel Response Channel Number
Unsigned 32-bit integer
beep.seq Sequence
Boolean
beep.seq.ackno Ackno
Unsigned 32-bit integer
beep.seq.channel Sequence Channel Number
Unsigned 32-bit integer
beep.seq.window Window
Unsigned 32-bit integer
beep.seqno Seqno
Unsigned 32-bit integer
beep.size Size
Unsigned 32-bit integer
beep.status.negative Negative
Boolean
beep.status.positive Positive
Boolean
beep.violation Protocol Violation
Boolean
=head2 Boot Parameters (bootparams)
bootparams.domain Client Domain
String
bootparams.fileid File ID
String
bootparams.filepath File Path
String
bootparams.host Client Host
String
bootparams.hostaddr Client Address
IPv4 address
bootparams.routeraddr Router Address
IPv4 address
bootparams.type Address Type
Unsigned 32-bit integer
=head2 Bootstrap Protocol (bootp)
bootp.cookie Magic cookie
IPv4 address
bootp.dhcp Frame is DHCP
Boolean
bootp.file Boot file name
String
bootp.flag Broadcast flag
Unsigned 16-bit integer
bootp.hops Hops
Unsigned 8-bit integer
bootp.hw.addr Client hardware address
Byte array
bootp.hw.len Hardware address length
Unsigned 8-bit integer
bootp.hw.type Hardware type
Unsigned 8-bit integer
bootp.id Transaction ID
Unsigned 32-bit integer
bootp.ip.client Client IP address
IPv4 address
bootp.ip.relay Relay agent IP address
IPv4 address
bootp.ip.server Next server IP address
IPv4 address
bootp.ip.your Your (client) IP address
IPv4 address
bootp.secs Seconds elapsed
Unsigned 16-bit integer
bootp.server Server host name
String
bootp.type Message type
Unsigned 8-bit integer
=head2 Border Gateway Protocol (bgp)
bgp.type BGP message type
Unsigned 8-bit integer
=head2 Building Automation and Control Network APDU (bacapp)
bacapp.bacapp_type APDU Type
Unsigned 8-bit integer
=head2 Building Automation and Control Network NPDU (bacnet)
bacnet.control Control
Unsigned 8-bit integer
bacnet.control_dest Destination Specifier
Boolean
bacnet.control_expect Expecting Reply
Boolean
bacnet.control_net NSDU contains
Boolean
bacnet.control_prio_high Priority
Boolean
bacnet.control_prio_low Priority
Boolean
bacnet.control_res1 Reserved
Boolean
bacnet.control_res2 Reserved
Boolean
bacnet.control_src Source specifier
Boolean
bacnet.dadr_eth Destination ISO 8802-3 MAC Address
6-byte Hardware (MAC) Address
bacnet.dadr_tmp Unknown Destination MAC
Byte array
bacnet.dlen Destination MAC Layer Address Length
Unsigned 8-bit integer
bacnet.dnet Destination Network Address
Unsigned 16-bit integer
bacnet.hopc Hop Count
Unsigned 8-bit integer
bacnet.mesgtyp Message Type
Unsigned 8-bit integer
bacnet.perf Performance Index
Unsigned 8-bit integer
bacnet.pinfo Port Info
Unsigned 8-bit integer
bacnet.pinfolen Port Info Length
Unsigned 8-bit integer
bacnet.portid Port ID
Unsigned 8-bit integer
bacnet.rejectreason Reject Reason
Unsigned 8-bit integer
bacnet.rportnum Number of Port Mappings
Unsigned 8-bit integer
bacnet.sadr_eth SADR
6-byte Hardware (MAC) Address
bacnet.sadr_tmp Unknown Source MAC
Byte array
bacnet.slen Source MAC Layer Address Length
Unsigned 8-bit integer
bacnet.snet Source Network Address
Unsigned 16-bit integer
bacnet.vendor Vendor ID
Unsigned 16-bit integer
bacnet.version Version
Unsigned 8-bit integer
=head2 Cisco Auto-RP (auto_rp)
auto_rp.group_prefix Prefix
IPv4 address
auto_rp.holdtime Holdtime
Unsigned 16-bit integer
auto_rp.mask_len Mask length
Unsigned 8-bit integer
auto_rp.pim_ver Version
Unsigned 8-bit integer
auto_rp.prefix_sign Sign
Unsigned 8-bit integer
auto_rp.rp_addr RP address
IPv4 address
auto_rp.rp_count RP count
Unsigned 8-bit integer
auto_rp.type Packet type
Unsigned 8-bit integer
auto_rp.version Protocol version
Unsigned 8-bit integer
=head2 Cisco Discovery Protocol (cdp)
cdp.checksum Checksum
Unsigned 16-bit integer
cdp.tlv.len Length
Unsigned 16-bit integer
cdp.tlv.type Type
Unsigned 16-bit integer
cdp.ttl TTL
Unsigned 16-bit integer
cdp.version Version
Unsigned 8-bit integer
=head2 Cisco Group Management Protocol (cgmp)
cgmp.count Count
Unsigned 8-bit integer
cgmp.gda Group Destination Address
6-byte Hardware (MAC) Address
cgmp.type Type
Unsigned 8-bit integer
cgmp.usa Unicast Source Address
6-byte Hardware (MAC) Address
cgmp.version Version
Unsigned 8-bit integer
=head2 Cisco HDLC (chdlc)
chdlc.address Address
Unsigned 8-bit integer
chdlc.protocol Protocol
Unsigned 16-bit integer
=head2 Cisco Hot Standby Router Protocol (hsrp)
hsrp.auth_data Authentication Data
String
hsrp.group Group
Unsigned 8-bit integer
hsrp.hellotime Hellotime
Unsigned 8-bit integer
hsrp.holdtime Holdtime
Unsigned 8-bit integer
hsrp.opcode Op Code
Unsigned 8-bit integer
hsrp.priority Priority
Unsigned 8-bit integer
hsrp.reserved Reserved
Unsigned 8-bit integer
hsrp.state State
Unsigned 8-bit integer
hsrp.version Version
Unsigned 8-bit integer
hsrp.virt_ip Virtual IP Address
IPv4 address
=head2 Cisco ISL (isl)
isl.addr Source or Destination Address
6-byte Hardware (MAC) Address
isl.bpdu BPDU
Boolean
isl.crc CRC
Unsigned 32-bit integer
isl.dst Destination
6-byte Hardware (MAC) Address
isl.dst_route_desc Destination route descriptor
Unsigned 16-bit integer
isl.esize Esize
Unsigned 8-bit integer
isl.explorer Explorer
Boolean
isl.fcs_not_incl FCS Not Included
Boolean
isl.hsa HSA
Unsigned 24-bit integer
isl.index Index
Unsigned 16-bit integer
isl.len Length
Unsigned 16-bit integer
isl.src Source
6-byte Hardware (MAC) Address
isl.src_route_desc Source-route descriptor
Unsigned 16-bit integer
isl.src_vlan_id Source VLAN ID
Unsigned 16-bit integer
isl.type Type
Unsigned 8-bit integer
isl.user User
Unsigned 8-bit integer
isl.user_eth User
Unsigned 8-bit integer
isl.vlan_id VLAN ID
Unsigned 16-bit integer
=head2 Cisco Interior Gateway Routing Protocol (igrp)
igrp.as Autonomous System
Unsigned 16-bit integer
igrp.update Update Release
Unsigned 8-bit integer
=head2 Cisco SLARP (slarp)
slarp.address Address
IPv4 address
slarp.mysequence Outgoing sequence number
Unsigned 32-bit integer
slarp.ptype Packet type
Unsigned 32-bit integer
slarp.yoursequence Returned sequence number
Unsigned 32-bit integer
=head2 Common Open Policy Service (cops)
cops.accttimer.value Contents: ACCT Timer Value
Unsigned 16-bit integer
cops.c_num C-Num
Unsigned 8-bit integer
cops.c_type C-Type
Unsigned 8-bit integer
cops.client_type Client Type
Unsigned 16-bit integer
cops.context.m_type M-Type
Unsigned 16-bit integer
cops.context.r_type R-Type
Unsigned 16-bit integer
cops.cperror Error
Unsigned 16-bit integer
cops.cperror_sub Error Sub-code
Unsigned 16-bit integer
cops.decision.cmd Command-Code
Unsigned 16-bit integer
cops.decision.flags Flags
Unsigned 16-bit integer
cops.error Error
Unsigned 16-bit integer
cops.error_sub Error Sub-code
Unsigned 16-bit integer
cops.flags Flags
Unsigned 8-bit integer
cops.gperror Error
Unsigned 16-bit integer
cops.gperror_sub Error Sub-code
Unsigned 16-bit integer
cops.in-int.ipv4 IPv4 address
IPv4 address
cops.in-int.ipv6 IPv6 address
IPv6 address
cops.in-out-int.ifindex ifIndex
Unsigned 32-bit integer
cops.integrity.key_id Contents: Key ID
Unsigned 32-bit integer
cops.integrity.seq_num Contents: Sequence Number
Unsigned 32-bit integer
cops.katimer.value Contents: KA Timer Value
Unsigned 16-bit integer
cops.lastpdpaddr.ipv4 IPv4 address
IPv4 address
cops.lastpdpaddr.ipv6 IPv6 address
IPv6 address
cops.msg_len Message Length
Unsigned 32-bit integer
cops.obj.len Object Length
Unsigned 32-bit integer
cops.op_code Op Code
Unsigned 8-bit integer
cops.out-int.ipv4 IPv4 address
IPv4 address
cops.out-int.ipv6 IPv6 address
IPv6 address
cops.pdp.tcp_port TCP Port Number
Unsigned 32-bit integer
cops.pdprediraddr.ipv4 IPv4 address
IPv4 address
cops.pdprediraddr.ipv6 IPv6 address
IPv6 address
cops.pepid.id Contents: PEP Id
String
cops.reason Reason
Unsigned 16-bit integer
cops.reason_sub Reason Sub-code
Unsigned 16-bit integer
cops.report_type Contents: Report-Type
Unsigned 16-bit integer
cops.s_num S-Num
Unsigned 8-bit integer
cops.s_type S-Type
Unsigned 8-bit integer
cops.ver_flags Version and Flags
Unsigned 8-bit integer
cops.version Version
Unsigned 8-bit integer
=head2 Common Unix Printing System (CUPS) Browsing Protocol (cups)
cups.ptype Type
Unsigned 32-bit integer
cups.state State
Unsigned 8-bit integer
=head2 DCE RPC (dcerpc)
dcerpc.array.actual_count Actual Count
Unsigned 32-bit integer
dcerpc.array.max_count Max Count
Unsigned 32-bit integer
dcerpc.array.offset Offset
Unsigned 32-bit integer
dcerpc.auth_ctx_id Auth Context ID
Unsigned 32-bit integer
dcerpc.auth_level Auth level
Unsigned 8-bit integer
dcerpc.auth_pad_len Auth pad len
Unsigned 8-bit integer
dcerpc.auth_rsrvd Auth Rsrvd
Unsigned 8-bit integer
dcerpc.auth_type Auth type
Unsigned 8-bit integer
dcerpc.cn_ack_reason Ack reason
Unsigned 16-bit integer
dcerpc.cn_ack_result Ack result
Unsigned 16-bit integer
dcerpc.cn_ack_trans_id Transfer Syntax
String
dcerpc.cn_ack_trans_ver Syntax ver
Unsigned 32-bit integer
dcerpc.cn_alloc_hint Alloc hint
Unsigned 32-bit integer
dcerpc.cn_assoc_group Assoc Group
Unsigned 32-bit integer
dcerpc.cn_auth_len Auth Length
Unsigned 16-bit integer
dcerpc.cn_bind_if_ver Interface Ver
Unsigned 16-bit integer
dcerpc.cn_bind_if_ver_minor Interface Ver Minor
Unsigned 16-bit integer
dcerpc.cn_bind_to_uuid Interface UUID
String
dcerpc.cn_bind_trans_id Transfer Syntax
String
dcerpc.cn_bind_trans_ver Syntax ver
Unsigned 32-bit integer
dcerpc.cn_call_id Call ID
Unsigned 32-bit integer
dcerpc.cn_cancel_count Cancel count
Unsigned 8-bit integer
dcerpc.cn_ctx_id Context ID
Unsigned 16-bit integer
dcerpc.cn_flags Packet Flags
Unsigned 8-bit integer
dcerpc.cn_flags.cancel_pending Cancel Pending
Boolean
dcerpc.cn_flags.dne Did Not Execute
Boolean
dcerpc.cn_flags.first_frag First Frag
Boolean
dcerpc.cn_flags.last_frag Last Frag
Boolean
dcerpc.cn_flags.maybe Maybe
Boolean
dcerpc.cn_flags.mpx Multiplex
Boolean
dcerpc.cn_flags.object Object
Boolean
dcerpc.cn_flags.reserved Reserved
Boolean
dcerpc.cn_frag_len Frag Length
Unsigned 16-bit integer
dcerpc.cn_max_recv Max Recv Frag
Unsigned 16-bit integer
dcerpc.cn_max_xmit Max Xmit Frag
Unsigned 16-bit integer
dcerpc.cn_num_ctx_items Num Ctx Items
Unsigned 8-bit integer
dcerpc.cn_num_results Num results
Unsigned 8-bit integer
dcerpc.cn_num_trans_items Num Trans Items
Unsigned 16-bit integer
dcerpc.cn_sec_addr_len Scndry Addr len
Unsigned 16-bit integer
dcerpc.dg_act_id Activitiy
String
dcerpc.dg_ahint Activity Hint
Unsigned 16-bit integer
dcerpc.dg_auth_proto Auth proto
Unsigned 8-bit integer
dcerpc.dg_flags1 Flags1
Unsigned 8-bit integer
dcerpc.dg_flags1_broadcast Broadcast
Boolean
dcerpc.dg_flags1_frag Fragment
Boolean
dcerpc.dg_flags1_idempotent Idempotent
Boolean
dcerpc.dg_flags1_last_frag Last Fragment
Boolean
dcerpc.dg_flags1_maybe Maybe
Boolean
dcerpc.dg_flags1_nofack No Fack
Boolean
dcerpc.dg_flags1_rsrvd_01 Reserved
Boolean
dcerpc.dg_flags1_rsrvd_80 Reserved
Boolean
dcerpc.dg_flags2 Flags2
Unsigned 8-bit integer
dcerpc.dg_flags2_cancel_pending Cancel Pending
Boolean
dcerpc.dg_flags2_rsrvd_01 Reserved
Boolean
dcerpc.dg_flags2_rsrvd_04 Reserved
Boolean
dcerpc.dg_flags2_rsrvd_08 Reserved
Boolean
dcerpc.dg_flags2_rsrvd_10 Reserved
Boolean
dcerpc.dg_flags2_rsrvd_20 Reserved
Boolean
dcerpc.dg_flags2_rsrvd_40 Reserved
Boolean
dcerpc.dg_flags2_rsrvd_80 Reserved
Boolean
dcerpc.dg_frag_len Fragment len
Unsigned 16-bit integer
dcerpc.dg_frag_num Fragment num
Unsigned 16-bit integer
dcerpc.dg_if_id Interface
String
dcerpc.dg_if_ver Interface Ver
Unsigned 32-bit integer
dcerpc.dg_ihint Interface Hint
Unsigned 16-bit integer
dcerpc.dg_seqnum Sequence num
Unsigned 32-bit integer
dcerpc.dg_serial_hi Serial High
Unsigned 8-bit integer
dcerpc.dg_serial_lo Serial Low
Unsigned 8-bit integer
dcerpc.dg_server_boot Server boot time
Unsigned 32-bit integer
dcerpc.drep Data Representation
Byte array
dcerpc.drep.byteorder Byte order
Unsigned 8-bit integer
dcerpc.drep.character Character
Unsigned 8-bit integer
dcerpc.drep.fp Floating-point
Unsigned 8-bit integer
dcerpc.obj_id Object
String
dcerpc.opnum Opnum
Unsigned 16-bit integer
dcerpc.pkt_type Packet type
Unsigned 8-bit integer
dcerpc.referent_id Referent ID
Unsigned 32-bit integer
dcerpc.request_in Request in
Unsigned 32-bit integer
dcerpc.response_in Response in
Unsigned 32-bit integer
dcerpc.ver Version
Unsigned 8-bit integer
dcerpc.ver_minor Version (minor)
Unsigned 8-bit integer
=head2 DCE/RPC Conversation Manager (conv)
=head2 DCE/RPC Endpoint Mapper (epm)
epm.if_id Interface
String
epm.if_id_p Interface pointer
Unsigned 32-bit integer
epm.inq_type Inquiry type
Unsigned 32-bit integer
epm.lookup_hnd Lookup Handle
Byte array
epm.max_ents Max entries
Unsigned 32-bit integer
epm.num_ents Num entries
Unsigned 32-bit integer
epm.object Object
String
epm.object_p Object pointer
Unsigned 32-bit integer
epm.ver_maj Version Major
Unsigned 16-bit integer
epm.ver_min Version Minor
Unsigned 16-bit integer
epm.ver_opt Version Option
Unsigned 32-bit integer
=head2 DCE/RPC Remote Management (mgmt)
=head2 DCOM OXID Resolver (oxid)
=head2 DCOM Remote Activation (remact)
=head2 DEC Spanning Tree Protocol (dec_stp)
=head2 DHCPv6 (dhcpv6)
dhcpv6.msgtype Message type
Unsigned 8-bit integer
=head2 Data (data)
=head2 Data Link SWitching (dlsw)
=head2 Data Stream Interface (dsi)
dsi.code Code
Unsigned 32-bit integer
dsi.command Command
Unsigned 8-bit integer
dsi.flags Flags
Unsigned 8-bit integer
dsi.length Length
Unsigned 32-bit integer
dsi.requestid Request ID
Unsigned 16-bit integer
dsi.reserved Reserved
Unsigned 32-bit integer
=head2 Datagram Delivery Protocol (ddp)
ddp.checksum Checksum
Unsigned 16-bit integer
ddp.dst.net Destination Net
Unsigned 16-bit integer
ddp.dst.node Destination Node
Unsigned 8-bit integer
ddp.dst.socket Destination Socket
Unsigned 8-bit integer
ddp.hopcount Hop count
Unsigned 8-bit integer
ddp.len Datagram length
Unsigned 16-bit integer
ddp.src.net Source Net
Unsigned 16-bit integer
ddp.src.node Source Node
Unsigned 8-bit integer
ddp.src.socket Source Socket
Unsigned 8-bit integer
ddp.type Protocol type
Unsigned 8-bit integer
=head2 Diameter Protocol (diameter)
diameter.avp.code AVP Code
Unsigned 32-bit integer
diameter.avp.data.bytes Value
Byte array
diameter.avp.data.int32 Value
Signed 32-bit integer
diameter.avp.data.int64 Value
diameter.avp.data.string Value
String
diameter.avp.data.time Time
Date/Time stamp
diameter.avp.data.uint32 Value
Unsigned 32-bit integer
diameter.avp.data.uint64 Value
diameter.avp.data.v4addr IPv4 Address
IPv4 address
diameter.avp.data.v6addr IPv6 Address
IPv6 address
diameter.avp.flags AVP Flags
Unsigned 8-bit integer
diameter.avp.flags.protected Protected
Boolean
diameter.avp.flags.reserved3 Reserved
Boolean
diameter.avp.flags.reserved4 Reserved
Boolean
diameter.avp.flags.reserved5 Reserved
Boolean
diameter.avp.flags.reserved6 Reserved
Boolean
diameter.avp.flags.reserved7 Reserved
Boolean
diameter.avp.length AVP Length
Unsigned 24-bit integer
diameter.avp.vendorId AVP Vendor Id
Unsigned 32-bit integer
diameter.code Command Code
Unsigned 24-bit integer
diameter.endtoendid End-to-End Identifier
Unsigned 32-bit integer
diameter.flags Flags
Unsigned 8-bit integer
diameter.flags.error Error
Boolean
diameter.flags.mandatory Mandatory
Boolean
diameter.flags.proxyable Proxyable
Boolean
diameter.flags.request Request
Boolean
diameter.flags.reserved3 Reserved
Boolean
diameter.flags.reserved4 Reserved
Boolean
diameter.flags.reserved5 Reserved
Boolean
diameter.flags.reserved6 Reserved
Boolean
diameter.flags.reserved7 Reserved
Boolean
diameter.flags.vendorspecific Vendor-Specific
Boolean
diameter.hopbyhopid Hop-by-Hop Identifier
Unsigned 32-bit integer
diameter.length Length
Unsigned 24-bit integer
diameter.vendorId VendorId
Unsigned 32-bit integer
diameter.version Version
Unsigned 8-bit integer
=head2 Distance Vector Multicast Routing Protocol (dvmrp)
dvmrp.afi Address Family
Unsigned 8-bit integer
dvmrp.cap.genid Genid
Boolean
dvmrp.cap.leaf Leaf
Boolean
dvmrp.cap.mtrace Mtrace
Boolean
dvmrp.cap.netmask Netmask
Boolean
dvmrp.cap.prune Prune
Boolean
dvmrp.cap.snmp SNMP
Boolean
dvmrp.capabilities Capabilities
No value
dvmrp.checksum Checksum
Unsigned 16-bit integer
dvmrp.checksum_bad Bad Checksum
Boolean
dvmrp.command Command
Unsigned 8-bit integer
dvmrp.commands Commands
No value
dvmrp.count Count
Unsigned 8-bit integer
dvmrp.dest_unreach Destination Unreachable
Boolean
dvmrp.genid Generation ID
Unsigned 32-bit integer
dvmrp.hold Hold Time
Unsigned 32-bit integer
dvmrp.infinity Infinity
Unsigned 8-bit integer
dvmrp.lifetime Prune lifetime
Unsigned 32-bit integer
dvmrp.maj_ver Major Version
Unsigned 8-bit integer
dvmrp.metric Metric
Unsigned 8-bit integer
dvmrp.min_ver Minor Version
Unsigned 8-bit integer
dvmrp.route Route
No value
dvmrp.split_horiz Split Horizon
Boolean
dvmrp.type Type
Unsigned 8-bit integer
dvmrp.v1.code Code
Unsigned 8-bit integer
dvmrp.v3.code Code
Unsigned 8-bit integer
dvmrp.version DVMRP Version
Unsigned 8-bit integer
igmp.daddr Dest Addr
IPv4 address
igmp.maddr Multicast Addr
IPv4 address
igmp.naddr Neighbor Addr
IPv4 address
igmp.neighbor Neighbor Addr
IPv4 address
igmp.netmask Netmask
IPv4 address
igmp.saddr Source Addr
IPv4 address
=head2 Domain Name Service (dns)
dns.count.add_rr Additional RRs
Unsigned 16-bit integer
dns.count.answers Answer RRs
Unsigned 16-bit integer
dns.count.auth_rr Authority RRs
Unsigned 16-bit integer
dns.count.queries Questions
Unsigned 16-bit integer
dns.flags Flags
Unsigned 16-bit integer
dns.id Transaction ID
Unsigned 16-bit integer
dns.length Length
Unsigned 16-bit integer
dns.query Query
Boolean
dns.response Response
Boolean
=head2 Dynamic DNS Tools Protocol (ddtp)
ddtp.encrypt Encryption
Unsigned 32-bit integer
ddtp.hostid Hostid
Unsigned 32-bit integer
ddtp.ipaddr IP address
IPv4 address
ddtp.msgtype Message type
Unsigned 32-bit integer
ddtp.opcode Opcode
Unsigned 32-bit integer
ddtp.status Status
Unsigned 32-bit integer
ddtp.version Version
Unsigned 32-bit integer
=head2 Encapsulating Security Payload (esp)
esp.sequence Sequence
Unsigned 32-bit integer
esp.spi SPI
Unsigned 32-bit integer
=head2 Enhanced Interior Gateway Routing Protocol (eigrp)
eigrp.as Autonomous System
Unsigned 16-bit integer
eigrp.opcode Opcode
Unsigned 8-bit integer
eigrp.tlv Entry
Unsigned 16-bit integer
=head2 Ethernet (eth)
eth.addr Source or Destination Address
6-byte Hardware (MAC) Address
eth.dst Destination
6-byte Hardware (MAC) Address
eth.len Length
Unsigned 16-bit integer
eth.src Source
6-byte Hardware (MAC) Address
eth.trailer Trailer
Byte array
eth.type Type
Unsigned 16-bit integer
=head2 Extensible Authentication Protocol (eap)
eap.code Code
Unsigned 8-bit integer
eap.id Id
Unsigned 8-bit integer
eap.len Length
Unsigned 16-bit integer
eap.type Type
Unsigned 8-bit integer
=head2 FTP Data (ftp-data)
=head2 Fiber Distributed Data Interface (fddi)
fddi.addr Source or Destination Address
6-byte Hardware (MAC) Address
fddi.dst Destination
6-byte Hardware (MAC) Address
fddi.fc Frame Control
Unsigned 8-bit integer
fddi.fc.clf Class/Length/Format
Unsigned 8-bit integer
fddi.fc.mac_subtype MAC Subtype
Unsigned 8-bit integer
fddi.fc.prio Priority
Unsigned 8-bit integer
fddi.fc.smt_subtype SMT Subtype
Unsigned 8-bit integer
fddi.src Source
6-byte Hardware (MAC) Address
=head2 File Transfer Protocol (FTP) (ftp)
ftp.reponse.data Response data
String
ftp.request Request
Boolean
ftp.request.command Request command
String
ftp.request.data Request data
String
ftp.response Response
Boolean
ftp.response.code Response code
Unsigned 8-bit integer
=head2 Frame (frame)
frame.cap_len Capture Frame Length
Unsigned 32-bit integer
frame.file_off File Offset
Signed 32-bit integer
frame.number Frame Number
Unsigned 32-bit integer
frame.p2p_dir Point-to-Point Direction
Unsigned 8-bit integer
frame.pkt_len Total Frame Length
Unsigned 32-bit integer
frame.time Arrival Time
Date/Time stamp
frame.time_delta Time delta from previous packet
Time duration
frame.time_relative Time relative to first packet
Time duration
=head2 Frame Relay (fr)
fr.becn BECN
Boolean
fr.chdlctype Type
Unsigned 16-bit integer
fr.cr CR
Boolean
fr.dc DC
Boolean
fr.de DE
Boolean
fr.dlci DLCI
Unsigned 16-bit integer
fr.ea EA
Boolean
fr.fecn FECN
Boolean
fr.nlpid NLPID
Unsigned 8-bit integer
fr.snap.oui Organization Code
Unsigned 24-bit integer
fr.snap.pid Protocol ID
Unsigned 16-bit integer
fr.snaptype Type
Unsigned 16-bit integer
=head2 GARP Multicast Registration Protocol (gmrp)
garp.attribute_event Event
Unsigned 8-bit integer
garp.attribute_length Length
Unsigned 8-bit integer
garp.attribute_type Type
Unsigned 8-bit integer
garp.attribute_value_group_membership Value
6-byte Hardware (MAC) Address
garp.attribute_value_service_requirement Value
Unsigned 8-bit integer
garp.protocol_id Protocol ID
Unsigned 16-bit integer
=head2 GARP VLAN Registration Protocol (gvrp)
garp.attribute_value Value
Unsigned 16-bit integer
=head2 GPRS Tunnelling Protocol v0 (gtpv0)
gtpv0.apn APN
String
gtpv0.cause Cause
Unsigned 8-bit integer
gtpv0.chrg_id Charging ID
Unsigned 32-bit integer
gtpv0.chrg_ipv4 CG address IPv4
IPv4 address
gtpv0.chrg_ipv6 CG address IPv6
IPv6 address
gtpv0.ext_flow_label Flow Label Data I
Unsigned 16-bit integer
gtpv0.ext_id Extension identifier
Unsigned 16-bit integer
gtpv0.ext_val Extension value
String
gtpv0.flags Flags
Unsigned 8-bit integer
gtpv0.flags.payload Protocol type
Unsigned 8-bit integer
gtpv0.flags.reserved Reserved
Unsigned 8-bit integer
gtpv0.flags.snn Is SNDCP N-PDU included?
Boolean
gtpv0.flags.version Version
Unsigned 8-bit integer
gtpv0.flow_ii Flow Label Data II
Unsigned 16-bit integer
gtpv0.flow_label Flow label
Unsigned 16-bit integer
gtpv0.flow_sig Flow label Signalling
Unsigned 16-bit integer
gtpv0.gsn_addr_len GSN address length
Unsigned 8-bit integer
gtpv0.gsn_addr_type GSN address type
Unsigned 8-bit integer
gtpv0.gsn_ipv4 GSN address IPv4
IPv4 address
gtpv0.gsn_ipv6 GSN address IPv6
IPv6 address
gtpv0.imsi IMSI
String
gtpv0.lac LAC
Unsigned 16-bit integer
gtpv0.length Length
Unsigned 16-bit integer
gtpv0.map_cause MAP cause
Unsigned 8-bit integer
gtpv0.mcc MCC
Unsigned 16-bit integer
gtpv0.message Message type
Unsigned 8-bit integer
gtpv0.mnc MNC
Unsigned 8-bit integer
gtpv0.ms_reason MS not reachable reason
Unsigned 8-bit integer
gtpv0.ms_valid MS validated
Boolean
gtpv0.msisdn MSISDN
String
gtpv0.node_ipv4 Node address IPv4
IPv4 address
gtpv0.node_ipv6 Node address IPv6
IPv6 address
gtpv0.nsapi NSAPI
Unsigned 8-bit integer
gtpv0.ptmsi P-TMSI
Unsigned 32-bit integer
gtpv0.ptmsi_sig P-TMSI signature
Unsigned 24-bit integer
gtpv0.qos_delay QoS delay
Unsigned 8-bit integer
gtpv0.qos_mean QoS mean
Unsigned 8-bit integer
gtpv0.qos_peak QoS peak
Unsigned 8-bit integer
gtpv0.qos_precedence QoS precedence
Unsigned 8-bit integer
gtpv0.qos_reliabilty QoS reliability
Unsigned 8-bit integer
gtpv0.qos_spare1 Spare
Unsigned 8-bit integer
gtpv0.qos_spare2 Spare
Unsigned 8-bit integer
gtpv0.qos_spare3 Spare
Unsigned 8-bit integer
gtpv0.rac RAC
Unsigned 8-bit integer
gtpv0.recovery Recovery
Unsigned 8-bit integer
gtpv0.reorder Reordering required
Boolean
gtpv0.sel_mode Selection mode
Unsigned 8-bit integer
gtpv0.seq_number Sequence number
Unsigned 16-bit integer
gtpv0.sndcp_number SNDCP N-PDU LLC Number
Unsigned 8-bit integer
gtpv0.tid TID
String
gtpv0.tlli TLLI
Unsigned 32-bit integer
gtpv0.tr_comm Packet transfer command
Unsigned 8-bit integer
gtpv0.unknown Unknown data (length)
Unsigned 16-bit integer
gtpv0.user_addr_pdp_org PDP type organization
Unsigned 8-bit integer
gtpv0.user_addr_pdp_type PDP type number
Unsigned 8-bit integer
gtpv0.user_ipv4 End user address IPv4
IPv4 address
gtpv0.user_ipv6 End user address IPv6
IPv6 address
=head2 GPRS Tunnelling Protocol v1 (gtpv1)
gtpv1.apn APN
String
gtpv1.cause Cause
Unsigned 8-bit integer
gtpv1.chrg_char_f Flat rate charging
Unsigned 8-bit integer
gtpv1.chrg_char_h Hot billing charging
Unsigned 8-bit integer
gtpv1.chrg_char_n Normal charging
Unsigned 8-bit integer
gtpv1.chrg_char_p Prepaid charging
Unsigned 8-bit integer
gtpv1.chrg_char_r Reserved
Unsigned 8-bit integer
gtpv1.chrg_char_s Spare
Unsigned 8-bit integer
gtpv1.chrg_id Charging ID
Unsigned 32-bit integer
gtpv1.chrg_ipv4 CG address IPv4
IPv4 address
gtpv1.chrg_ipv6 CG address IPv6
IPv6 address
gtpv1.ext_id Extensio Identifier
Unsigned 16-bit integer
gtpv1.ext_val Extension Value
String
gtpv1.flags Flags
Unsigned 8-bit integer
gtpv1.flags.e Is Next Extension Header present?
Boolean
gtpv1.flags.payload_type Protocol type
Unsigned 8-bit integer
gtpv1.flags.pn Is N-PDU number present?
Boolean
gtpv1.flags.s Is Sequence Number present?
