Appendix A. Ethereal Display Filter Fields
Datagram Delivery Protocol (ddp)
Table A-51. Datagram Delivery Protocol (ddp)
Field |
Field Name |
Type |
ddp.checksum |
Checksum |
Unsigned 16-bit integer |
ddp.dst |
Destination address |
String |
ddp.dst.net |
Destination Net |
Unsigned 16-bit integer |
ddp.dst.node |
Destination Node |
Unsigned 8-bit integer |
ddp.dst_socket |
Destination Socket |
Unsigned 8-bit integer |
ddp.hopcount |
Hop count |
Unsigned 8-bit integer |
ddp.len |
Datagram length |
Unsigned 16-bit integer |
ddp.src |
Source address |
String |
ddp.src.net |
Source Net |
Unsigned 16-bit integer |
ddp.src.node |
Source Node |
Unsigned 8-bit integer |
ddp.src_socket |
Source Socket |
Unsigned 8-bit integer |
ddp.type |
Protocol type |
Unsigned 8-bit integer |
Diameter Protocol (diameter)
Table A-52. Diameter Protocol (diameter)
Field |
Field Name |
Type |
diameter.avp.code |
AVP Code |
Unsigned 32-bit integer |
diameter.avp.data.bytes |
Value |
Byte array |
diameter.avp.data.int32 |
Value |
Signed 32-bit integer |
diameter.avp.data.int64 |
Value |
|
diameter.avp.data.string |
Value |
String |
diameter.avp.data.time |
Time |
Date/Time stamp |
diameter.avp.data.uint32 |
Value |
Unsigned 32-bit integer |
diameter.avp.data.uint64 |
Value |
|
diameter.avp.data.v4addr |
IPv4 Address |
IPv4 address |
diameter.avp.data.v6addr |
IPv6 Address |
IPv6 address |
diameter.avp.flags |
AVP Flags |
Unsigned 8-bit integer |
diameter.avp.flags.protectedProtected |
Boolean |
|
|
|
|
diameter.avp.flags.reserved3Reserved |
Boolean |
|
|
|
|
143
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
diameter.avp.flags.reserved4Reserved |
|
Boolean |
|
|
|
diameter.avp.flags.reserved5Reserved |
|
Boolean |
|
|
|
diameter.avp.flags.reserved6Reserved |
|
Boolean |
|
|
|
diameter.avp.flags.reserved7Reserved |
|
Boolean |
|
|
|
diameter.avp.length |
AVP Length |
Unsigned 24-bit integer |
diameter.avp.vendorId |
AVP Vendor Id |
Unsigned 32-bit integer |
diameter.code |
Command Code |
Unsigned 24-bit integer |
diameter.endtoendid |
End-to-End Identifier |
Unsigned 32-bit integer |
diameter.flags |
Flags |
Unsigned 8-bit integer |
diameter.flags.error |
Error |
Boolean |
diameter.flags.mandatory |
Mandatory |
Boolean |
diameter.flags.proxyable |
Proxyable |
Boolean |
diameter.flags.request |
Request |
Boolean |
diameter.flags.reserved3 |
Reserved |
Boolean |
diameter.flags.reserved4 |
Reserved |
Boolean |
diameter.flags.reserved5 |
Reserved |
Boolean |
diameter.flags.reserved6 |
Reserved |
Boolean |
diameter.flags.reserved7 |
Reserved |
Boolean |
diameter.flags.vendorspecificVendor |
-Specific |
Boolean |
|
|
|
diameter.hopbyhopid |
Hop-by-Hop Identifier |
Unsigned 32-bit integer |
diameter.length |
Length |
Unsigned 24-bit integer |
diameter.vendorId |
VendorId |
Unsigned 32-bit integer |
diameter.version |
Version |
Unsigned 8-bit integer |
Distance Vector Multicast Routing Protocol (dvmrp)
Table A-53. Distance Vector Multicast Routing Protocol (dvmrp)
Field |
Field Name |
Type |
dvmrp.afi |
Address Family |
Unsigned 8-bit integer |
dvmrp.cap.genid |
Genid |
Boolean |
dvmrp.cap.leaf |
Leaf |
Boolean |
144
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
dvmrp.cap.mtrace |
Mtrace |
Boolean |
dvmrp.cap.netmask |
Netmask |
Boolean |
dvmrp.cap.prune |
Prune |
Boolean |
dvmrp.cap.snmp |
SNMP |
Boolean |
dvmrp.capabilities |
Capabilities |
No value |
dvmrp.checksum |
Checksum |
Unsigned 16-bit integer |
dvmrp.checksum_bad |
Bad Checksum |
Boolean |
dvmrp.command |
Command |
Unsigned 8-bit integer |
dvmrp.commands |
Commands |
No value |
dvmrp.count |
Count |
Unsigned 8-bit integer |
dvmrp.dest_unreach |
Destination Unreachable |
Boolean |
dvmrp.genid |
Generation ID |
Unsigned 32-bit integer |
dvmrp.hold |
Hold Time |
Unsigned 32-bit integer |
dvmrp.infinity |
Infinity |
Unsigned 8-bit integer |
dvmrp.lifetime |
Prune lifetime |
Unsigned 32-bit integer |
dvmrp.maj_ver |
Major Version |
Unsigned 8-bit integer |
dvmrp.metric |
Metric |
Unsigned 8-bit integer |
dvmrp.min_ver |
Minor Version |
Unsigned 8-bit integer |
dvmrp.route |
Route |
No value |
dvmrp.split_horiz |
Split Horizon |
Boolean |
dvmrp.type |
Type |
Unsigned 8-bit integer |
dvmrp.v1.code |
Code |
Unsigned 8-bit integer |
dvmrp.v3.code |
Code |
Unsigned 8-bit integer |
dvmrp.version |
DVMRP Version |
Unsigned 8-bit integer |
igmp.daddr |
Dest Addr |
IPv4 address |
igmp.maddr |
Multicast Addr |
IPv4 address |
igmp.neighbor |
Neighbor Addr |
IPv4 address |
igmp.netmask |
Netmask |
IPv4 address |
igmp.saddr |
Source Addr |
IPv4 address |
Distributed Checksum Clearinghouse Prototocl (dccp)
Table A-54. Distributed Checksum Clearinghouse Prototocl (dccp)
Field |
Field Name |
Type |
145
Appendix A. Ethereal Display Filter Fields
Field |
Field Name |
Type |
dccp.adminop |
Admin Op |
Unsigned 8-bit integer |
dccp.adminval |
Admin Value |
Unsigned 32-bit integer |
dccp.brand |
Server Brand |
String |
dccp.checksum.length |
Length |
Unsigned 8-bit integer |
dccp.checksum.sum |
Sum |
Byte array |
dccp.checksum.type |
Type |
Unsigned 8-bit integer |
dccp.clientid |
Client ID |
Unsigned 32-bit integer |
dccp.date |
Date |
Date/Time stamp |
dccp.floodop |
Flood Control Operation |
Unsigned 32-bit integer |
dccp.len |
Packet Length |
Unsigned 16-bit integer |
dccp.max_pkt_vers |
Maximum Packet Version |
Unsigned 8-bit integer |
dccp.op |
Operation Type |
Unsigned 8-bit integer |
dccp.opnums.host |
Host |
IPv4 address |
dccp.opnums.pid |
Process ID |
Unsigned 32-bit integer |
dccp.opnums.report |
Report |
Unsigned 32-bit integer |
dccp.opnums.retrans |
Retransmission |
Unsigned 32-bit integer |
dccp.pkt_vers |
Packet Version |
Unsigned 16-bit integer |
dccp.qdelay