Boolean
gtpv1.flags.spare Spare bit
Unsigned 8-bit integer
gtpv1.flags.version Version
Unsigned 8-bit integer
gtpv1.gsn_addr_len GSN Address Length
Unsigned 8-bit integer
gtpv1.gsn_addr_type GSN Address Type
Unsigned 8-bit integer
gtpv1.gsn_ipv4 GSN address IPv4
IPv4 address
gtpv1.gsn_ipv6 GSN address IPv6
IPv6 address
gtpv1.imsi IMSI
String
gtpv1.lac LAC
Unsigned 16-bit integer
gtpv1.length Length
Unsigned 16-bit integer
gtpv1.map_cause MAP cause
Unsigned 8-bit integer
gtpv1.mcc MCC
Unsigned 16-bit integer
gtpv1.message Message Type
Unsigned 8-bit integer
gtpv1.mnc MNC
Unsigned 8-bit integer
gtpv1.ms_reason MS not reachable reason
Unsigned 8-bit integer
gtpv1.ms_valid MS validated
Boolean
gtpv1.msisdn MSISDN
String
gtpv1.next Next extension header type
Unsigned 8-bit integer
gtpv1.node_ipv4 Node address IPv4
IPv4 address
gtpv1.node_ipv6 Node address IPv6
IPv6 address
gtpv1.npdu_number N-PDU Number
Unsigned 8-bit integer
gtpv1.nsapi NSAPI
Unsigned 8-bit integer
gtpv1.pkt_flow_id Packet Flow ID
Unsigned 8-bit integer
gtpv1.ptmsi P-TMSI
Unsigned 32-bit integer
gtpv1.ptmsi_sig P-TMSI Signature
Unsigned 24-bit integer
gtpv1.qos_al_ret_priority Allocation/Retention priority
Unsigned 8-bit integer
gtpv1.qos_del_err_sdu Delivery of erroneous SDU
Unsigned 8-bit integer
gtpv1.qos_del_order Delivery order
Unsigned 8-bit integer
gtpv1.qos_delay QoS Delay
Unsigned 8-bit integer
gtpv1.qos_guar_dl Guaranteed bit rate for downlink
Unsigned 8-bit integer
gtpv1.qos_guar_ul Guaranteed bit rate for uplink
Unsigned 8-bit integer
gtpv1.qos_max_dl Maximum bit rate for downlink
Unsigned 8-bit integer
gtpv1.qos_max_sdu_size Maximum SDU size
Unsigned 8-bit integer
gtpv1.qos_max_ul Maximum bit rate for uplink
Unsigned 8-bit integer
gtpv1.qos_mean QoS Mean
Unsigned 8-bit integer
gtpv1.qos_peak QoS Peak
Unsigned 8-bit integer
gtpv1.qos_precedence QoS Precedence
Unsigned 8-bit integer
gtpv1.qos_reliabilty QoS Reliability
Unsigned 8-bit integer
gtpv1.qos_res_ber Residual BER
Unsigned 8-bit integer
gtpv1.qos_sdu_err_ratio SDU Error ratio
Unsigned 8-bit integer
gtpv1.qos_spare1 Spare
Unsigned 8-bit integer
gtpv1.qos_spare2 Spare
Unsigned 8-bit integer
gtpv1.qos_spare3 Spare
Unsigned 8-bit integer
gtpv1.qos_traf_class Traffic class
Unsigned 8-bit integer
gtpv1.qos_traf_handl_prio Traffic handling priority
Unsigned 8-bit integer
gtpv1.qos_trans_delay Transfer delay
Unsigned 8-bit integer
gtpv1.rab_gtp_dn Downlink GTP-U seq number
Unsigned 16-bit integer
gtpv1.rab_gtp_up Uplink GTP-U seq number
Unsigned 16-bit integer
gtpv1.rab_pdu_dn Downlink next PDCP-PDU seq number
Unsigned 8-bit integer
gtpv1.rab_pdu_up Uplink next PDCP-PDU seq number
Unsigned 8-bit integer
gtpv1.rac RAC
Unsigned 8-bit integer
gtpv1.ranap_cause RANAP cause
Unsigned 8-bit integer
gtpv1.recovery Recovery
Unsigned 8-bit integer
gtpv1.reorder Reordering required
Boolean
gtpv1.rnc_ipv4 RNC address IPv4
IPv4 address
gtpv1.rnc_ipv6 RNC address IPv6
IPv6 address
gtpv1.rp Radio Priority
Unsigned 8-bit integer
gtpv1.rp_nsapi NSAPI in Radio Priority
Unsigned 8-bit integer
gtpv1.rp_sms Radio Priority SMS
Unsigned 8-bit integer
gtpv1.rp_spare Reserved
Unsigned 8-bit integer
gtpv1.sel_mode Selection Mode
Unsigned 8-bit integer
gtpv1.seq_number Sequence Number
Unsigned 16-bit integer
gtpv1.tear_ind Teardown indication
Boolean
gtpv1.teid TEID
Unsigned 32-bit integer
gtpv1.teid_cp TEID Control Plane
Unsigned 32-bit integer
gtpv1.teid_data TEID Data I
Unsigned 32-bit integer
gtpv1.teid_ii TEID Data II
Unsigned 32-bit integer
gtpv1.tlli TLLI
Unsigned 32-bit integer
gtpv1.tr_comm Packet transfer command
Unsigned 8-bit integer
gtpv1.trace_ref Trace reference
Unsigned 16-bit integer
gtpv1.trace_type Trace type
Unsigned 16-bit integer
gtpv1.unknown Unknown data (length)
Unsigned 16-bit integer
gtpv1.user_addr_pdp_org PDP type organization
Unsigned 8-bit integer
gtpv1.user_addr_pdp_type PDP type number
Unsigned 8-bit integer
gtpv1.user_ipv4 End user address IPv4
IPv4 address
gtpv1.user_ipv6 End user address IPv6
IPv6 address
=head2 General Inter-ORB Protocol (giop)
giop.TCKind TypeCode enum
Unsigned 32-bit integer
giop.endianess Endianess
Unsigned 8-bit integer
giop.iiop.host IIOP::Profile_host
String
giop.iiop.port IIOP::Profile_port
Unsigned 16-bit integer
giop.iiop.scid SCID
Unsigned 32-bit integer
giop.iiop.vscid VSCID
Unsigned 32-bit integer
giop.iiop_vmaj IIOP Major Version
Unsigned 8-bit integer
giop.iiop_vmin IIOP Minor Version
Unsigned 8-bit integer
giop.iioptag IIOP Component TAG
Unsigned 32-bit integer
giop.iortag IOR Profile TAG
Unsigned 8-bit integer
giop.len Message size
Unsigned 32-bit integer
giop.profid Profile ID
Unsigned 32-bit integer
giop.repoid Repository ID
String
giop.seqlen Sequence Length
Unsigned 32-bit integer
giop.strlen String Length
Unsigned 32-bit integer
giop.tcValueModifier ValueModifier
Signed 16-bit integer
giop.tcVisibility Visibility
Signed 16-bit integer
giop.tcboolean TypeCode boolean data
Boolean
giop.tcchar TypeCode char data
Unsigned 8-bit integer
giop.tccount TypeCode count
Unsigned 32-bit integer
giop.tcdefault_used default_used
Signed 32-bit integer
giop.tcdigits Digits
Unsigned 16-bit integer
giop.tcdouble TypeCode double data
Double-precision floating point
giop.tcenumdata TypeCode enum data
Unsigned 32-bit integer
giop.tcfloat TypeCode float data
Double-precision floating point
giop.tclength Length
Unsigned 32-bit integer
giop.tclongdata TypeCode long data
Signed 32-bit integer
giop.tcmaxlen Maximum length
Unsigned 32-bit integer
giop.tcmemname TypeCode member name
String
giop.tcname TypeCode name
String
giop.tcoctet TypeCode octet data
Unsigned 8-bit integer
giop.tcscale Scale
Signed 16-bit integer
giop.tcshortdata TypeCode short data
Signed 16-bit integer
giop.tcstring TypeCode string data
String
giop.tculongdata TypeCode ulong data
Unsigned 32-bit integer
giop.tcushortdata TypeCode ushort data
Unsigned 16-bit integer
giop.type Message type
Unsigned 8-bit integer
giop.typeid IOR::type_id
String
=head2 Generic Routing Encapsulation (gre)
gre.proto Protocol Type
Unsigned 16-bit integer
=head2 Gnutella Protocol (gnutella)
gnutella.header Descriptor Header
No value
gnutella.header.hops Hops
Unsigned 8-bit integer
gnutella.header.id ID
Byte array
gnutella.header.payload Payload
Unsigned 8-bit integer
gnutella.header.size Length
Unsigned 8-bit integer
gnutella.header.ttl TTL
Unsigned 8-bit integer
gnutella.pong.files Files Shared
Unsigned 32-bit integer
gnutella.pong.ip IP
IPv4 address
gnutella.pong.kbytes KBytes Shared
Unsigned 32-bit integer
gnutella.pong.payload Pong
No value
gnutella.pong.port Port
Unsigned 16-bit integer
gnutella.push.index Index
Unsigned 32-bit integer
gnutella.push.ip IP
IPv4 address
gnutella.push.payload Push
No value
gnutella.push.port Port
Unsigned 16-bit integer
gnutella.push.servent_id Servent ID
Byte array
gnutella.query.min_speed Min Speed
Unsigned 32-bit integer
gnutella.query.payload Query
No value
gnutella.query.search Search
String
gnutella.queryhit.count Count
Unsigned 8-bit integer
gnutella.queryhit.extra Extra
Byte array
gnutella.queryhit.hit Hit
No value
gnutella.queryhit.hit.extra Extra
Byte array
gnutella.queryhit.hit.index Index
Unsigned 32-bit integer
gnutella.queryhit.hit.name Name
String
gnutella.queryhit.hit.size Size
Unsigned 32-bit integer
gnutella.queryhit.ip IP
IPv4 address
gnutella.queryhit.payload QueryHit
No value
gnutella.queryhit.port Port
Unsigned 16-bit integer
gnutella.queryhit.servent_id Servent ID
Byte array
gnutella.queryhit.speed Speed
Unsigned 32-bit integer
gnutella.stream Gnutella Upload / Download Stream
No value
gnutella.truncated Truncated Frame
No value
=head2 Hummingbird NFS Daemon (hclnfsd)
hclnfsd.access Access
Unsigned 32-bit integer
hclnfsd.cookie Cookie
Unsigned 32-bit integer
hclnfsd.copies Copies
Unsigned 32-bit integer
hclnfsd.device Device
String
hclnfsd.exclusive Exclusive
Unsigned 32-bit integer
hclnfsd.fileext File Extension
Unsigned 32-bit integer
hclnfsd.filename Filename
String
hclnfsd.gid GID
Unsigned 32-bit integer
hclnfsd.group Group
String
hclnfsd.host_ip Host IP
IPv4 address
hclnfsd.hostname Hostname
String
hclnfsd.jobstatus Job Status
Unsigned 32-bit integer
hclnfsd.length Length
Unsigned 32-bit integer
hclnfsd.lockname Lockname
String
hclnfsd.lockowner Lockowner
Byte array
hclnfsd.logintext Login Text
String
hclnfsd.mode Mode
Unsigned 32-bit integer
hclnfsd.npp Number of Physical Printers
Unsigned 32-bit integer
hclnfsd.offset Offset
Unsigned 32-bit integer
hclnfsd.pqn Print Queue Number
Unsigned 32-bit integer
hclnfsd.printername Printer Name
String
hclnfsd.printparameters Print Parameters
String
hclnfsd.printqueuecomment Comment
String
hclnfsd.printqueuename Name
String
hclnfsd.queuestatus Queue Status
Unsigned 32-bit integer
hclnfsd.request_type Request Type
Unsigned 32-bit integer
hclnfsd.sequence Sequence
Unsigned 32-bit integer
hclnfsd.server_ip Server IP
IPv4 address
hclnfsd.size Size
Unsigned 32-bit integer
hclnfsd.status Status
Unsigned 32-bit integer
hclnfsd.timesubmitted Time Submitted
Unsigned 32-bit integer
hclnfsd.uid UID
Unsigned 32-bit integer
hclnfsd.unknown_data Unknown
Byte array
hclnfsd.username Username
String
=head2 Hypertext Transfer Protocol (http)
http.notification Notification
Boolean
http.request Request
Boolean
http.response Response
Boolean
=head2 ICQ Protocol (icq)
icq.checkcode Checkcode
Unsigned 32-bit integer
icq.client_cmd Client command
Unsigned 16-bit integer
icq.decode Decode
String
icq.server_cmd Server command
Unsigned 16-bit integer
icq.sessionid Session ID
Unsigned 32-bit integer
icq.type Type
Unsigned 16-bit integer
icq.uin UIN
Unsigned 32-bit integer
=head2 IEEE 802.11 wireless LAN (wlan)
wlan.addr Source or Destination address
6-byte Hardware (MAC) Address
wlan.aid Association ID
Unsigned 16-bit integer
wlan.bssid BSS Id
6-byte Hardware (MAC) Address
wlan.da Destination address
6-byte Hardware (MAC) Address
wlan.duration Duration
Unsigned 16-bit integer
wlan.fc Frame Control Field
Unsigned 16-bit integer
wlan.fc.ds DS status
Unsigned 8-bit integer
wlan.fc.frag Fragments
Boolean
wlan.fc.fromds From DS
Boolean
wlan.fc.moredata More Data
Boolean
wlan.fc.order Order flag
Boolean
wlan.fc.pwrmgt PWR MGT
Boolean
wlan.fc.retry Retry
Boolean
wlan.fc.subtype Subtype
Unsigned 8-bit integer
wlan.fc.tods To DS
Boolean
wlan.fc.type Type
Unsigned 8-bit integer
wlan.fc.type_subtype Type/Subtype
Unsigned 16-bit integer
wlan.fc.version Version
Unsigned 8-bit integer
wlan.fc.wep WEP flag
Boolean
wlan.fcs Frame Check Sequence (not verified)
Unsigned 32-bit integer
wlan.flags Protocol Flags
Unsigned 8-bit integer
wlan.frag Fragment number
Unsigned 16-bit integer
wlan.ra Receiver address
6-byte Hardware (MAC) Address
wlan.sa Source address
6-byte Hardware (MAC) Address
wlan.seq Sequence number
Unsigned 16-bit integer
wlan.ta Transmitter address
6-byte Hardware (MAC) Address
wlan.wep.crc WEP CRC (not verified)
Unsigned 32-bit integer
wlan.wep.iv Initialization Vector
Unsigned 24-bit integer
wlan.wep.key Key
Unsigned 8-bit integer
=head2 IEEE 802.11 wireless LAN management frame (wlan_mgt)
wlan_mgt.fixed.aid Association ID
Unsigned 16-bit integer
wlan_mgt.fixed.all Fixed parameters
Unsigned 16-bit integer
wlan_mgt.fixed.auth.alg Authentication Algorithm
Unsigned 16-bit integer
wlan_mgt.fixed.auth_seq Authentication SEQ
Unsigned 16-bit integer
wlan_mgt.fixed.beacon Beacon Interval
Double-precision floating point
wlan_mgt.fixed.capabilities Capabilities
Unsigned 16-bit integer
wlan_mgt.fixed.capabilities.agility Channel Agility
Boolean
wlan_mgt.fixed.capabilities.cfpoll.ap CFP participation capabilities
Unsigned 16-bit integer
wlan_mgt.fixed.capabilities.cfpoll.sta CFP participation capabilities
Unsigned 16-bit integer
wlan_mgt.fixed.capabilities.ess ESS capabilities
Boolean
wlan_mgt.fixed.capabilities.ibss IBSS status
Boolean
wlan_mgt.fixed.capabilities.pbcc PBCC
Boolean
wlan_mgt.fixed.capabilities.preamble Short Preamble
Boolean
wlan_mgt.fixed.capabilities.privacy Privacy
Boolean
wlan_mgt.fixed.current_ap Current AP
6-byte Hardware (MAC) Address
wlan_mgt.fixed.listen_ival Listen Interval
Unsigned 16-bit integer
wlan_mgt.fixed.reason_code Reason code
Unsigned 16-bit integer
wlan_mgt.fixed.status_code Status code
Unsigned 16-bit integer
wlan_mgt.fixed.timestamp Timestamp
String
wlan_mgt.tag.interpretation Tag interpretation
String
wlan_mgt.tag.length Tag length
Unsigned 16-bit integer
wlan_mgt.tag.number Tag
Unsigned 16-bit integer
wlan_mgt.tagged.all Tagged parameters
Unsigned 16-bit integer
=head2 ILMI (ilmi)
=head2 IP Payload Compression (ipcomp)
ipcomp.cpi CPI
Unsigned 16-bit integer
ipcomp.flags Flags
Unsigned 8-bit integer
=head2 IPX Message (ipxmsg)
ipxmsg.conn Connection Number
Unsigned 8-bit integer
ipxmsg.sigchar Signature Char
Unsigned 8-bit integer
=head2 IPX Routing Information Protocol (ipxrip)
ipxrip.request Request
Boolean
ipxrip.response Response
Boolean
=head2 ISDN Q.921-User Adaptation Layer (iua)
iua.asp_reason Reason
Unsigned 32-bit integer
iua.error_code Error code
Unsigned 32-bit integer
iua.info_string Info string
String
iua.int_interface_identifier Integer interface identifier
Unsigned 32-bit integer
iua.interface_range_end End
Unsigned 32-bit integer
iua.interface_range_start Start
Unsigned 32-bit integer
iua.message_class Message class
Unsigned 8-bit integer
iua.message_length Message length
Unsigned 32-bit integer
iua.message_type Message Type
Unsigned 8-bit integer
iua.one_bit One bit
Boolean
iua.parameter_length Parameter length
Unsigned 16-bit integer
iua.parameter_tag Parameter Tag
Unsigned 16-bit integer
iua.release_reason Reason
Unsigned 32-bit integer
iua.reserved Reserved
Unsigned 8-bit integer
iua.sapi SAPI
Unsigned 8-bit integer
iua.spare_bit Spare bit
Boolean
iua.status_identification Status identification
Unsigned 16-bit integer
iua.status_type Status type
Unsigned 16-bit integer
iua.tei TEI
Unsigned 8-bit integer
iua.tei_status TEI status
Unsigned 32-bit integer
iua.text_interface_identifier Text interface identifier
String
iua.traffic_mode_type Traffic mode type
Unsigned 32-bit integer
iua.version Version
Unsigned 8-bit integer
iua.zero_bit Zero bit
Boolean
=head2 ISDN User Part (isup)
isup.access_delivery_ind Access delivery indicator
Boolean
isup.address_presentation_restricted_indicator Address presentation restricted indicator
Unsigned 8-bit integer
isup.automatic_congestion_level Automatic congestion level
Unsigned 8-bit integer
isup.backw_call_echo_control_device_indicator Echo Control Device Indicator
Boolean
isup.backw_call_end_to_end_information_indicator End-to-end information indicator
Boolean
isup.backw_call_end_to_end_method_indicator End-to-end method indicator
Unsigned 16-bit integer
isup.backw_call_holding_indicator Holding indicator
Boolean
isup.backw_call_interworking_indicator Interworking indicator
Boolean
isup.backw_call_isdn_access_indicator ISDN access indicator
Boolean
isup.backw_call_isdn_user_part_indicator ISDN user part indicator
Boolean
isup.backw_call_sccp_method_indicator SCCP method indicator
Unsigned 16-bit integer
isup.call_diversion_may_occur_ind Call diversion may occur indicator
Boolean
isup.call_processing_state Call processing state
Unsigned 8-bit integer
isup.call_to_be_diverted_ind Call to be diverted indicator
Unsigned 8-bit integer
isup.call_to_be_offered_ind Call to be offered indicator
Unsigned 8-bit integer
isup.called_party_even_address_signal_digit Address signal digit
Unsigned 8-bit integer
isup.called_party_nature_of_address_indicator Nature of address indicator
Unsigned 8-bit integer
isup.called_party_odd_address_signal_digit Address signal digit
Unsigned 8-bit integer
isup.called_partys_category_indicator Called party's category indicator
Unsigned 16-bit integer
isup.called_partys_status_indicator Called party's status indicator
Unsigned 16-bit integer
isup.calling_party_address_request_indicator Calling party address request indicator
Boolean
isup.calling_party_address_response_indicator Calling party address response indicator
Unsigned 16-bit integer
isup.calling_party_even_address_signal_digit Address signal digit
Unsigned 8-bit integer
isup.calling_party_nature_of_address_indicator Nature of address indicator
Unsigned 8-bit integer
isup.calling_party_odd_address_signal_digit Address signal digit
Unsigned 8-bit integer
isup.calling_partys_category Calling Party's category
Unsigned 8-bit integer
isup.calling_partys_category_request_indicator Calling party's category request indicator
Boolean
isup.calling_partys_category_response_indicator Calling party's category response indicator
Boolean
isup.cgs_message_type Circuit group supervision message type
Unsigned 8-bit integer
isup.charge_indicator Charge indicator
Unsigned 16-bit integer
isup.charge_information_request_indicator Charge information request indicator
Boolean
isup.charge_information_response_indicator Charge information response indicator
Boolean
isup.cic CIC
Unsigned 16-bit integer
isup.clg_call_ind Closed user group call indicator
Unsigned 8-bit integer
isup.conference_acceptance_ind Conference acceptance indicator
Unsigned 8-bit integer
isup.connected_line_identity_request_ind Connected line identity request indicator
Boolean
isup.continuity_check_indicator Continuity Check Indicator
Unsigned 8-bit integer
isup.continuity_indicator Continuity indicator
Boolean
isup.echo_control_device_indicator Echo Control Device Indicator
Boolean
isup.event_ind Event indicator
Unsigned 8-bit integer
isup.event_presentatiation_restr_ind Event presentation restricted indicator
Boolean
isup.extension_ind Extension indicator
Boolean
isup.forw_call_end_to_end_information_indicator End-to-end information indicator
Boolean
isup.forw_call_end_to_end_method_indicator End-to-end method indicator
Unsigned 16-bit integer
isup.forw_call_interworking_indicator Interworking indicator
Boolean
isup.forw_call_isdn_access_indicator ISDN access indicator
Boolean
isup.forw_call_isdn_user_part_indicator ISDN user part indicator
Boolean
isup.forw_call_natnl_inatnl_call_indicator National/international call indicator
Boolean
isup.forw_call_preferences_indicator ISDN user part preference indicator
Unsigned 16-bit integer
isup.forw_call_sccp_method_indicator SCCP method indicator
Unsigned 16-bit integer
isup.hold_provided_indicator Hold provided indicator
Boolean
isup.hw_blocking_state HW blocking state
Unsigned 8-bit integer
isup.inband_information_ind In-band information indicator
Boolean
isup.info_req_holding_indicator Holding indicator
Boolean
isup.inn_indicator INN indicator
Boolean
isup.isdn_odd_even_indicator Odd/even indicator
Boolean
isup.loop_prevention_response_ind Response indicator
Unsigned 8-bit integer
isup.malicious_call_ident_request_indicator Malicious call identification request indicator (ISUP'88)
Boolean
isup.mandatory_variable_parameter_pointer Pointer to Parameter
Unsigned 8-bit integer
isup.map_type Map Type
Unsigned 8-bit integer
isup.message_type Message Type
Unsigned 8-bit integer
isup.mlpp_user MLPP user indicator
Boolean
isup.mtc_blocking_state Maintenance blocking state
Unsigned 8-bit integer
isup.network_identification_plan Network identification plan
Unsigned 8-bit integer
isup.ni_indicator NI indicator
Boolean
isup.numbering_plan_indicator Numbering plan indicator
Unsigned 8-bit integer
isup.optional_parameter_part_pointer Pointer to optional parameter part
Unsigned 8-bit integer
isup.original_redirection_reason Original redirection reason
Unsigned 16-bit integer
isup.parameter_length Parameter Length
Unsigned 8-bit integer
isup.parameter_type Parameter Type
Unsigned 8-bit integer
isup.range_indicator Range indicator
Unsigned 8-bit integer
isup.redirecting_ind Redirection indicator
Unsigned 16-bit integer
isup.redirection_counter Redirection counter
Unsigned 16-bit integer
isup.redirection_reason Redirection reason
Unsigned 16-bit integer
isup.satellite_indicator Satellite Indicator
Unsigned 8-bit integer
isup.screening_indicator Screening indicator
Unsigned 8-bit integer
isup.screening_indicator_enhanced Screening indicator
Unsigned 8-bit integer
isup.simple_segmentation_ind Simple segmentation indicator
Boolean
isup.solicided_indicator Solicited indicator
Boolean
isup.suspend_resume_indicator Suspend/Resume indicator
Boolean
isup.temporary_alternative_routing_ind Temporary alternative routing indicator
Boolean
isup.transmission_medium_requirement Transmission medium requirement
Unsigned 8-bit integer
isup.transmission_medium_requirement_prime Transmission medium requirement prime
Unsigned 8-bit integer
isup.type_of_network_identification Type of network identification
Unsigned 8-bit integer
=head2 ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol (isis)
isis.csnp.pdu_length PDU length
Unsigned 16-bit integer
isis.hello.circuit_type Circuit type
Unsigned 8-bit integer
isis.hello.clv_ipv4_int_addr IPv4 interface address
IPv4 address
isis.hello.clv_ipv6_int_addr IPv6 interface address
IPv6 address
isis.hello.clv_ptp_adj Point-to-point Adjacency
Unsigned 8-bit integer
isis.hello.holding_timer Holding timer
Unsigned 16-bit integer
isis.hello.lan_id SystemID{ Designated IS }
Byte array
isis.hello.local_circuit_id Local circuit ID
Unsigned 8-bit integer
isis.hello.pdu_length PDU length
Unsigned 16-bit integer
isis.hello.priority Priority
Unsigned 8-bit integer
isis.hello.source_id SystemID{ Sender of PDU }
Byte array
isis.irpd Intra Domain Routing Protocol Discriminator
Unsigned 8-bit integer
isis.len PDU Header Length
Unsigned 8-bit integer
isis.lsp.checksum Checksum
Unsigned 16-bit integer
isis.lsp.clv_ipv4_int_addr IPv4 interface address
IPv4 address
isis.lsp.clv_ipv6_int_addr IPv6 interface address
IPv6 address
isis.lsp.clv_te_router_id Traffic Engineering Router ID
IPv4 address
isis.lsp.pdu_length PDU length
Unsigned 16-bit integer
isis.lsp.remaining_life Remaining lifetime
Unsigned 16-bit integer
isis.lsp.sequence_number Sequence number
Unsigned 32-bit integer
isis.max_area_adr Max.AREAs: (0==3)
Unsigned 8-bit integer
isis.psnp.pdu_length PDU length
Unsigned 16-bit integer
isis.reserved Reserved (==0)
Unsigned 8-bit integer
isis.sysid_len System ID Length
Unsigned 8-bit integer
isis.type PDU Type
Unsigned 8-bit integer
isis.version Version (==1)
Unsigned 8-bit integer
isis.version2 Version2 (==1)
Unsigned 8-bit integer
=head2 ISO 8073 COTP Connection-Oriented Transport Protocol (cotp)
=head2 ISO 8473 CLNP ConnectionLess Network Protocol (clnp)
clnp.checksum Checksum
Unsigned 16-bit integer
clnp.dsap DA
Byte array
clnp.dsap.len DAL
Unsigned 8-bit integer
clnp.len HDR Length
Unsigned 8-bit integer
clnp.nlpi Network Layer Protocol Identifier
Unsigned 8-bit integer
clnp.pdu.len PDU length
Unsigned 16-bit integer
clnp.segment CLNP Segment
No value
clnp.segment.error Reassembly error
No value
clnp.segment.multipletails Multiple tail segments found
Boolean
clnp.segment.overlap Segment overlap
Boolean
clnp.segment.overlap.conflict Conflicting data in segment overlap
Boolean
clnp.segment.toolongsegment Segment too long
Boolean
clnp.segments CLNP Segments
No value
clnp.ssap SA
Byte array
clnp.ssap.len SAL
Unsigned 8-bit integer
clnp.ttl Holding Time
Unsigned 8-bit integer
clnp.type PDU Type
Unsigned 8-bit integer
clnp.version Version
Unsigned 8-bit integer
=head2 ISO 8602 CLTP ConnectionLess Transport Protocol (cltp)
=head2 ISO 9542 ESIS Routeing Information Exchange Protocol (esis)
esis.chksum Checksum
Unsigned 16-bit integer
esis.htime Holding Time
Unsigned 16-bit integer
esis.length PDU Length
Unsigned 8-bit integer
esis.nlpi Network Layer Protocol Identifier
Unsigned 8-bit integer
esis.res Reserved(==0)
Unsigned 8-bit integer
esis.type PDU Type
Unsigned 8-bit integer
esis.ver Version (==1)
Unsigned 8-bit integer
=head2 ITU-T Recommendation H.261 (h261)
h261.ebit End bit position
Unsigned 8-bit integer
h261.gobn GOB Number
Unsigned 8-bit integer
h261.hmvd Horizontal motion vector data
Unsigned 8-bit integer
h261.i Intra frame encoded data flag
Boolean
h261.mbap Macroblock address predictor
Unsigned 8-bit integer
h261.quant Quantizer
Unsigned 8-bit integer
h261.sbit Start bit position
Unsigned 8-bit integer
h261.stream H.261 stream
Byte array
h261.v Motion vector flag
Boolean
h261.vmvd Vertical motion vector data
Unsigned 8-bit integer
=head2 Inter-Access-Point Protocol (iapp)
iapp.type type
Unsigned 8-bit integer
iapp.version Version
Unsigned 8-bit integer
=head2 Internet Cache Protocol (icp)
icp.length Length
Unsigned 16-bit integer
icp.nr Request Number
Unsigned 32-bit integer
icp.opcode Opcode
Unsigned 8-bit integer
icp.version Version
Unsigned 8-bit integer
=head2 Internet Content Adaptation Protocol (icap)
icap.options Options
Boolean
icap.other Other
Boolean
icap.reqmod Reqmod
Boolean
icap.respmod Respmod
Boolean
icap.response Response
Boolean
=head2 Internet Control Message Protocol (icmp)
icmp.checksum Checksum
Unsigned 16-bit integer
icmp.checksum_bad Bad Checksum
Boolean
icmp.code Code
Unsigned 8-bit integer
icmp.mip.b Busy
Boolean
icmp.mip.challenge Challenge
Byte array
icmp.mip.coa Care-Of-Address
IPv4 address
icmp.mip.f Foreign Agent
Boolean
icmp.mip.flags Flags
Unsigned 8-bit integer
icmp.mip.g GRE
Boolean
icmp.mip.h Home Agent
Boolean
icmp.mip.length Length
Unsigned 8-bit integer
icmp.mip.life Registration Lifetime
Unsigned 16-bit integer
icmp.mip.m Minimal Encapsulation
Boolean
icmp.mip.prefixlength Prefix Length
Unsigned 8-bit integer
icmp.mip.r Registration Required
Boolean
icmp.mip.res Reserved
Boolean
icmp.mip.reserved Reserved
Unsigned 8-bit integer
icmp.mip.seq Sequence Number
Unsigned 16-bit integer
icmp.mip.type Extension Type
Unsigned 8-bit integer
icmp.mip.v VJ Comp
Boolean
icmp.type Type
Unsigned 8-bit integer
=head2 Internet Control Message Protocol v6 (icmpv6)
icmpv6.checksum Checksum
Unsigned 16-bit integer
icmpv6.checksum_bad Bad Checksum
Boolean
icmpv6.code Code
Unsigned 8-bit integer
icmpv6.type Type
Unsigned 8-bit integer
=head2 Internet Group Management Protocol (igmp)
igmp.access_key Access Key
Byte array
igmp.aux_data Aux Data
Byte array
igmp.aux_data_len Aux Data Len
Unsigned 8-bit integer
igmp.checksum Checksum
Unsigned 16-bit integer
igmp.checksum_bad Bad Checksum
Boolean
igmp.group_type Type Of Group
Unsigned 8-bit integer
igmp.identifier Identifier
Unsigned 32-bit integer
igmp.max_resp Max Resp Time
Unsigned 8-bit integer
igmp.max_resp.exp Exponent
Unsigned 8-bit integer
igmp.max_resp.mant Mantissa
Unsigned 8-bit integer
igmp.mtrace.max_hops # hops
Unsigned 8-bit integer
igmp.mtrace.q_arrival Query Arrival
Unsigned 32-bit integer
igmp.mtrace.q_fwd_code Forwarding Code
Unsigned 8-bit integer
igmp.mtrace.q_fwd_ttl FwdTTL
Unsigned 8-bit integer
igmp.mtrace.q_id Query ID
Unsigned 24-bit integer
igmp.mtrace.q_inaddr In itf addr
IPv4 address
igmp.mtrace.q_inpkt In pkts
Unsigned 32-bit integer
igmp.mtrace.q_mbz MBZ
Unsigned 8-bit integer
igmp.mtrace.q_outaddr Out itf addr
IPv4 address
igmp.mtrace.q_outpkt Out pkts
Unsigned 32-bit integer
igmp.mtrace.q_prevrtr Previous rtr addr
IPv4 address
igmp.mtrace.q_rtg_proto Rtg Protocol
Unsigned 8-bit integer
igmp.mtrace.q_s S
Unsigned 8-bit integer
igmp.mtrace.q_src_mask Src Mask
Unsigned 8-bit integer
igmp.mtrace.q_total S,G pkt count
Unsigned 32-bit integer
igmp.mtrace.raddr Receiver Address
IPv4 address
igmp.mtrace.resp_ttl Response TTL
Unsigned 8-bit integer
igmp.mtrace.rspaddr Response Address
IPv4 address
igmp.mtrace.saddr Source Address
IPv4 address
igmp.num_grp_recs Num Group Records
Unsigned 16-bit integer
igmp.num_src Num Src
Unsigned 16-bit integer
igmp.qqic QQIC
Unsigned 8-bit integer
igmp.qrv QRV
Unsigned 8-bit integer
igmp.record_type Record Type
Unsigned 8-bit integer
igmp.reply Reply
Unsigned 8-bit integer
igmp.reply.pending Reply Pending
Unsigned 8-bit integer
igmp.s S
Boolean
igmp.type Type
Unsigned 8-bit integer
igmp.version IGMP Version
Unsigned 8-bit integer
=head2 Internet Message Access Protocol (imap)
imap.request Request
Boolean
imap.response Response
Boolean
=head2 Internet Printing Protocol (ipp)
=head2 Internet Protocol (ip)
ip.addr Source or Destination Address
IPv4 address
ip.checksum Header checksum
Unsigned 16-bit integer
ip.checksum_bad Bad Header checksum
Boolean
ip.dsfield Differentiated Services field
Unsigned 8-bit integer
ip.dsfield.ce ECN-CE
Unsigned 8-bit integer
ip.dsfield.dscp Differentiated Services Codepoint
Unsigned 8-bit integer
ip.dsfield.ect ECN-Capable Transport (ECT)
Unsigned 8-bit integer
ip.dst Destination
IPv4 address
ip.flags Flags
Unsigned 8-bit integer
ip.flags.df Don't fragment
Boolean
ip.flags.mf More fragments
Boolean
ip.frag_offset Fragment offset
Unsigned 16-bit integer
ip.fragment IP Fragment
No value
ip.fragment.error Defragmentation error
No value
ip.fragment.multipletails Multiple tail fragments found
Boolean
ip.fragment.overlap Fragment overlap
Boolean
ip.fragment.overlap.conflict Conflicting data in fragment overlap
Boolean
ip.fragment.toolongfragment Fragment too long
Boolean
ip.fragments IP Fragments
No value
ip.hdr_len Header Length
Unsigned 8-bit integer
ip.id Identification
Unsigned 16-bit integer
ip.len Total Length
Unsigned 16-bit integer
ip.proto Protocol
Unsigned 8-bit integer
ip.src Source
IPv4 address
ip.tos Type of Service
Unsigned 8-bit integer
ip.tos.cost Cost
Boolean
ip.tos.delay Delay
Boolean
ip.tos.precedence Precedence
Unsigned 8-bit integer
ip.tos.reliability Reliability
Boolean
ip.tos.throughput Throughput
Boolean
ip.ttl Time to live
Unsigned 8-bit integer
ip.version Version
Unsigned 8-bit integer
=head2 Internet Protocol Version 6 (ipv6)
ipv6.addr Address
IPv6 address
ipv6.class Traffic class
Unsigned 8-bit integer
ipv6.dst Destination
IPv6 address
ipv6.flow Flowlabel
Unsigned 32-bit integer
ipv6.fragment IPv6 Fragment
No value
ipv6.fragment.error Defragmentation error
No value
ipv6.fragment.multipletails Multiple tail fragments found
Boolean
ipv6.fragment.overlap Fragment overlap
Boolean
ipv6.fragment.overlap.conflict Conflicting data in fragment overlap
Boolean
ipv6.fragment.toolongfragment Fragment too long
Boolean
ipv6.fragments IPv6 Fragments
No value
ipv6.hlim Hop limit
Unsigned 8-bit integer
ipv6.mipv6_a_flag Acknowledge (A)
Boolean
ipv6.mipv6_b_flag Bicasting all (B)
Boolean
ipv6.mipv6_d_flag Duplicate Address Detection (D)
Boolean
ipv6.mipv6_h_flag Home Registration (H)
Boolean
ipv6.mipv6_home_address Home Address
IPv6 address
ipv6.mipv6_length Option Length
Unsigned 8-bit integer
ipv6.mipv6_life_time Life Time
Unsigned 32-bit integer
ipv6.mipv6_m_flag MAP Registration (M)
Boolean
ipv6.mipv6_prefix_length Prefix Length
Unsigned 8-bit integer
ipv6.mipv6_r_flag Router (R)
Boolean
ipv6.mipv6_refresh Refresh
Unsigned 32-bit integer
ipv6.mipv6_sequence_number Sequence Number
Unsigned 16-bit integer
ipv6.mipv6_status Status
Unsigned 8-bit integer
ipv6.mipv6_sub_alternative_COA Alternative Care of Address
IPv6 address
ipv6.mipv6_sub_length Sub-Option Length
Unsigned 8-bit integer
ipv6.mipv6_sub_type Sub-Option Type
Unsigned 8-bit integer
ipv6.mipv6_sub_unique_ID Unique Identifier
Unsigned 16-bit integer
ipv6.mipv6_type Option Type
Unsigned 8-bit integer
ipv6.nxt Next header
Unsigned 8-bit integer
ipv6.plen Payload length
Unsigned 16-bit integer
ipv6.src Source
IPv6 address
ipv6.version Version
Unsigned 8-bit integer
=head2 Internet Relay Chat (irc)
irc.command Command
String
irc.request Request
Boolean
irc.response Response
Boolean
=head2 Internet Security Association and Key Management Protocol (isakmp)
=head2 Internetwork Packet eXchange (ipx)
ipx.checksum Checksum
Unsigned 16-bit integer
ipx.dst.net Destination Network
IPX network or server name
ipx.dst.node Destination Node
6-byte Hardware (MAC) Address
ipx.dst.socket Destination Socket
Unsigned 16-bit integer
ipx.hops Transport Control (Hops)
Unsigned 8-bit integer
ipx.len Length
Unsigned 16-bit integer
ipx.packet_type Packet Type
Unsigned 8-bit integer
ipx.src.net Source Network
IPX network or server name
ipx.src.node Source Node
6-byte Hardware (MAC) Address
ipx.src.socket Source Socket
Unsigned 16-bit integer
=head2 Kerberos (kerberos)
=head2 Kernel Lock Manager (klm)
klm.block block
Boolean
klm.exclusive exclusive
Boolean
klm.holder holder
No value
klm.len length
Unsigned 32-bit integer
klm.lock lock
No value
klm.offset offset
Unsigned 32-bit integer
klm.pid pid
Unsigned 32-bit integer
klm.servername server name
String
klm.stats stats
Unsigned 32-bit integer
=head2 Label Distribution Protocol (ldp)
ldp,msg.tlv.hello.requested Hello Requested
Boolean
ldp.hdr.ldpid.lsid Label Space ID
Unsigned 16-bit integer
ldp.hdr.ldpid.lsr LSR ID
IPv4 address
ldp.hdr.pdu_len PDU Length
Unsigned 16-bit integer
ldp.hdr.version Version
Unsigned 16-bit integer
ldp.msg.experiment.id Experiment ID
Unsigned 32-bit integer
ldp.msg.id Message ID
Unsigned 32-bit integer
ldp.msg.len Message Length
Unsigned 16-bit integer
ldp.msg.tlv.addrl.addr Address
String
ldp.msg.tlv.addrl.addr_family Address Family
Unsigned 16-bit integer
ldp.msg.tlv.atm.label.vbits V-bits
Unsigned 8-bit integer
ldp.msg.tlv.atm.label.vci VCI
Unsigned 16-bit integer
ldp.msg.tlv.atm.label.vpi VPI
Unsigned 16-bit integer
ldp.msg.tlv.experiment_id Experiment ID
Unsigned 32-bit integer
ldp.msg.tlv.extstatus.data Extended Status Data
Unsigned 32-bit integer
ldp.msg.tlv.fec.af FEC Element Address Type
Unsigned 16-bit integer
ldp.msg.tlv.fec.hoval FEC Element Host Address Value
String
ldp.msg.tlv.fec.len FEC Element Length
Unsigned 8-bit integer
ldp.msg.tlv.fec.pfval FEC Element Prefix Value
String
ldp.msg.tlv.fec.type FEC Element Type
Unsigned 8-bit integer
ldp.msg.tlv.fr.label.dlci DLCI
Unsigned 24-bit integer
ldp.msg.tlv.fr.label.len Number of DLCI bits
Unsigned 16-bit integer
ldp.msg.tlv.generic.label Generic Label
Unsigned 32-bit integer
ldp.msg.tlv.hc.value Hop Count Value
Unsigned 8-bit integer
ldp.msg.tlv.hello.cnf_seqno Configuration Sequence Number
Unsigned 32-bit integer
ldp.msg.tlv.hello.hold Hold Time
Unsigned 16-bit integer
ldp.msg.tlv.hello.res Reserved
Unsigned 16-bit integer
ldp.msg.tlv.hello.targeted Targeted Hello
Boolean
ldp.msg.tlv.ipv4.taddr IPv4 Transport Address
IPv4 address
ldp.msg.tlv.ipv6.taddr IPv6 Transport Address
IPv6 address
ldp.msg.tlv.len TLV Length
Unsigned 16-bit integer
ldp.msg.tlv.pv.lsrid LSR Id
IPv4 address
ldp.msg.tlv.returned.ldpid.lsid Returned PDU Label Space ID
Unsigned 16-bit integer
ldp.msg.tlv.returned.ldpid.lsr Returned PDU LSR ID
IPv4 address
ldp.msg.tlv.returned.msg.id Returned Message ID
Unsigned 32-bit integer
ldp.msg.tlv.returned.msg.len Returned Message Length
Unsigned 16-bit integer
ldp.msg.tlv.returned.msg.type Returned Message Type
Unsigned 16-bit integer
ldp.msg.tlv.returned.msg.ubit Returned Message Unknown bit
Unsigned 8-bit integer
ldp.msg.tlv.returned.pdu_len Returned PDU Length
Unsigned 16-bit integer
ldp.msg.tlv.returned.version Returned PDU Version
Unsigned 16-bit integer
ldp.msg.tlv.sess.advbit Session Label Advertisement Discipline
Boolean
ldp.msg.tlv.sess.atm.dir Directionality
Boolean
ldp.msg.tlv.sess.atm.lr Number of ATM Label Ranges
Unsigned 8-bit integer
ldp.msg.tlv.sess.atm.maxvci Maximum VCI
Unsigned 16-bit integer
ldp.msg.tlv.sess.atm.maxvpi Maximum VPI
Unsigned 16-bit integer
ldp.msg.tlv.sess.atm.merge Session ATM Merge Parameter
Unsigned 8-bit integer
ldp.msg.tlv.sess.atm.minvci Minimum VCI
Unsigned 16-bit integer
ldp.msg.tlv.sess.atm.minvpi Minimum VPI
Unsigned 16-bit integer
ldp.msg.tlv.sess.fr.dir Directionality
Boolean
ldp.msg.tlv.sess.fr.len Number of DLCI bits
Unsigned 16-bit integer
ldp.msg.tlv.sess.fr.lr Number of Frame Relay Label Ranges
Unsigned 8-bit integer
ldp.msg.tlv.sess.fr.maxdlci Maximum DLCI
Unsigned 24-bit integer
ldp.msg.tlv.sess.fr.merge Session Frame Relay Merge Parameter
Unsigned 8-bit integer
ldp.msg.tlv.sess.fr.mindlci Minimum DLCI
Unsigned 24-bit integer
ldp.msg.tlv.sess.ka Session KeepAlive Time
Unsigned 16-bit integer
ldp.msg.tlv.sess.ldetbit Session Loop Detection
Boolean
ldp.msg.tlv.sess.mxpdu Session Max PDU Length
Unsigned 16-bit integer
ldp.msg.tlv.sess.pvlim Session Path Vector Limit
Unsigned 8-bit integer
ldp.msg.tlv.sess.rxlsr Session Receiver LSR Identifier
IPv4 address
ldp.msg.tlv.sess.ver Session Protocol Version
Unsigned 16-bit integer
ldp.msg.tlv.status.data Status Data
Unsigned 32-bit integer
ldp.msg.tlv.status.ebit E Bit
Boolean
ldp.msg.tlv.status.fbit F Bit
Boolean
ldp.msg.tlv.status.msg.id Message ID
Unsigned 32-bit integer
ldp.msg.tlv.status.msg.type Message Type
Unsigned 16-bit integer
ldp.msg.tlv.type TLV Type
Unsigned 16-bit integer
ldp.msg.tlv.unknown TLV Unknown bits
Unsigned 8-bit integer
ldp.msg.tlv.value TLV Value
Byte array
ldp.msg.tlv.vendor_id Vendor ID
Unsigned 32-bit integer
ldp.msg.type Message Type
Unsigned 16-bit integer
ldp.msg.ubit U bit
Boolean
ldp.msg.vendor.id Vendor ID
Unsigned 32-bit integer
ldp.req Request
Boolean
ldp.rsp Response
Boolean
ldp.tlv.lbl_req_msg_id Label Request Message ID
Unsigned 32-bit integer
=head2 Layer 2 Tunneling Protocol (l2tp)
l2tp.Nr Nr
Unsigned 16-bit integer
l2tp.Ns Ns
Unsigned 16-bit integer
l2tp.length Length
Unsigned 16-bit integer
l2tp.offset Offset
Unsigned 16-bit integer
l2tp.session Session ID
Unsigned 16-bit integer
l2tp.tunnel Tunnel ID
Unsigned 16-bit integer
lt2p.avp.hidden Hidden
Boolean
lt2p.avp.length Length
Unsigned 16-bit integer
lt2p.avp.mandatory Mandatory
Boolean
lt2p.avp.type Type
Unsigned 16-bit integer
lt2p.avp.vendor_id Vendor ID
Unsigned 16-bit integer
lt2p.length_bit Length Bit
Boolean
lt2p.offset_bit Offset bit
Boolean
lt2p.priority Priority
Boolean
lt2p.seq_bit Sequence Bit
Boolean
lt2p.tie_breaker Tie Breaker
lt2p.type Type
Unsigned 16-bit integer
lt2p.version Version
Unsigned 16-bit integer
=head2 Lightweight Directory Access Protocol (ldap)
ldap.abandon.msgid Abandon Msg Id
Unsigned 32-bit integer
ldap.attribute Attribute
String
ldap.bind.auth_type Auth Type
Unsigned 8-bit integer
ldap.bind.dn DN
String
ldap.bind.password Password
String
ldap.bind.version Version
Unsigned 32-bit integer
ldap.compare.test Test
String
ldap.dn Distinguished Name
String
ldap.length Length
Unsigned 32-bit integer
ldap.message_id Message Id
Unsigned 32-bit integer
ldap.message_length Message Length
Unsigned 32-bit integer
ldap.message_type Message Type
Unsigned 8-bit integer
ldap.modify.add Add
String
ldap.modify.delete Delete
String
ldap.modify.replace Replace
String
ldap.modrdn.delete Delete Values
Boolean
ldap.modrdn.name New Name
String
ldap.modrdn.superior New Location
String
ldap.result.code Result Code
Unsigned 8-bit integer
ldap.result.errormsg Error Message
String
ldap.result.matcheddn Matched DN
String
ldap.result.referral Referral
String
ldap.search.basedn Base DN
String
ldap.search.dereference Dereference
Unsigned 8-bit integer
ldap.search.filter Filter
String
ldap.search.scope Scope
Unsigned 8-bit integer
ldap.search.sizelimit Size Limit
Unsigned 32-bit integer
ldap.search.timelimit Time Limit
Unsigned 32-bit integer
ldap.search.typesonly Attributes Only
Boolean
ldap.value Value
String
=head2 Line Printer Daemon Protocol (lpd)
lpd.request Request
Boolean
lpd.response Response
Boolean
=head2 Link Access Procedure Balanced (LAPB) (lapb)
lapb.address Address Field
Unsigned 8-bit integer
lapb.control Control Field
Unsigned 8-bit integer
=head2 Link Access Procedure Balanced Ethernet (LAPBETHER) (lapbether)
lapbether.length Length Field
Unsigned 16-bit integer
=head2 Link Access Procedure, Channel D (LAPD) (lapd)
lapd.address Address Field
Unsigned 16-bit integer
lapd.control Control Field
Unsigned 16-bit integer
lapd.cr C/R
Unsigned 16-bit integer
lapd.ea1 EA1
Unsigned 16-bit integer
lapd.ea2 EA2
Unsigned 16-bit integer
lapd.sapi SAPI
Unsigned 16-bit integer
lapd.tei TEI
Unsigned 16-bit integer
=head2 Linux cooked-mode capture (sll)
sll.etype Protocol
Unsigned 16-bit integer
sll.halen Link-layer address length
Unsigned 16-bit integer
sll.hatype Link-layer address type
Unsigned 16-bit integer
sll.ltype Protocol
Unsigned 16-bit integer
sll.pkttype Packet type
Unsigned 16-bit integer
sll.src.eth Source
6-byte Hardware (MAC) Address
sll.src.other Source
Byte array
sll.trailer Trailer
Byte array
=head2 Local Management Interface (lmi)
lmi.cmd Call reference
Unsigned 8-bit integer
lmi.dlci_act DLCI Active
Unsigned 8-bit integer
lmi.dlci_hi DLCI High
Unsigned 8-bit integer
lmi.dlci_low DLCI Low
Unsigned 8-bit integer
lmi.dlci_new DLCI New
Unsigned 8-bit integer
lmi.ele_rcd_type Record Type
Unsigned 8-bit integer
lmi.inf_ele Information Element
Unsigned 8-bit integer
lmi.inf_ele_len Length
Unsigned 8-bit integer
lmi.inf_ele_type Type
Unsigned 8-bit integer
lmi.msg_type Message Type
Unsigned 8-bit integer
lmi.recv_seq Recv Seq
Unsigned 8-bit integer
lmi.send_seq Send Seq
Unsigned 8-bit integer
=head2 LocalTalk Link Access Protocol (llap)
llap.dst Destination Node
Unsigned 8-bit integer
llap.src Source Node
Unsigned 8-bit integer
llap.type Type
Unsigned 8-bit integer
=head2 Logical-Link Control (llc)
llc.control Control
Unsigned 16-bit integer
llc.dsap DSAP
Unsigned 8-bit integer
llc.dsap.ig IG Bit
Boolean
llc.oui Organization Code
Unsigned 24-bit integer
llc.pid Protocol ID
Unsigned 16-bit integer
llc.ssap SSAP
Unsigned 8-bit integer
llc.ssap.cr CR Bit
Boolean
llc.type Type
Unsigned 16-bit integer
=head2 Lucent/Ascend debug output (ascend)
ascend.chunk WDD Chunk
Unsigned 32-bit integer
ascend.number Called number
String
ascend.sess Session ID
Unsigned 32-bit integer
ascend.task Task
Unsigned 32-bit integer
ascend.type Link type
Unsigned 32-bit integer
ascend.user User name
String
=head2 MAPI (mapi)
mapi.request Request
Boolean
mapi.response Response
Boolean
=head2 MMS Message Encapsulation (mmse)
mmse.bcc Bcc
String
mmse.content_location Content-Location
String
mmse.content_type Data
No value
mmse.date Date
Date/Time stamp
mmse.delivery_report Delivery-Report
Unsigned 8-bit integer
mmse.delivery_time.abs Delivery-Time
Date/Time stamp
mmse.delivery_time.rel Delivery-Time
Time duration
mmse.expiry.abs Expiry
Date/Time stamp
mmse.expiry.rel Expiry
Time duration
mmse.ffheader Free format (not encoded) header
String
mmse.from From
String
mmse.message_class.id Message-Class
Unsigned 8-bit integer
mmse.message_class.str Message-Class
String
mmse.message_id Message-Id
String
mmse.message_size Message-Size
Unsigned 32-bit integer
mmse.message_type Message-Type
Unsigned 8-bit integer
mmse.mms_version MMS-Version
String
mmse.priority Priority
Unsigned 8-bit integer
mmse.read_reply Read-Reply
Unsigned 8-bit integer
mmse.report_allowed Report-Allowed
Unsigned 8-bit integer
mmse.response_status Response-Status
Unsigned 8-bit integer
mmse.response_text Response-Text
String
mmse.sender_visibility Sender-Visibility
Unsigned 8-bit integer
mmse.status Status
Unsigned 8-bit integer
mmse.subject Subject
String
mmse.to To
String
mmse.transaction_id Transaction-ID
String
=head2 MS Proxy Protocol (msproxy)
msproxy.bindaddr Destination
IPv4 address
msproxy.bindid Bound Port Id
Unsigned 32-bit integer
msproxy.bindport Bind Port
Unsigned 16-bit integer
msproxy.boundport Bound Port
Unsigned 16-bit integer
msproxy.clntport Client Port
Unsigned 16-bit integer
msproxy.command Command
Unsigned 16-bit integer
msproxy.dstaddr Destination Address
IPv4 address
msproxy.dstport Destination Port
Unsigned 16-bit integer
msproxy.resolvaddr Address
IPv4 address
msproxy.server_ext_addr Server External Address
IPv4 address
msproxy.server_ext_port Server External Port
Unsigned 16-bit integer
msproxy.server_int_addr Server Internal Address
IPv4 address
msproxy.server_int_port Server Internal Port
Unsigned 16-bit integer
msproxy.serveraddr Server Address
IPv4 address
msproxy.serverport Server Port
Unsigned 16-bit integer
msproxy.srcport Source Port
Unsigned 16-bit integer
=head2 MSNIP: Multicast Source Notification of Interest Protocol (msnip)
msnip.checksum Checksum
Unsigned 16-bit integer
msnip.checksum_bad Bad Checksum
Boolean
msnip.count Count
Unsigned 8-bit integer
msnip.genid Generation ID
Unsigned 16-bit integer
msnip.groups Groups
No value
msnip.holdtime Holdtime
Unsigned 32-bit integer
msnip.holdtime16 Holdtime
Unsigned 16-bit integer
msnip.maddr Multicast group
IPv4 address
msnip.netmask Netmask
Unsigned 8-bit integer
msnip.rec_type Record Type
Unsigned 8-bit integer
msnip.type Type
Unsigned 8-bit integer
=head2 MTP 2 Transparent Proxy (m2tp)
m2tp.diagnostic_info Diagnostic information
Byte array
m2tp.error_code Error code
Unsigned 32-bit integer
m2tp.heartbeat_data Heartbeat data
Byte array
m2tp.info_string Info string
String
m2tp.interface_identifier Interface Identifier
Unsigned 32-bit integer
m2tp.master_slave Master Slave Indicator
Unsigned 32-bit integer
m2tp.message_class Message class
Unsigned 8-bit integer
m2tp.message_length Message length
Unsigned 32-bit integer
m2tp.message_type Message Type
Unsigned 8-bit integer
m2tp.parameter_length Parameter length
Unsigned 16-bit integer
m2tp.parameter_padding Padding
Byte array
m2tp.parameter_tag Parameter Tag
Unsigned 16-bit integer
m2tp.parameter_value Parameter Value
Byte array
m2tp.reason Reason
Unsigned 32-bit integer
m2tp.reserved Reserved
Unsigned 8-bit integer
m2tp.user_identifier M2tp User Identifier
Unsigned 32-bit integer
m2tp.version Version
Unsigned 8-bit integer
=head2 MTP 3 User Adaptation Layer (m3ua)
m3ua.affected_point_code_mask Mask
Unsigned 8-bit integer
m3ua.affected_point_code_pc Affected point code
Unsigned 24-bit integer
m3ua.asp_identifier ASP identifier
Unsigned 32-bit integer
m3ua.cic_range_lower Lower CIC value
Unsigned 16-bit integer
m3ua.cic_range_mask Mask
Unsigned 8-bit integer
m3ua.cic_range_pc Originating point code
Unsigned 24-bit integer
m3ua.cic_range_upper Upper CIC value
Unsigned 16-bit integer
m3ua.concerned_dpc Concerned DPC
Unsigned 24-bit integer
m3ua.concerned_reserved Reserved
Byte array
m3ua.congestion_level Congestion level
Unsigned 8-bit integer
m3ua.congestion_reserved Reserved
Byte array
m3ua.correlation_identifier Correlation Identifier
Unsigned 32-bit integer
m3ua.deregistration_result_routing_context Routing context
Unsigned 32-bit integer
m3ua.deregistration_results_status De-Registration status
Unsigned 32-bit integer
m3ua.deregistration_status Deregistration status
Unsigned 32-bit integer
m3ua.diagnostic_information Diagnostic information
Byte array
m3ua.dpc_mask Mask
Unsigned 8-bit integer
m3ua.dpc_pc Destination point code
Unsigned 24-bit integer
m3ua.error_code Error code
Unsigned 32-bit integer
m3ua.heartbeat_data Heartbeat data
Byte array
m3ua.info_string Info string
String
m3ua.local_rk_identifier Local routing key identifier
Unsigned 32-bit integer
m3ua.message_class Message class
Unsigned 8-bit integer
m3ua.message_length Message length
Unsigned 32-bit integer
m3ua.message_type Message Type
Unsigned 8-bit integer
m3ua.network_appearance Network appearance
Unsigned 32-bit integer
m3ua.opc_list_mask Mask
Unsigned 8-bit integer
m3ua.opc_list_pc Originating point code
Unsigned 24-bit integer
m3ua.parameter_length Parameter length
Unsigned 16-bit integer
m3ua.parameter_padding Padding
Byte array
m3ua.parameter_tag Parameter Tag
Unsigned 16-bit integer
m3ua.parameter_value Paramter value
Byte array
m3ua.protocol_data_2_li Length indicator
Unsigned 8-bit integer
m3ua.protocol_data_dpc DPC
Unsigned 32-bit integer
m3ua.protocol_data_mp MP
Unsigned 8-bit integer
m3ua.protocol_data_ni NI
Unsigned 8-bit integer
m3ua.protocol_data_opc OPC
Unsigned 32-bit integer
m3ua.protocol_data_si SI
Unsigned 8-bit integer
m3ua.protocol_data_sls SLS
Unsigned 8-bit integer
m3ua.registration_result_identifier Local RK-identifier value
Unsigned 32-bit integer
m3ua.registration_result_routing_context Routing context
Unsigned 32-bit integer
m3ua.registration_results_status Registration status
Unsigned 32-bit integer
m3ua.registration_status Registration status
Unsigned 32-bit integer
m3ua.reserved Reserved
Unsigned 8-bit integer
m3ua.routing_context Routing context
Unsigned 32-bit integer
m3ua.status_info Status info
Unsigned 16-bit integer
m3ua.status_type Status type
Unsigned 16-bit integer
m3ua.traffic_mode_type Traffic mode Type
Unsigned 32-bit integer
m3ua.unavailability_cause Unavailability cause
Unsigned 16-bit integer
m3ua.user_identity User Identity
Unsigned 16-bit integer
m3ua.version Version
Unsigned 8-bit integer
m3ua_reason Reason
Unsigned 32-bit integer
m3ua_si Service indicator
Unsigned 8-bit integer
m3ua_ssn Subsystem number
Unsigned 8-bit integer
=head2 MTP2 Peer Adaptation Layer (m2pa)
m2pa.class Message Class
Unsigned 8-bit integer
m2pa.length Message length
Unsigned 32-bit integer
m2pa.li_priority Priority
Unsigned 8-bit integer
m2pa.li_spare Spare
Unsigned 8-bit integer
m2pa.proving_data Proving Data
Byte array
m2pa.spare Spare
Unsigned 8-bit integer
m2pa.status Link Status Status
Unsigned 32-bit integer
m2pa.type Message Type
Unsigned 8-bit integer
m2pa.unknown_data Unknown Data
Byte array
m2pa.version Version
Unsigned 8-bit integer
=head2 Malformed Packet (malformed)
=head2 Message Transfer Part Level 2 (mtp2)
mtp2.bib Backward indicator bit
Unsigned 8-bit integer
mtp2.bsn Backward sequence number
Unsigned 8-bit integer
mtp2.fib Forward indicator bit
Unsigned 8-bit integer
mtp2.fsn Forward sequence number
Unsigned 8-bit integer
mtp2.li Length Indicator
Unsigned 8-bit integer
mtp2.long_sf Status field
Unsigned 16-bit integer
mtp2.sf Status field
Unsigned 8-bit integer
mtp2.spare Spare
Unsigned 8-bit integer
=head2 Message Transfer Part Level 3 (mtp3)
mtp3.dpc DPC
Unsigned 32-bit integer
mtp3.dpc.cluster DPC Cluster
Unsigned 24-bit integer
mtp3.dpc.member DPC Member
Unsigned 24-bit integer
mtp3.dpc.network DPC Network
Unsigned 24-bit integer
mtp3.network_indicator Network indicator
Unsigned 8-bit integer
mtp3.opc OPC
Unsigned 32-bit integer
mtp3.opc.cluster OPC Cluster
Unsigned 24-bit integer
mtp3.opc.member OPC Member
Unsigned 24-bit integer
mtp3.opc.network OPC Network
Unsigned 24-bit integer
mtp3.priority Priority
Unsigned 8-bit integer
mtp3.service_indicator Service indicator
Unsigned 8-bit integer
mtp3.sls Signalling Link Selector
Unsigned 32-bit integer
mtp3.spare Spare
Unsigned 8-bit integer
=head2 Microsoft Distributed File System (dfs)
=head2 Microsoft Local Security Architecture (lsa)
=head2 Microsoft Network Logon (rpc_netlogon)
=head2 Microsoft Registry (reg)
=head2 Microsoft Security Account Manager (samr)
nt.str.len Length
Unsigned 32-bit integer
nt.str.max_len Max Length
Unsigned 32-bit integer
nt.str.offset Offset
Unsigned 32-bit integer
nt.string.length Length
Unsigned 16-bit integer
nt.string.size Size
Unsigned 16-bit integer
samr.access Access Mask
Unsigned 32-bit integer
samr.acct_ctrl Acct Ctrl
Unsigned 32-bit integer
samr.acct_desc Account Desc
String
samr.acct_expiry_time Acct Expiry
Date/Time stamp
samr.acct_name Account Name
String
samr.alias Alias
Unsigned 32-bit integer
samr.alias_name Alias Name
String
samr.attr Attributes
Unsigned 32-bit integer
samr.bad_pwd_count Bad Pwd Count
Unsigned 16-bit integer
samr.codepage Codepage
Unsigned 16-bit integer
samr.comment Comment
String
samr.count Count
Unsigned 32-bit integer
samr.country Country
Unsigned 16-bit integer
samr.crypt_hash Hash
Byte array
samr.crypt_password Password
Byte array
samr.dc DC
String
samr.divisions Divisions
Unsigned 16-bit integer
samr.domain Domain
String
samr.entries Entries
Unsigned 32-bit integer
samr.full_name Full Name
String
samr.group Group
Unsigned 32-bit integer
samr.group_name Group Name
String
samr.hnd Context Handle
Byte array
samr.home Home
String
samr.home_drive Home Drive
String
samr.index Index
Unsigned 32-bit integer
samr.info_type Info Type
Unsigned 32-bit integer
samr.kickoff_time Kickoff Time
Date/Time stamp
samr.level Level
Unsigned 16-bit integer
samr.lm_change LM Change
Unsigned 8-bit integer
samr.lm_pwd_set LM Pwd Set
Unsigned 8-bit integer
samr.logoff_time Logoff Time
Date/Time stamp
samr.logon_count Logon Count
Unsigned 16-bit integer
samr.logon_time Logon Time
Date/Time stamp
samr.mask Mask
Unsigned 32-bit integer
samr.max_entries Max Entries
Unsigned 32-bit integer
samr.max_pwd_age Max Pwd Age
Time duration
samr.min_pwd_age Min Pwd Age
Time duration
samr.min_pwd_len Min Pwd Len
Unsigned 16-bit integer
samr.nt_pwd_set NT Pwd Set
Unsigned 8-bit integer
samr.num_aliases Num Aliases
Unsigned 32-bit integer
samr.num_groups Num Groups
Unsigned 32-bit integer
samr.num_users Num Users
Unsigned 32-bit integer
samr.parameters Parameters
String
samr.pref_maxsize Pref MaxSize
Unsigned 32-bit integer
samr.profile Profile
String
samr.pwd_Expired Expired flag
Unsigned 8-bit integer
samr.pwd_can_change_time PWD Can Change
Date/Time stamp
samr.pwd_history_len Pwd History Len
Unsigned 16-bit integer
samr.pwd_last_set_time PWD Last Set
Date/Time stamp
samr.pwd_must_change_time PWD Must Change
Date/Time stamp
samr.rc Return code
Unsigned 32-bit integer
samr.resume_hnd Resume Hnd
Unsigned 32-bit integer
samr.ret_size Returned Size
Unsigned 32-bit integer
samr.revision Revision
samr.rid Rid
Unsigned 32-bit integer
samr.rid.attrib Rid Attrib
Unsigned 32-bit integer
samr.script Script
String
samr.server Server
String
samr.start_idx Start Idx
Unsigned 32-bit integer
samr.total_size Total Size
Unsigned 32-bit integer
samr.type Type
Unsigned 32-bit integer
samr.unknown.char Unknown char
Unsigned 8-bit integer
samr.unknown.hyper Unknown hyper
samr.unknown.long Unknown long
Unsigned 32-bit integer
samr.unknown.short Unknown short
Unsigned 16-bit integer
samr.unknown_string Unknwon string
String
samr.unknown_time Unknown time
Date/Time stamp
samr.workstations Workstations
String
=head2 Microsoft Server Service (srvsvc)
=head2 Microsoft Spool Subsystem (spoolss)
=head2 Microsoft Windows Browser Protocol (browser)
browser.backup.count Backup List Requested Count
Unsigned 8-bit integer
browser.backup.server Backup Server
String
browser.backup.token Backup Request Token
Unsigned 32-bit integer
browser.browser_to_promote Browser to Promote
String
browser.command Command
Unsigned 8-bit integer
browser.comment Host Comment
String
browser.election.criteria Election Criteria
Unsigned 32-bit integer
browser.election.desire Election Desire
Unsigned 8-bit integer
browser.election.desire.backup Backup
Boolean
browser.election.desire.domain_master Domain Master
Boolean
browser.election.desire.master Master
Boolean
browser.election.desire.nt NT
Boolean
browser.election.desire.standby Standby
Boolean
browser.election.desire.wins WINS
Boolean
browser.election.os Election OS
Unsigned 8-bit integer
browser.election.os.nts NT Server
Boolean
browser.election.os.ntw NT Workstation
Boolean
browser.election.os.wfw WfW
Boolean
browser.election.revision Election Revision
Unsigned 16-bit integer
browser.election.version Election Version
Unsigned 8-bit integer
browser.mb_server Master Browser Server Name
String
browser.os_major OS Major Version
Unsigned 8-bit integer
browser.os_minor OS Minor Version
Unsigned 8-bit integer
browser.period Update Periodicity
Unsigned 32-bit integer
browser.proto_major Browser Protocol Major Version
Unsigned 8-bit integer
browser.proto_minor Browser Protocol Minor Version
Unsigned 8-bit integer
browser.response_computer_name Response Computer Name
String
browser.server Server Name
String
browser.server_type Server Type
Unsigned 32-bit integer
browser.server_type.apple Apple
Boolean
browser.server_type.backup_controller Backup Controller
Boolean
browser.server_type.browser.backup Backup Browser
Boolean
browser.server_type.browser.domain_master Domain Master Browser
Boolean
browser.server_type.browser.master Master Browser
Boolean
browser.server_type.browser.potential Potential Browser
Boolean
browser.server_type.dialin Dialin
Boolean
browser.server_type.domain_controller Domain Controller
Boolean
browser.server_type.domainenum Domain Enum
Boolean
browser.server_type.local Local
Boolean
browser.server_type.member Member
Boolean
browser.server_type.novell Novell
Boolean
browser.server_type.nts NT Server
Boolean
browser.server_type.ntw NT Workstation
Boolean
browser.server_type.osf OSF
Boolean
browser.server_type.print Print
Boolean
browser.server_type.server Server
Boolean
browser.server_type.sql SQL
Boolean
browser.server_type.time Time Source
Boolean
browser.server_type.vms VMS
Boolean
browser.server_type.w95 Windows 95+
Boolean
browser.server_type.wfw WfW
Boolean
browser.server_type.workstation Workstation
Boolean
browser.server_type.xenix Xenix
Boolean
browser.sig Signature
Unsigned 16-bit integer
browser.unused Unused flags
Unsigned 8-bit integer
browser.update_count Update Count
Unsigned 8-bit integer
browser.uptime Uptime
Unsigned 32-bit integer
=head2 Microsoft Windows Lanman Remote API Protocol (lanman)
lanman.aux_data_desc Auxiliary Data Descriptor
String
lanman.available_bytes Available Bytes
Unsigned 16-bit integer
lanman.available_count Available Entries
Unsigned 16-bit integer
lanman.bad_pw_count Bad Password Count
Unsigned 16-bit integer
lanman.code_page Code Page
Unsigned 16-bit integer
lanman.comment Comment
String
lanman.computer_name Computer Name
String
lanman.continuation_from Continuation from message in frame
Unsigned 32-bit integer
lanman.convert Convert
Unsigned 16-bit integer
lanman.country_code Country Code
Unsigned 16-bit integer
lanman.current_time Current Date/Time
Date/Time stamp
lanman.day Day
Unsigned 8-bit integer
lanman.duration Duration of Session
Time duration
lanman.entry_count Entry Count
Unsigned 16-bit integer
lanman.enumeration_domain Enumeration Domain
String
lanman.full_name Full Name
String
lanman.function_code Function Code
Unsigned 16-bit integer
lanman.group_name Group Name
String
lanman.homedir Home Directory
String
lanman.hour Hour
Unsigned 8-bit integer
lanman.hundredths Hundredths of a second
Unsigned 8-bit integer
lanman.kickoff_time Kickoff Date/Time
Date/Time stamp
lanman.last_logoff Last Logoff Date/Time
Date/Time stamp
lanman.last_logon Last Logon Date/Time
Date/Time stamp
lanman.level Detail Level
Unsigned 16-bit integer
lanman.logoff_code Logoff Code
Unsigned 16-bit integer
lanman.logoff_time Logoff Date/Time
Date/Time stamp
lanman.logon_code Logon Code
Unsigned 16-bit integer
lanman.logon_domain Logon Domain
String
lanman.logon_hours Logon Hours
Byte array
lanman.logon_server Logon Server
String
lanman.max_storage Max Storage
Unsigned 32-bit integer
lanman.minute Minute
Unsigned 8-bit integer
lanman.month Month
Unsigned 8-bit integer
lanman.msecs Milliseconds
Unsigned 32-bit integer
lanman.new_password New Password
Byte array
lanman.num_logons Number of Logons
Unsigned 16-bit integer
lanman.old_password Old Password
Byte array
lanman.operator_privileges Operator Privileges
Unsigned 32-bit integer
lanman.other_domains Other Domains
String
lanman.param_desc Parameter Descriptor
String
lanman.parameters Parameters
String
lanman.password Password
String
lanman.password_age Password Age
Time duration
lanman.password_can_change Password Can Change
Date/Time stamp
lanman.password_must_change Password Must Change
Date/Time stamp
lanman.privilege_level Privilege Level
Unsigned 16-bit integer
lanman.recv_buf_len Receive Buffer Length
Unsigned 16-bit integer
lanman.reserved Reserved
Unsigned 32-bit integer
lanman.ret_desc Return Descriptor
String
lanman.script_path Script Path
String
lanman.second Second
Unsigned 8-bit integer
lanman.send_buf_len Send Buffer Length
Unsigned 16-bit integer
lanman.server.comment Server Comment
String
lanman.server.major Major Version
Unsigned 8-bit integer
lanman.server.minor Minor Version
Unsigned 8-bit integer
lanman.server.name Server Name
String
lanman.share.comment Share Comment
String
lanman.share.current_uses Share Current Uses
Unsigned 16-bit integer
lanman.share.max_uses Share Max Uses
Unsigned 16-bit integer
lanman.share.name Share Name
String
lanman.share.password Share Password
String
lanman.share.path Share Path
String
lanman.share.permissions Share Permissions
Unsigned 16-bit integer
lanman.share.type Share Type
Unsigned 16-bit integer
lanman.status Status
Unsigned 16-bit integer
lanman.timeinterval Time Interval
Unsigned 16-bit integer
lanman.tzoffset Time Zone Offset
Signed 16-bit integer
lanman.units_per_week Units Per Week
Unsigned 16-bit integer
lanman.user_comment User Comment
String
lanman.user_name User Name
String
lanman.ustruct_size Length of UStruct
Unsigned 16-bit integer
lanman.weekday Weekday
Unsigned 8-bit integer
lanman.workstation_domain Workstation Domain
String
lanman.workstation_major Workstation Major Version
Unsigned 8-bit integer
lanman.workstation_minor Workstation Minor Version
Unsigned 8-bit integer
lanman.workstation_name Workstation Name
String
lanman.workstations Workstations
String
lanman.year Year
Unsigned 16-bit integer
=head2 Microsoft Windows Logon Protocol (netlogon)
netlogon.command Command
Unsigned 8-bit integer
netlogon.computer_name Computer Name
String
netlogon.date_time Date/Time
Unsigned 32-bit integer
netlogon.db_count DB Count
Unsigned 32-bit integer
netlogon.db_index Database Index
Unsigned 32-bit integer
netlogon.domain_name Domain Name
String
netlogon.domain_sid_size Domain SID Size
Unsigned 32-bit integer
netlogon.flags.autolock Autolock
Boolean
netlogon.flags.enabled Enabled
Boolean
netlogon.flags.expire Expire
Boolean
netlogon.flags.homedir Homedir
Boolean
netlogon.flags.interdomain Interdomain Trust
Boolean
netlogon.flags.mns MNS User
Boolean
netlogon.flags.normal Normal User
Boolean
netlogon.flags.password Password
Boolean
netlogon.flags.server Server Trust
Boolean
netlogon.flags.temp_dup Temp Duplicate User
Boolean
netlogon.flags.workstation Workstation Trust
Boolean
netlogon.large_serial Large Serial Number
netlogon.lm_token LM Token
Unsigned 16-bit integer
netlogon.lmnt_token LMNT Token
Unsigned 16-bit integer
netlogon.low_serial Low Serial Number
Unsigned 32-bit integer
netlogon.mailslot_name Mailslot Name
String
netlogon.major_version Workstation Major Version
Unsigned 8-bit integer
netlogon.minor_version Workstation Minor Version
Unsigned 8-bit integer
netlogon.nt_date_time NT Date/Time
Date/Time stamp
netlogon.nt_version NT Version
Unsigned 32-bit integer
netlogon.os_version Workstation OS Version
Unsigned 8-bit integer
netlogon.pdc_name PDC Name
String
netlogon.pulse Pulse
Unsigned 32-bit integer
netlogon.random Random
Unsigned 32-bit integer
netlogon.request_count Request Count
Unsigned 16-bit integer
netlogon.script_name Script Name
String
netlogon.server_name Server Name
String
netlogon.unicode_computer_name Unicode Computer Name
String
netlogon.unicode_pdc_name Unicode PDC Name
String
netlogon.update Update Type
Unsigned 16-bit integer
netlogon.user_name User Name
String
=head2 Microsoft Workstation Service (wkssvc)
=head2 Mobile IP (mip)
mip.auth.auth Authenticator
Byte array
mip.auth.spi SPI
Unsigned 32-bit integer
mip.b Broadcast Datagrams
Boolean
mip.coa Care of Address
IPv4 address
mip.code Reply Code
Unsigned 8-bit integer
mip.d Co-lcated Care-of Address
Boolean
mip.ext.auth.subtype Gen Auth Ext SubType
Unsigned 8-bit integer
mip.ext.len Extension Length
Unsigned 16-bit integer
mip.ext.type Extension Type
Unsigned 8-bit integer
mip.extension Extension
Byte array
mip.flags Flags
Unsigned 8-bit integer
mip.g GRE
Boolean
mip.haaddr Home Agent
IPv4 address
mip.homeaddr Home Address
IPv4 address
mip.ident Identification
Date/Time stamp
mip.life Lifetime
Unsigned 16-bit integer
mip.m Minimal Encapsulation
Boolean
mip.nai NAI
String
mip.s Simultaneous Bindings
Boolean
mip.t Reverse Tunneling
Boolean
mip.type Message Type
Unsigned 8-bit integer
mip.v Van Jacobson
Boolean
=head2 Modbus/TCP (mbtcp)
modbus_tcp.func_code function code
Unsigned 8-bit integer
modbus_tcp.len length
Unsigned 16-bit integer
modbus_tcp.prot_id protocol identifier
Unsigned 16-bit integer
modbus_tcp.trans_id transaction identifier
Unsigned 16-bit integer
modbus_tcp.unit_id unit identifier
Unsigned 8-bit integer
=head2 Mount Service (mount)
mount.dump.directory Directory
String
mount.dump.entry Mount List Entry
No value
mount.dump.hostname Hostname
String
mount.export.directory Directory
String
mount.export.entry Export List Entry
No value
mount.export.group Group
String
mount.export.groups Groups
No value
mount.flavor Flavor
Unsigned 32-bit integer
mount.flavors Flavors
Unsigned 32-bit integer
mount.path Path
String
mount.pathconf.link_max Maximum number of links to a file
Unsigned 32-bit integer
mount.pathconf.mask Reply error/status bits
Unsigned 16-bit integer
mount.pathconf.mask.chown_restricted CHOWN_RESTRICTED
Boolean
mount.pathconf.mask.error_all ERROR_ALL
Boolean
mount.pathconf.mask.error_link_max ERROR_LINK_MAX
Boolean
mount.pathconf.mask.error_max_canon ERROR_MAX_CANON
Boolean
mount.pathconf.mask.error_max_input ERROR_MAX_INPUT
Boolean
mount.pathconf.mask.error_name_max ERROR_NAME_MAX
Boolean
mount.pathconf.mask.error_path_max ERROR_PATH_MAX
Boolean
mount.pathconf.mask.error_pipe_buf ERROR_PIPE_BUF
Boolean
mount.pathconf.mask.error_vdisable ERROR_VDISABLE
Boolean
mount.pathconf.mask.no_trunc NO_TRUNC
Boolean
mount.pathconf.max_canon Maximum terminal input line length
Unsigned 16-bit integer
mount.pathconf.max_input Terminal input buffer size
Unsigned 16-bit integer
mount.pathconf.name_max Maximum file name length
Unsigned 16-bit integer
mount.pathconf.path_max Maximum path name length
Unsigned 16-bit integer
mount.pathconf.pipe_buf Pipe buffer size
Unsigned 16-bit integer
mount.pathconf.vdisable_char VDISABLE character
Unsigned 8-bit integer
mount.status Status
Unsigned 32-bit integer
=head2 MultiProtocol Label Switching Header (mpls)
mpls.bottom MPLS Bottom Of Label Stack
Unsigned 8-bit integer
mpls.exp MPLS Experimental Bits
Unsigned 8-bit integer
mpls.label MPLS Label
Unsigned 32-bit integer
mpls.ttl MPLS TTL
Unsigned 8-bit integer
=head2 Multicast Router DISCovery protocol (mrdisc)
mrdisc.adv_int Advertising Interval
Unsigned 8-bit integer
mrdisc.checksum Checksum
Unsigned 16-bit integer
mrdisc.checksum_bad Bad Checksum
Boolean
mrdisc.num_opts Number Of Options
Unsigned 16-bit integer
mrdisc.opt_len Length
Unsigned 8-bit integer
mrdisc.option Option
Unsigned 8-bit integer
mrdisc.option_data Data
Byte array
mrdisc.options Options
No value
mrdisc.query_int Query Interval
Unsigned 16-bit integer
mrdisc.rob_var Robustness Variable
Unsigned 16-bit integer
mrdisc.type Type
Unsigned 8-bit integer
=head2 Multicast Source Discovery Protocol (msdp)
msdp.length Length
Unsigned 16-bit integer
msdp.not.entry_count Entry Count
Unsigned 24-bit integer
msdp.not.error Error Code
Unsigned 8-bit integer
msdp.not.error_sub Error subode
Unsigned 8-bit integer
msdp.not.ipv4 IPv4 address
IPv4 address
msdp.not.o Open-bit
Unsigned 8-bit integer
msdp.not.res Reserved
Unsigned 24-bit integer
msdp.not.sprefix_len Sprefix len
Unsigned 8-bit integer
msdp.sa.entry_count Entry Count
Unsigned 8-bit integer
msdp.sa.group_addr Group Address
IPv4 address
msdp.sa.reserved Reserved
Unsigned 24-bit integer
msdp.sa.rp_addr RP Address
IPv4 address
msdp.sa.sprefix_len Sprefix len
Unsigned 8-bit integer
msdp.sa.src_addr Source Address
IPv4 address
msdp.sa_req.group_addr Group Address
IPv4 address
msdp.sa_req.res Reserved
Unsigned 8-bit integer
msdp.type Type
Unsigned 8-bit integer
=head2 NIS+ (nisplus)
.nisplus.dummy
Byte array
nisplus.access.mask access mask
No value
nisplus.aticks aticks
Unsigned 32-bit integer
nisplus.attr Attribute
No value
nisplus.attr.name name
String
nisplus.attr.val val
Byte array
nisplus.attributes Attributes
No value
nisplus.callback.status status
Boolean
nisplus.checkpoint.dticks dticks
Unsigned 32-bit integer
nisplus.checkpoint.status status
Unsigned 32-bit integer
nisplus.checkpoint.zticks zticks
Unsigned 32-bit integer
nisplus.cookie cookie
Byte array
nisplus.cticks cticks
Unsigned 32-bit integer
nisplus.ctime ctime
Date/Time stamp
nisplus.directory directory
No value
nisplus.directory.mask mask
No value
nisplus.directory.mask.group_create GROUP CREATE
Boolean
nisplus.directory.mask.group_destroy GROUP DESTROY
Boolean
nisplus.directory.mask.group_modify GROUP MODIFY
Boolean
nisplus.directory.mask.group_read GROUP READ
Boolean
nisplus.directory.mask.nobody_create NOBODY CREATE
Boolean
nisplus.directory.mask.nobody_destroy NOBODY DESTROY
Boolean
nisplus.directory.mask.nobody_modify NOBODY MODIFY
Boolean
nisplus.directory.mask.nobody_read NOBODY READ
Boolean
nisplus.directory.mask.owner_create OWNER CREATE
Boolean
nisplus.directory.mask.owner_destroy OWNER DESTROY
Boolean
nisplus.directory.mask.owner_modify OWNER MODIFY
Boolean
nisplus.directory.mask.owner_read OWNER READ
Boolean
nisplus.directory.mask.world_create WORLD CREATE
Boolean
nisplus.directory.mask.world_destroy WORLD DESTROY
Boolean
nisplus.directory.mask.world_modify WORLD MODIFY
Boolean
nisplus.directory.mask.world_read WORLD READ
Boolean
nisplus.directory.mask_list mask list
No value
nisplus.directory.name directory name
String
nisplus.directory.ttl ttl
Unsigned 32-bit integer
nisplus.directory.type type
Unsigned 32-bit integer
nisplus.dticks dticks
Unsigned 32-bit integer
nisplus.dump.dir directory
String
nisplus.dump.time time
Date/Time stamp
nisplus.endpoint endpoint
No value
nisplus.endpoint.family family
String
nisplus.endpoint.proto proto
String
nisplus.endpoint.uaddr addr
String
nisplus.endpoints nis endpoints
No value
nisplus.entry entry
No value
nisplus.entry.col column
No value
nisplus.entry.cols columns
No value
nisplus.entry.flags flags
Unsigned 32-bit integer
nisplus.entry.flags.asn ASN.1
Boolean
nisplus.entry.flags.binary BINARY
Boolean
nisplus.entry.flags.encrypted ENCRYPTED
Boolean
nisplus.entry.flags.modified MODIFIED
Boolean
nisplus.entry.flags.xdr XDR
Boolean
nisplus.entry.type type
String
nisplus.entry.val val
String
nisplus.fd.dir.data data
Byte array
nisplus.fd.dirname dirname
String
nisplus.fd.requester requester
String
nisplus.fd.sig signature
Byte array
nisplus.group Group
No value
nisplus.group.flags flags
Unsigned 32-bit integer
nisplus.group.name group name
String
nisplus.grps Groups
No value
nisplus.ib.bufsize bufsize
Unsigned 32-bit integer
nisplus.ib.flags flags
Unsigned 32-bit integer
nisplus.key.data key data
Byte array
nisplus.key.type type
Unsigned 32-bit integer
nisplus.link link
No value
nisplus.log.entries log entries
No value
nisplus.log.entry log entry
No value
nisplus.log.entry.type type
Unsigned 32-bit integer
nisplus.log.principal principal
String
nisplus.log.time time
Date/Time stamp
nisplus.mtime mtime
Date/Time stamp
nisplus.object NIS Object
No value
nisplus.object.domain domain
String
nisplus.object.group group
String
nisplus.object.name name
String
nisplus.object.oid Object Identity Verifier
No value
nisplus.object.owner owner
String
nisplus.object.private private
Byte array
nisplus.object.ttl ttl
Unsigned 32-bit integer
nisplus.object.type type
Unsigned 32-bit integer
nisplus.ping.dir directory
String
nisplus.ping.time time
Date/Time stamp
nisplus.server server
No value
nisplus.server.name name
String
nisplus.servers nis servers
No value
nisplus.status status
Unsigned 32-bit integer
nisplus.table table
No value
nisplus.table.col column
No value
nisplus.table.col.flags flags
No value
nisplus.table.col.name column name
String
nisplus.table.cols columns
No value
nisplus.table.flags.asn asn
Boolean
nisplus.table.flags.binary binary
Boolean
nisplus.table.flags.casesensitive casesensitive
Boolean
nisplus.table.flags.encrypted encrypted
Boolean
nisplus.table.flags.modified modified
Boolean
nisplus.table.flags.searchable searchable
Boolean
nisplus.table.flags.xdr xdr
Boolean
nisplus.table.maxcol max columns
Unsigned 16-bit integer
nisplus.table.path path
String
nisplus.table.separator separator
Unsigned 8-bit integer
nisplus.table.type type
String
nisplus.tag tag
No value
nisplus.tag.type type
Unsigned 32-bit integer
nisplus.tag.value value
String
nisplus.taglist taglist
No value
nisplus.zticks zticks
Unsigned 32-bit integer
=head2 NIS+ Callback (nispluscb)
nispluscb.entries entries
No value
nispluscb.entry entry
No value
=head2 Name Binding Protocol (nbp)
nbp.count Count
Unsigned 8-bit integer
nbp.enum Enumerator
Unsigned 8-bit integer
nbp.info Info
Unsigned 8-bit integer
nbp.net Network
Unsigned 16-bit integer
nbp.node Node
Unsigned 8-bit integer
nbp.object Object
String
nbp.op Operation
Unsigned 8-bit integer
nbp.port Port
Unsigned 8-bit integer
nbp.tid Transaction ID
Unsigned 8-bit integer
nbp.type Type
String
nbp.zone Zone
String
=head2 Name Management Protocol over IPX (nmpi)
=head2 NetBIOS (netbios)
netbios.ack Acknowledge
Boolean
netbios.ack_expected Acknowledge expected
Boolean
netbios.ack_with_data Acknowledge with data
Boolean
netbios.call_name_type Call Name Type
Signed 16-bit integer
netbios.command Command
Unsigned 16-bit integer
netbios.data2 DATA2 value
Unsigned 16-bit integer
netbios.hdr_len Header Length
Unsigned 16-bit integer
netbios.largest_frame Largest Frame
Unsigned 8-bit integer
netbios.local_session Local Session No.
Unsigned 8-bit integer
netbios.name Netbios Name
String
netbios.name_type Netbios Name Type
Unsigned 16-bit integer
netbios.recv_cont_req RECEIVE_CONTINUE requested
Boolean
netbios.remote_session Remote Session No.
Unsigned 8-bit integer
netbios.resp_corrl Response Correlator
Signed 16-bit integer
netbios.send_no_ack Handle SEND.NO.ACK
Boolean
netbios.version NetBIOS Version
Boolean
netbios.xmit_corrl Transmit Correlator
Signed 16-bit integer
=head2 NetBIOS Datagram Service (nbdgm)
nbdgm.dgram_id Datagram ID
Unsigned 16-bit integer
nbdgm.first This is first fragment
Boolean
nbdgm.next More fragments follow
Boolean
nbdgm.node_type Node Type
Unsigned 8-bit integer
nbdgm.src.ip Source IP
IPv4 address
nbdgm.src.port Source Port
Unsigned 16-bit integer
nbdgm.type Message Type
Unsigned 8-bit integer
=head2 NetBIOS Name Service (nbns)
nbns.count.add_rr Additional RRs
Unsigned 16-bit integer
nbns.count.answers Answer RRs
Unsigned 16-bit integer
nbns.count.auth_rr Authority RRs
Unsigned 16-bit integer
nbns.count.queries Questions
Unsigned 16-bit integer
nbns.id Transaction ID
Unsigned 16-bit integer
nbns.query Query
Boolean
nbns.response Response
Boolean
=head2 NetBIOS Session Service (nbss)
nbss.flags Flags
Unsigned 8-bit integer
nbss.type Message Type
Unsigned 8-bit integer
=head2 NetBIOS over IPX (nbipx)
=head2 NetWare Core Protocol (ncp)
ncp.accepted_max_size Accepted Max Size
Unsigned 16-bit integer
ncp.acct_version Acct Version
Unsigned 8-bit integer
ncp.buffer_size Buffer Size
Unsigned 16-bit integer
ncp.completion_code Completion Code
Unsigned 8-bit integer
ncp.connection Connection Number
Unsigned 16-bit integer
ncp.connection_number Connection Number
Unsigned 32-bit integer
ncp.connection_status Connection Status
Unsigned 8-bit integer
ncp.connections_in_use Connections In Use
Unsigned 16-bit integer
ncp.connections_max_used Connections Max Used
Unsigned 16-bit integer
ncp.connections_supported_max Connections Supported Max
Unsigned 16-bit integer
ncp.echo_socket Echo Socket
Unsigned 16-bit integer
ncp.file_handle File Handle
Byte array
ncp.file_offset File Offset
Unsigned 32-bit integer
ncp.file_size File Size
Unsigned 32-bit integer
ncp.func Function
Unsigned 8-bit integer
ncp.internet_bridge_version Internet Bridge Version
Unsigned 8-bit integer
ncp.ip.length NCP over IP length
Unsigned 32-bit integer
ncp.ip.replybufsize NCP over IP Reply Buffer Size
Unsigned 32-bit integer
ncp.ip.signature NCP over IP signature
Unsigned 32-bit integer
ncp.ip.version NCP over IP Version
Unsigned 32-bit integer
ncp.job_type Job Type
Unsigned 16-bit integer
ncp.length Packet Length
Unsigned 16-bit integer
ncp.local_login_info_ccode Local Login Info C Code
Unsigned 8-bit integer
ncp.max_bytes Maximum Number of Bytes
Unsigned 16-bit integer
ncp.mixed_mode_path_flag Mixed Mode Path Flag
Unsigned 8-bit integer
ncp.num_bytes Number of Bytes
Unsigned 16-bit integer
ncp.object_flags Object Flags
Unsigned 8-bit integer
ncp.object_has_properites Object Has Properties
Unsigned 8-bit integer
ncp.object_id Object ID
Unsigned 32-bit integer
ncp.object_name Object Name
ncp.object_name1 Object Name
String
ncp.object_security Object Security
Unsigned 8-bit integer
ncp.object_type Object Type
Unsigned 16-bit integer
ncp.os_language_id OS Language ID
Unsigned 8-bit integer
ncp.os_major_version OS Major Version
Unsigned 8-bit integer
ncp.os_minor_version OS Minor Version
Unsigned 8-bit integer
ncp.os_revision OS Revision
Unsigned 8-bit integer
ncp.ping_version Ping Version
Unsigned 16-bit integer
ncp.print_server_version Print Server Version
Unsigned 8-bit integer
ncp.product_major_version Product Major Version
Unsigned 16-bit integer
ncp.product_minor_version Product Minor Version
Unsigned 16-bit integer
ncp.product_revision_version Product Revision Version
Unsigned 8-bit integer
ncp.property_data Property Data
Byte array
ncp.property_has_more_segments Property Has More Segments
Unsigned 8-bit integer
ncp.property_name Property Name
ncp.property_segment Property Segment
Unsigned 8-bit integer
ncp.property_type Property Type
Unsigned 8-bit integer
ncp.proposed_max_size Proposed Max Size
Unsigned 16-bit integer
ncp.qms_version QMS Version
Unsigned 8-bit integer
ncp.reserved3 Reserved
Byte array
ncp.reserved51 Reserved
Byte array
ncp.security_flag Security Flag
Unsigned 8-bit integer
ncp.security_restriction_version Security Restriction Version
Unsigned 8-bit integer
ncp.seq Sequence Number
Unsigned 8-bit integer
ncp.server_name Server Name
String
ncp.sft_level SFT Level
Unsigned 8-bit integer
ncp.subfunc SubFunction
Unsigned 8-bit integer
ncp.task Task Number
Unsigned 8-bit integer
ncp.task_number Task Number
Unsigned 32-bit integer
ncp.tts_level TTS Level
Unsigned 8-bit integer
ncp.type Type
Unsigned 16-bit integer
ncp.unknown_byte Unknown Byte
Unsigned 8-bit integer
ncp.vap_version VAP Version
Unsigned 8-bit integer
ncp.virtual_console_version Virtual Console Version
Unsigned 8-bit integer
ncp.volumes_supported_max Volumes Supported Max
Unsigned 16-bit integer
=head2 Network Data Management Protocol (ndmp)
ndmp.addr.ip IP Address
IPv4 address
ndmp.addr.ipc IPC
Byte array
ndmp.addr.loop_id Loop ID
Unsigned 32-bit integer
ndmp.addr.tcp_port TCP Port
Unsigned 32-bit integer
ndmp.addr_type Addr Type
Unsigned 32-bit integer
ndmp.addr_types Addr Types
No value
ndmp.auth.challenge Challenge
Byte array
ndmp.auth.digest Digest
Byte array
ndmp.auth.id ID
String
ndmp.auth.password Password
String
ndmp.auth.types Auth types
No value
ndmp.auth_type Auth Type
Unsigned 32-bit integer
ndmp.bu.destination_dir Destination Dir
String
ndmp.bu.new_name New Name
String
ndmp.bu.operation Operation
Unsigned 32-bit integer
ndmp.bu.original_path Original Path
String
ndmp.bu.other_name Other Name
String
ndmp.butype.default_env Default Env
No value
ndmp.butype.env.name Name
String
ndmp.butype.env.value Value
String
ndmp.butype.info Butype Info
No value
ndmp.butype.name Butype Name
String
ndmp.bytes_left_to_read Bytes left to read
ndmp.connected Connected
Unsigned 32-bit integer
ndmp.connected.reason Reason
String
ndmp.count Count
Unsigned 32-bit integer
ndmp.data Data
Byte array
ndmp.data.bytes_processed Bytes Processed
ndmp.data.est_bytes_remain Est Bytes Remain
ndmp.data.est_time_remain Est Time Remain
Time duration
ndmp.data.halted Halted Reason
Unsigned 32-bit integer
ndmp.data.state State
Unsigned 32-bit integer
ndmp.data.written Data Written
ndmp.dirs Dirs
No value
ndmp.error Error
Unsigned 32-bit integer
ndmp.execute_cdb.cdb_len CDB length
Unsigned 32-bit integer
ndmp.execute_cdb.datain Data in
Byte array
ndmp.execute_cdb.datain_len Data in length
Unsigned 32-bit integer
ndmp.execute_cdb.dataout Data out
Byte array
ndmp.execute_cdb.dataout_len Data out length
Unsigned 32-bit integer
ndmp.execute_cdb.flags.data_in DATA_IN
Boolean
ndmp.execute_cdb.flags.data_out DATA_OUT
Boolean
ndmp.execute_cdb.sns_len Sense data length
Unsigned 32-bit integer
ndmp.execute_cdb.status Status
Unsigned 8-bit integer
ndmp.execute_cdb.timeout Timeout
Unsigned 32-bit integer
ndmp.file File
String
ndmp.file.atime atime
Date/Time stamp
ndmp.file.ctime ctime
Date/Time stamp
ndmp.file.fattr Fattr
Unsigned 32-bit integer
ndmp.file.fh_info FH Info
ndmp.file.fs_type File FS Type
Unsigned 32-bit integer
ndmp.file.group Group
Unsigned 32-bit integer
ndmp.file.links Links
Unsigned 32-bit integer
ndmp.file.mtime mtime
Date/Time stamp
ndmp.file.names File Names
No value
ndmp.file.node Node
ndmp.file.owner Owner
Unsigned 32-bit integer
ndmp.file.parent Parent
ndmp.file.size Size
ndmp.file.stats File Stats
No value
ndmp.file.type File Type
Unsigned 32-bit integer
ndmp.files Files
No value
ndmp.fs.avail_size Avail Size
ndmp.fs.env Env variables
No value
ndmp.fs.env.name Name
String
ndmp.fs.env.value Value
String
ndmp.fs.info FS Info
No value
ndmp.fs.logical_device Logical Device
String
ndmp.fs.physical_device Physical Device
String
ndmp.fs.status Status
String
ndmp.fs.total_inodes Total Inodes
ndmp.fs.total_size Total Size
ndmp.fs.type Type
String
ndmp.fs.used_inodes Used Inodes
ndmp.fs.used_size Used Size
ndmp.halt Halt
Unsigned 32-bit integer
ndmp.halt.reason Reason
String
ndmp.header NDMP Header
No value
ndmp.hostid HostID
String
ndmp.hostname Hostname
String
ndmp.log.message Message
String
ndmp.log.message.id Message ID
Unsigned 32-bit integer
ndmp.log.type Type
Unsigned 32-bit integer
ndmp.mover.mode Mode
Unsigned 32-bit integer
ndmp.mover.pause Pause
Unsigned 32-bit integer
ndmp.mover.state State
Unsigned 32-bit integer
ndmp.msg Message
Unsigned 32-bit integer
ndmp.msg_type Type
Unsigned 32-bit integer
ndmp.nlist Nlist
No value
ndmp.nodes Nodes
No value
ndmp.os.type OS Type
String
ndmp.os.version OS Version
String
ndmp.record.num Record Num
Unsigned 32-bit integer
ndmp.record.size Record Size
Unsigned 32-bit integer
ndmp.reply_sequence Reply Sequence
Unsigned 32-bit integer
ndmp.resid_count Resid Count
Unsigned 32-bit integer
ndmp.scsi.controller Controller
Unsigned 32-bit integer
ndmp.scsi.device Device
String
ndmp.scsi.id ID
Unsigned 32-bit integer
ndmp.scsi.info SCSI Info
No value
ndmp.scsi.lun LUN
Unsigned 32-bit integer
ndmp.scsi.model Model
String
ndmp.seek.position Seek Position
ndmp.sequence Sequence
Unsigned 32-bit integer
ndmp.server.product Product
String
ndmp.server.revision Revision
String
ndmp.server.vendor Vendor
String
ndmp.tape.cap.name Name
String
ndmp.tape.cap.value Value
String
ndmp.tape.capability Tape Capabilities
No value
ndmp.tape.dev_cap Device Capability
No value
ndmp.tape.device Device
String
ndmp.tape.info Tape Info
No value
ndmp.tape.model Model
String
ndmp.tape.mtio.op Operation
Unsigned 32-bit integer
ndmp.tape.open_mode Mode
Unsigned 32-bit integer
ndmp.tape.status.block_no block_no
Unsigned 32-bit integer
ndmp.tape.status.block_size block_size
Unsigned 32-bit integer
ndmp.tape.status.file_num file_num
Unsigned 32-bit integer
ndmp.tape.status.partition partition
Unsigned 32-bit integer
ndmp.tape.status.soft_errors soft_errors
Unsigned 32-bit integer
ndmp.tape.status.space_remain space_remain
ndmp.tape.status.total_space total_space
ndmp.timestamp Time
Date/Time stamp
ndmp.version Version
Unsigned 32-bit integer
ndmp.window.length Window Length
ndmp.window.offset Window Offset
=head2 Network File System (nfs)
nfs.ace ace
String
nfs.aceflag4 aceflag
Unsigned 32-bit integer
nfs.acemask4 acemask
Unsigned 32-bit integer
nfs.acetype4 acetype
Unsigned 32-bit integer
nfs.atime atime
Date/Time stamp
nfs.atime.nsec nano seconds
Unsigned 32-bit integer
nfs.atime.sec seconds
Unsigned 32-bit integer
nfs.atime.usec micro seconds
Unsigned 32-bit integer
nfs.attr mand_attr
Unsigned 32-bit integer
nfs.bytes_per_block bytes_per_block
Unsigned 32-bit integer
nfs.call.operation Opcode
Unsigned 32-bit integer
nfs.cb_location cb_location
Unsigned 32-bit integer
nfs.cb_program cb_program
Unsigned 32-bit integer
nfs.change_info.atomic Atomic
Boolean
nfs.changeid4 changeid
nfs.clientid clientid
nfs.cookie3 cookie
nfs.cookie4 cookie
nfs.cookieverf4 cookieverf
nfs.count3 count
Unsigned 32-bit integer
nfs.count3_dircount dircount
Unsigned 32-bit integer
nfs.count3_maxcount maxcount
Unsigned 32-bit integer
nfs.count4 count
Unsigned 32-bit integer
nfs.createmode Create Mode
Unsigned 32-bit integer
nfs.ctime ctime
Date/Time stamp
nfs.ctime.nsec nano seconds
Unsigned 32-bit integer
nfs.ctime.sec seconds
Unsigned 32-bit integer
nfs.ctime.usec micro seconds
Unsigned 32-bit integer
nfs.data Data
Byte array
nfs.data_follows data_follows
Boolean
nfs.delegate_stateid delegate_stateid
nfs.delegate_type delegate_type
Unsigned 32-bit integer
nfs.dircount dircount
Unsigned 32-bit integer
nfs.dirlist4.eof eof
Boolean
nfs.dtime time delta
Time duration
nfs.dtime.nsec nano seconds
Unsigned 32-bit integer
nfs.dtime.sec seconds
Unsigned 32-bit integer
nfs.eof eof
Unsigned 32-bit integer
nfs.fattr.blocks blocks
Unsigned 32-bit integer
nfs.fattr.blocksize blocksize
Unsigned 32-bit integer
nfs.fattr.fileid fileid
Unsigned 32-bit integer
nfs.fattr.fsid fsid
Unsigned 32-bit integer
nfs.fattr.gid gid
Unsigned 32-bit integer
nfs.fattr.nlink nlink
Unsigned 32-bit integer
nfs.fattr.rdev rdev
Unsigned 32-bit integer
nfs.fattr.size size
Unsigned 32-bit integer
nfs.fattr.type type
Unsigned 32-bit integer
nfs.fattr.uid uid
Unsigned 32-bit integer
nfs.fattr3.fileid fileid
nfs.fattr3.fsid fsid
nfs.fattr3.gid gid
Unsigned 32-bit integer
nfs.fattr3.nlink nlink
Unsigned 32-bit integer
nfs.fattr3.rdev rdev
Unsigned 32-bit integer
nfs.fattr3.size size
nfs.fattr3.type Type
Unsigned 32-bit integer
nfs.fattr3.uid uid
Unsigned 32-bit integer
nfs.fattr3.used used
nfs.fattr4.aclsupport aclsupport
Unsigned 32-bit integer
nfs.fattr4.attr_vals attr_vals
Byte array
nfs.fattr4.fileid fileid
nfs.fattr4.files_avail files_avail
nfs.fattr4.files_free files_free
nfs.fattr4.files_total files_total
nfs.fattr4.lease_time lease_time
Unsigned 32-bit integer
nfs.fattr4.maxfilesize maxfilesize
nfs.fattr4.maxlink maxlink
Unsigned 32-bit integer
nfs.fattr4.maxname maxname
Unsigned 32-bit integer
nfs.fattr4.maxread maxread
nfs.fattr4.maxwrite maxwrite
nfs.fattr4.numlinks numlinks
Unsigned 32-bit integer
nfs.fattr4.quota_hard quota_hard
nfs.fattr4.quota_soft quota_soft
nfs.fattr4.quota_used quota_used
nfs.fattr4.size size
nfs.fattr4.space_avail space_avail
nfs.fattr4.space_free space_free
nfs.fattr4.space_total space_total
nfs.fattr4.space_used space_used
nfs.fattr4_archive fattr4_archive
Boolean
nfs.fattr4_cansettime fattr4_cansettime
Boolean
nfs.fattr4_case_insensitive fattr4_case_insensitive
Boolean
nfs.fattr4_case_preserving fattr4_case_preserving
Boolean
nfs.fattr4_chown_restricted fattr4_chown_restricted
Boolean
nfs.fattr4_hidden fattr4_hidden
Boolean
nfs.fattr4_homogeneous fattr4_homogeneous
Boolean
nfs.fattr4_link_support fattr4_link_support
Boolean
nfs.fattr4_mimetype fattr4_mimetype
String
nfs.fattr4_named_attr fattr4_named_attr
Boolean
nfs.fattr4_no_trunc fattr4_no_trunc
Boolean
nfs.fattr4_owner fattr4_owner
String
nfs.fattr4_owner_group fattr4_owner_group
String
nfs.fattr4_symlink_support fattr4_symlink_support
Boolean
nfs.fattr4_system fattr4_system
Boolean
nfs.fattr4_unique_handles fattr4_unique_handles
Boolean
nfs.fh.auth_type auth_type
Unsigned 8-bit integer
nfs.fh.dentry dentry
Unsigned 32-bit integer
nfs.fh.dev device
Unsigned 32-bit integer
nfs.fh.dirinode directory inode
Unsigned 32-bit integer
nfs.fh.fileid_type fileid_type
Unsigned 8-bit integer
nfs.fh.fn file number
Unsigned 32-bit integer
nfs.fh.fn.generation generation
Unsigned 32-bit integer
nfs.fh.fn.inode inode
Unsigned 32-bit integer
nfs.fh.fn.len length
Unsigned 32-bit integer
nfs.fh.fsid.inode inode
Unsigned 32-bit integer
nfs.fh.fsid.major major
Unsigned 32-bit integer
nfs.fh.fsid.minor minor
Unsigned 32-bit integer
nfs.fh.fsid_type fsid_type
Unsigned 8-bit integer
nfs.fh.fstype file system type
Unsigned 32-bit integer
nfs.fh.hash hash
Unsigned 32-bit integer
nfs.fh.hp.len length
Unsigned 32-bit integer
nfs.fh.length length
Unsigned 32-bit integer
nfs.fh.pinode pseudo inode
Unsigned 32-bit integer
nfs.fh.version version
Unsigned 8-bit integer
nfs.fh.xdev exported device
Unsigned 32-bit integer
nfs.fh.xfn exported file number
Unsigned 32-bit integer
nfs.fh.xfn.generation generation
Unsigned 32-bit integer
nfs.fh.xfn.inode exported inode
Unsigned 32-bit integer
nfs.fh.xfn.len length
Unsigned 32-bit integer
nfs.fh.xfsid.major exported major
Unsigned 32-bit integer
nfs.fh.xfsid.minor exported minor
Unsigned 32-bit integer
nfs.filesize filesize
nfs.fsid4.major fsid4.major
nfs.fsid4.minor fsid4.minor
nfs.fsinfo.dtpref dtpref
Unsigned 32-bit integer
nfs.fsinfo.maxfilesize maxfilesize
nfs.fsinfo.propeties Properties
Unsigned 32-bit integer
nfs.fsinfo.rtmax rtmax
Unsigned 32-bit integer
nfs.fsinfo.rtmult rtmult
Unsigned 32-bit integer
nfs.fsinfo.rtpref rtpref
Unsigned 32-bit integer
nfs.fsinfo.wtmax wtmax
Unsigned 32-bit integer
nfs.fsinfo.wtmult wtmult
Unsigned 32-bit integer
nfs.fsinfo.wtpref wtpref
Unsigned 32-bit integer
nfs.fsstat.invarsec invarsec
Unsigned 32-bit integer
nfs.fsstat3_resok.abytes Available free bytes
nfs.fsstat3_resok.afiles Available free file slots
nfs.fsstat3_resok.fbytes Free bytes
nfs.fsstat3_resok.ffiles Free file slots
nfs.fsstat3_resok.tbytes Total bytes
nfs.fsstat3_resok.tfiles Total file slots
nfs.full_name Full Name
String
nfs.gid3 gid
Unsigned 32-bit integer
nfs.length4 length
nfs.lock.locker.new_lock_owner new lock owner?
Boolean
nfs.lock.reclaim reclaim?
Boolean
nfs.lock_owner4 owner
Byte array
nfs.lock_seqid lock_seqid
Unsigned 32-bit integer
nfs.locktype4 locktype
Unsigned 32-bit integer
nfs.maxcount maxcount
Unsigned 32-bit integer
nfs.minorversion minorversion
Unsigned 32-bit integer
nfs.mtime mtime
Date/Time stamp
nfs.mtime.nsec nano seconds
Unsigned 32-bit integer
nfs.mtime.sec seconds
Unsigned 32-bit integer
nfs.mtime.usec micro seconds
Unsigned 32-bit integer
nfs.name Name
String
nfs.nfs_client_id4.id Data
Byte array
nfs.nfs_ftype4 nfs_ftype4
Unsigned 32-bit integer
nfs.nfstime4.nseconds nseconds
Unsigned 32-bit integer
nfs.nfstime4.seconds seconds
nfs.num_blocks num_blocks
Unsigned 32-bit integer
nfs.offset3 offset
nfs.offset4 offset
nfs.open.claim_type Claim Type
Unsigned 32-bit integer
nfs.open.delegation_type Delegation Type
Unsigned 32-bit integer
nfs.open.limit_by Space Limit
Unsigned 32-bit integer
nfs.open.opentype Open Type
Unsigned 32-bit integer
nfs.open4.share_access share_access
Unsigned 32-bit integer
nfs.open4.share_deny share_deny
Unsigned 32-bit integer
nfs.open_owner4 owner
Byte array
nfs.openattr4.createdir attribute dir create
Boolean
nfs.pathconf.case_insensitive case_insensitive
Boolean
nfs.pathconf.case_preserving case_preserving
Boolean
nfs.pathconf.chown_restricted chown_restricted
Boolean
nfs.pathconf.linkmax linkmax
Unsigned 32-bit integer
nfs.pathconf.name_max name_max
Unsigned 32-bit integer
nfs.pathconf.no_trunc no_trunc
Boolean
nfs.pathname.component Filename
String
nfs.read.count Count
Unsigned 32-bit integer
nfs.read.eof EOF
Boolean
nfs.read.offset Offset
Unsigned 32-bit integer
nfs.read.totalcount Total Count
Unsigned 32-bit integer
nfs.readdir.cookie Cookie
Unsigned 32-bit integer
nfs.readdir.count Count
Unsigned 32-bit integer
nfs.readdir.entry Entry
No value
nfs.readdir.entry.cookie Cookie
Unsigned 32-bit integer
nfs.readdir.entry.fileid File ID
Unsigned 32-bit integer
nfs.readdir.entry.name Name
String
nfs.readdir.entry3.cookie Cookie
nfs.readdir.entry3.fileid File ID
nfs.readdir.entry3.name Name
String
nfs.readdir.eof EOF
Unsigned 32-bit integer
nfs.readdirplus.entry.cookie Cookie
nfs.readdirplus.entry.fileid File ID
nfs.readdirplus.entry.name Name
String
nfs.readlink.data Data
String
nfs.recall EOF
Boolean
nfs.recall4 recall
Boolean
nfs.reclaim4 reclaim
Unsigned 32-bit integer
nfs.reply.operation Opcode
Unsigned 32-bit integer
nfs.secinfo.flavor flavor
Unsigned 32-bit integer
nfs.secinfo.flavor_info.rpcsec_gss_info.oid oid
Byte array
nfs.secinfo.flavor_info.rpcsec_gss_info.qop qop
Unsigned 32-bit integer
nfs.secinfo.rpcsec_gss_info.service service
Unsigned 32-bit integer
nfs.seqid seqid
Unsigned 32-bit integer
nfs.server server
String
nfs.set_it set_it
Unsigned 32-bit integer
nfs.set_size3.size size
nfs.specdata1 specdata1
Unsigned 32-bit integer
nfs.specdata2 specdata2
Unsigned 32-bit integer
nfs.stable_how4 stable_how4
Unsigned 32-bit integer
nfs.stateid4 stateid
nfs.stateid4.other Data
Byte array
nfs.statfs.bavail Available Blocks
Unsigned 32-bit integer
nfs.statfs.bfree Free Blocks
Unsigned 32-bit integer
nfs.statfs.blocks Total Blocks
Unsigned 32-bit integer
nfs.statfs.bsize Block Size
Unsigned 32-bit integer
nfs.statfs.tsize Transfer Size
Unsigned 32-bit integer
nfs.status Status
Unsigned 32-bit integer
nfs.status2 Status
Unsigned 32-bit integer
nfs.symlink.linktext Name
String
nfs.symlink.to To
String
nfs.tag Tag
String
nfs.type Type
Unsigned 32-bit integer
nfs.uid3 uid
Unsigned 32-bit integer
nfs.verifier4 verifier
nfs.wcc_attr.size size
nfs.who who
String
nfs.write.beginoffset Begin Offset
Unsigned 32-bit integer
nfs.write.committed Committed
Unsigned 32-bit integer
nfs.write.offset Offset
Unsigned 32-bit integer
nfs.write.stable Stable
Unsigned 32-bit integer
nfs.write.totalcount Total Count
Unsigned 32-bit integer
=head2 Network Lock Manager Protocol (nlm)
nlm.block block
Boolean
nlm.cookie cookie
Byte array
nlm.exclusive exclusive
Boolean
nlm.holder holder
No value
nlm.lock lock
No value
nlm.lock.caller_name caller_name
String
nlm.lock.l_len l_len
nlm.lock.l_offset l_offset
nlm.lock.owner owner
Byte array
nlm.lock.svid svid
Unsigned 32-bit integer
nlm.reclaim reclaim
Boolean
nlm.sequence sequence
Signed 32-bit integer
nlm.share share
No value
nlm.share.access access
Unsigned 32-bit integer
nlm.share.mode mode
Unsigned 32-bit integer
nlm.share.name name
String
nlm.stat stat
Unsigned 32-bit integer
nlm.state state
Unsigned 32-bit integer
nlm.test_stat test_stat
No value
nlm.test_stat.stat stat
Unsigned 32-bit integer
=head2 Network News Transfer Protocol (nntp)
nntp.request Request
Boolean
nntp.response Response
Boolean
=head2 Network Status Monitor CallBack Protocol (statnotify)
statnotify.name Name
String
statnotify.priv Priv
Byte array
statnotify.state State
Unsigned 32-bit integer
=head2 Network Status Monitor Protocol (stat)
stat.mon Monitor
No value
stat.mon_id.name Monitor ID Name
String
stat.my_id My ID
No value
stat.my_id.hostname Hostname
String
stat.my_id.proc Procedure
Unsigned 32-bit integer
stat.my_id.prog Program
Unsigned 32-bit integer
stat.my_id.vers Version
Unsigned 32-bit integer
stat.name Name
String
stat.priv Priv
Byte array
stat.stat_chge Status Change
No value
stat.stat_res Status Result
No value
stat.stat_res.res Result
Unsigned 32-bit integer
stat.stat_res.state State
Unsigned 32-bit integer
stat.state State
Unsigned 32-bit integer
=head2 Network Time Protocol (ntp)
ntp.flags Flags
Unsigned 8-bit integer
ntp.flags.li Leap Indicator
Unsigned 8-bit integer
ntp.flags.mode Mode
Unsigned 8-bit integer
ntp.flags.vn Version number
Unsigned 8-bit integer
ntp.keyid Key ID
Byte array
ntp.mac Message Authentication Code
Byte array
ntp.org Originate Time Stamp
Byte array
ntp.ppoll Peer Polling Interval
Unsigned 8-bit integer
ntp.precision Peer Clock Precision
Unsigned 8-bit integer
ntp.rec Receive Time Stamp
Byte array
ntp.refid Reference Clock ID
Byte array
ntp.reftime Reference Clock Update Time
Byte array
ntp.rootdelay Root Delay
Double-precision floating point
ntp.rootdispersion Clock Dispersion
Double-precision floating point
ntp.stratum Peer Clock Stratum
Unsigned 8-bit integer
ntp.xmt Transmit Time Stamp
Byte array
=head2 Null/Loopback (null)
null.family Family
Unsigned 32-bit integer
null.type Type
Unsigned 16-bit integer
=head2 Open Shortest Path First (ospf)
=head2 OpenBSD Packet Filter log file (pflog)
pflog.action Action
Unsigned 16-bit integer
pflog.af Address Family
Unsigned 32-bit integer
pflog.dir Direction
Unsigned 16-bit integer
pflog.ifname Interface
String
pflog.reason Reason
Unsigned 16-bit integer
pflog.rnr Rule Number
Signed 16-bit integer
=head2 PC NFS (pcnfsd)
pcnfsd.auth.client Authentication Client
String
pcnfsd.auth.ident.clear Clear Ident
String
pcnfsd.auth.ident.obscure Obscure Ident
String
pcnfsd.auth.password.clear Clear Password
String
pcnfsd.auth.password.obscure Obscure Password
String
pcnfsd.comment Comment
String
pcnfsd.def_umask def_umask
Signed 32-bit integer
pcnfsd.gid Group ID
Unsigned 32-bit integer
pcnfsd.gids.count Group ID Count
Unsigned 32-bit integer
pcnfsd.homedir Home Directory
String
pcnfsd.status Reply Status
Unsigned 32-bit integer
pcnfsd.uid User ID
Unsigned 32-bit integer
=head2 PPP Bandwidth Allocation Control Protocol (bacp)
=head2 PPP Bandwidth Allocation Protocol (bap)
=head2 PPP Callback Control Protocoll (cbcp)
=head2 PPP Challenge Handshake Authentication Protocol (chap)
=head2 PPP Compressed Datagram (comp_data)
=head2 PPP Compression Control Protocol (ccp)
=head2 PPP IP Control Protocol (ipcp)
=head2 PPP Link Control Protocol (lcp)
=head2 PPP Multilink Protocol (mp)
mp.first First fragment
Boolean
mp.last Last fragment
Boolean
mp.seq Sequence number
Unsigned 24-bit integer
=head2 PPP Multiplexing (pppmux)
=head2 PPP Password Authentication Protocol (pap)
=head2 PPP VJ Compression (vj)
=head2 PPP-over-Ethernet Discovery (pppoed)
=head2 PPP-over-Ethernet Session (pppoes)
=head2 PPPMux Control Protocol (pppmuxcp)
=head2 Point-to-Point Protocol (ppp)
ppp.address Address
Unsigned 8-bit integer
ppp.control Control
Unsigned 8-bit integer
ppp.protocol Protocol
Unsigned 16-bit integer
=head2 Point-to-Point Tunnelling Protocol (pptp)
pptp.type Message type
Unsigned 16-bit integer
=head2 Portmap (portmap)
portmap.answer Answer
Boolean
portmap.args Arguments
Byte array
portmap.port Port
Unsigned 32-bit integer
portmap.proc Procedure
Unsigned 32-bit integer
portmap.prog Program
Unsigned 32-bit integer
portmap.proto Protocol
Unsigned 32-bit integer
portmap.result Result
Byte array
portmap.rpcb RPCB
No value
portmap.rpcb.addr Universal Address
String
portmap.rpcb.netid Network Id
String
portmap.rpcb.owner Owner of this Service
String
portmap.rpcb.prog Program
Unsigned 32-bit integer
portmap.rpcb.version Version
Unsigned 32-bit integer
portmap.uaddr Universal Address
String
portmap.version Version
Unsigned 32-bit integer
=head2 Post Office Protocol (pop)
pop.request Request
Boolean
pop.response Response
Boolean
=head2 Pragmatic General Multicast (pgm)
pgm.ack.bitmap Packet Bitmap
Unsigned 32-bit integer
pgm.ack.maxsqn Maximum Received Sequence Number
Unsigned 32-bit integer
pgm.data.sqn Data Packet Sequence Number
Unsigned 32-bit integer
pgm.data.trail Trailing Edge Sequence Number
Unsigned 32-bit integer
pgm.genopts.len Length
Unsigned 8-bit integer
pgm.genopts.opx Option Extensibility Bits
Unsigned 8-bit integer
pgm.genopts.type Type
Unsigned 8-bit integer
pgm.hdr.cksum Checksum
Unsigned 16-bit integer
pgm.hdr.dport Destination Port
Unsigned 16-bit integer
pgm.hdr.gsi Global Source Identifier
Byte array
pgm.hdr.opts Options
Unsigned 8-bit integer
pgm.hdr.opts.netsig Network Significant Options
Boolean
pgm.hdr.opts.opt Options
Boolean
pgm.hdr.opts.parity Parity
Boolean
pgm.hdr.opts.varlen Variable length Parity Packet Option
Boolean
pgm.hdr.sport Source Port
Unsigned 16-bit integer
pgm.hdr.tsdulen Transport Service Data Unit Length
Unsigned 16-bit integer
pgm.hdr.type Type
Unsigned 8-bit integer
pgm.nak.grp Multicast Group NLA
IPv4 address
pgm.nak.grpafi Multicast Group AFI
Unsigned 16-bit integer
pgm.nak.grpres Reserved
Unsigned 16-bit integer
pgm.nak.sqn Requested Sequence Number
Unsigned 32-bit integer
pgm.nak.src Source NLA
IPv4 address
pgm.nak.srcafi Source NLA AFI
Unsigned 16-bit integer
pgm.nak.srcres Reserved
Unsigned 16-bit integer
pgm.opts.ccdata.acker Acker
IPv4 address
pgm.opts.ccdata.afi Acker AFI
Unsigned 16-bit integer
pgm.opts.ccdata.lossrate Loss Rate
Unsigned 16-bit integer
pgm.opts.ccdata.res Reserved
Unsigned 8-bit integer
pgm.opts.ccdata.res2 Reserved
Unsigned 16-bit integer
pgm.opts.ccdata.tstamp Time Stamp
Unsigned 16-bit integer
pgm.opts.join.min_join Minimum Sequence Number
Unsigned 32-bit integer
pgm.opts.join.res Reserved
Unsigned 8-bit integer
pgm.opts.len Length
Unsigned 8-bit integer
pgm.opts.nak.list List
Byte array
pgm.opts.nak.op Reserved
Unsigned 8-bit integer
pgm.opts.parity_prm.op Parity Parameters
Unsigned 8-bit integer
pgm.opts.parity_prm.prm_grp Transmission Group Size
Unsigned 32-bit integer
pgm.opts.tlen Total Length
Unsigned 16-bit integer
pgm.opts.type Type
Unsigned 8-bit integer
pgm.spm.lead Leading Edge Sequence Number
Unsigned 32-bit integer
pgm.spm.path Path NLA
IPv4 address
pgm.spm.pathafi Path NLA AFI
Unsigned 16-bit integer
pgm.spm.res Reserved
Unsigned 16-bit integer
pgm.spm.sqn Sequence number
Unsigned 32-bit integer
pgm.spm.trail Trailing Edge Sequence Number
Unsigned 32-bit integer
=head2 Prism (prism)
prism.channel.data Channel Time Field
Unsigned 32-bit integer
prism.frmlen.data Frame Length Field
Unsigned 32-bit integer
prism.hosttime.data Host Time Field
Unsigned 32-bit integer
prism.istx.data IsTX Field
Unsigned 32-bit integer
prism.mactime.data MAC Time Field
Unsigned 32-bit integer
prism.msgcode Message Code
Unsigned 32-bit integer
prism.msglen Message Length
Unsigned 32-bit integer
prism.noise.data Noise Field
Unsigned 32-bit integer
prism.rate.data Rate Field
Unsigned 32-bit integer
prism.rssi.data RSSI Field
Unsigned 32-bit integer
prism.signal.data Signal Field
Unsigned 32-bit integer
prism.sq.data SQ Field
Unsigned 32-bit integer
=head2 Protocol Independent Multicast (pim)
pim.cksum Checksum
Unsigned 16-bit integer
pim.code Code
Unsigned 8-bit integer
pim.type Type
Unsigned 8-bit integer
pim.version Version
Unsigned 8-bit integer
=head2 Q.2931 (q2931)
q2931.call_ref Call reference value
Byte array
q2931.call_ref_len Call reference value length
Unsigned 8-bit integer
q2931.disc Protocol discriminator
Unsigned 8-bit integer
q2931.message_action_indicator Action indicator
Unsigned 8-bit integer
q2931.message_flag Flag
Boolean
q2931.message_len Message length
Unsigned 16-bit integer
q2931.message_type Message type
Unsigned 8-bit integer
q2931.message_type_ext Message type extension
Unsigned 8-bit integer
=head2 Q.931 (q931)
q931.call_ref Call reference value
Byte array
q931.call_ref_len Call reference value length
Unsigned 8-bit integer
q931.disc Protocol discriminator
Unsigned 8-bit integer
q931.message_type Message type
Unsigned 8-bit integer
=head2 Quake II Network Protocol (quake2)
quake2.c2s Client to Server
Unsigned 32-bit integer
quake2.connectionless Connectionless
Unsigned 32-bit integer
quake2.connectionless.marker Marker
Unsigned 32-bit integer
quake2.connectionless.text Text
String
quake2.game Game
Unsigned 32-bit integer
quake2.game.qport QPort
Unsigned 32-bit integer
quake2.game.rel1 Reliable
Boolean
quake2.game.rel2 Reliable
Boolean
quake2.game.seq1 Sequence Number
Unsigned 32-bit integer
quake2.game.seq2 Sequence Number
Unsigned 32-bit integer
quake2.s2c Server to Client
Unsigned 32-bit integer
=head2 Quake III Arena Network Protocol (quake3)
quake3.connectionless Connectionless
Unsigned 32-bit integer
quake3.connectionless.command Command
String
quake3.connectionless.marker Marker
Unsigned 32-bit integer
quake3.connectionless.text Text
String
quake3.direction Direction
No value
quake3.game Game
Unsigned 32-bit integer
quake3.game.qport QPort
Unsigned 32-bit integer
quake3.game.rel1 Reliable
Boolean
quake3.game.rel2 Reliable
Boolean
quake3.game.seq1 Sequence Number
Unsigned 32-bit integer
quake3.game.seq2 Sequence Number
Unsigned 32-bit integer
quake3.server.addr Server Address
IPv4 address
quake3.server.port Server Port
Unsigned 16-bit integer
=head2 Quake Network Protocol (quake)
quake.control.accept.port Port
Unsigned 32-bit integer
quake.control.command Command
Unsigned 8-bit integer
quake.control.connect.game Game
String
quake.control.connect.version Version
Unsigned 8-bit integer
quake.control.player_info.address Address
String
quake.control.player_info.colors Colors
Unsigned 32-bit integer
quake.control.player_info.colors.pants Pants
Unsigned 8-bit integer
quake.control.player_info.colors.shirt Shirt
Unsigned 8-bit integer
quake.control.player_info.connect_time Connect Time
Unsigned 32-bit integer
quake.control.player_info.frags Frags
Unsigned 32-bit integer
quake.control.player_info.name Name
String
quake.control.player_info.player Player
Unsigned 8-bit integer
quake.control.reject.reason Reason
String
quake.control.rule_info.lastrule Last Rule
String
quake.control.rule_info.rule Rule
String
quake.control.rule_info.value Value
String
quake.control.server_info.address Address
String
quake.control.server_info.game Game
String
quake.control.server_info.map Map
String
quake.control.server_info.max_player Maximal Number of Players
Unsigned 8-bit integer
quake.control.server_info.num_player Number of Players
Unsigned 8-bit integer
quake.control.server_info.server Server
String
quake.control.server_info.version Version
Unsigned 8-bit integer
quake.header.flags Flags
Unsigned 16-bit integer
quake.header.length Length
Unsigned 16-bit integer
quake.header.sequence Sequence
Unsigned 32-bit integer
=head2 QuakeWorld Network Protocol (quakeworld)
quakeworld.c2s Client to Server
Unsigned 32-bit integer
quakeworld.connectionless Connectionless
Unsigned 32-bit integer
quakeworld.connectionless.arguments Arguments
String
quakeworld.connectionless.command Command
String
quakeworld.connectionless.connect.challenge Challenge
Signed 32-bit integer
quakeworld.connectionless.connect.infostring Infostring
String
quakeworld.connectionless.connect.infostring.key Key
String
quakeworld.connectionless.connect.infostring.key_value Key/Value
String
quakeworld.connectionless.connect.infostring.value Value
String
quakeworld.connectionless.connect.qport QPort
Unsigned 32-bit integer
quakeworld.connectionless.connect.version Version
Unsigned 32-bit integer
quakeworld.connectionless.marker Marker
Unsigned 32-bit integer
quakeworld.connectionless.rcon.command Command
String
quakeworld.connectionless.rcon.password Password
String
quakeworld.connectionless.text Text
String
quakeworld.game Game
Unsigned 32-bit integer
quakeworld.game.qport QPort
Unsigned 32-bit integer
quakeworld.game.rel1 Reliable
Boolean
quakeworld.game.rel2 Reliable
Boolean
quakeworld.game.seq1 Sequence Number
Unsigned 32-bit integer
quakeworld.game.seq2 Sequence Number
Unsigned 32-bit integer
quakeworld.s2c Server to Client
Unsigned 32-bit integer
=head2 Qualified Logical Link Control (qllc)
qllc.address Address Field
Unsigned 8-bit integer
qllc.control Control Field
Unsigned 8-bit integer
=head2 RFC 2250 MPEG1 (mpeg1)
mpeg1.stream MPEG-1 stream
Byte array
rtp.payload_mpeg_T T
Unsigned 16-bit integer
rtp.payload_mpeg_an AN
Unsigned 16-bit integer
rtp.payload_mpeg_b Beginning-of-slice
Boolean
rtp.payload_mpeg_bfc BFC
Unsigned 16-bit integer
rtp.payload_mpeg_fbv FBV
Unsigned 16-bit integer
rtp.payload_mpeg_ffc FFC
Unsigned 16-bit integer
rtp.payload_mpeg_ffv FFV
Unsigned 16-bit integer
rtp.payload_mpeg_mbz MBZ
Unsigned 16-bit integer
rtp.payload_mpeg_n New Picture Header
Unsigned 16-bit integer
rtp.payload_mpeg_p Picture type
Unsigned 16-bit integer
rtp.payload_mpeg_s Sequence Header
Boolean
rtp.payload_mpeg_tr Temporal Reference
Unsigned 16-bit integer
=head2 RIPng (ripng)
ripng.cmd Command
Unsigned 8-bit integer
ripng.version Version
Unsigned 8-bit integer
=head2 RX Protocol (rx)
rx.abort ABORT Packet
No value
rx.abort_code Abort Code
Unsigned 32-bit integer
rx.ack ACK Packet
No value
rx.ack_type ACK Type
Unsigned 8-bit integer
rx.bufferspace Bufferspace
Unsigned 16-bit integer
rx.callnumber Call Number
Unsigned 32-bit integer
rx.challenge CHALLENGE Packet
No value
rx.cid CID
Unsigned 32-bit integer
rx.encrypted Encrypted
No value
rx.epoch Epoch
Date/Time stamp
rx.first First Packet
Unsigned 32-bit integer
rx.flags Flags
Unsigned 8-bit integer
rx.flags.client_init Client Initiated
Unsigned 8-bit integer
rx.flags.free_packet Free Packet
Unsigned 8-bit integer
rx.flags.last_packet Last Packet
Unsigned 8-bit integer
rx.flags.more_packets More Packets
Unsigned 8-bit integer
rx.flags.request_ack Request Ack
Unsigned 8-bit integer
rx.if_mtu Interface MTU
Unsigned 32-bit integer
rx.inc_nonce Inc Nonce
Unsigned 32-bit integer
rx.kvno kvno
Unsigned 32-bit integer
rx.level Level
Unsigned 32-bit integer
rx.max_mtu Max MTU
Unsigned 32-bit integer
rx.max_packets Max Packets
Unsigned 32-bit integer
rx.maxskew Max Skew
Unsigned 16-bit integer
rx.min_level Min Level
Unsigned 32-bit integer
rx.nonce Nonce
Unsigned 32-bit integer
rx.num_acks Num ACKs
Unsigned 8-bit integer
rx.prev Prev Packet
Unsigned 32-bit integer
rx.reason Reason
Unsigned 8-bit integer
rx.response RESPONSE Packet
No value
rx.rwind rwind
Unsigned 32-bit integer
rx.securityindex Security Index
Unsigned 32-bit integer
rx.seq Sequence Number
Unsigned 32-bit integer
rx.serial Serial
Unsigned 32-bit integer
rx.serviceid Service ID
Unsigned 16-bit integer
rx.spare Spare/Checksum
Unsigned 16-bit integer
rx.ticket ticket
Byte array
rx.ticket_len Ticket len
Unsigned 32-bit integer
rx.type Type
Unsigned 8-bit integer
rx.userstatus User Status
Unsigned 32-bit integer
rx.version Version
Unsigned 32-bit integer
=head2 Radio Access Network Application Part (ranap)
ranap.CN_DomainIndicator CN-DomainIndicator
Unsigned 8-bit integer
ranap.Extension_Field_Value Extension Field Value
Byte array
ranap.IuSigConId IuSigConId
Byte array
ranap.NAS_PDU NAS-PDU
Byte array
ranap.PLMN_ID PLMN-ID
Byte array
ranap.ProtocolExtensionContainer_present ProtocolExtensionContainer
Unsigned 8-bit integer
ranap.ProtocolExtensionFields.octets Number of octets
Unsigned 16-bit integer
ranap.RAB_ID RAB-ID
Unsigned 8-bit integer
ranap.RAB_SetupOrModifyItemSecond.PDP_Type PDP-Type
Unsigned 8-bit integer
ranap.RAB_SetupOrModifyItemSecond.dataVolumeReportingIndication dataVolumeReportingIndication
Unsigned 8-bit integer
ranap.RAB_SetupOrModifyItemSecond.dl_GTP_PDU_SequenceNumber dl_GTP_PDU_SequenceNumber
Unsigned 16-bit integer
ranap.RAB_SetupOrModifyItemSecond.ul_GTP_PDU_SequenceNumber ul_GTP_PDU_SequenceNumber
Unsigned 16-bit integer
ranap.RAC RAC
Byte array
ranap.SAC SAC
Byte array
ranap.allocationOrRetentionPriority_present allocationOrRetentionPriority
Unsigned 8-bit integer
ranap.bindingID bindingID
Byte array
ranap.cause_choice cause choice
Unsigned 8-bit integer
ranap.cause_value cause value
Unsigned 8-bit integer
ranap.dataVolumeReference dataVolumeReference
Unsigned 8-bit integer
ranap.dataVolumeReference_present dataVolumeReference
Unsigned 8-bit integer
ranap.dataVolumeReportingIndication_present dataVolumeReportingIndication
Unsigned 8-bit integer
ranap.dl-UnsuccessfullyTransmittedDataVolume dl-UnsuccessfullyTransmittedDataVolume
Unsigned 32-bit integer
ranap.dl_GTP_PDU_SequenceNumber_present dl_GTP_PDU_SequenceNumber
Unsigned 8-bit integer
ranap.dl_N_PDU_SequenceNumber_present dl_N_PDU_SequenceNumber
Unsigned 8-bit integer
ranap.dl_UnsuccessfullyTransmittedDataVolume_present dl-UnsuccessfullyTransmittedDataVolume
Unsigned 8-bit integer
ranap.dl_dataVolumes_present dl_dataVolumes
Unsigned 8-bit integer
ranap.gTP_TEI gTP_TEI
Byte array
ranap.guaranteedBitRate_present guaranteedBitRate
Unsigned 8-bit integer
ranap.iECriticality iECriticality
Unsigned 8-bit integer
ranap.iEsCriticalityDiagnostics_present iEsCriticalityDiagnostics
Unsigned 8-bit integer
ranap.ie.ProtocolExtensionFields.Id ProtocolExtensionField ID
Unsigned 16-bit integer
ranap.ie.ProtocolExtensionFields.criticality Criticality of ProtocolExtensionField
Unsigned 8-bit integer
ranap.ie.criticality Criticality of IE
Unsigned 8-bit integer
ranap.ie.iE-Extensions_present iE-Extensions
Unsigned 8-bit integer
ranap.ie.ie_id IE-ID
Unsigned 16-bit integer
ranap.ie.number_of_ProtocolExtensionFields Number of Protocol Extension Fields
Unsigned 16-bit integer
ranap.ie.number_of_octets Number of Octets in IE
Unsigned 16-bit integer
ranap.ie.protocol_extension_present Protocol Extension
Unsigned 8-bit integer
ranap.ie_pair.first_criticality First Criticality
Unsigned 8-bit integer
ranap.ie_pair.first_value.number_of_octets Number of Octets in first value
Unsigned 16-bit integer
ranap.ie_pair.second_criticality Second Criticality
Unsigned 8-bit integer
ranap.ie_pair.second_value.number_of_octets Number of Octets in second value
Unsigned 16-bit integer
ranap.iuTransportAssociation_present iuTransportAssociation
Unsigned 8-bit integer
ranap.msg_extension_present Message Extension
Unsigned 8-bit integer
ranap.nAS-SynchronisationIndicator nAS-SynchronisationIndicator
Unsigned 8-bit integer
ranap.nAS-SynchronisationIndicator_present nAS-SynchronisationIndicator
Unsigned 8-bit integer
ranap.nas_pdu_length length of NAS-PDU
Unsigned 16-bit integer
ranap.num_of_CriticalityDiagnostics_IEs Number of CriticalityDiagnostics-IEs
Unsigned 16-bit integer
ranap.number_of_ProtocolExtensionFields Number of ProtocolExtensionFields
Unsigned 16-bit integer
ranap.number_of_RABs Number of RABs
Unsigned 8-bit integer
ranap.number_of_ies Number of IEs in list
Unsigned 16-bit integer
ranap.pDP_TypeInformation_present pDP_TypeInformation
Unsigned 8-bit integer
ranap.pdu.criticality Criticality of PDU
Unsigned 8-bit integer
ranap.pdu.num_of_octets Number of Octets in PDU
Unsigned 16-bit integer
ranap.pdu.number_of_ies Number of IEs in PDU
Unsigned 16-bit integer
ranap.procedureCode_present procedureCode
Unsigned 8-bit integer
ranap.procedureCriticality procedureCriticality
Unsigned 8-bit integer
ranap.procedureCriticality_present procedureCriticality
Unsigned 8-bit integer
ranap.procedure_code Procedure Code
Unsigned 8-bit integer
ranap.rAB_Parameters_present rAB-Parameters
Unsigned 8-bit integer
ranap.rAB_SubflowCombinationBitRate_present subflowSDU_Size
Unsigned 8-bit integer
ranap.rab_Parameters.allocationOrRetentionPriority.pre_emptionCapability pre-emptionCapability
Unsigned 8-bit integer
ranap.rab_Parameters.allocationOrRetentionPriority.pre_emptionVulnerability pre-emptionVulnerability
Unsigned 8-bit integer
ranap.rab_Parameters.allocationOrRetentionPriority.priorityLevel priorityLevel
Unsigned 8-bit integer
ranap.rab_Parameters.allocationOrRetentionPriority.queuingAllowed queuingAllowed
Unsigned 8-bit integer
ranap.rab_Parameters.deliveryOrder deliveryOrder
Unsigned 8-bit integer
ranap.rab_Parameters.guaranteedBitrate guaranteedBitrate
Unsigned 32-bit integer
ranap.rab_Parameters.maxBitrate maxBitrate
Unsigned 32-bit integer
ranap.rab_Parameters.maxSDU_Size maxSDU_Size
Unsigned 16-bit integer
ranap.rab_Parameters.rAB_AsymmetryIndicator rAB_AsymmetryIndicator
Unsigned 8-bit integer
ranap.rab_Parameters.rAB_SubflowCombinationBitRate rAB_SubflowCombinationBitRate
Unsigned 32-bit integer
ranap.rab_Parameters.ranap_deliveryOfErroneousSDU deliveryOfErroneousSDU
Unsigned 8-bit integer
ranap.rab_Parameters.relocationRequirement relocationRequirement
Unsigned 8-bit integer
ranap.rab_Parameters.residualBitErrorRatio.exponent residualBitErrorRatio: exponent
Unsigned 8-bit integer
ranap.rab_Parameters.residualBitErrorRatio.mantissa residualBitErrorRatio: mantissa
Unsigned 8-bit integer
ranap.rab_Parameters.sDU_ErrorRatio.exponent sDU_ErrorRatio: exponent
Unsigned 8-bit integer
ranap.rab_Parameters.sDU_ErrorRatio.mantissa sDU_ErrorRatio: mantissa
Unsigned 8-bit integer
ranap.rab_Parameters.sourceStatisticsDescriptor sourceStatisticsDescriptor
Unsigned 8-bit integer
ranap.rab_Parameters.subflowSDU_Size subflowSDU_Size
Unsigned 8-bit integer
ranap.rab_Parameters.trafficClass Traffic Class
Unsigned 8-bit integer
ranap.rab_Parameters.trafficHandlingPriority trafficHandlingPriority
Unsigned 8-bit integer
ranap.rab_Parameters.transferDelay transferDelay
Unsigned 16-bit integer
ranap.ranap_pdu_index RANAP-PDU Index
Unsigned 8-bit integer
ranap.relocationRequirement_present relocationRequirement
Unsigned 8-bit integer
ranap.repetitionNumber repetitionNumber
Unsigned 16-bit integer
ranap.repetitionNumber_present repetitionNumber
Unsigned 8-bit integer
ranap.sDU_ErrorRatio_present sDU_ErrorRatio
Unsigned 8-bit integer
ranap.sDU_FormatInformationParameters_present sDU_FormatInformationParameters
Unsigned 8-bit integer
ranap.service_Handover service-Handover
Unsigned 8-bit integer
ranap.service_Handover_present service-Handover
Unsigned 8-bit integer
ranap.sourceStatisticsDescriptor_present sourceStatisticsDescriptor
Unsigned 8-bit integer
ranap.subflowSDU_Size_present subflowSDU_Size
Unsigned 8-bit integer
ranap.trafficHandlingPriority_present trafficHandlingPriority
Unsigned 8-bit integer
ranap.transferDelay_present transferDelay
Unsigned 8-bit integer
ranap.transportLayerAddress transportLayerAddress
Byte array
ranap.transportLayerAddress_length bit length of transportLayerAddress
Unsigned 8-bit integer
ranap.transportLayerAddress_present transportLayerAddress
Unsigned 8-bit integer
ranap.transportLayerInformation_present transportLayerInformation
Unsigned 8-bit integer
ranap.triggeringMessage triggeringMessage
Unsigned 8-bit integer
ranap.triggeringMessage_present triggeringMessage
Unsigned 8-bit integer
ranap.uP_ModeVersions uP_ModeVersions
Byte array
ranap.ul_GTP_PDU_SequenceNumber_present ul_GTP_PDU_SequenceNumber
Unsigned 8-bit integer
ranap.ul_N_PDU_SequenceNumber_present ul_N_PDU_SequenceNumber
Unsigned 8-bit integer
ranap.userPlaneInformation_present userPlaneInformation
Unsigned 8-bit integer
ranap.userPlaneMode userPlaneMode
Unsigned 8-bit integer
=head2 Radius Protocol (radius)
radius.code Code
Unsigned 8-bit integer
radius.id Identifier
Unsigned 8-bit integer
radius.length Length
Unsigned 16-bit integer
=head2 Raw packet data (raw)
=head2 Real Time Streaming Protocol (rtsp)
rtsp.method Method
String
rtsp.status Status
Unsigned 32-bit integer
rtsp.url URL
String
=head2 Real-Time Transport Protocol (rtp)
rtp.cc Contributing source identifiers count
Unsigned 8-bit integer
rtp.csrc.item CSRC item
Unsigned 32-bit integer
rtp.ext Extension
Boolean
rtp.ext.len Extension length
Unsigned 16-bit integer
rtp.ext.profile Defined by profile
Unsigned 16-bit integer
rtp.hdr_ext Header extension
Unsigned 32-bit integer
rtp.marker Marker
Boolean
rtp.p_type Payload type
Unsigned 8-bit integer
rtp.padding Padding
Boolean
rtp.padding.count Padding count
Unsigned 8-bit integer
rtp.padding.data Padding data
Byte array
rtp.payload Payload
Byte array
rtp.seq Sequence number
Unsigned 16-bit integer
rtp.ssrc Synchronization Source identifier
Unsigned 32-bit integer
rtp.timestamp Timestamp
Unsigned 32-bit integer
rtp.version Version
Unsigned 8-bit integer
=head2 Real-time Transport Control Protocol (rtcp)
rtcp.app.data Application specific data
Byte array
rtcp.app.name Name (ASCII)
String
rtcp.app.subtype Subtype
Unsigned 8-bit integer
rtcp.length Length
Unsigned 16-bit integer
rtcp.nack.blp Bitmask of following lost packets
Unsigned 16-bit integer
rtcp.nack.fsn First sequence number
Unsigned 16-bit integer
rtcp.padding Padding
Boolean
rtcp.padding.count Padding count
Unsigned 8-bit integer
rtcp.padding.data Padding data
Byte array
rtcp.pt Packet type
Unsigned 8-bit integer
rtcp.rc Reception report count
Unsigned 8-bit integer
rtcp.sc Source count
Unsigned 8-bit integer
rtcp.sdes.length Length
Unsigned 32-bit integer
rtcp.sdes.prefix.length Prefix length
Unsigned 8-bit integer
rtcp.sdes.prefix.string Prefix string
String
rtcp.sdes.ssrc_csrc SSRC / CSRC identifier
Unsigned 32-bit integer
rtcp.sdes.text Text
String
rtcp.sdes.type Type
Unsigned 8-bit integer
rtcp.sender.octetcount Sender's octet count
Unsigned 32-bit integer
rtcp.sender.packetcount Sender's packet count
Unsigned 32-bit integer
rtcp.senderssrc Sender SSRC
Unsigned 32-bit integer
rtcp.ssrc.cum_nr Cumulative number of packets lost
Unsigned 32-bit integer
rtcp.ssrc.dlsr Delay since last SR timestamp
Unsigned 32-bit integer
rtcp.ssrc.ext_high Extended highest sequence number received
Unsigned 32-bit integer
rtcp.ssrc.fraction Fraction lost
Unsigned 8-bit integer
rtcp.ssrc.high_cycles Sequence number cycles count
Unsigned 16-bit integer
rtcp.ssrc.high_seq Highest sequence number received
Unsigned 16-bit integer
rtcp.ssrc.identifier Identifier
Unsigned 32-bit integer
rtcp.ssrc.jitter Interarrival jitter
Unsigned 32-bit integer
rtcp.ssrc.lsr Last SR timestamp
Unsigned 32-bit integer
rtcp.timestamp.ntp NTP timestamp
String
rtcp.timestamp.rtp RTP timestamp
Unsigned 32-bit integer
rtcp.version Version
Unsigned 8-bit integer
=head2 Remote Procedure Call (rpc)
rpc.array.len num
Unsigned 32-bit integer
rpc.auth.flavor Flavor
Unsigned 32-bit integer
rpc.auth.gid GID
Unsigned 32-bit integer
rpc.auth.length Length
Unsigned 32-bit integer
rpc.auth.machinename Machine Name
String
rpc.auth.stamp Stamp
Unsigned 32-bit integer
rpc.auth.uid UID
Unsigned 32-bit integer
rpc.authdes.convkey Conversation Key (encrypted)
Unsigned 32-bit integer
rpc.authdes.namekind Namekind
Unsigned 32-bit integer
rpc.authdes.netname Netname
String
rpc.authdes.nickname Nickname
Unsigned 32-bit integer
rpc.authdes.timestamp Timestamp (encrypted)
Unsigned 32-bit integer
rpc.authdes.timeverf Timestamp verifier (encrypted)
Unsigned 32-bit integer
rpc.authdes.window Window (encrypted)
Unsigned 32-bit integer
rpc.authdes.windowverf Window verifier (encrypted)
Unsigned 32-bit integer
rpc.authgss.checksum GSS Checksum
Byte array
rpc.authgss.context GSS Context
Byte array
rpc.authgss.data GSS Data
Byte array
rpc.authgss.data.length Length
Unsigned 32-bit integer
rpc.authgss.major GSS Major Status
Unsigned 32-bit integer
rpc.authgss.minor GSS Minor Status
Unsigned 32-bit integer
rpc.authgss.procedure GSS Procedure
Unsigned 32-bit integer
rpc.authgss.seqnum GSS Sequence Number
Unsigned 32-bit integer
rpc.authgss.service GSS Service
Unsigned 32-bit integer
rpc.authgss.token GSS Token
Byte array
rpc.authgss.version GSS Version
Unsigned 32-bit integer
rpc.authgss.window GSS Sequence Window
Unsigned 32-bit integer
rpc.call.dup Duplicate Call
Unsigned 32-bit integer
rpc.dup Duplicate Transaction
Unsigned 32-bit integer
rpc.fraglen Fragment Length
Unsigned 32-bit integer
rpc.lastfrag Last Fragment
Boolean
rpc.msgtyp Message Type
Unsigned 32-bit integer
rpc.procedure Procedure
Unsigned 32-bit integer
rpc.program Program
Unsigned 32-bit integer
rpc.programversion Program Version
Unsigned 32-bit integer
rpc.programversion.max Program Version (Maximum)
Unsigned 32-bit integer
rpc.programversion.min Program Version (Minimum)
Unsigned 32-bit integer
rpc.reply.dup Duplicate Reply
Unsigned 32-bit integer
rpc.replystat Reply State
Unsigned 32-bit integer
rpc.state_accept Accept State
Unsigned 32-bit integer
rpc.state_auth Auth State
Unsigned 32-bit integer
rpc.state_reject Reject State
Unsigned 32-bit integer
rpc.time Time from request
Time duration
rpc.value_follows Value Follows
Boolean
rpc.version RPC Version
Unsigned 32-bit integer
rpc.version.max RPC Version (Maximum)
Unsigned 32-bit integer
rpc.version.min RPC Version (Minimum)
Unsigned 32-bit integer
rpc.xid XID
Unsigned 32-bit integer
=head2 Remote Quota (rquota)
rquota.active active
Boolean
rquota.bhardlimit bhardlimit
Unsigned 32-bit integer
rquota.bsize bsize
Unsigned 32-bit integer
rquota.bsoftlimit bsoftlimit
Unsigned 32-bit integer
rquota.btimeleft btimeleft
Unsigned 32-bit integer
rquota.curblocks curblocks
Unsigned 32-bit integer
rquota.curfiles curfiles
Unsigned 32-bit integer
rquota.fhardlimit fhardlimit
Unsigned 32-bit integer
rquota.fsoftlimit fsoftlimit
Unsigned 32-bit integer
rquota.ftimeleft ftimeleft
Unsigned 32-bit integer
rquota.pathp pathp
String
rquota.rquota rquota
No value
rquota.status status
Unsigned 32-bit integer
rquota.uid uid
Unsigned 32-bit integer
=head2 Remote Shell (rsh)
rsh.request Request
Boolean
rsh.response Response
Boolean
=head2 Remote Wall protocol (rwall)
rwall.message Message
String
=head2 Resource ReserVation Protocol (RSVP) (rsvp)
rsvp.ack MESSAGE-ID ACK
No value
rsvp.admin-status ADMIN STATUS
No value
rsvp.adspec ADSPEC
No value
rsvp.confirm CONFIRM
No value
rsvp.dclass DCLASS
No value
rsvp.error ERROR
No value
rsvp.explicit_route EXPLICIT ROUTE
No value
rsvp.filter FILTERSPEC
No value
rsvp.flowspec FLOWSPEC
No value
rsvp.hello HELLO Message
Boolean
rsvp.hello_obj HELLO Request/Ack
No value
rsvp.hop HOP
No value
rsvp.integrity INTEGRITY
No value
rsvp.label LABEL
No value
rsvp.label_request LABEL REQUEST
No value
rsvp.label_set RESTRICTED LABEL SET
No value
rsvp.lsp_tunnel_if_id LSP INTERFACE-ID
No value
rsvp.msg Message Type
Unsigned 8-bit integer
rsvp.msgid MESSAGE-ID
No value
rsvp.msgid_list MESSAGE-ID LIST
No value
rsvp.obj_unknown Unknown object
No value
rsvp.object Object class
Unsigned 8-bit integer
rsvp.path Path Message
Boolean
rsvp.perr Path Error Message
Boolean
rsvp.policy POLICY
No value
rsvp.ptear Path Tear Message
Boolean
rsvp.record_route RECORD ROUTE
No value
rsvp.rerr Resv Error Message
Boolean
rsvp.resv Resv Message
Boolean
rsvp.resvconf Resv Confirm Message
Boolean
rsvp.rtear Resv Tear Message
Boolean
rsvp.rtearconf Resv Tear Confirm Message
Boolean
rsvp.scope SCOPE
No value
rsvp.sender SENDER TEMPLATE
No value
rsvp.sender.ip Sender IPv4 address
IPv4 address
rsvp.sender.lsp_id Sender LSP ID
Unsigned 16-bit integer
rsvp.sender.port Sender port number
Unsigned 16-bit integer
rsvp.session SESSION
No value
rsvp.session.ext_tunnel_id Extended tunnel ID
Unsigned 32-bit integer
rsvp.session.ip Destination address
IPv4 address
rsvp.session.port Port number
Unsigned 16-bit integer
rsvp.session.proto Protocol
Unsigned 8-bit integer
rsvp.session.tunnel_id Tunnel ID
Unsigned 16-bit integer
rsvp.session_attribute SESSION ATTRIBUTE
No value
rsvp.style STYLE
No value
rsvp.suggested_label SUGGESTED LABEL
No value
rsvp.time TIME VALUES
No value
rsvp.tspec SENDER TSPEC
No value
rsvp.upstream_label UPSTREAM LABEL
No value
=head2 Rlogin Protocol (rlogin)
rlogin.user_info User Info
No value
rlogin.window_size Window Info
No value
rlogin.window_size.cols Columns
Unsigned 16-bit integer
rlogin.window_size.rows Rows
Unsigned 16-bit integer
rlogin.window_size.x_pixels X Pixels
Unsigned 16-bit integer
rlogin.window_size.y_pixels Y Pixels
Unsigned 16-bit integer
=head2 Routing Information Protocol (rip)
rip.auth.passwd Password
String
rip.auth.type Authentication type
Unsigned 16-bit integer
rip.command Command
Unsigned 8-bit integer
rip.family Address Family
Unsigned 16-bit integer
rip.ip IP Address
IPv4 address
rip.metric Metric
Unsigned 16-bit integer
rip.netmask Netmask
IPv4 address
rip.next_hop Next Hop
IPv4 address
rip.route_tag Route Tag
Unsigned 16-bit integer
rip.routing_domain Routing Domain
Unsigned 16-bit integer
rip.version Version
Unsigned 8-bit integer
=head2 Routing Table Maintenance Protocol (rtmp)
nbp.nodeid Node
Unsigned 8-bit integer
nbp.nodeid.length Node Length
Unsigned 8-bit integer
rtmp.function Function
Unsigned 8-bit integer
rtmp.net Net
Unsigned 16-bit integer
rtmp.tuple.dist Distance
Unsigned 16-bit integer
rtmp.tuple.net Net
Unsigned 16-bit integer
rtmp.tuple.range_end Range End
Unsigned 16-bit integer
rtmp.tuple.range_start Range Start
Unsigned 16-bit integer
=head2 SCSI (scsi)
scsi.cdb.alloclen Allocation Length
Unsigned 8-bit integer
scsi.cdb.alloclen16 Allocation Length
Unsigned 16-bit integer
scsi.cdb.alloclen32 Allocation Length
Unsigned 32-bit integer
scsi.cdb.control Control
Unsigned 8-bit integer
scsi.cdb.defectfmt Defect List Format
Unsigned 8-bit integer
scsi.cdb.mode.flags Mode Sense/Select Flags
Unsigned 8-bit integer
scsi.cdb.paramlen Parameter Length
Unsigned 8-bit integer
scsi.cdb.paramlen16 Parameter Length
Unsigned 16-bit integer
scsi.formatunit.flags Flags
Unsigned 8-bit integer
scsi.formatunit.interleave Interleave
Unsigned 16-bit integer
scsi.formatunit.vendor Vendor Unique
Unsigned 8-bit integer
scsi.inquiry.cmdt.pagecode CMDT Page Code
Unsigned 8-bit integer
scsi.inquiry.devtype Device Type
Unsigned 8-bit integer
scsi.inquiry.evpd.pagecode EVPD Page Code
Unsigned 8-bit integer
scsi.inquiry.flags Flags
Unsigned 8-bit integer
scsi.inquiry.normaca NormACA
Unsigned 8-bit integer
scsi.inquiry.version Version
Unsigned 8-bit integer
scsi.log.pc Page Control
Unsigned 8-bit integer
scsi.logsel.flags Flags
Unsigned 8-bit integer
scsi.logsns.flags Flags
Unsigned 16-bit integer
scsi.logsns.pagecode Page Code
Unsigned 8-bit integer
scsi.mode.flags Flags
Unsigned 8-bit integer
scsi.mode.mrie MRIE
Unsigned 8-bit integer
scsi.mode.pagecode Page Code
Unsigned 8-bit integer
scsi.mode.pc Page Control
Unsigned 8-bit integer
scsi.mode.qerr Queue Error Management
Boolean
scsi.mode.qmod Queue Algorithm Modifier
Unsigned 8-bit integer
scsi.mode.tac Task Aborted Status
Boolean
scsi.mode.tst Task Set Type
Unsigned 8-bit integer
scsi.persresv.scope Reservation Scope
Unsigned 8-bit integer
scsi.persresv.type Reservation Type
Unsigned 8-bit integer
scsi.persresvin.svcaction Service Action
Unsigned 8-bit integer
scsi.persresvout.svcaction Service Action
Unsigned 8-bit integer
scsi.proto Protocol
Unsigned 8-bit integer
scsi.rdwr10.lba Logical Block Address (LBA)
Unsigned 32-bit integer
scsi.rdwr10.xferlen Transfer Length
Unsigned 16-bit integer
scsi.rdwr12.xferlen Transfer Length
Unsigned 32-bit integer
scsi.rdwr16.lba Logical Block Address (LBA)
Byte array
scsi.rdwr6.lba Logical Block Address (LBA)
Unsigned 24-bit integer
scsi.rdwr6.xferlen Transfer Length
Unsigned 8-bit integer
scsi.read.flags Flags
Unsigned 8-bit integer
scsi.readcapacity.flags Flags
Unsigned 8-bit integer
scsi.readcapacity.lba Logical Block Address
Unsigned 32-bit integer
scsi.readcapacity.pmi PMI
Unsigned 8-bit integer
scsi.readdefdata.flags Flags
Unsigned 8-bit integer
scsi.reassignblks.flags Flags
Unsigned 8-bit integer
scsi.release.flags Release Flags
Unsigned 8-bit integer
scsi.release.thirdpartyid Third-Party ID
Byte array
scsi.reportluns.lun LUN
Unsigned 8-bit integer
scsi.reportluns.mlun Multi-level LUN
Byte array
scsi.sbc.opcode SBC-2 Opcode
Unsigned 8-bit integer
scsi.sns.addlen Additional Sense Length
Unsigned 8-bit integer
scsi.sns.asc Additional Sense Code
Unsigned 8-bit integer
scsi.sns.ascascq Additional Sense Code+Qualifier
Unsigned 16-bit integer
scsi.sns.ascq Additional Sense Code Qualifier
Unsigned 8-bit integer
scsi.sns.errtype SNS Error Type
Unsigned 8-bit integer
scsi.sns.fru Field Replaceable Unit Code
Unsigned 8-bit integer
scsi.sns.info Sense Info
Unsigned 32-bit integer
scsi.sns.key Sense Key
Unsigned 8-bit integer
scsi.sns.sksv SKSV
Boolean
scsi.spc.opcode SPC-2 Opcode
Unsigned 8-bit integer
scsi.spc2.resv.key Reservation Key
Byte array
scsi.spc2.resv.scopeaddr Scope Address
Byte array
scsi.ssc.opcode SSC-2 Opcode
Unsigned 8-bit integer
ssci.mode.rac Report a Check
Boolean
=head2 SMB (Server Message Block Protocol) (smb)
smb.access.append Append
Boolean
smb.access.caching Caching
Boolean
smb.access.delete Delete
Boolean
smb.access.delete_child Delete Child
Boolean
smb.access.execute Execute
Boolean
smb.access.generic_all Generic All
Boolean
smb.access.generic_execute Generic Execute
Boolean
smb.access.generic_read Generic Read
Boolean
smb.access.generic_write Generic Write
Boolean
smb.access.locality Locality
Unsigned 16-bit integer
smb.access.maximum_allowed Maximum Allowed
Boolean
smb.access.mode Access Mode
Unsigned 16-bit integer
smb.access.read Read
Boolean
smb.access.read_attributes Read Attributes
Boolean
smb.access.read_control Read Control
Boolean
smb.access.read_ea Read EA
Boolean
smb.access.sharing Sharing Mode
Unsigned 16-bit integer
smb.access.smb.date Last Access Date
Unsigned 16-bit integer
smb.access.smb.time Last Access Time
Unsigned 16-bit integer
smb.access.synchronize Synchronize
Boolean
smb.access.system_security System Security
Boolean
smb.access.time Last Access
Date/Time stamp
smb.access.write Write
Boolean
smb.access.write_attributes Write Attributes
Boolean
smb.access.write_dac Write DAC
Boolean
smb.access.write_ea Write EA
Boolean
smb.access.write_owner Write Owner
Boolean
smb.access.writethrough Writethrough
Boolean
smb.account Account
String
smb.ace.flags.container_inherit Container Inherit
Boolean
smb.ace.flags.failed_access Audit Failed Accesses
Boolean
smb.ace.flags.inherit_only Inherit Only
Boolean
smb.ace.flags.inherited_ace Inherited ACE
Boolean
smb.ace.flags.non_propagate_inherit Non-Propagate Inherit
Boolean
smb.ace.flags.object_inherit Object Inherit
Boolean
smb.ace.flags.successful_access Audit Successful Accesses
Boolean
smb.ace.size Size
Unsigned 16-bit integer
smb.ace.type Type
Unsigned 8-bit integer
smb.acl.num_aces Num ACEs
Unsigned 32-bit integer
smb.acl.revision Revision
Unsigned 16-bit integer
smb.acl.size Size
Unsigned 16-bit integer
smb.alignment Alignment
Unsigned 32-bit integer
smb.alloc_size Allocation Size
Unsigned 32-bit integer
smb.andxoffset AndXOffset
Unsigned 16-bit integer
smb.ansi_password ANSI Password
Byte array
smb.ansi_pwlen ANSI Password Length
Unsigned 16-bit integer
smb.avail.units Available Units
Unsigned 32-bit integer
smb.bcc Byte Count (BCC)
Unsigned 16-bit integer
smb.blocksize Block Size
Unsigned 16-bit integer
smb.bpu Blocks Per Unit
Unsigned 16-bit integer
smb.buffer_format Buffer Format
Unsigned 8-bit integer
smb.cancel_to Cancel to
Unsigned 32-bit integer
smb.change.time Change
Date/Time stamp
smb.cmd SMB Command
Unsigned 8-bit integer
smb.compressed.chunk_shift Chunk Shift
Unsigned 8-bit integer
smb.compressed.cluster_shift Cluster Shift
Unsigned 8-bit integer
smb.compressed.file_size Compressed Size
smb.compressed.format Compression Format
Unsigned 16-bit integer
smb.compressed.unit_shift Unit Shift
Unsigned 8-bit integer
smb.connect.flags.dtid Disconnect TID
Boolean
smb.connect.support.dfs In Dfs
Boolean
smb.connect.support.search Search Bits
Boolean
smb.continuation_to Continuation to
Unsigned 32-bit integer
smb.count Count
Unsigned 32-bit integer
smb.create.action Create action
Unsigned 32-bit integer
smb.create.disposition Disposition
Unsigned 32-bit integer
smb.create.smb.date Create Date
Unsigned 16-bit integer
smb.create.smb.time Create Time
Unsigned 16-bit integer
smb.create.time Created
Date/Time stamp
smb.data_disp Data Displacement
Unsigned 16-bit integer
smb.data_len Data Length
Unsigned 16-bit integer
smb.data_offset Data Offset
Unsigned 16-bit integer
smb.data_size Data Size
Unsigned 32-bit integer
smb.dc Data Count
Unsigned 16-bit integer
smb.dcm Data Compaction Mode
Unsigned 16-bit integer
smb.delete_pending Delete Pending
Unsigned 16-bit integer
smb.device.floppy Floppy
Boolean
smb.device.mounted Mounted
Boolean
smb.device.read_only Read Only
Boolean
smb.device.remote Remote
Boolean
smb.device.removable Removable
Boolean
smb.device.type Device Type
Unsigned 32-bit integer
smb.device.virtual Virtual
Boolean
smb.device.write_once Write Once
Boolean
smb.dfs.flags.fielding Fielding
Boolean
smb.dfs.flags.server_hold_storage Hold Storage
Boolean
smb.dfs.num_referrals Num Referrals
Unsigned 16-bit integer
smb.dfs.path_consumed Path Consumed
Unsigned 16-bit integer
smb.dfs.referral.alt_path Alt Path
String
smb.dfs.referral.alt_path_offset Alt Path Offset
Unsigned 16-bit integer
smb.dfs.referral.flags.strip Strip
Boolean
smb.dfs.referral.node Node
String
smb.dfs.referral.node_offset Node Offset
Unsigned 16-bit integer
smb.dfs.referral.path Path
String
smb.dfs.referral.path_offset Path Offset
Unsigned 16-bit integer
smb.dfs.referral.proximity Proximity
Unsigned 16-bit integer
smb.dfs.referral.server.type Server Type
Unsigned 16-bit integer
smb.dfs.referral.size Size
Unsigned 16-bit integer
smb.dfs.referral.ttl TTL
Unsigned 16-bit integer
smb.dfs.referral.version Version
Unsigned 16-bit integer
smb.dialect.index Selected Index
Unsigned 16-bit integer
smb.dialect.name Name
String
smb.dir_name Directory
String
smb.ea.error_offset EA Error offset
Unsigned 32-bit integer
smb.ea.length EA Length
Unsigned 32-bit integer
smb.ea_size EA Size
Unsigned 32-bit integer
smb.echo.count Echo Count
Unsigned 16-bit integer
smb.echo.data Echo Data
Byte array
smb.echo.seq_num Echo Seq Num
Unsigned 16-bit integer
smb.encryption_key Encryption Key
Byte array
smb.encryption_key_length Key Length
Unsigned 16-bit integer
smb.end_of_file End Of File
smb.end_of_search End Of Search
Unsigned 16-bit integer
smb.error_class Error Class
Unsigned 8-bit integer
smb.error_code Error Code
Unsigned 16-bit integer
smb.ext_attr Extended Attributes
Byte array
smb.ff2_loi Level of Interest
Unsigned 16-bit integer
smb.fid FID
Unsigned 16-bit integer
smb.file File Name
String
smb.file_attribute.archive Archive
Boolean
smb.file_attribute.backup_semantics Backup
Boolean
smb.file_attribute.compressed Compressed
Boolean
smb.file_attribute.delete_on_close Delete on Close
Boolean
smb.file_attribute.device Device
Boolean
smb.file_attribute.directory Directory
Boolean
smb.file_attribute.encrypted Encrypted
Boolean
smb.file_attribute.hidden Hidden
Boolean
smb.file_attribute.no_buffering No Buffering
Boolean
smb.file_attribute.normal Normal
Boolean
smb.file_attribute.not_content_indexed Content Indexed
Boolean
smb.file_attribute.offline Offline
Boolean
smb.file_attribute.posix_semantics Posix
Boolean
smb.file_attribute.random_access Random Access
Boolean
smb.file_attribute.read_only Read Only
Boolean
smb.file_attribute.reparse Reparse Point
Boolean
smb.file_attribute.sequential_scan Sequential Scan
Boolean
smb.file_attribute.sparse Sparse
Boolean
smb.file_attribute.system System
Boolean
smb.file_attribute.temporary Temporary
Boolean
smb.file_attribute.volume Volume ID
Boolean
smb.file_attribute.write_through Write Through
Boolean
smb.file_data File Data
Byte array
smb.file_index File Index
Unsigned 32-bit integer
smb.file_name_len File Name Len
Unsigned 32-bit integer
smb.file_size File Size
Unsigned 32-bit integer
smb.file_type File Type
Unsigned 16-bit integer
smb.find_first2.flags.backup Backup Intent
Boolean
smb.find_first2.flags.close Close
Boolean
smb.find_first2.flags.continue Continue
Boolean
smb.find_first2.flags.eos Close on EOS
Boolean
smb.find_first2.flags.resume Resume
Boolean
smb.flags.canon Canonicalized Pathnames
Boolean
smb.flags.caseless Case Sensitivity
Boolean
smb.flags.lock Lock and Read
Boolean
smb.flags.notify Notify
Boolean
smb.flags.oplock Oplocks
Boolean
smb.flags.receive_buffer Receive Buffer Posted
Boolean
smb.flags.response Request/Response
Boolean
smb.flags2.dfs Dfs
Boolean
smb.flags2.ea Extended Attributes
Boolean
smb.flags2.esn Extended Security Negotiation
Boolean
smb.flags2.long_names_allowed Long Names Allowed
Boolean
smb.flags2.long_names_used Long Names Used
Boolean
smb.flags2.nt_error Error Code Type
Boolean
smb.flags2.roe Execute-only Reads
Boolean
smb.flags2.sec_sig Security Signatures
Boolean
smb.flags2.string Unicode Strings
Boolean
smb.free_alloc_units Free Units
smb.free_units Free Units
Unsigned 16-bit integer
smb.fs_attr.cpn Case Preserving
Boolean
smb.fs_attr.css Case Sensitive Search
Boolean
smb.fs_attr.dim Mounted
Boolean
smb.fs_attr.fc Compression
Boolean
smb.fs_attr.pacls Persistent ACLs
Boolean
smb.fs_attr.vic Compressed
Boolean
smb.fs_attr.vq Volume Quotas
Boolean
smb.fs_bytes_per_sector Bytes per Sector
Unsigned 32-bit integer
smb.fs_id FS Id
Unsigned 32-bit integer
smb.fs_max_name_len Max name length
Unsigned 32-bit integer
smb.fs_name FS Name
String
smb.fs_name.len Label Length
Unsigned 32-bit integer
smb.fs_sector_per_unit Sectors/Unit
Unsigned 32-bit integer
smb.fs_units Total Units
Unsigned 32-bit integer
smb.impersonation.level Impersonation
Unsigned 32-bit integer
smb.index_number Index Number
smb.ipc_state.endpoint Endpoint
Unsigned 16-bit integer
smb.ipc_state.icount Icount
Unsigned 16-bit integer
smb.ipc_state.nonblocking Nonblocking
Boolean
smb.ipc_state.pipe_type Pipe Type
Unsigned 16-bit integer
smb.ipc_state.read_mode Read Mode
Unsigned 16-bit integer
smb.is_directory Is Directory
Unsigned 8-bit integer
smb.last_name_offset Last Name Offset
Unsigned 16-bit integer
smb.last_write.smb.date Last Write Date
Unsigned 16-bit integer
smb.last_write.smb.time Last Write Time
Unsigned 16-bit integer
smb.last_write.time Last Write
Date/Time stamp
smb.link_count Link Count
Unsigned 32-bit integer
smb.list_len ListLength
Unsigned 32-bit integer
smb.lock.length Length
smb.lock.offset Offset
smb.lock.type.cancel Cancel
Boolean
smb.lock.type.change Change
Boolean
smb.lock.type.large Large Files
Boolean
smb.lock.type.oplock_release Oplock Break
Boolean
smb.lock.type.shared Shared
Boolean
smb.locking.num_locks Number of Locks
Unsigned 16-bit integer
smb.locking.num_unlocks Number of Unlocks
Unsigned 16-bit integer
smb.locking.oplock.level Oplock Level
Unsigned 8-bit integer
smb.loi Level of Interest
Unsigned 16-bit integer
smb.max_buf Max Buffer
Unsigned 16-bit integer
smb.max_bufsize Max Buffer Size
Unsigned 32-bit integer
smb.max_mpx_count Max Mpx Count
Unsigned 16-bit integer
smb.max_raw Max Raw Buffer
Unsigned 32-bit integer
smb.max_referral_level Max Referral Level
Unsigned 16-bit integer
smb.max_vcs Max VCs
Unsigned 16-bit integer
smb.maxcount Max Count
Unsigned 16-bit integer
smb.mdc Max Data Count
Unsigned 32-bit integer
smb.mid Multiplex ID
Unsigned 16-bit integer
smb.mincount Min Count
Unsigned 16-bit integer
smb.move.files_moved Files Moved
Unsigned 16-bit integer
smb.move.flags.dir Must be directory
Boolean
smb.move.flags.file Must be file
Boolean
smb.move.flags.verify Verify writes
Boolean
smb.mpc Max Parameter Count
Unsigned 32-bit integer
smb.msc Max Setup Count
Unsigned 8-bit integer
smb.native_fs Native File System
String
smb.native_lanman Native LAN Manager
String
smb.native_os Native OS
String
smb.next_entry_offset Next Entry Offset
Unsigned 32-bit integer
smb.nt.create.batch_oplock Batch Oplock
Boolean
smb.nt.create.dir Create Directory
Boolean
smb.nt.create.oplock Exclusive Oplock
Boolean
smb.nt.create_options.delete_on_close Delete On Close
Boolean
smb.nt.create_options.directory Directory
Boolean
smb.nt.create_options.eight_dot_three_only 8.3 Only
Boolean
smb.nt.create_options.no_ea_knowledge No EA Knowledge
Boolean
smb.nt.create_options.non_directory Non-Directory
Boolean
smb.nt.create_options.random_access Random Access
Boolean
smb.nt.create_options.sequential_only Sequential Only
Boolean
smb.nt.create_options.sync_io_alert Sync I/O Alert
Boolean
smb.nt.create_options.sync_io_nonalert Sync I/O Nonalert
Boolean
smb.nt.create_options.write_through Write Through
Boolean
smb.nt.function Function
Unsigned 16-bit integer
smb.nt.ioctl.data IOCTL Data
Byte array
smb.nt.ioctl.flags.root_handle Root Handle
Boolean
smb.nt.ioctl.function Function
Unsigned 32-bit integer
smb.nt.ioctl.isfsctl IsFSctl
Unsigned 8-bit integer
smb.nt.notify.action Action
Unsigned 32-bit integer
smb.nt.notify.attributes Attribute Change
Boolean
smb.nt.notify.creation Created Change
Boolean
smb.nt.notify.dir_name Directory Name Change
Boolean
smb.nt.notify.ea EA Change
Boolean
smb.nt.notify.file_name File Name Change
Boolean
smb.nt.notify.last_access Last Access Change
Boolean
smb.nt.notify.last_write Last Write Change
Boolean
smb.nt.notify.security Security Change
Boolean
smb.nt.notify.size Size Change
Boolean
smb.nt.notify.stream_name Stream Name Change
Boolean
smb.nt.notify.stream_size Stream Size Change
Boolean
smb.nt.notify.stream_write Stream Write
Boolean
smb.nt.notify.watch_tree Watch Tree
Unsigned 8-bit integer
smb.nt_qsd.dacl DACL
Boolean
smb.nt_qsd.group Group
Boolean
smb.nt_qsd.owner Owner
Boolean
smb.nt_qsd.sacl SACL
Boolean
smb.nt_status NT Status
Unsigned 32-bit integer
smb.offset Offset
Unsigned 32-bit integer
smb.offset_high High Offset
Unsigned 32-bit integer
smb.open.action.lock Exclusive Open
Boolean
smb.open.action.open Open Action
Unsigned 16-bit integer
smb.open.flags.add_info Additional Info
Boolean
smb.open.flags.batch_oplock Batch Oplock
Boolean
smb.open.flags.ealen Total EA Len
Boolean
smb.open.flags.ex_oplock Exclusive Oplock
Boolean
smb.open.function.create Create
Boolean
smb.open.function.open Open
Unsigned 16-bit integer
smb.oplock.level Oplock level
Unsigned 8-bit integer
smb.padding Padding
Byte array
smb.password Password
Byte array
smb.path Path
String
smb.pc Parameter Count
Unsigned 16-bit integer
smb.pd Parameter Displacement
Unsigned 16-bit integer
smb.pid Process ID
Unsigned 16-bit integer
smb.po Parameter Offset
Unsigned 16-bit integer
smb.primary_domain Primary Domain
String
smb.print.identifier Identifier
String
smb.print.mode Mode
Unsigned 16-bit integer
smb.print.queued.date Queued
Date/Time stamp
smb.print.queued.smb.date Queued Date
Unsigned 16-bit integer
smb.print.queued.smb.time Queued Time
Unsigned 16-bit integer
smb.print.restart_index Restart Index
Unsigned 16-bit integer
smb.print.setup.len Setup Len
Unsigned 16-bit integer
smb.print.spool.file_number Spool File Number
Unsigned 16-bit integer
smb.print.spool.file_size Spool File Size
Unsigned 32-bit integer
smb.print.spool.name Name
Byte array
smb.print.start_index Start Index
Unsigned 16-bit integer
smb.print.status Status
Unsigned 8-bit integer
smb.pwlen Password Length
Unsigned 16-bit integer
smb.qfi_loi Level of Interest
Unsigned 16-bit integer
smb.quota.flags.deny_disk Deny Disk
Boolean
smb.quota.flags.log_limit Log Limit
Boolean
smb.quota.flags.log_warning Log Warning
Boolean
smb.remaining Remaining
Unsigned 32-bit integer
smb.request.mask Request Mask
Unsigned 32-bit integer
smb.reserved Reserved
Byte array
smb.response.mask Response Mask
Unsigned 32-bit integer
smb.response_in Response in
Unsigned 32-bit integer
smb.response_to Response to
Unsigned 32-bit integer
smb.resume Resume Key
Unsigned 32-bit integer
smb.resume.client.cookie Client Cookie
Byte array
smb.resume.key_len Resume Key Length
Unsigned 16-bit integer
smb.resume.server.cookie Server Cookie
Byte array
smb.rfid Root FID
Unsigned 32-bit integer
smb.rm.read Read Raw
Boolean
smb.rm.write Write Raw
Boolean
smb.sc Setup Count
Unsigned 8-bit integer
smb.sd.length SD Length
Unsigned 32-bit integer
smb.search.attribute.archive Archive
Boolean
smb.search.attribute.directory Directory
Boolean
smb.search.attribute.hidden Hidden
Boolean
smb.search.attribute.read_only Read Only
Boolean
smb.search.attribute.system System
Boolean
smb.search.attribute.volume Volume ID
Boolean
smb.search_count Search Count
Unsigned 16-bit integer
smb.search_pattern Search Pattern
String
smb.sec_desc.revision Revision
Unsigned 16-bit integer
smb.sec_desc.type.dacl_auto_inherit_req DACL Auto Inherit Required
Boolean
smb.sec_desc.type.dacl_auto_inherited DACL Auto Inherited
Boolean
smb.sec_desc.type.dacl_defaulted DACL Defaulted
Boolean
smb.sec_desc.type.dacl_present DACL Present
Boolean
smb.sec_desc.type.dacl_protected DACL Protected
Boolean
smb.sec_desc.type.group_defaulted Group Defaulted
Boolean
smb.sec_desc.type.owner_defaulted Onwer Defaulted
Boolean
smb.sec_desc.type.sacl_auto_inherit_req SACL Auto Inherit Required
Boolean
smb.sec_desc.type.sacl_auto_inherited SACL Auto Inherited
Boolean
smb.sec_desc.type.sacl_defaulted SACL Defaulted
Boolean
smb.sec_desc.type.sacl_present SACL Present
Boolean
smb.sec_desc.type.sacl_protected SACL Protected
Boolean
smb.sec_desc.type.self_relative Self Relative
Boolean
smb.sec_desc_len NT Security Descriptor Length
Unsigned 32-bit integer
smb.security.flags.context_tracking Context Tracking
Boolean
smb.security.flags.effective_only Effective Only
Boolean
smb.security_blob Security Blob
Byte array
smb.security_blob_len Security Blob Length
Unsigned 16-bit integer
smb.seek_mode Seek Mode
Unsigned 16-bit integer
smb.server_cap.bulk_transfer Bulk Transfer
Boolean
smb.server_cap.compressed_data Compressed Data
Boolean
smb.server_cap.dfs Dfs
Boolean
smb.server_cap.extended_security Extended Security
Boolean
smb.server_cap.infolevel_passthru Infolevel Passthru
Boolean
smb.server_cap.large_files Large Files
Boolean
smb.server_cap.large_readx Large ReadX
Boolean
smb.server_cap.large_writex Large WriteX
Boolean
smb.server_cap.level_2_oplocks Level 2 Oplocks
Boolean
smb.server_cap.lock_and_read Lock and Read
Boolean
smb.server_cap.mpx_mode MPX Mode
Boolean
smb.server_cap.nt_find NT Find
Boolean
smb.server_cap.nt_smbs NT SMBs
Boolean
smb.server_cap.nt_status NT Status Codes
Boolean
smb.server_cap.raw_mode Raw Mode
Boolean
smb.server_cap.reserved Reserved
Boolean
smb.server_cap.rpc_remote_apis RPC Remote APIs
Boolean
smb.server_cap.unicode Unicode
Boolean
smb.server_cap.unix UNIX
Boolean
smb.server_date_time Server Date and Time
Date/Time stamp
smb.server_date_time.smb_date Server Date
Unsigned 16-bit integer
smb.server_date_time.smb_time Server Time
Unsigned 16-bit integer
smb.server_fid Server FID
Unsigned 32-bit integer
smb.server_guid Server GUID
Byte array
smb.server_timezone Time Zone
Signed 16-bit integer
smb.service Service
String
smb.session_key Session Key
Unsigned 32-bit integer
smb.setup.action.guest Guest
Boolean
smb.share.access.delete Delete
Boolean
smb.share.access.read Read
Boolean
smb.share.access.write Write
Boolean
smb.short_file Short File Name
String
smb.short_file_name_len Short File Name Len
Unsigned 32-bit integer
smb.sid SID
Unsigned 16-bit integer
smb.sid.num_auth Num Auth
Unsigned 8-bit integer
smb.sid.revision Revision
Unsigned 8-bit integer
smb.sm.mode Mode
Boolean
smb.sm.password Password
Boolean
smb.sm.sig_required Sig Req
Boolean
smb.sm.signatures Signatures
Boolean
smb.storage_type Storage Type
Unsigned 32-bit integer
smb.stream_name Stream Name
String
smb.stream_name_len Stream Name Length
Unsigned 32-bit integer
smb.stream_size Stream Size
smb.system.time System Time
Date/Time stamp
smb.tdc Total Data Count
Unsigned 32-bit integer
smb.tid Tree ID
Unsigned 16-bit integer
smb.timeout Timeout
Unsigned 32-bit integer
smb.total_data_len Total Data Length
Unsigned 16-bit integer
smb.tpc Total Parameter Count
Unsigned 32-bit integer
smb.trans2.cmd Subcommand
Unsigned 16-bit integer
smb.trans_name Transaction Name
String
smb.transaction.flags.dtid Disconnect TID
Boolean
smb.transaction.flags.owt One Way Transaction
Boolean
smb.uid User ID
Unsigned 16-bit integer
smb.unicode_password Unicode Password
Byte array
smb.unicode_pwlen Unicode Password Length
Unsigned 16-bit integer
smb.units Total Units
Unsigned 16-bit integer
smb.unknown Unknown Data
Byte array
smb.vc VC Number
Unsigned 16-bit integer
smb.volume.label Label
String
smb.volume.label.len Label Length
Unsigned 32-bit integer
smb.volume.serial Volume Serial Number
Unsigned 32-bit integer
smb.wct Word Count (WCT)
Unsigned 8-bit integer
smb.write.mode.connectionless Connectionless
Boolean
smb.write.mode.message_start Message Start
Boolean
smb.write.mode.raw Write Raw
Boolean
smb.write.mode.return_remaining Return Remaining
Boolean
smb.write.mode.write_through Write Through
Boolean
=head2 SMB MailSlot Protocol (mailslot)
mailslot.class Class
Unsigned 16-bit integer
mailslot.name Mailslot Name
String
mailslot.opcode Opcode
Unsigned 16-bit integer
mailslot.priority Priority
Unsigned 16-bit integer
mailslot.size Size
Unsigned 16-bit integer
=head2 SMB Pipe Protocol (pipe)
pipe.function Function
Unsigned 16-bit integer
pipe.getinfo.current_instances Current Instances
Unsigned 8-bit integer
pipe.getinfo.info_level Information Level
Unsigned 16-bit integer
pipe.getinfo.input_buffer_size Input Buffer Size
Unsigned 16-bit integer
pipe.getinfo.maximum_instances Maximum Instances
Unsigned 8-bit integer
pipe.getinfo.output_buffer_size Output Buffer Size
Unsigned 16-bit integer
pipe.getinfo.pipe_name Pipe Name
String
pipe.getinfo.pipe_name_length Pipe Name Length
Unsigned 8-bit integer
pipe.peek.available_bytes Available Bytes
Unsigned 16-bit integer
pipe.peek.remaining_bytes Bytes Remaining
Unsigned 16-bit integer
pipe.peek.status Pipe Status
Unsigned 16-bit integer
pipe.priority Priority
Unsigned 16-bit integer
pipe.write_raw.bytes_written Bytes Written
Unsigned 16-bit integer
=head2 SNA-over-Ethernet (snaeth)
snaeth_len Length
Unsigned 16-bit integer
=head2 SNMP Multiplex Protocol (smux)
=head2 SPRAY (spray)
spray.clock clock
No value
spray.counter counter
Unsigned 32-bit integer
spray.sec sec
Unsigned 32-bit integer
spray.sprayarr Data
Byte array
spray.usec usec
Unsigned 32-bit integer
=head2 SS7 SCCP-User Adaptation Layer (sua)
sua.affected_point_code.mask Mask
Unsigned 8-bit integer
sua.affected_pointcode.dpc Affected DPC
Unsigned 24-bit integer
sua.asp_capabilities.a_bit Protocol Class 3
Boolean
sua.asp_capabilities.b_bit Protocol Class 2
Boolean
sua.asp_capabilities.c_bit Protocol Class 1
Boolean
sua.asp_capabilities.d_bit Protocol Class 0
Boolean
sua.asp_capabilities.interworking Interworking
Unsigned 8-bit integer
sua.asp_capabilities.reserved Reserved
Byte array
sua.asp_capabilities.reserved_bits Reserved Bits
Unsigned 8-bit integer
sua.asp_identifier.id ASP Identifier
Unsigned 32-bit integer
sua.cause_user.cause Cause
Unsigned 16-bit integer
sua.cause_user.user User
Unsigned 16-bit integer
sua.congestion_level.level Congestion Level
Unsigned 32-bit integer
sua.correlation_id.identifier Correlation ID
Unsigned 32-bit integer
sua.credit.credit Credit
Unsigned 32-bit integer
sua.data.padding Padding
Byte array
sua.deregistration_result.deregistration_status Deregistration Status
Unsigned 32-bit integer
sua.deregistration_result.routing_context Routing Context
Unsigned 32-bit integer
sua.destination_address.gt_bit Include GT
Boolean
sua.destination_address.pc_bit Include PC
Boolean
sua.destination_address.reserved_bits Reserved Bits
Unsigned 16-bit integer
sua.destination_address.routing_indicator Routing Indicator
Unsigned 16-bit integer
sua.destination_address.ssn_bit Include SSN
Boolean
sua.destination_reference_number Destination Reference Number
Unsigned 32-bit integer
sua.diagnostic_information.info Diagnostic Information
Byte array
sua.diagnostic_information.padding Padding
Byte array
sua.drn_label.end End
Unsigned 8-bit integer
sua.drn_label.start Start
Unsigned 8-bit integer
sua.drn_label.value Label Value
Unsigned 16-bit integer
sua.error_code.code Error code
Unsigned 32-bit integer
sua.global_title.nature_of_address Nature of Address
Unsigned 8-bit integer
sua.global_title.number_of_digits Number of Digits
Unsigned 8-bit integer
sua.global_title.numbering_plan Numbering Plan
Unsigned 8-bit integer
sua.global_title.padding Padding
Byte array
sua.global_title.signals Global Title
Byte array
sua.global_title.translation_type Translation Type
Unsigned 8-bit integer
sua.heartbeat.data Heratbeat Data
Byte array
sua.heartbeat.padding Padding
Byte array
sua.hostname.name Hostname
String
sua.hostname.padding Padding
Byte array
sua.importance.inportance Importance
Unsigned 8-bit integer
sua.importance.reserved Reserved
Byte array
sua.info_string.padding Padding
Byte array
sua.info_string.string Info string
String
sua.ipv4.address IP Version 4 address
IPv4 address
sua.ipv6.address IP Version 6 address
IPv6 address
sua.light.error_code Error Code
Unsigned 16-bit integer
sua.light.message_length Message length
Unsigned 32-bit integer
sua.light.message_type Message Type
Unsigned 16-bit integer
sua.light.spare_1 Spare
Unsigned 8-bit integer
sua.light.spare_2 Spare
Unsigned 16-bit integer
sua.light.subsystem_number Subsystem number
Unsigned 16-bit integer
sua.light.version Version
Unsigned 8-bit integer
sua.message_class Message Class
Unsigned 8-bit integer
sua.message_length Message Length
Unsigned 32-bit integer
sua.message_priority.priority Message Priority
Unsigned 8-bit integer
sua.message_priority.reserved Reserved
Byte array
sua.message_type Message Type
Unsigned 8-bit integer
sua.network_appearance.appearance Network Appearance
Unsigned 32-bit integer
sua.parameter_length Parameter Length
Unsigned 16-bit integer
sua.parameter_padding Padding
Byte array
sua.parameter_tag Parameter Tag
Unsigned 16-bit integer
sua.parameter_value Parameter Value
Byte array
sua.point_code.mask Mask
Unsigned 8-bit integer
sua.point_code.pc Point Code
Unsigned 24-bit integer
sua.protcol_class.reserved Reserved
Byte array
sua.protocol_class.class Protocol Class
Unsigned 8-bit integer
sua.protocol_class.return_on_error_bit Return On Error Bit
Boolean
sua.receive_sequence_number.number Receive Sequence Number P(R)
Unsigned 8-bit integer
sua.receive_sequence_number.reserved Reserved
Byte array
sua.receive_sequence_number.spare_bit Spare Bit
Boolean
sua.registration_result.local_routing_key_identifier Local Routing Key Identifier
Unsigned 32-bit integer
sua.registration_result.registration_status Registration Status
Unsigned 32-bit integer
sua.registration_result.routing_context Routing Context
Unsigned 32-bit integer
sua.reserved Reserved
Byte array
sua.routing_context.context Routing context
Unsigned 32-bit integer
sua.routing_key.identifier Local Routing Key Identifier
Unsigned 32-bit integer
sua.sccp_cause.reserved Reserved
Byte array
sua.sccp_cause.type Cause Type
Unsigned 8-bit integer
sua.sccp_cause.value Cause Value
Unsigned 8-bit integer
sua.segmentation.first_bit First Segment Bit
Boolean
sua.segmentation.number_of_remaining_segments Number of Remaining Segments
Unsigned 8-bit integer
sua.segmentation.reference Segmentation Reference
Unsigned 24-bit integer
sua.sequence_control.sequence_control Sequence Control
Unsigned 32-bit integer
sua.sequence_number.more_data_bit More Data Bit
Boolean
sua.sequence_number.receive_sequence_number Receive Sequence Number P(R)
Unsigned 8-bit integer
sua.sequence_number.reserved Reserved
Byte array
sua.sequence_number.sent_sequence_number Sent Sequence Number P(S)
Unsigned 8-bit integer
sua.sequence_number.spare_bit Spare Bit
Boolean
sua.smi.reserved Reserved
Byte array
sua.smi.smi SMI
Unsigned 8-bit integer
sua.source_address.gt_bit Include GT
Boolean
sua.source_address.pc_bit Include PC
Boolean
sua.source_address.reserved_bits Reserved Bits
Unsigned 16-bit integer
sua.source_address.routing_indicator Routing Indicator
Unsigned 16-bit integer
sua.source_address.ssn_bit Include SSN
Boolean
sua.source_reference_number.number Source Reference Number
Unsigned 32-bit integer
sua.ss7_hop_counter.counter SS7 Hop Counter
Unsigned 8-bit integer
sua.ss7_hop_counter.reserved Reserved
Byte array
sua.ssn.number Subsystem Number
Unsigned 8-bit integer
sua.ssn.reserved Reserved
Byte array
sua.status.info Status info
Unsigned 16-bit integer
sua.status.type Status type
Unsigned 16-bit integer
sua.tid_label.end End
Unsigned 8-bit integer
sua.tid_label.start Start
Unsigned 8-bit integer
sua.tid_label.value Label Value
Unsigned 16-bit integer
sua.traffic_mode_type.type Traffic mode Type
Unsigned 32-bit integer
sua.version Version
Unsigned 8-bit integer
=head2 SSCOP (sscop)
=head2 Secure Socket Layer (ssl)
ssl.alert_message Alert Message
No value
ssl.alert_message.desc Description
Unsigned 8-bit integer
ssl.alert_message.level Level
Unsigned 8-bit integer
ssl.app_data Application Data
No value
ssl.change_cipher_spec Change Cipher Spec Message
No value
ssl.handshake Handshake Protocol
No value
ssl.handshake.cert_type Certificate type
Unsigned 8-bit integer
ssl.handshake.cert_types Certificate types
No value
ssl.handshake.cert_types_count Certificate types count
Unsigned 8-bit integer
ssl.handshake.certificate Certificate
Byte array
ssl.handshake.certificate_length Certificate Length
Unsigned 24-bit integer
ssl.handshake.certificates Certificates
No value
ssl.handshake.certificates_length Certificates Length
Unsigned 24-bit integer
ssl.handshake.challenge Challenge
No value
ssl.handshake.challenge_length Challenge Length
Unsigned 16-bit integer
ssl.handshake.cipher_spec_len Cipher Spec Length
Unsigned 16-bit integer
ssl.handshake.cipher_suites_length Cipher Suites Length
Unsigned 16-bit integer
ssl.handshake.cipherspec Cipher Spec
Unsigned 24-bit integer
ssl.handshake.ciphersuite Cipher Suite
Unsigned 16-bit integer
ssl.handshake.ciphersuites Cipher Suites
No value
ssl.handshake.clear_key_data Clear Key Data
No value
ssl.handshake.clear_key_length Clear Key Data Length
Unsigned 16-bit integer
ssl.handshake.comp_method Compression Method
Unsigned 8-bit integer
ssl.handshake.comp_methods Compression Methods
No value
ssl.handshake.comp_methods_length Compression Methods Length
Unsigned 8-bit integer
ssl.handshake.connection_id Connection ID
No value
ssl.handshake.connection_id_length Connection ID Length
Unsigned 16-bit integer
ssl.handshake.dname Distinguished Name
Byte array
ssl.handshake.dname_len Distinguished Name Length
Unsigned 16-bit integer
ssl.handshake.dnames Distinguished Names
No value
ssl.handshake.dnames_len Distinguished Names Length
Unsigned 16-bit integer
ssl.handshake.encrypted_key Encrypted Key
No value
ssl.handshake.encrypted_key_length Encrypted Key Data Length
Unsigned 16-bit integer
ssl.handshake.key_arg Key Argument
No value
ssl.handshake.key_arg_length Key Argument Length
Unsigned 16-bit integer
ssl.handshake.length Length
Unsigned 24-bit integer
ssl.handshake.md5_hash MD5 Hash
No value
ssl.handshake.random Random.bytes
No value
ssl.handshake.random_time Random.gmt_unix_time
Date/Time stamp
ssl.handshake.session_id Session ID
Byte array
ssl.handshake.session_id_hit Session ID Hit
Boolean
ssl.handshake.session_id_length Session ID Length
Unsigned 8-bit integer
ssl.handshake.sha_hash SHA-1 Hash
No value
ssl.handshake.type Handshake Message Type
Unsigned 8-bit integer
ssl.handshake.verify_data Verify Data
No value
ssl.handshake.version Version
Unsigned 16-bit integer
ssl.record Record Layer
No value
ssl.record.content_type Content Type
Unsigned 8-bit integer
ssl.record.is_escape Is Escape
Boolean
ssl.record.length Length
Unsigned 16-bit integer
ssl.record.padding_length Padding Length
Unsigned 8-bit integer
ssl.record.version Version
Unsigned 16-bit integer
=head2 Sequenced Packet eXchange (spx)
spx.ack Acknowledgment Number
Unsigned 16-bit integer
spx.alloc Allocation Number
Unsigned 16-bit integer
spx.ctl Connection Control
Unsigned 8-bit integer
spx.dst Destination Connection ID
Unsigned 16-bit integer
spx.seq Sequence Number
Unsigned 16-bit integer
spx.src Source Connection ID
Unsigned 16-bit integer
spx.type Datastream type
Unsigned 8-bit integer
=head2 Service Advertisement Protocol (ipxsap)
ipxsap.request Request
Boolean
ipxsap.response Response
Boolean
=head2 Service Location Protocol (srvloc)
srvloc.err Error Code
Unsigned 16-bit integer
srvloc.flags Flags
Unsigned 8-bit integer
srvloc.function Function
Unsigned 8-bit integer
srvloc.version Version
Unsigned 8-bit integer
=head2 Session Announcement Protocol (sap)
sap.auth Authentication data
No value
sap.auth.flags Authentication data flags
Unsigned 8-bit integer
sap.auth.flags.p Padding Bit
Boolean
sap.auth.flags.t Authentication Type
Unsigned 8-bit integer
sap.auth.flags.v Version Number
Unsigned 8-bit integer
sap.flags Flags
Unsigned 8-bit integer
sap.flags.a Address Type
Boolean
sap.flags.c Compression Bit
Boolean
sap.flags.e Encryption Bit
Boolean
sap.flags.r Reserved
Boolean
sap.flags.t Message Type
Boolean
sap.flags.v Version Number
Unsigned 8-bit integer
=head2 Session Description Protocol (sdp)
sdp.bandwidth Bandwidth Information (b)
String
sdp.bandwidth.modifier Bandwidth Modifier
String
sdp.bandwidth.value Bandwidth Value
String
sdp.connection_info Connection Information (c)
String
sdp.connection_info.address Connection Address
String
sdp.connection_info.address_type Connection Address Type
String
sdp.connection_info.network_type Connection Network Type
String
sdp.connection_info.num_addr Connection Number of Addresses
String
sdp.connection_info.ttl Connection TTL
String
sdp.email E-mail Address (e)
String
sdp.encryption_key Encryption Key (k)
String
sdp.encryption_key.data Key Data
String
sdp.encryption_key.type Key Type
String
sdp.invalid Invalid line
String
sdp.media Media Description, name and address (m)
String
sdp.media.format Media Format
String
sdp.media.media Media Type
String
sdp.media.port Media Port
String
sdp.media.portcount Media Port Count
String
sdp.media.proto Media Proto
String
sdp.media_attr Media Attribute (a)
String
sdp.media_attribute.field Media Attribute Fieldname
String
sdp.media_attribute.value Media Attribute Value
String
sdp.media_title Media Title (i)
String
sdp.misplaced Misplaced
String
sdp.owner Owner/Creator, Session Id (o)
String
sdp.owner.address Owner Address
String
sdp.owner.address_type Owner Address Type
String
sdp.owner.network_type Owner Network Type
String
sdp.owner.sessionid Session ID
String
sdp.owner.username Owner Username
String
sdp.owner.version Session Version
String
sdp.phone Phone Number (p)
String
sdp.repeat_time Repeat Time (r)
String
sdp.repeat_time.duration Repeat Duration
String
sdp.repeat_time.interval Repeat Interval
String
sdp.repeat_time.offset Repeat Offset
String
sdp.session_attr Session Attribute (a)
String
sdp.session_attr.field Session Attribute Fieldname
String
sdp.session_attr.value Session Attribute Value
String
sdp.session_info Session Information (i)
String
sdp.session_name Session Name (s)
String
sdp.time Time Description, active time (t)
String
sdp.time.start Session Start Time
String
sdp.time.stop Session Stop Time
String
sdp.timezone Time Zone Adjustments (z)
String
sdp.timezone.offset Timezone Offset
String
sdp.timezone.time Timezone Time
String
sdp.unknown Unknown
String
sdp.uri URI of Description (u)
String
sdp.version Session Description Protocol Version (v)
String
=head2 Session Initiation Protocol (sip)
sip.msg_hdr Message Header
No value
=head2 Short Frame (short)
=head2 Short Message Peer to Peer (smpp)
smpp.SC_interface_version SMSC-supported version
String
smpp.additional_status_info_text Information
String
smpp.addr_npi Numbering plan indicator
Unsigned 8-bit integer
smpp.addr_ton Type of number
Unsigned 8-bit integer
smpp.address_range Address
String
smpp.alert_on_message_delivery Alert on delivery
No value
smpp.callback_num Callback number
No value
smpp.callback_num.pres Presentation
Unsigned 8-bit integer
smpp.callback_num.scrn Screening
Unsigned 8-bit integer
smpp.callback_num_atag Callback number - alphanumeric display tag
No value
smpp.command_id Operation
Unsigned 32-bit integer
smpp.command_length Length
Unsigned 32-bit integer
smpp.command_status Result
Unsigned 32-bit integer
smpp.data_coding Data coding
Unsigned 8-bit integer
smpp.delivery_failure_reason Delivery failure reason
Unsigned 8-bit integer
smpp.dest_addr_npi Numbering plan indicator (recipient)
Unsigned 8-bit integer
smpp.dest_addr_subunit Subunit destination
Unsigned 8-bit integer
smpp.dest_addr_ton Type of number (recipient)
Unsigned 8-bit integer
smpp.dest_bearer_type Destination bearer
Unsigned 8-bit integer
smpp.dest_network_type Destination network
Unsigned 8-bit integer
smpp.dest_telematics_id Telematic interworking (dest)
Unsigned 16-bit integer
smpp.destination_addr Recipient address
String
smpp.destination_port Destination port
Unsigned 16-bit integer
smpp.display_time Display time
Unsigned 8-bit integer
smpp.dl_name Distr. list name
String
smpp.dlist Destination list
No value
smpp.dlist_resp Unsuccesfull delivery list
No value
smpp.dpf_result Delivery pending set?
Unsigned 8-bit integer
smpp.error_code Error code
Unsigned 8-bit integer
smpp.error_status_code Status
Unsigned 32-bit integer
smpp.esm.submit.features GSM features
Unsigned 8-bit integer
smpp.esm.submit.msg_mode Messaging mode
Unsigned 8-bit integer
smpp.esm.submit.msg_type Message type
Unsigned 8-bit integer
smpp.esme_addr ESME address
String
smpp.esme_addr_npi Numbering plan indicator (ESME)
Unsigned 8-bit integer
smpp.esme_addr_ton Type of number (ESME)
Unsigned 8-bit integer
smpp.final_date Final date
Date/Time stamp
smpp.final_date_r Final date
Time duration
smpp.interface_version Version (if)
String
smpp.its_reply_type Reply method
Unsigned 8-bit integer
smpp.its_session.ind Session indicator
Unsigned 8-bit integer
smpp.its_session.number Session number
Unsigned 8-bit integer
smpp.its_session.sequence Sequence number
Unsigned 8-bit integer
smpp.language_indicator Language
Unsigned 8-bit integer
smpp.message Message
No value
smpp.message_id Message id.
String
smpp.message_payload Payload
No value
smpp.message_state Message state
Unsigned 8-bit integer
smpp.more_messages_to_send More messages?
Unsigned 8-bit integer
smpp.ms_availability_status Availability status
Unsigned 8-bit integer
smpp.ms_validity Validity info
Unsigned 8-bit integer
smpp.msg_wait.ind Indication
Unsigned 8-bit integer
smpp.msg_wait.type Type
Unsigned 8-bit integer
smpp.network_error.code Error code
Unsigned 16-bit integer
smpp.network_error.type Error type
Unsigned 8-bit integer
smpp.number_of_messages Number of messages
Unsigned 8-bit integer
smpp.opt_param Optional parameters
No value
smpp.password Password
String
smpp.payload_type Payload
Unsigned 8-bit integer
smpp.priority_flag Priority level
Unsigned 8-bit integer
smpp.privacy_indicator Privacy indicator
Unsigned 8-bit integer
smpp.protocol_id Protocol id.
Unsigned 8-bit integer
smpp.qos_time_to_live Validity period
Unsigned 32-bit integer
smpp.receipted_message_id SMSC identifier
String
smpp.regdel.acks Message type
Unsigned 8-bit integer
smpp.regdel.notif Intermediate notif
Unsigned 8-bit integer
smpp.regdel.receipt Delivery receipt
Unsigned 8-bit integer
smpp.replace_if_present_flag Replace
Unsigned 8-bit integer
smpp.reserved_op Optional parameter - Reserved
No value
smpp.sar_msg_ref_num SAR reference number
Unsigned 16-bit integer
smpp.sar_segment_seqnum SAR sequence number
Unsigned 8-bit integer
smpp.sar_total_segments SAR size
Unsigned 16-bit integer
smpp.schedule_delivery_time Scheduled delivery time
Date/Time stamp
smpp.schedule_delivery_time_r Scheduled delivery time
Time duration
smpp.sequence_number Sequence #
Unsigned 32-bit integer
smpp.service_type Service type
String
smpp.set_dpf Request DPF set
Unsigned 8-bit integer
smpp.sm_default_msg_id Predefined message
Unsigned 8-bit integer
smpp.sm_length Message length
Unsigned 8-bit integer
smpp.source_addr Originator address
String
smpp.source_addr_npi Numbering plan indicator (originator)
Unsigned 8-bit integer
smpp.source_addr_subunit Subunit origin
Unsigned 8-bit integer
smpp.source_addr_ton Type of number (originator)
Unsigned 8-bit integer
smpp.source_bearer_type Originator bearer
Unsigned 8-bit integer
smpp.source_network_type Originator network
Unsigned 8-bit integer
smpp.source_port Source port
Unsigned 16-bit integer
smpp.source_telematics_id Telematic interworking (orig)
Unsigned 16-bit integer
smpp.system_id System ID
String
smpp.system_type System type
String
smpp.user_message_reference Message reference
Unsigned 16-bit integer
smpp.user_response_code Application response code
Unsigned 8-bit integer
smpp.ussd_service_op USSD service operation
Unsigned 8-bit integer
smpp.validity_period Validity period
Date/Time stamp
smpp.validity_period_r Validity period
Time duration
smpp.vendor_op Optional parameter - Vendor-specific
No value
=head2 Simple Mail Transfer Protocol (smtp)
smtp.req Request
Boolean
smtp.rsp Response
Boolean
=head2 Simple Network Management Protocol (snmp)
snmpv3.flags SNMPv3 Flags
Unsigned 8-bit integer
snmpv3.flags.auth Authenticated
Boolean
snmpv3.flags.crypt Encrypted
Boolean
snmpv3.flags.report Reportable
Boolean
=head2 Sinec H1 Protocol (h1)
h1.dbnr Memory block number
Unsigned 8-bit integer
h1.dlen Length in words
Signed 16-bit integer
h1.dwnr Address within memory block
Unsigned 16-bit integer
h1.empty Empty field
Unsigned 8-bit integer
h1.empty_len Empty field length
Unsigned 8-bit integer
h1.header H1-Header
Unsigned 16-bit integer
h1.len Length indicator
Unsigned 16-bit integer
h1.opcode Opcode
Unsigned 8-bit integer
h1.opfield Operation identifier
Unsigned 8-bit integer
h1.oplen Operation length
Unsigned 8-bit integer
h1.org Memory type
Unsigned 8-bit integer
h1.reqlen Request length
Unsigned 8-bit integer
h1.request Request identifier
Unsigned 8-bit integer
h1.reslen Response length
Unsigned 8-bit integer
h1.response Response identifier
Unsigned 8-bit integer
h1.resvalue Response value
Unsigned 8-bit integer
=head2 Skinny Client Control Protocol (skinny)
skinny.data_length Data Length
Unsigned 32-bit integer
skinny.messageid Message ID
Unsigned 32-bit integer
skinny.reserved Reserved
Unsigned 32-bit integer
=head2 SliMP3 Communication Protocol (slimp3)
slimp3.control Control Packet
Boolean
slimp3.data Data
Boolean
slimp3.data_req Data Request
Boolean
slimp3.discovery_req Discovery Request
Boolean
slimp3.discovery_response Discovery Response
Boolean
slimp3.display Display
Boolean
slimp3.hello Hello
Boolean
slimp3.i2c I2C
Boolean
slimp3.ir Infrared
Unsigned 32-bit integer
slimp3.opcode Opcode
Unsigned 8-bit integer
=head2 Socks Protocol (socks)
socks.command Command
Unsigned 16-bit integer
socks.dst Remote Address
IPv4 address
socks.dstV6 Remote Address(ipv6)
IPv6 address
socks.dstport Remote Port
Unsigned 16-bit integer
socks.results Results(V5)
Unsigned 8-bit integer
socks.results_v4 Results(V4)
Unsigned 8-bit integer
socks.results_v5 Results(V5)
Unsigned 8-bit integer
socks.username User Name
String
socks.version Version
Unsigned 8-bit integer
=head2 Spanning Tree Protocol (stp)
stp.bridge.hw Bridge Identifier
6-byte Hardware (MAC) Address
stp.flags BPDU flags
Unsigned 8-bit integer
stp.forward Forward Delay
Double-precision floating point
stp.hello Hello Time
Double-precision floating point
stp.max_age Max Age
Double-precision floating point
stp.msg_age Message Age
Double-precision floating point
stp.port Port identifier
Unsigned 16-bit integer
stp.protocol Protocol Identifier
Unsigned 16-bit integer
stp.root.cost Root Path Cost
Unsigned 32-bit integer
stp.root.hw Root Identifier
6-byte Hardware (MAC) Address
stp.type BPDU type
Unsigned 8-bit integer
stp.version Protocol Version Identifier
Unsigned 8-bit integer
=head2 Stream Control Transmission Protocol (sctp)
sctp.adapation_layer_indication.indication Indication
Unsigned 32-bit integer
sctp.asconf.address_bytes Address bytes
Byte array
sctp.asconf.address_type Address type
Unsigned 8-bit integer
sctp.asconf.correlation_id Correlation_id
Unsigned 32-bit integer
sctp.asconf.ipv4_address IP Version 4 address
IPv4 address
sctp.asconf.ipv6_address IP Version 6 address
IPv6 address
sctp.asconf.reserved Reserved
Byte array
sctp.asconf.serial_number Serial Number
Unsigned 32-bit integer
sctp.asconf_ack.correlation_id Correlation_id
Unsigned 32-bit integer
sctp.asconf_ack.serial_number Serial Number
Unsigned 32-bit integer
sctp.cause.code Cause code
Unsigned 16-bit integer
sctp.cause.length Cause length
Unsigned 16-bit integer
sctp.cause.measure_of_staleness Measure of staleness in usec
Unsigned 32-bit integer
sctp.cause.missing_parameter_type Missing parameter type
Unsigned 16-bit integer
sctp.cause.nr_of_missing_parameters Number of missing parameters
Unsigned 32-bit integer
sctp.cause.stream_identifier Stream identifier
Unsigned 16-bit integer
sctp.cause.tsn TSN
Unsigned 32-bit integer
sctp.checksum Checksum
Unsigned 32-bit integer
sctp.checksum_bad Bad checksum
Boolean
sctp.chunk_flags Flags
Unsigned 8-bit integer
sctp.chunk_length Length
Unsigned 16-bit integer
sctp.chunk_type Identifier
Unsigned 8-bit integer
sctp.cumulative.tsn.ack Cumulative TSN Ack
Unsigned 32-bit integer
sctp.cwr.lowest_tsn Lowest TSN
Unsigned 32-bit integer
sctp.data.b_bit B-Bit
Boolean
sctp.data.e_bit E-Bit
Boolean
sctp.data.u.bit U-Bit
Boolean
sctp.dstport Destination port
Unsigned 16-bit integer
sctp.ecne.lowest_tsn Lowest TSN
Unsigned 32-bit integer
sctp.forward_tsn.tsn New cumulative TSN
Unsigned 32-bit integer
sctp.init.chunk.credit Advertised reciever window credit (a_rwnd)
Unsigned 32-bit integer
sctp.init.chunk.initial.tsn Initial TSN
Unsigned 32-bit integer
sctp.init.chunk.initiate.tag Initiate tag
Unsigned 32-bit integer
sctp.init.chunk.nr.in.streams Number of inbound streams
Unsigned 16-bit integer
sctp.init.chunk.nr.out.streams Number of outbound streams
Unsigned 16-bit integer
sctp.parameter.cookie_preservative_incr Suggested Cookie life-span increment (msec)
Unsigned 32-bit integer
sctp.parameter.hostname.hostname Hostname
String
sctp.parameter.ipv4_address IP Version 4 address
IPv4 address
sctp.parameter.ipv6_address IP Version 6 address
IPv6 address
sctp.parameter.length Parameter length
Unsigned 16-bit integer
sctp.parameter.supported_addres_type Supported address type
Unsigned 16-bit integer
sctp.parameter.type Parameter type
Unsigned 16-bit integer
sctp.payload_proto_id Payload protocol identifier
Unsigned 32-bit integer
sctp.port Port
Unsigned 16-bit integer
sctp.sack.a_rwnd Advertised receiver window credit (a_rwnd)
Unsigned 32-bit integer
sctp.sack.cumulative_tsn_ack Cumulative TSN ACK
Unsigned 32-bit integer
sctp.sack.duplicate.tsn Duplicate TSN
Unsigned 16-bit integer
sctp.sack.gap_block_end End
Unsigned 16-bit integer
sctp.sack.gap_block_start Start
Unsigned 16-bit integer
sctp.sack.number_of_duplicated_tsns Number of duplicated TSNs
Unsigned 16-bit integer
sctp.sack.number_of_gap_blocks Number of gap acknowldgement blocks
Unsigned 16-bit integer
sctp.shutdown.cumulative_tsn_ack Cumulative TSN Ack
Unsigned 32-bit integer
sctp.shutdown_complete.t_bit E-Bit
Boolean
sctp.srcport Source port
Unsigned 16-bit integer
sctp.stream_id Stream Identifier
Unsigned 16-bit integer
sctp.stream_seq_number Stream sequence number
Unsigned 16-bit integer
sctp.tsn TSN
Unsigned 32-bit integer
sctp.unreliable_streams.end End
Unsigned 16-bit integer
sctp.unreliable_streams.start Start
Unsigned 16-bit integer
sctp.verfication_tag Verification tag
Unsigned 32-bit integer
=head2 Syslog message (syslog)
syslog.facility Facility
Unsigned 8-bit integer
syslog.level Level
Unsigned 8-bit integer
syslog.msg_len Message length
Unsigned 32-bit integer
=head2 Systems Network Architecture (sna)
sna.rh Request/Response Header
No value
sna.rh.0 Request/Response Header Byte 0
Unsigned 8-bit integer
sna.rh.1 Request/Response Header Byte 1
Unsigned 8-bit integer
sna.rh.2 Request/Response Header Byte 2
Unsigned 8-bit integer
sna.rh.bbi Begin Bracket Indicator
Boolean
sna.rh.bci Begin Chain Indicator
Boolean
sna.rh.cdi Change Direction Indicator
Boolean
sna.rh.cebi Conditional End Bracket Indicator
Boolean
sna.rh.csi Code Selection Indicator
Unsigned 8-bit integer
sna.rh.dr1 Definite Response 1 Indicator
Boolean
sna.rh.dr2 Definite Response 2 Indicator
Boolean
sna.rh.ebi End Bracket Indicator
Boolean
sna.rh.eci End Chain Indicator
Boolean
sna.rh.edi Enciphered Data Indicator
Boolean
sna.rh.eri Exception Response Indicator
Boolean
sna.rh.fi Format Indicator
Boolean
sna.rh.lcci Length-Checked Compression Indicator
Boolean
sna.rh.pdi Padded Data Indicator
Boolean
sna.rh.pi Pacing Indicator
Boolean
sna.rh.qri Queued Response Indicator
Boolean
sna.rh.rlwi Request Larger Window Indicator
Boolean
sna.rh.rri Request/Response Indicator
Unsigned 8-bit integer
sna.rh.rti Response Type Indicator
Boolean
sna.rh.ru_category Request/Response Unit Category
Unsigned 8-bit integer
sna.rh.sdi Sense Data Included
Boolean
sna.th Transmission Header
No value
sna.th.0 Transmission Header Byte 0
Unsigned 8-bit integer
sna.th.cmd_fmt Command Format
Unsigned 8-bit integer
sna.th.cmd_sn Command Sequence Number
Unsigned 16-bit integer
sna.th.cmd_type Command Type
Unsigned 8-bit integer
sna.th.daf Destination Address Field
Unsigned 16-bit integer
sna.th.dcf Data Count Field
Unsigned 16-bit integer
sna.th.def Destination Element Field
Unsigned 16-bit integer
sna.th.dsaf Destination Subarea Address Field
Unsigned 32-bit integer
sna.th.efi Expedited Flow Indicator
Unsigned 8-bit integer
sna.th.er_vr_supp_ind ER and VR Support Indicator
Unsigned 8-bit integer
sna.th.ern Explicit Route Number
Unsigned 8-bit integer
sna.th.fid Format Identifer
Unsigned 8-bit integer
sna.th.iern Initial Explicit Route Number
Unsigned 8-bit integer
sna.th.lsid Local Session Identification
Unsigned 8-bit integer
sna.th.mft MPR FID4 Type
Boolean
sna.th.mpf Mapping Field
Unsigned 8-bit integer
sna.th.nlp_cp NLP Count or Padding
Unsigned 8-bit integer
sna.th.nlpoi NLP Offset Indicator
Unsigned 8-bit integer
sna.th.ntwk_prty Network Priority
Unsigned 8-bit integer
sna.th.oaf Origin Address Field
Unsigned 16-bit integer
sna.th.odai ODAI Assignment Indicator
Unsigned 8-bit integer
sna.th.oef Origin Element Field
Unsigned 16-bit integer
sna.th.osaf Origin Subarea Address Field
Unsigned 32-bit integer
sna.th.piubf PIU Blocking Field
Unsigned 8-bit integer
sna.th.sa Session Address
Byte array
sna.th.snai SNA Indicator
Boolean
sna.th.snf Sequence Number Field
Unsigned 16-bit integer
sna.th.tg_nonfifo_ind Transmission Group Non-FIFO Indicator
Boolean
sna.th.tg_snf Transmission Group Sequence Number Field
Unsigned 16-bit integer
sna.th.tg_sweep Transmission Group Sweep
Unsigned 8-bit integer
sna.th.tgsf Transmission Group Segmenting Field
Unsigned 8-bit integer
sna.th.tpf Transmission Priority Field
Unsigned 8-bit integer
sna.th.vr_cwi Virtual Route Change Window Indicator
Unsigned 16-bit integer
sna.th.vr_cwri Virtual Route Change Window Reply Indicator
Unsigned 16-bit integer
sna.th.vr_pac_cnt_ind Virtual Route Pacing Count Indicator
Unsigned 8-bit integer
sna.th.vr_rwi Virtual Route Reset Window Indicator
Boolean
sna.th.vr_snf_send Virtual Route Send Sequence Number Field
Unsigned 16-bit integer
sna.th.vr_sqti Virtual Route Sequence and Type Indicator
Unsigned 16-bit integer
sna.th.vrn Virtual Route Number
Unsigned 8-bit integer
sna.th.vrprq Virtual Route Pacing Request
Boolean
sna.th.vrprs Virtual Route Pacing Response
Boolean
=head2 TACACS (tacacs)
tacacs.destaddr Destination address
IPv4 address
tacacs.destport Destination port
Unsigned 16-bit integer
tacacs.line Line
Unsigned 16-bit integer
tacacs.nonce Nonce
Unsigned 16-bit integer
tacacs.passlen Password length
Unsigned 8-bit integer
tacacs.reason Reason
Unsigned 8-bit integer
tacacs.response Response
Unsigned 8-bit integer
tacacs.result1 Result 1
Unsigned 32-bit integer
tacacs.result2 Result 2
Unsigned 32-bit integer
tacacs.result3 Result 3
Unsigned 16-bit integer
tacacs.type Type
Unsigned 8-bit integer
tacacs.userlen Username length
Unsigned 8-bit integer
tacacs.version Version
Unsigned 8-bit integer
=head2 TACACS+ (tacplus)
tacplus.flags Flags
Unsigned 8-bit integer
tacplus.flags.connection_type Connection type
Boolean
tacplus.flags.payload_type Payload type
Boolean
tacplus.majvers Major version
Unsigned 8-bit integer
tacplus.minvers Minor version
Unsigned 8-bit integer
tacplus.packet_len Packet length
Unsigned 32-bit integer
tacplus.request Request
Boolean
tacplus.response Response
Boolean
tacplus.seqno Sequence number
Unsigned 8-bit integer
tacplus.session_id Session ID
Unsigned 32-bit integer
tacplus.type Type
Unsigned 8-bit integer
=head2 TPKT (tpkt)
tpkt.length Length
Unsigned 16-bit integer
tpkt.reserved Reserved
Unsigned 8-bit integer
tpkt.version Version
Unsigned 8-bit integer
=head2 Telnet (telnet)
=head2 Time Protocol (time)
time.time Time
Unsigned 32-bit integer
=head2 Time Synchronization Protocol (tsp)
tsp.hopcnt Hop Count
Unsigned 8-bit integer
tsp.name Machine Name
String
tsp.sec Seconds
Unsigned 32-bit integer
tsp.sequence Sequence
Unsigned 16-bit integer
tsp.type Type
Unsigned 8-bit integer
tsp.usec Microseconds
Unsigned 32-bit integer
tsp.version Version
Unsigned 8-bit integer
=head2 Token-Ring (tr)
tr.ac Access Control
Unsigned 8-bit integer
tr.addr Source or Destination Address
6-byte Hardware (MAC) Address
tr.broadcast Broadcast Type
Unsigned 8-bit integer
tr.direction Direction
Unsigned 8-bit integer
tr.dst Destination
6-byte Hardware (MAC) Address
tr.fc Frame Control
Unsigned 8-bit integer
tr.frame Frame
Boolean
tr.frame_pcf Frame PCF
Unsigned 8-bit integer
tr.frame_type Frame Type
Unsigned 8-bit integer
tr.max_frame_size Maximum Frame Size
Unsigned 8-bit integer
tr.monitor_cnt Monitor Count
Unsigned 8-bit integer
tr.priority Priority
Unsigned 8-bit integer
tr.priority_reservation Priority Reservation
Unsigned 8-bit integer
tr.rif Ring-Bridge Pairs
String
tr.rif.bridge RIF Bridge
Unsigned 8-bit integer
tr.rif.ring RIF Ring
Unsigned 16-bit integer
tr.rif_bytes RIF Bytes
Unsigned 8-bit integer
tr.sr Source Routed
Boolean
tr.src Source
6-byte Hardware (MAC) Address
=head2 Token-Ring Media Access Control (trmac)
trmac.dstclass Destination Class
Unsigned 8-bit integer
trmac.errors.abort Abort Delimiter Transmitted Errors
Unsigned 8-bit integer
trmac.errors.ac A/C Errors
Unsigned 8-bit integer
trmac.errors.burst Burst Errors
Unsigned 8-bit integer
trmac.errors.congestion Receiver Congestion Errors
Unsigned 8-bit integer
trmac.errors.fc Frame-Copied Errors
Unsigned 8-bit integer
trmac.errors.freq Frequency Errors
Unsigned 8-bit integer
trmac.errors.internal Internal Errors
Unsigned 8-bit integer
trmac.errors.iso Isolating Errors
Unsigned 16-bit integer
trmac.errors.line Line Errors
Unsigned 8-bit integer
trmac.errors.lost Lost Frame Errors
Unsigned 8-bit integer
trmac.errors.noniso Non-Isolating Errors
Unsigned 16-bit integer
trmac.errors.token Token Errors
Unsigned 8-bit integer
trmac.length Total Length
Unsigned 8-bit integer
trmac.mvec Major Vector
Unsigned 8-bit integer
trmac.naun NAUN
6-byte Hardware (MAC) Address
trmac.srcclass Source Class
Unsigned 8-bit integer
trmac.svec Sub-Vector
Unsigned 8-bit integer
=head2 Transmission Control Protocol (tcp)
tcp.ack Acknowledgement number
Unsigned 32-bit integer
tcp.checksum Checksum
Unsigned 16-bit integer
tcp.checksum_bad Bad Checksum
Boolean
tcp.dstport Destination Port
Unsigned 16-bit integer
tcp.flags Flags
Unsigned 8-bit integer
tcp.flags.ack Acknowledgment
Boolean
tcp.flags.cwr Congestion Window Reduced (CWR)
Boolean
tcp.flags.ecn ECN-Echo
Boolean
tcp.flags.fin Fin
Boolean
tcp.flags.push Push
Boolean
tcp.flags.reset Reset
Boolean
tcp.flags.syn Syn
Boolean
tcp.flags.urg Urgent
Boolean
tcp.hdr_len Header Length
Unsigned 8-bit integer
tcp.nxtseq Next sequence number
Unsigned 32-bit integer
tcp.port Source or Destination Port
Unsigned 16-bit integer
tcp.seq Sequence number
Unsigned 32-bit integer
tcp.srcport Source Port
Unsigned 16-bit integer
tcp.urgent_pointer Urgent pointer
Unsigned 16-bit integer
tcp.window_size Window size
Unsigned 16-bit integer
=head2 Transparent Network Substrate Protocol (tns)
tns.abort Abort
Boolean
tns.abort_data Abort Data
String
tns.abort_reason_system Abort Reason (User)
Unsigned 8-bit integer
tns.abort_reason_user Abort Reason (User)
Unsigned 8-bit integer
tns.accept Accept
Boolean
tns.accept_data Accept Data
String
tns.accept_data_length Accept Data Length
Unsigned 16-bit integer
tns.accept_data_offset Offset to Accept Data
Unsigned 16-bit integer
tns.compat_version Version (Compatible)
Unsigned 16-bit integer
tns.connect Connect
Boolean
tns.connect_data Connect Data
String
tns.connect_data_length Length of Connect Data
Unsigned 16-bit integer
tns.connect_data_max Maximum Receivable Connect Data
Unsigned 32-bit integer
tns.connect_data_offset Offset to Connect Data
Unsigned 16-bit integer
tns.connect_flags0 Connect Flags 0
Unsigned 8-bit integer
tns.connect_flags1 Connect Flags 1
Unsigned 8-bit integer
tns.control Control
Boolean
tns.control.cmd Control Command
Unsigned 16-bit integer
tns.control.data Control Data
Byte array
tns.data Data
Boolean
tns.data_flag Data Flag
Unsigned 16-bit integer
tns.data_flag.c Confirmation
Unsigned 16-bit integer
tns.data_flag.dic Do Immediate Confirmation
Unsigned 16-bit integer
tns.data_flag.eof End of File
Unsigned 16-bit integer
tns.data_flag.more More Data to Come
Unsigned 16-bit integer
tns.data_flag.rc Request Confirmation
Unsigned 16-bit integer
tns.data_flag.reserved Reserved
Unsigned 16-bit integer
tns.data_flag.rts Request To Send
Unsigned 16-bit integer
tns.data_flag.send Send Token
Unsigned 16-bit integer
tns.data_flag.sntt Send NT Trailer
Unsigned 16-bit integer
tns.header_checksum Header Checksum
Unsigned 16-bit integer
tns.length Packet Length
Unsigned 16-bit integer
tns.line_turnaround Line Turnaround Value
Unsigned 16-bit integer
tns.marker Marker
Boolean
tns.marker.data Marker Data
Unsigned 16-bit integer
tns.marker.databyte Marker Data Byte
Unsigned 8-bit integer
tns.marker.type Marker Type
Unsigned 8-bit integer
tns.max_tdu_size Maximum Transmission Data Unit Size
Unsigned 16-bit integer
tns.nt_proto_characteristics NT Protocol Characteristics
Unsigned 16-bit integer
tns.packet_checksum Packet Checksum
Unsigned 16-bit integer
tns.redirect Redirect
Boolean
tns.redirect_data Redirect Data
String
tns.redirect_data_length Redirect Data Length
Unsigned 16-bit integer
tns.refuse Refuse
Boolean
tns.refuse_data Refuse Data
String
tns.refuse_data_length Refuse Data Length
Unsigned 16-bit integer
tns.refuse_reason_system Refuse Reason (User)
Unsigned 8-bit integer
tns.refuse_reason_user Refuse Reason (User)
Unsigned 8-bit integer
tns.request Request
Boolean
tns.reserved_byte Reserved Byte
Byte array
tns.response Response
Boolean
tns.sdu_size Session Data Unit Size
Unsigned 16-bit integer
tns.service_options Service Options
Unsigned 16-bit integer
tns.trace_cf1 Trace Cross Facility Item 1
Unsigned 16-bit integer
tns.trace_cf2 Trace Cross Facility Item 2
Unsigned 16-bit integer
tns.trace_cid Trace Unique Connection ID
Unsigned 16-bit integer
tns.type Packet Type
Unsigned 8-bit integer
tns.value_of_one Value of 1 in Hardware
Byte array
tns.version Version
Unsigned 16-bit integer
=head2 Trivial File Transfer Protocol (tftp)
tftp.block Block
Unsigned 16-bit integer
tftp.destination_file DESTINATION File
String
tftp.error.code Error code
Unsigned 16-bit integer
tftp.error.message Error message
String
tftp.opcode Opcode
Unsigned 16-bit integer
tftp.source_file Source File
String
tftp.type Type
String
=head2 Universal Computer Protocol (ucp)
ucp.hdr.LEN Length
Unsigned 16-bit integer
ucp.hdr.OT Operation
Unsigned 8-bit integer
ucp.hdr.O_R Type
Unsigned 8-bit integer
ucp.hdr.TRN Transaction Reference Number
Unsigned 8-bit integer
ucp.message Data
No value
ucp.parm Data
No value
ucp.parm.AAC AAC
String
ucp.parm.AC AC
String
ucp.parm.ACK (N)Ack
Unsigned 8-bit integer
ucp.parm.A_D A_D
Unsigned 8-bit integer
ucp.parm.AdC AdC
String
ucp.parm.BAS BAS
Unsigned 8-bit integer
ucp.parm.CPg CPg
String
ucp.parm.CS CS
Unsigned 8-bit integer
ucp.parm.CT CT
Date/Time stamp
ucp.parm.DAdC DAdC
String
ucp.parm.DCs DCs
Unsigned 8-bit integer
ucp.parm.DD DD
Unsigned 8-bit integer
ucp.parm.DDT DDT
Date/Time stamp
ucp.parm.DSCTS DSCTS
Date/Time stamp
ucp.parm.Dst Dst
Unsigned 8-bit integer
ucp.parm.EC Error code
Unsigned 8-bit integer
ucp.parm.GA GA
String
ucp.parm.GAdC GAdC
String
ucp.parm.HPLMN HPLMN
String
ucp.parm.IVR5x IVR5x
String
ucp.parm.L1P L1P
String
ucp.parm.L1R L1R
Unsigned 8-bit integer
ucp.parm.L3P L3P
String
ucp.parm.L3R L3R
Unsigned 8-bit integer
ucp.parm.LAC LAC
String
ucp.parm.LAR LAR
Unsigned 8-bit integer
ucp.parm.LAdC LAdC
String
ucp.parm.LCR LCR
Unsigned 8-bit integer
ucp.parm.LMN LMN
Unsigned 8-bit integer
ucp.parm.LNPI LNPI
Unsigned 8-bit integer
ucp.parm.LNo LNo
String
ucp.parm.LPID LPID
Unsigned 16-bit integer
ucp.parm.LPR LPR
String
ucp.parm.LRAd LRAd
String
ucp.parm.LRC LRC
String
ucp.parm.LRP LRP
String
ucp.parm.LRR LRR
Unsigned 8-bit integer
ucp.parm.LRq LRq
Unsigned 8-bit integer
ucp.parm.LST LST
String
ucp.parm.LTON LTON
Unsigned 8-bit integer
ucp.parm.LUM LUM
String
ucp.parm.LUR LUR
Unsigned 8-bit integer
ucp.parm.MCLs MCLs
Unsigned 8-bit integer
ucp.parm.MMS MMS
Unsigned 8-bit integer
ucp.parm.MNo MNo
String
ucp.parm.MT MT
Unsigned 8-bit integer
ucp.parm.MVP MVP
Date/Time stamp
ucp.parm.NAC NAC
String
ucp.parm.NAdC NAdC
String
ucp.parm.NB NB
String
ucp.parm.NMESS NMESS
Unsigned 8-bit integer
ucp.parm.NMESS_str NMESS_str
String
ucp.parm.NPID NPID
Unsigned 16-bit integer
ucp.parm.NPL NPL
Unsigned 16-bit integer
ucp.parm.NPWD NPWD
No value
ucp.parm.NRq NRq
Unsigned 8-bit integer
ucp.parm.NT NT
Unsigned 8-bit integer
ucp.parm.NoA NoA
Unsigned 16-bit integer
ucp.parm.NoB NoB
Unsigned 16-bit integer
ucp.parm.NoN NoN
Unsigned 16-bit integer
ucp.parm.OAC OAC
String
ucp.parm.OAdC OAdC
String
ucp.parm.ONPI ONPI
Unsigned 8-bit integer
ucp.parm.OPID OPID
Unsigned 8-bit integer
ucp.parm.OTOA OTOA
String
ucp.parm.OTON OTON
Unsigned 8-bit integer
ucp.parm.PID PID
Unsigned 16-bit integer
ucp.parm.PNC PNC
Unsigned 8-bit integer
ucp.parm.PR PR
Unsigned 8-bit integer
ucp.parm.PWD PWD
No value
ucp.parm.RC RC
Unsigned 8-bit integer
ucp.parm.REQ_OT REQ_OT
Unsigned 8-bit integer
ucp.parm.RES1 RES1
String
ucp.parm.RES2 RES2
String
ucp.parm.RES4 RES4
String
ucp.parm.RES5 RES5
String
ucp.parm.RP RP
Unsigned 8-bit integer
ucp.parm.RPI RPI
Unsigned 8-bit integer
ucp.parm.RPID RPID
String
ucp.parm.RPLy RPLy
String
ucp.parm.RT RT
Unsigned 8-bit integer
ucp.parm.R_T R_T
String
ucp.parm.Rsn Rsn
Unsigned 16-bit integer
ucp.parm.SCTS SCTS
Date/Time stamp
ucp.parm.SM SM
String
ucp.parm.SP SP
Date/Time stamp
ucp.parm.SSTAT SSTAT
Unsigned 8-bit integer
ucp.parm.ST ST
Date/Time stamp
ucp.parm.STYP0 STYP0
Unsigned 8-bit integer
ucp.parm.STYP1 STYP1
Unsigned 8-bit integer
ucp.parm.STx STx
No value
ucp.parm.TNo TNo
String
ucp.parm.UM UM
Unsigned 8-bit integer
ucp.parm.VERS VERS
String
ucp.parm.VP VP
Date/Time stamp
ucp.parm.XSer Extra services:
No value
ucp.xser.service Type of service
Unsigned 8-bit integer
=head2 Unreassembled Fragmented Packet (unreassembled)
=head2 User Datagram Protocol (udp)
udp.checksum Checksum
Unsigned 16-bit integer
udp.checksum_bad Bad Checksum
Boolean
udp.dstport Destination Port
Unsigned 16-bit integer
udp.length Length
Unsigned 16-bit integer
udp.port Source or Destination Port
Unsigned 16-bit integer
udp.srcport Source Port
Unsigned 16-bit integer
=head2 Virtual Router Redundancy Protocol (vrrp)
vrrp.adver_int Adver Int
Unsigned 8-bit integer
vrrp.auth_type Auth Type
Unsigned 8-bit integer
vrrp.count_ip_addrs Count IP Addrs
Unsigned 8-bit integer
vrrp.ip_addr IP Address
IPv4 address
vrrp.prio Priority
Unsigned 8-bit integer
vrrp.type VRRP packet type
Unsigned 8-bit integer
vrrp.typever VRRP message version and type
Unsigned 8-bit integer
vrrp.version VRRP protocol version
Unsigned 8-bit integer
vrrp.virt_rtr_id Virtual Rtr ID
Unsigned 8-bit integer
=head2 Virtual Trunking Protocol (vtp)
vtp.code Code
Unsigned 8-bit integer
vtp.conf_rev_num Configuration Revision Number
Unsigned 32-bit integer
vtp.followers Followers
Unsigned 8-bit integer
vtp.md Management Domain
String
vtp.md5_digest MD5 Digest
Byte array
vtp.md_len Management Domain Length
Unsigned 8-bit integer
vtp.seq_num Sequence Number
Unsigned 8-bit integer
vtp.start_value Start Value
Unsigned 16-bit integer
vtp.upd_id Updater Identity
IPv4 address
vtp.upd_ts Update Timestamp
String
vtp.version Version
Unsigned 8-bit integer
vtp.vlan_info.802_10_index 802.10 Index
Unsigned 32-bit integer
vtp.vlan_info.isl_vlan_id ISL VLAN ID
Unsigned 16-bit integer
vtp.vlan_info.len VLAN Information Length
Unsigned 8-bit integer
vtp.vlan_info.mtu_size MTU Size
Unsigned 16-bit integer
vtp.vlan_info.status.vlan_susp VLAN suspended
Boolean
vtp.vlan_info.tlv_len Length
Unsigned 8-bit integer
vtp.vlan_info.tlv_type Type
Unsigned 8-bit integer
vtp.vlan_info.vlan_name VLAN Name
String
vtp.vlan_info.vlan_name_len VLAN Name Length
Unsigned 8-bit integer
vtp.vlan_info.vlan_type VLAN Type
Unsigned 8-bit integer
=head2 Web Cache Coordination Protocol (wccp)
wccp.cache_ip Web Cache IP address
IPv4 address
wccp.change_num Change Number
Unsigned 32-bit integer
wccp.hash_revision Hash Revision
Unsigned 32-bit integer
wccp.message WCCP Message Type
Unsigned 32-bit integer
wccp.recvd_id Received ID
Unsigned 32-bit integer
wccp.version WCCP Version
Unsigned 32-bit integer
=head2 Wellfleet Compression (wcp)
wcp.alg Alg
Unsigned 8-bit integer
wcp.alg1 Alg 1
Unsigned 8-bit integer
wcp.alg2 Alg 2
Unsigned 8-bit integer
wcp.alg3 Alg 3
Unsigned 8-bit integer
wcp.alg4 Alg 4
Unsigned 8-bit integer
wcp.alg_cnt Alg Count
Unsigned 8-bit integer
wcp.checksum Checksum
Unsigned 8-bit integer
wcp.cmd Command
Unsigned 8-bit integer
wcp.ext_cmd Extended Command
Unsigned 8-bit integer
wcp.flag Compress Flag
Unsigned 8-bit integer
wcp.hist History
Unsigned 8-bit integer
wcp.init Initiator
Unsigned 8-bit integer
wcp.long_comp Long Compression
Unsigned 16-bit integer
wcp.long_len Compress Length
Unsigned 8-bit integer
wcp.mark Compress Marker
Unsigned 8-bit integer
wcp.off Source offset
Unsigned 16-bit integer
wcp.pib PIB
Unsigned 8-bit integer
wcp.ppc PerPackComp
Unsigned 8-bit integer
wcp.rev Revision
Unsigned 8-bit integer
wcp.rexmit Rexmit
Unsigned 8-bit integer
wcp.seq SEQ
Unsigned 16-bit integer
wcp.seq_size Seq Size
Unsigned 8-bit integer
wcp.short_comp Short Compression
Unsigned 8-bit integer
wcp.short_len Compress Length
Unsigned 8-bit integer
wcp.tid TID
Unsigned 16-bit integer
=head2 Who (who)
who.boottime Boot Time
Date/Time stamp
who.hostname Hostname
String
who.idle Time Idle
Unsigned 32-bit integer
who.loadav_10 Load Average Over Past 10 Minutes
Double-precision floating point
who.loadav_15 Load Average Over Past 15 Minutes
Double-precision floating point
who.loadav_5 Load Average Over Past 5 Minutes
Double-precision floating point
who.recvtime Receive Time
Date/Time stamp
who.sendtime Send Time
Date/Time stamp
who.timeon Time On
Date/Time stamp
who.tty TTY Name
String
who.type Type
Unsigned 8-bit integer
who.uid User ID
String
who.vers Version
Unsigned 8-bit integer
who.whoent Who utmp Entry
No value
=head2 Wireless Session Protocol (wap-wsp)
wsp.TID Transmission ID
Unsigned 8-bit integer
wsp.capabilities Capabilities
No value
wsp.capabilities.aliases Aliases
Unsigned 8-bit integer
wsp.capabilities.client_SDU Client SDU
Unsigned 8-bit integer
wsp.capabilities.code_pages Header Code Pages
String
wsp.capabilities.extend_methods Extended Methods
String
wsp.capabilities.method_mor Method MOR
Unsigned 8-bit integer
wsp.capabilities.protocol_opt Protocol Options
String
wsp.capabilities.push_mor Push MOR
Unsigned 8-bit integer
wsp.capabilities.server_SDU Server SDU
Unsigned 8-bit integer
wsp.capability.length Capability Length
Unsigned 32-bit integer
wsp.content_type.parameter.charset Charset
Unsigned 16-bit integer
wsp.content_type.parameter.comment Comment
String
wsp.content_type.parameter.domain Domain
String
wsp.content_type.parameter.filename Filename
String
wsp.content_type.parameter.name Name
String
wsp.content_type.parameter.path Path
String
wsp.content_type.parameter.start Start
String
wsp.content_type.parameter.start_info Start-info
String
wsp.content_type.parameter.type Type
Unsigned 32-bit integer
wsp.content_type.parameter.upart.type Type
String
wsp.content_type.parameter.upart.type.int Type
Unsigned 8-bit integer
wsp.content_type.type Content Type
Unsigned 8-bit integer
wsp.content_type.type.string Content Type
String
wsp.header.accept Accept
Unsigned 8-bit integer
wsp.header.accept.string Accept
String
wsp.header.accept_application Accept-Application
Unsigned 32-bit integer
wsp.header.accept_application.string Accept-Application
String
wsp.header.accept_charset Accept-Charset
Unsigned 16-bit integer
wsp.header.accept_charset.string Accept-Charset
String
wsp.header.accept_language Accept-Language
Unsigned 8-bit integer
wsp.header.accept_language.string Accept-Language
String
wsp.header.accept_ranges Accept-Ranges
Unsigned 8-bit integer
wsp.header.accept_ranges.string Accept-Ranges
String
wsp.header.age Age
Unsigned 32-bit integer
wsp.header.application_header Application Header
String
wsp.header.application_header.value Application Header Value
String
wsp.header.bearer_indication Bearer-indication
Unsigned 32-bit integer
wsp.header.cache_control Cache-Control
Unsigned 8-bit integer
wsp.header.cache_control.field_name Field Name
Unsigned 8-bit integer
wsp.header.cache_control.field_name.str Field Name
String
wsp.header.cache_control.string Cache-Control
String
wsp.header.connection Connection
Unsigned 8-bit integer
wsp.header.connection_str Connection
String
wsp.header.content-id Content-ID
String
wsp.header.content_length Content-Length
Unsigned 32-bit integer
wsp.header.date Date
Date/Time stamp
wsp.header.etag Etag
String
wsp.header.expires Expires
Date/Time stamp
wsp.header.if_modified_since If-Modified-Since
Date/Time stamp
wsp.header.last_modified Last-Modified
Date/Time stamp
wsp.header.location Location
String
wsp.header.pragma Pragma
String
wsp.header.profile Profile
String
wsp.header.server Server
String
wsp.header.shift Shift code
Unsigned 8-bit integer
wsp.header.transfer_enc Transfer Encoding
Unsigned 8-bit integer
wsp.header.transfer_enc_str Transfer Encoding
String
wsp.header.user_agent User-Agent
String
wsp.header.via Via
String
wsp.header.wap_application_id X-Wap-Application-Id
Unsigned 8-bit integer
wsp.header.wap_application_id.string X-Wap-Application-Id
String
wsp.header.warning Warning
No value
wsp.header.warning.agent Warning Agent
String
wsp.header.warning.code Warning Code
Unsigned 32-bit integer
wsp.header.warning.text Warning Text
String
wsp.header.x-up-devcap-em-size x-up-devcap-em-size
Unsigned 32-bit integer
wsp.header.x-up-devcap-gui x-up-devcap-gui
Unsigned 8-bit integer
wsp.header.x-up-devcap-has-color x-up-devcap-has-color
Unsigned 8-bit integer
wsp.header.x-up-devcap-immed-alert x-up-devcap-immed-alert
Unsigned 8-bit integer
wsp.header.x-up-devcap-num-softkeys x-up-devcap-num-softkeys
Unsigned 8-bit integer
wsp.header.x-up-devcap-screen-chars x-up-devcap-screen-chars
Unsigned 8-bit integer
wsp.header.x-up-devcap-screen-depth x-up-devcap-screen-depth
Unsigned 8-bit integer
wsp.header.x-up-devcap-screen-pixels x-up-devcap-screen-pixels
Unsigned 32-bit integer
wsp.header.x-up-devcap-softkey-size x-up-devcap-softkey-size
Unsigned 8-bit integer
wsp.header.x-up-proxy-ba-enable x-up-proxy-ba-enable
Unsigned 8-bit integer
wsp.header.x-up-proxy-ba-realm x-up-proxy-ba-realm
String
wsp.header.x-up-proxy-bookmark x-up-proxy-bookmark
String
wsp.header.x-up-proxy-client-id x-up-proxy-client-id
Byte array
wsp.header.x-up-proxy-enable-trust x-up-proxy-enable-trust
Unsigned 8-bit integer
wsp.header.x-up-proxy-home-page x-up-proxy-home-page
String
wsp.header.x-up-proxy-linger x-up-proxy-linger
Unsigned 8-bit integer
wsp.header.x-up-proxy-net-ask x-up-proxy-net-ask
Unsigned 8-bit integer
wsp.header.x-up-proxy-notify x-up-proxy-notify
Unsigned 8-bit integer
wsp.header.x-up-proxy-operator-domain x-up-proxy-operator-domain
String
wsp.header.x-up-proxy-push-accept x-up-proxy-push-accept
String
wsp.header.x-up-proxy-push-addr x-up-proxy-push-addr
Byte array
wsp.header.x-up-proxy-push-seq x-up-proxy-push-seq
Unsigned 16-bit integer
wsp.header.x-up-proxy-redirect-enable x-up-proxy-redirect-enable
Unsigned 8-bit integer
wsp.header.x-up-proxy-redirect-status x-up-proxy-redirect-status
Unsigned 32-bit integer
wsp.header.x-up-proxy-request-uri x-up-proxy-request-uri
String
wsp.header.x-up-proxy-tod x-up-proxy-tod
Unsigned 8-bit integer
wsp.header.x-up-proxy-trans-charset x-up-proxy-trans-charset
Unsigned 16-bit integer
wsp.header.x-up-proxy-trans-charset.string x-up-proxy-trans-charset
String
wsp.header.x-up-proxy-trust x-up-proxy-trust
Unsigned 8-bit integer
wsp.header.x-up-proxy-trust-old x-up-proxy-trust-old
Unsigned 8-bit integer
wsp.header.x-up-proxy-uplink-version x-up-proxy-uplink-version
String
wsp.header.x_wap_tod X-WAP.TOD
Date/Time stamp
wsp.headers Headers
No value
wsp.headers.header Header
No value
wsp.headers_length Headers Length
Unsigned 32-bit integer
wsp.multipart Part
Unsigned 32-bit integer
wsp.multipart.data Data in this part
No value
wsp.pdu_type PDU Type
Unsigned 8-bit integer
wsp.post.data Post Data
No value
wsp.push.data Push Data
No value
wsp.redirect_addr Address
Byte array
wsp.redirect_afl Flags/Length
Unsigned 8-bit integer
wsp.redirect_afl.address_len Address Len
Unsigned 8-bit integer
wsp.redirect_afl.bearer_type_included Bearer Type Included
Boolean
wsp.redirect_afl.port_number_included Port Number Included
Boolean
wsp.redirect_bearer_type Bearer Type
Unsigned 8-bit integer
wsp.redirect_flags Flags
Unsigned 8-bit integer
wsp.redirect_flags.permanent Permanent Redirect
Boolean
wsp.redirect_flags.reuse_security_session Reuse Security Session
Boolean
wsp.redirect_ipv4_addr IP Address
IPv4 address
wsp.redirect_ipv6_addr IPv6 Address
IPv6 address
wsp.redirect_port_num Port Number
Unsigned 16-bit integer
wsp.reply.data Data
No value
wsp.reply.status Status
Unsigned 8-bit integer
wsp.server.session_id Server Session ID
Unsigned 32-bit integer
wsp.uri URI
String
wsp.uri_length URI Length
Unsigned 32-bit integer
wsp.version.major Version (Major)
Unsigned 8-bit integer
wsp.version.minor Version (Minor)
Unsigned 8-bit integer
=head2 Wireless Transaction Protocol (wap-wsp-wtp)
wtp.RID Re-transmission Indicator
Boolean
wtp.TID Transaction ID
Unsigned 16-bit integer
wtp.TID.response TID Response
Boolean
wtp.abort.reason.provider Abort Reason
Unsigned 8-bit integer
wtp.abort.reason.user Abort Reason
Unsigned 8-bit integer
wtp.abort.type Abort Type
Unsigned 8-bit integer
wtp.ack.tvetok Tve/Tok flag
Boolean
wtp.continue_flag Continue Flag
Boolean
wtp.header.TIDNew TIDNew
Boolean
wtp.header.UP U/P flag
Boolean
wtp.header.missing_packets Missing Packets
Unsigned 8-bit integer
wtp.header.sequence Packet Sequence Number
Unsigned 8-bit integer
wtp.header.version Version
Unsigned 8-bit integer
wtp.header_data Data
Byte array
wtp.header_fixed_part Header
Byte array
wtp.header_variable_part Header: Variable part
Byte array
wtp.inv.reserved Reserved
Unsigned 8-bit integer
wtp.inv.transaction_class Transaction Class
Unsigned 8-bit integer
wtp.pdu_type PDU Type
Unsigned 8-bit integer
wtp.sub_pdu_size Sub PDU size
Byte array
wtp.trailer_flags Trailer Flags
Unsigned 8-bit integer
=head2 Wireless Transport Layer Security (wap-wtls)
wsp.wtls.alert Alert
No value
wsp.wtls.alert.description Description
Unsigned 8-bit integer
wsp.wtls.alert.level Level
Unsigned 8-bit integer
wsp.wtls.handshake Handshake
Unsigned 8-bit integer
wsp.wtls.handshake.certificate Certificate
No value
wsp.wtls.handshake.certificate.after Valid not after
Date/Time stamp
wsp.wtls.handshake.certificate.before Valid not before
Date/Time stamp
wsp.wtls.handshake.certificate.issuer.charset Charset
Unsigned 16-bit integer
wsp.wtls.handshake.certificate.issuer.name Name
String
wsp.wtls.handshake.certificate.issuer.type Issuer
Unsigned 8-bit integer
wsp.wtls.handshake.certificate.parameter Parameter Set
String
wsp.wtls.handshake.certificate.parameter_index Parameter Index
Unsigned 8-bit integer
wsp.wtls.handshake.certificate.public.type Public Key Type
Unsigned 8-bit integer
wsp.wtls.handshake.certificate.rsa.exponent RSA Exponent Size
Unsigned 32-bit integer
wsp.wtls.handshake.certificate.rsa.modules RSA Modulus Size
Unsigned 32-bit integer
wsp.wtls.handshake.certificate.signature.signature Signature Size
Unsigned 32-bit integer
wsp.wtls.handshake.certificate.signature.type Signature Type
Unsigned 8-bit integer
wsp.wtls.handshake.certificate.subject.charset Charset
Unsigned 16-bit integer
wsp.wtls.handshake.certificate.subject.name Name
String
wsp.wtls.handshake.certificate.subject.type Subject
Unsigned 8-bit integer
wsp.wtls.handshake.certificate.type Type
Unsigned 8-bit integer
wsp.wtls.handshake.certificate.version Version
Unsigned 8-bit integer
wsp.wtls.handshake.certificates Certificates
No value
wsp.wtls.handshake.client_hello Client Hello
No value
wsp.wtls.handshake.client_hello.cipher Cipher
String
wsp.wtls.handshake.client_hello.ciphers Cipher Suites
No value
wsp.wtls.handshake.client_hello.client_keys_id Client Keys
No value
wsp.wtls.handshake.client_hello.client_keys_len Length
Unsigned 16-bit integer
wsp.wtls.handshake.client_hello.comp_methods Compression Methods
No value
wsp.wtls.handshake.client_hello.compression Compression
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.gmt Time GMT
Date/Time stamp
wsp.wtls.handshake.client_hello.ident_charset Identifier CharSet
Unsigned 16-bit integer
wsp.wtls.handshake.client_hello.ident_name Identifier Name
String
wsp.wtls.handshake.client_hello.ident_size Identifier Size
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.ident_type Identifier Type
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.identifier Identifier
No value
wsp.wtls.handshake.client_hello.key.key_exchange Key Exchange
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.key.key_exchange.suite Suite
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.parameter Parameter Set
String
wsp.wtls.handshake.client_hello.parameter_index Parameter Index
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.random Random
No value
wsp.wtls.handshake.client_hello.refresh Refresh
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.sequence_mode Sequence Mode
Unsigned 8-bit integer
wsp.wtls.handshake.client_hello.session.str Session ID
String
wsp.wtls.handshake.client_hello.sessionid Session ID
Unsigned 32-bit integer
wsp.wtls.handshake.client_hello.trusted_keys_id Trusted Keys
No value
wsp.wtls.handshake.client_hello.version Version
Unsigned 8-bit integer
wsp.wtls.handshake.length Length
Unsigned 16-bit integer
wsp.wtls.handshake.server_hello Server Hello
No value
wsp.wtls.handshake.server_hello.cipher Cipher
No value
wsp.wtls.handshake.server_hello.cipher.bulk Cipher Bulk
Unsigned 8-bit integer
wsp.wtls.handshake.server_hello.cipher.mac Cipher MAC
Unsigned 8-bit integer
wsp.wtls.handshake.server_hello.compression Compression
Unsigned 8-bit integer
wsp.wtls.handshake.server_hello.gmt Time GMT
Date/Time stamp
wsp.wtls.handshake.server_hello.key Client Key ID
Unsigned 8-bit integer
wsp.wtls.handshake.server_hello.random Random
No value
wsp.wtls.handshake.server_hello.refresh Refresh
Unsigned 8-bit integer
wsp.wtls.handshake.server_hello.sequence_mode Sequence Mode
Unsigned 8-bit integer
wsp.wtls.handshake.server_hello.session.str Session ID
String
wsp.wtls.handshake.server_hello.sessionid Session ID
Unsigned 32-bit integer
wsp.wtls.handshake.server_hello.version Version
Unsigned 8-bit integer
wsp.wtls.handshake.type Type
Unsigned 8-bit integer
wsp.wtls.rec_cipher Record Ciphered
No value
wsp.wtls.rec_length Record Length
Unsigned 16-bit integer
wsp.wtls.rec_seq Record Sequence
Unsigned 16-bit integer
wsp.wtls.rec_type Record Type
Unsigned 8-bit integer
wsp.wtls.record Record
Unsigned 8-bit integer
=head2 X.25 (x.25)
x.25.a A Bit
Boolean
x.25.d D Bit
Boolean
x.25.gfi GFI
Unsigned 16-bit integer
x.25.lcn Logical Channel
Unsigned 16-bit integer
x.25.m M Bit
Boolean
x.25.mod Modulo
Unsigned 16-bit integer
x.25.p_r P(R)
Unsigned 8-bit integer
x.25.p_s P(S)
Unsigned 8-bit integer
x.25.q Q Bit
Boolean
x.25.type Packet Type
Unsigned 8-bit integer
=head2 X.25 over TCP (xot)
xot.length Length
Unsigned 16-bit integer
xot.version Version
Unsigned 16-bit integer
=head2 X11 (x11)
x11.acceleration-denominator acceleration-denominator
Signed 16-bit integer
x11.acceleration-numerator acceleration-numerator
Signed 16-bit integer
x11.access-mode access-mode
Unsigned 8-bit integer
x11.address address
Byte array
x11.address-length address-length
Unsigned 16-bit integer
x11.alloc alloc
Unsigned 8-bit integer
x11.allow-events-mode allow-events-mode
Unsigned 8-bit integer
x11.allow-exposures allow-exposures
Unsigned 8-bit integer
x11.arc arc
No value
x11.arc.angle1 angle1
Signed 16-bit integer
x11.arc.angle2 angle2
Signed 16-bit integer
x11.arc.height height
Unsigned 16-bit integer
x11.arc.mode mode
Unsigned 8-bit integer
x11.arc.width width
Unsigned 16-bit integer
x11.arc.x x
Signed 16-bit integer
x11.arc.y y
Signed 16-bit integer
x11.arcs arcs
No value
x11.atom atom
Unsigned 32-bit integer
x11.auto-repeat-mode auto-repeat-mode
Unsigned 8-bit integer
x11.back-blue back-blue
Unsigned 16-bit integer
x11.back-green back-green
Unsigned 16-bit integer
x11.back-red back-red
Unsigned 16-bit integer
x11.background background
Unsigned 32-bit integer
x11.background-pixel background-pixel
Unsigned 32-bit integer
x11.background-pixmap background-pixmap
Unsigned 32-bit integer
x11.backing-pixel backing-pixel
Unsigned 32-bit integer
x11.backing-planes backing-planes
Unsigned 32-bit integer
x11.backing-store backing-store
Unsigned 8-bit integer
x11.bell-duration bell-duration
Signed 16-bit integer
x11.bell-percent bell-percent
Signed 8-bit integer
x11.bell-pitch bell-pitch
Signed 16-bit integer
x11.bit-gravity bit-gravity
Unsigned 8-bit integer
x11.bit-plane bit-plane
Unsigned 32-bit integer
x11.blue blue
Unsigned 16-bit integer
x11.blues blues
Unsigned 16-bit integer
x11.border-pixel border-pixel
Unsigned 32-bit integer
x11.border-pixmap border-pixmap
Unsigned 32-bit integer
x11.border-width border-width
Unsigned 16-bit integer
x11.button button
Unsigned 8-bit integer
x11.cap-style cap-style
Unsigned 8-bit integer
x11.change-host-mode change-host-mode
Unsigned 8-bit integer
x11.cid cid
Unsigned 32-bit integer
x11.class class
Unsigned 8-bit integer
x11.clip-mask clip-mask
Unsigned 32-bit integer
x11.clip-x-origin clip-x-origin
Signed 16-bit integer
x11.clip-y-origin clip-y-origin
Signed 16-bit integer
x11.close-down-mode close-down-mode
Unsigned 8-bit integer
x11.cmap cmap
Unsigned 32-bit integer
x11.color-items color-items
No value
x11.coloritem coloritem
No value
x11.coloritem.blue blue
Unsigned 16-bit integer
x11.coloritem.flags flags
Unsigned 8-bit integer
x11.coloritem.flags.do-blue do-blue
Boolean
x11.coloritem.flags.do-green do-green
Boolean
x11.coloritem.flags.do-red do-red
Boolean
x11.coloritem.flags.unused unused
Boolean
x11.coloritem.green green
Unsigned 16-bit integer
x11.coloritem.pixel pixel
Unsigned 32-bit integer
x11.coloritem.red red
Unsigned 16-bit integer
x11.coloritem.unused unused
No value
x11.colormap colormap
Unsigned 32-bit integer
x11.colors colors
Unsigned 16-bit integer
x11.configure-window-mask configure-window-mask
Unsigned 16-bit integer
x11.configure-window-mask.border-width border-width
Boolean
x11.configure-window-mask.height height
Boolean
x11.configure-window-mask.sibling sibling
Boolean
x11.configure-window-mask.stack-mode stack-mode
Boolean
x11.configure-window-mask.width width
Boolean
x11.configure-window-mask.x x
Boolean
x11.configure-window-mask.y y
Boolean
x11.confine-to confine-to
Unsigned 32-bit integer
x11.contiguous contiguous
Boolean
x11.coordinate-mode coordinate-mode
Unsigned 8-bit integer
x11.count count
Unsigned 8-bit integer
x11.cursor cursor
Unsigned 32-bit integer
x11.dash-offset dash-offset
Unsigned 16-bit integer
x11.dashes dashes
Byte array
x11.dashes-length dashes-length
Unsigned 16-bit integer
x11.data data
Byte array
x11.data-length data-length
Unsigned 32-bit integer
x11.delete delete
Boolean
x11.delta delta
Signed 16-bit integer
x11.depth depth
Unsigned 8-bit integer
x11.direction direction
Unsigned 8-bit integer
x11.do-acceleration do-acceleration
Boolean
x11.do-not-propagate-mask do-not-propagate-mask
Unsigned 32-bit integer
x11.do-not-propagate-mask.Button1Motion Button1Motion
Boolean
x11.do-not-propagate-mask.Button2Motion Button2Motion
Boolean
x11.do-not-propagate-mask.Button3Motion Button3Motion
Boolean
x11.do-not-propagate-mask.Button4Motion Button4Motion
Boolean
x11.do-not-propagate-mask.Button5Motion Button5Motion
Boolean
x11.do-not-propagate-mask.ButtonMotion ButtonMotion
Boolean
x11.do-not-propagate-mask.ButtonPress ButtonPress
Boolean
x11.do-not-propagate-mask.ButtonRelease ButtonRelease
Boolean
x11.do-not-propagate-mask.KeyPress KeyPress
Boolean
x11.do-not-propagate-mask.KeyRelease KeyRelease
Boolean
x11.do-not-propagate-mask.PointerMotion PointerMotion
Boolean
x11.do-not-propagate-mask.erroneous-bits erroneous-bits
Boolean
x11.do-threshold do-threshold
Boolean
x11.drawable drawable
Unsigned 32-bit integer
x11.dst-drawable dst-drawable
Unsigned 32-bit integer
x11.dst-gc dst-gc
Unsigned 32-bit integer
x11.dst-window dst-window
Unsigned 32-bit integer
x11.dst-x dst-x
Signed 16-bit integer
x11.dst-y dst-y
Signed 16-bit integer
x11.event-mask event-mask
Unsigned 32-bit integer
x11.event-mask.Button1Motion Button1Motion
Boolean
x11.event-mask.Button2Motion Button2Motion
Boolean
x11.event-mask.Button3Motion Button3Motion
Boolean
x11.event-mask.Button4Motion Button4Motion
Boolean
x11.event-mask.Button5Motion Button5Motion
Boolean
x11.event-mask.ButtonMotion ButtonMotion
Boolean
x11.event-mask.ButtonPress ButtonPress
Boolean
x11.event-mask.ButtonRelease ButtonRelease
Boolean
x11.event-mask.ColormapChange ColormapChange
Boolean
x11.event-mask.EnterWindow EnterWindow
Boolean
x11.event-mask.Exposure Exposure
Boolean
x11.event-mask.FocusChange FocusChange
Boolean
x11.event-mask.KeyPress KeyPress
Boolean
x11.event-mask.KeyRelease KeyRelease
Boolean
x11.event-mask.KeymapState KeymapState
Boolean
x11.event-mask.LeaveWindow LeaveWindow
Boolean
x11.event-mask.OwnerGrabButton OwnerGrabButton
Boolean
x11.event-mask.PointerMotion PointerMotion
Boolean
x11.event-mask.PointerMotionHint PointerMotionHint
Boolean
x11.event-mask.PropertyChange PropertyChange
Boolean
x11.event-mask.ResizeRedirect ResizeRedirect
Boolean
x11.event-mask.StructureNotify StructureNotify
Boolean
x11.event-mask.SubstructureNotify SubstructureNotify
Boolean
x11.event-mask.SubstructureRedirect SubstructureRedirect
Boolean
x11.event-mask.VisibilityChange VisibilityChange
Boolean
x11.event-mask.erroneous-bits erroneous-bits
Boolean
x11.exposures exposures
Boolean
x11.family family
Unsigned 8-bit integer
x11.fid fid
Unsigned 32-bit integer
x11.fill-rule fill-rule
Unsigned 8-bit integer
x11.fill-style fill-style
Unsigned 8-bit integer
x11.first-keycode first-keycode
Unsigned 8-bit integer
x11.focus focus
Unsigned 8-bit integer
x11.font font
Unsigned 32-bit integer
x11.fore-blue fore-blue
Unsigned 16-bit integer
x11.fore-green fore-green
Unsigned 16-bit integer
x11.fore-red fore-red
Unsigned 16-bit integer
x11.foreground foreground
Unsigned 32-bit integer
x11.format format
Unsigned 8-bit integer
x11.function function
Unsigned 8-bit integer
x11.gc gc
Unsigned 32-bit integer
x11.gc-dashes gc-dashes
Unsigned 8-bit integer
x11.gc-value-mask gc-value-mask
Unsigned 32-bit integer
x11.gc-value-mask.arc-mode arc-mode
Boolean
x11.gc-value-mask.background background
Boolean
x11.gc-value-mask.cap-style cap-style
Boolean
x11.gc-value-mask.clip-mask clip-mask
Boolean
x11.gc-value-mask.clip-x-origin clip-x-origin
Boolean
x11.gc-value-mask.clip-y-origin clip-y-origin
Boolean
x11.gc-value-mask.dash-offset dash-offset
Boolean
x11.gc-value-mask.fill-rule fill-rule
Boolean
x11.gc-value-mask.fill-style fill-style
Boolean
x11.gc-value-mask.font font
Boolean
x11.gc-value-mask.foreground foreground
Boolean
x11.gc-value-mask.function function
Boolean
x11.gc-value-mask.gc-dashes gc-dashes
Boolean
x11.gc-value-mask.graphics-exposures graphics-exposures
Boolean
x11.gc-value-mask.join-style join-style
Boolean
x11.gc-value-mask.line-style line-style
Boolean
x11.gc-value-mask.line-width line-width
Boolean
x11.gc-value-mask.plane-mask plane-mask
Boolean
x11.gc-value-mask.stipple stipple
Boolean
x11.gc-value-mask.subwindow-mode subwindow-mode
Boolean
x11.gc-value-mask.tile tile
Boolean
x11.gc-value-mask.tile-stipple-x-origin tile-stipple-x-origin
Boolean
x11.gc-value-mask.tile-stipple-y-origin tile-stipple-y-origin
Boolean
x11.get-property-type get-property-type
Unsigned 32-bit integer
x11.grab_window grab_window
Unsigned 32-bit integer
x11.graphics-exposures graphics-exposures
Boolean
x11.green green
Unsigned 16-bit integer
x11.greens greens
Unsigned 16-bit integer
x11.height height
Unsigned 16-bit integer
x11.image-format image-format
Unsigned 8-bit integer
x11.image-pixmap-format image-pixmap-format
Unsigned 8-bit integer
x11.interval interval
Signed 16-bit integer
x11.items items
No value
x11.join-style join-style
Unsigned 8-bit integer
x11.key key
Unsigned 8-bit integer
x11.key-click-percent key-click-percent
Signed 8-bit integer
x11.keyboard-key keyboard-key
Unsigned 8-bit integer
x11.keyboard-mode keyboard-mode
Unsigned 8-bit integer
x11.keyboard-value-mask keyboard-value-mask
Unsigned 32-bit integer
x11.keyboard-value-mask.auto-repeat-mode auto-repeat-mode
Boolean
x11.keyboard-value-mask.bell-duration bell-duration
Boolean
x11.keyboard-value-mask.bell-percent bell-percent
Boolean
x11.keyboard-value-mask.bell-pitch bell-pitch
Boolean
x11.keyboard-value-mask.key-click-percent key-click-percent
Boolean
x11.keyboard-value-mask.keyboard-key keyboard-key
Boolean
x11.keyboard-value-mask.led led
Boolean
x11.keyboard-value-mask.led-mode led-mode
Boolean
x11.keycode-count keycode-count
Unsigned 8-bit integer
x11.keycodes keycodes
No value
x11.keycodes-per-modifier keycodes-per-modifier
Unsigned 8-bit integer
x11.keycodes.item item
Byte array
x11.keysyms keysyms
No value
x11.keysyms-per-keycode keysyms-per-keycode
Unsigned 8-bit integer
x11.keysyms.item item
No value
x11.keysyms.item.keysym keysym
Unsigned 32-bit integer
x11.led led
Unsigned 8-bit integer
x11.led-mode led-mode
Unsigned 8-bit integer
x11.left-pad left-pad
Unsigned 8-bit integer
x11.line-style line-style
Unsigned 8-bit integer
x11.line-width line-width
Unsigned 16-bit integer
x11.long-length long-length
Unsigned 32-bit integer
x11.long-offset long-offset
Unsigned 32-bit integer
x11.map map
Byte array
x11.map-length map-length
Unsigned 8-bit integer
x11.mask mask
Unsigned 32-bit integer
x11.mask-char mask-char
Unsigned 16-bit integer
x11.mask-font mask-font
Unsigned 32-bit integer
x11.max-names max-names
Unsigned 16-bit integer
x11.mid mid
Unsigned 32-bit integer
x11.mode mode
Unsigned 8-bit integer
x11.modifiers-mask modifiers-mask
Unsigned 16-bit integer
x11.modifiers-mask.AnyModifier AnyModifier
Unsigned 16-bit integer
x11.modifiers-mask.Control Control
Boolean
x11.modifiers-mask.Lock Lock
Boolean
x11.modifiers-mask.Mod1 Mod1
Boolean
x11.modifiers-mask.Mod2 Mod2
Boolean
x11.modifiers-mask.Mod3 Mod3
Boolean
x11.modifiers-mask.Mod4 Mod4
Boolean
x11.modifiers-mask.Mod5 Mod5
Boolean
x11.modifiers-mask.Shift Shift
Boolean
x11.modifiers-mask.erroneous-bits erroneous-bits
Boolean
x11.name name
String
x11.name-length name-length
Unsigned 16-bit integer
x11.odd-length odd-length
Boolean
x11.only-if-exists only-if-exists
Boolean
x11.opcode opcode
Unsigned 8-bit integer
x11.ordering ordering
Unsigned 8-bit integer
x11.override-redirect override-redirect
Boolean
x11.owner owner
Unsigned 32-bit integer
x11.owner-events owner-events
Boolean
x11.parent parent
Unsigned 32-bit integer
x11.path path
No value
x11.path.string string
String
x11.pattern pattern
String
x11.pattern-length pattern-length
Unsigned 16-bit integer
x11.percent percent
Unsigned 8-bit integer
x11.pid pid
Unsigned 32-bit integer
x11.pixel pixel
Unsigned 32-bit integer
x11.pixels pixels
No value
x11.pixels_item pixels_item
Unsigned 32-bit integer
x11.pixmap pixmap
Unsigned 32-bit integer
x11.plane-mask plane-mask
Unsigned 32-bit integer
x11.planes planes
Unsigned 16-bit integer
x11.point point
No value
x11.point-x point-x
Signed 16-bit integer
x11.point-y point-y
Signed 16-bit integer
x11.pointer-event-mask pointer-event-mask
Unsigned 16-bit integer
x11.pointer-event-mask.Button1Motion Button1Motion
Boolean
x11.pointer-event-mask.Button2Motion Button2Motion
Boolean
x11.pointer-event-mask.Button3Motion Button3Motion
Boolean
x11.pointer-event-mask.Button4Motion Button4Motion
Boolean
x11.pointer-event-mask.Button5Motion Button5Motion
Boolean
x11.pointer-event-mask.ButtonMotion ButtonMotion
Boolean
x11.pointer-event-mask.ButtonPress ButtonPress
Boolean
x11.pointer-event-mask.ButtonRelease ButtonRelease
Boolean
x11.pointer-event-mask.EnterWindow EnterWindow
Boolean
x11.pointer-event-mask.KeymapState KeymapState
Boolean
x11.pointer-event-mask.LeaveWindow LeaveWindow
Boolean
x11.pointer-event-mask.PointerMotion PointerMotion
Boolean
x11.pointer-event-mask.PointerMotionHint PointerMotionHint
Boolean
x11.pointer-event-mask.erroneous-bits erroneous-bits
Boolean
x11.pointer-mode pointer-mode
Unsigned 8-bit integer
x11.points points
No value
x11.prefer-blanking prefer-blanking
Unsigned 8-bit integer
x11.properties properties
No value
x11.properties.item item
Unsigned 32-bit integer
x11.property property
Unsigned 32-bit integer
x11.property-number property-number
Unsigned 16-bit integer
x11.rectangle rectangle
No value
x11.rectangle-height rectangle-height
Unsigned 16-bit integer
x11.rectangle-width rectangle-width
Unsigned 16-bit integer
x11.rectangle-x rectangle-x
Signed 16-bit integer
x11.rectangle-y rectangle-y
Signed 16-bit integer
x11.rectangles rectangles
No value
x11.red red
Unsigned 16-bit integer
x11.reds reds
Unsigned 16-bit integer
x11.request request
Unsigned 8-bit integer
x11.request-length request-length
Unsigned 16-bit integer
x11.requestor requestor
Unsigned 32-bit integer
x11.resource resource
Unsigned 32-bit integer
x11.revert-to revert-to
Unsigned 8-bit integer
x11.save-set-mode save-set-mode
Unsigned 8-bit integer
x11.save-under save-under
Boolean
x11.screen-saver-mode screen-saver-mode
Unsigned 8-bit integer
x11.segment segment
No value
x11.segment_x1 segment_x1
Signed 16-bit integer
x11.segment_x2 segment_x2
Signed 16-bit integer
x11.segment_y1 segment_y1
Signed 16-bit integer
x11.segment_y2 segment_y2
Signed 16-bit integer
x11.segments segments
No value
x11.selection selection
Unsigned 32-bit integer
x11.shape shape
Unsigned 8-bit integer
x11.sibling sibling
Unsigned 32-bit integer
x11.source-char source-char
Unsigned 16-bit integer
x11.source-font source-font
Unsigned 32-bit integer
x11.source-pixmap source-pixmap
Unsigned 32-bit integer
x11.src-cmap src-cmap
Unsigned 32-bit integer
x11.src-drawable src-drawable
Unsigned 32-bit integer
x11.src-gc src-gc
Unsigned 32-bit integer
x11.src-height src-height
Unsigned 16-bit integer
x11.src-width src-width
Unsigned 16-bit integer
x11.src-window src-window
Unsigned 32-bit integer
x11.src-x src-x
Signed 16-bit integer
x11.src-y src-y
Signed 16-bit integer
x11.stack-mode stack-mode
Unsigned 8-bit integer
x11.start start
Unsigned 32-bit integer
x11.stipple stipple
Unsigned 32-bit integer
x11.stop stop
Unsigned 32-bit integer
x11.str-number-in-path str-number-in-path
Unsigned 16-bit integer
x11.string string
String
x11.string-length string-length
Unsigned 32-bit integer
x11.string16 string16
String
x11.string16.bytes bytes
Byte array
x11.subwindow-mode subwindow-mode
Unsigned 8-bit integer
x11.target target
Unsigned 32-bit integer
x11.textitem textitem
No value
x11.textitem.font font
Unsigned 32-bit integer
x11.textitem.string string
No value
x11.textitem.string.delta delta
Signed 8-bit integer
x11.textitem.string.string16 string16
String
x11.textitem.string.string16.bytes bytes
Byte array
x11.textitem.string.string8 string8
String
x11.threshold threshold
Signed 16-bit integer
x11.tile tile
Unsigned 32-bit integer
x11.tile-stipple-x-origin tile-stipple-x-origin
Signed 16-bit integer
x11.tile-stipple-y-origin tile-stipple-y-origin
Signed 16-bit integer
x11.time time
Unsigned 32-bit integer
x11.timeout timeout
Signed 16-bit integer
x11.type type
Unsigned 32-bit integer
x11.undecoded undecoded
No value
x11.unused unused
No value
x11.visual visual
Unsigned 32-bit integer
x11.visualid visualid
Unsigned 32-bit integer
x11.warp-pointer-dst-window warp-pointer-dst-window
Unsigned 32-bit integer
x11.warp-pointer-src-window warp-pointer-src-window
Unsigned 32-bit integer
x11.wid wid
Unsigned 32-bit integer
x11.width width
Unsigned 16-bit integer
x11.win-gravity win-gravity
Unsigned 8-bit integer
x11.window window
Unsigned 32-bit integer
x11.window-class window-class
Unsigned 16-bit integer
x11.window-value-mask window-value-mask
Unsigned 32-bit integer
x11.window-value-mask.background-pixel background-pixel
Boolean
x11.window-value-mask.background-pixmap background-pixmap
Boolean
x11.window-value-mask.backing-pixel backing-pixel
Boolean
x11.window-value-mask.backing-planes backing-planes
Boolean
x11.window-value-mask.backing-store backing-store
Boolean
x11.window-value-mask.bit-gravity bit-gravity
Boolean
x11.window-value-mask.border-pixel border-pixel
Boolean
x11.window-value-mask.border-pixmap border-pixmap
Boolean
x11.window-value-mask.colormap colormap
Boolean
x11.window-value-mask.cursor cursor
Boolean
x11.window-value-mask.do-not-propagate-mask do-not-propagate-mask
Boolean
x11.window-value-mask.event-mask event-mask
Boolean
x11.window-value-mask.override-redirect override-redirect
Boolean
x11.window-value-mask.save-under save-under
Boolean
x11.window-value-mask.win-gravity win-gravity
Boolean
x11.x x
Signed 16-bit integer
x11.y y
Signed 16-bit integer
=head2 Yahoo Messenger Protocol (yhoo)
yhoo.connection_id Connection ID
Unsigned 32-bit integer
yhoo.content Content
String
yhoo.len Packet Length
Unsigned 32-bit integer
yhoo.magic_id Magic ID
Unsigned 32-bit integer
yhoo.msgtype Message Type
Unsigned 32-bit integer
yhoo.nick1 Real Nick (nick1)
String
yhoo.nick2 Active Nick (nick2)
String
yhoo.service Service Type
Unsigned 32-bit integer
yhoo.unknown1 Unknown 1
Unsigned 32-bit integer
yhoo.version Version
String
=head2 Yellow Pages Bind (ypbind)
ypbind.addr IP Addr
IPv4 address
ypbind.domain Domain
String
ypbind.error Error
Unsigned 32-bit integer
ypbind.port Port
Unsigned 32-bit integer
ypbind.resp_type Response Type
Unsigned 32-bit integer
ypbind.setdom.version Version
Unsigned 32-bit integer
=head2 Yellow Pages Passwd (yppasswd)
yppasswd.newpw newpw
No value
yppasswd.newpw.dir dir
String
yppasswd.newpw.gecos gecos
String
yppasswd.newpw.gid gid
Unsigned 32-bit integer
yppasswd.newpw.name name
String
yppasswd.newpw.passwd passwd
String
yppasswd.newpw.shell shell
String
yppasswd.newpw.uid uid
Unsigned 32-bit integer
yppasswd.oldpass oldpass
String
yppasswd.status status
Unsigned 32-bit integer
=head2 Yellow Pages Service (ypserv)
ypserv.domain Domain
String
ypserv.key Key
String
ypserv.map Map Name
String
ypserv.map_parms YP Map Parameters
No value
ypserv.more More
Boolean
ypserv.ordernum Order Number
Unsigned 32-bit integer
ypserv.peer Peer Name
String
ypserv.port Port
Unsigned 32-bit integer
ypserv.prog Program Number
Unsigned 32-bit integer
ypserv.servesdomain Serves Domain
Boolean
ypserv.status Status
Signed 32-bit integer
ypserv.transid Host Transport ID
IPv4 address
ypserv.value Value
String
ypserv.xfrstat Xfrstat
Signed 32-bit integer
=head2 Yellow Pages Transfer (ypxfr)
=head2 Zebra Protocol (zebra)
zebra.bandwidth Bandwidth
Unsigned 32-bit integer
zebra.command Command
Unsigned 8-bit integer
zebra.dest4 Destination
IPv4 address
zebra.dest6 Destination
IPv6 address
zebra.distance Distance
Unsigned 8-bit integer
zebra.family Family
Unsigned 32-bit integer
zebra.index Index
Unsigned 32-bit integer
zebra.indexnum Index Number
Unsigned 8-bit integer
zebra.interface Interface
String
zebra.intflags Flags
Unsigned 32-bit integer
zebra.len Length
Unsigned 16-bit integer
zebra.message Message
Unsigned 8-bit integer
zebra.message.distance Message Distance
Boolean
zebra.message.index Message Index
Boolean
zebra.message.metric Message Metric
Boolean
zebra.message.nexthop Message Nexthop
Boolean
zebra.metric Metric
Unsigned 32-bit integer
zebra.mtu MTU
Unsigned 32-bit integer
zebra.nexthop4 Nexthop
IPv4 address
zebra.nexthop6 Nexthop
IPv6 address
zebra.nexthopnum Nexthop Number
Unsigned 8-bit integer
zebra.prefix4 Prefix
IPv4 address
zebra.prefix6 Prefix
IPv6 address
zebra.prefixlen Prefix length
Unsigned 32-bit integer
zebra.request Request
Boolean
zebra.rtflags Flags
Unsigned 8-bit integer
zebra.type Type
Unsigned 8-bit integer
=head2 iSCSI (iscsi)
iscsi.I I
Boolean
iscsi.ahs AHS
Byte array
iscsi.asyncevent AsyncEvent
Unsigned 8-bit integer
iscsi.bufferOffset BufferOffset
Unsigned 32-bit integer
iscsi.cid CID
Unsigned 16-bit integer
iscsi.cmdsn CmdSN
Unsigned 32-bit integer
iscsi.datadigest DataDigest
Byte array
iscsi.datadigest32 DataDigest
Unsigned 32-bit integer
iscsi.datasegmentlength DataSegmentLength
Unsigned 32-bit integer
iscsi.datasn DataSN
Unsigned 32-bit integer
iscsi.desireddatalength DesiredDataLength
Unsigned 32-bit integer
iscsi.errorpdudata ErrorPDUData
Byte array
iscsi.eventvendorcode EventVendorCode
Unsigned 8-bit integer
iscsi.expcmdsn ExpCmdSN
Unsigned 32-bit integer
iscsi.expdatasn ExpDataSN
Unsigned 32-bit integer
iscsi.expstatsn ExpStatSN
Unsigned 32-bit integer
iscsi.flags Flags
Unsigned 8-bit integer
iscsi.headerdigest HeaderDigest
Byte array
iscsi.headerdigest32 HeaderDigest
Unsigned 32-bit integer
iscsi.immediatedata ImmediateData
Byte array
iscsi.initcmdsn InitCmdSN
Unsigned 32-bit integer
iscsi.initiatortasktag InitiatorTaskTag
Unsigned 32-bit integer
iscsi.initstatsn InitStatSN
Unsigned 32-bit integer
iscsi.isid ISID
Byte array
iscsi.isid.namingauthority ISIDNamingAuthority
Unsigned 24-bit integer
iscsi.isid.qualifier ISIDQualifier
Unsigned 8-bit integer
iscsi.isid.type ISIDType
Unsigned 8-bit integer
iscsi.keyvalue KeyValue
String
iscsi.login.T T
Boolean
iscsi.login.X X
Boolean
iscsi.login.csg CSG
Unsigned 8-bit integer
iscsi.login.nsg NSG
Unsigned 8-bit integer
iscsi.login.status Status
Unsigned 16-bit integer
iscsi.logout.reason Reason
Unsigned 8-bit integer
iscsi.logout.response Response
Unsigned 8-bit integer
iscsi.lun LUN
Byte array
iscsi.maxcmdsn MaxCmdSN
Unsigned 32-bit integer
iscsi.opcode Opcode
Unsigned 8-bit integer
iscsi.padding Padding
Byte array
iscsi.parameter1 Parameter1
Unsigned 16-bit integer
iscsi.parameter2 Parameter2
Unsigned 16-bit integer
iscsi.parameter3 Parameter3
Unsigned 16-bit integer
iscsi.pingdata PingData
Byte array
iscsi.r2tsn R2TSN
Unsigned 32-bit integer
iscsi.readdata ReadData
Byte array
iscsi.refcmdsn RefCmdSN
Unsigned 32-bit integer
iscsi.reject.reason Reason
Unsigned 8-bit integer
iscsi.scsicommand.F F
Boolean
iscsi.scsicommand.R R
Boolean
iscsi.scsicommand.W W
Boolean
iscsi.scsicommand.addcdb AddCDB
Unsigned 8-bit integer
iscsi.scsicommand.attr Attr
Unsigned 8-bit integer
iscsi.scsicommand.crn CRN
Unsigned 8-bit integer
iscsi.scsicommand.expecteddatatransferlength ExpectedDataTransferLength
Unsigned 32-bit integer
iscsi.scsidata.F F
Boolean
iscsi.scsidata.O O
Boolean
iscsi.scsidata.S S
Boolean
iscsi.scsidata.U U
Boolean
iscsi.scsidata.readresidualcount ResidualCount
Unsigned 32-bit integer
iscsi.scsiresponse.O O
Boolean
iscsi.scsiresponse.U U
Boolean
iscsi.scsiresponse.bidireadresidualcount BidiReadResidualCount
Unsigned 32-bit integer
iscsi.scsiresponse.o o
Boolean
iscsi.scsiresponse.residualcount ResidualCount
Unsigned 32-bit integer
iscsi.scsiresponse.response Response
Unsigned 8-bit integer
iscsi.scsiresponse.senselength SenseLength
Unsigned 16-bit integer
iscsi.scsiresponse.status Status
Unsigned 8-bit integer
iscsi.scsiresponse.u u
Boolean
iscsi.snack.begrun BegRun
Unsigned 32-bit integer
iscsi.snack.runlength RunLength
Unsigned 32-bit integer
iscsi.snack.type S
Unsigned 8-bit integer
iscsi.statsn StatSN
Unsigned 32-bit integer
iscsi.targettransfertag TargetTransferTag
Unsigned 32-bit integer
iscsi.taskmanfun.function Function
Unsigned 8-bit integer
iscsi.taskmanfun.referencedtasktag ReferencedTaskTag
Unsigned 32-bit integer
iscsi.taskmanfun.response Response
Unsigned 8-bit integer
iscsi.text.F F
Boolean
iscsi.time2retain Time2Retain
Unsigned 16-bit integer
iscsi.time2wait Time2Wait
Unsigned 16-bit integer
iscsi.totalahslength TotalAHSLength
Unsigned 8-bit integer
iscsi.tsid TSID
Unsigned 16-bit integer
iscsi.versionactive VersionActive
Unsigned 8-bit integer
iscsi.versionmax VersionMax
Unsigned 8-bit integer
iscsi.versionmin VersionMin
Unsigned 8-bit integer
iscsi.writedata WriteData
Byte array
=head1 FILES
The F<ethereal.conf> file, which is installed in the F<etc> directory
under the main installation directory (for example, F</usr/local/etc>)
on UNIX-compatible systems, and in the main installation directory (for
example, F<C:\Program Files\Ethereal>) on Windows systems, and the
personal preferences file, which is F<$HOME/.ethereal/preferences> on
UNIX-compatible systems and F<%APPDATA%\Ethereal\preferences> (or, if
%APPDATA% isn't defined,
F<%USERPROFILE%\Application Data\Ethereal\preferences>) on
Windows systems, contain system-wide and personal preference settings,
respectively. The file contains preference settings of the form
I<prefname>B<:>I<value>, one per line, where I<prefname> is the name of
the preference (which is the same name that would appear in the
preference file), and I<value> is the value to which it should be set;
white space is allowed between B<:> and I<value>. A preference setting
can be continued on subsequent lines by indenting the continuation lines
with white space. A B<#> character starts a comment that runs to the
end of the line.
The system-wide preference file is read first, if it exists, overriding
B<Tethereal>'s default values; the personal preferences file is then
read, if it exists, overriding default values and values read from the
system-wide preference file.
The F<ethers> file, which is found in the F</etc> directory on
UNIX-compatible systems, and in the main installation directory (for
example, F<C:\Program Files\Ethereal>) on Windows systems, is consulted
to correlate 6-byte hardware addresses to names. If an address is not
found in the F<ethers> file, the F<$HOME/.ethereal/ethers> file on
UNIX-compatible systems, and the F<%APPDATA%\Ethereal\ethers> file (or, if
%APPDATA% isn't defined, the
F<%USERPROFILE%\Application Data\Ethereal\ethers> file) on Windows
systems is consulted next. Each line contains one hardware
address and name, separated by whitespace. The digits of the hardware
address are separated by either a colon (:), a dash (-), or a period
(.). The following three lines are valid lines of an ethers file:
ff:ff:ff:ff:ff:ff Broadcast
c0-00-ff-ff-ff-ff TR_broadcast
00.00.00.00.00.00 Zero_broadcast
The F<manuf> file, which is installed in the F<etc> directory under the
main installation directory (for example, F</usr/local/etc>) on
UNIX-compatible systems, and in the main installation directory (for
example, F<C:\Program Files\Ethereal>) on Windows systems, matches the
3-byte vendor portion of a 6-byte hardware address with the
manufacturer's name. The format of the file is the same as the
F<ethers> file, except that each address is three bytes instead of six.
The F<ipxnets> file, which is found in the F</etc> directory on
UNIX-compatible systems, and in the main installation directory (for
example, F<C:\Program Files\Ethereal>) on Windows systems, correlates
4-byte IPX network numbers to names. If a network number is not found
in the F<ipxnets> file, the F<$HOME/.ethereal/ipxnets> file on
UNIX-compatible systems, and the F<%APPDATA%\Ethereal\ipxnets> file (or,
if %APPDATA% isn't defined, the
F<%USERPROFILE%\Application Data\Ethereal\ipxnets> file)
on Windows systems, is consulted next. The format is the same as the
F<ethers> file, except that each address if four bytes instead of six.
Additionally, the address can be represented a single hexadecimal
number, as is more common in the IPX world, rather than four hex octets.
For example, these four lines are valid lines of an ipxnets file.
C0.A8.2C.00 HR
c0-a8-1c-00 CEO
00:00:BE:EF IT_Server1
110f FileServer3
=head1 SEE ALSO
L<ethereal(1)>, L<editcap(1)>, L<tcpdump(8)>, L<pcap(3)>
=head1 NOTES
B<Tethereal> is part of the B<Ethereal> distribution. The latest version
of B<Ethereal> can be found at B<http://www.ethereal.com>.
=head1 AUTHORS
B<Tethereal> uses the same packet dissection code that B<Ethereal> does,
as well as using many other modules from B<Ethereal>; see the list of
authors in the B<Ethereal> man page for a list of authors of that code.
distrib
>
Mandriva
>
8.2
>
i586
>
media
>
contrib
>
by-pkgid
>
8a9a733da3e70519cb291445877ddccc
>
files
>
58
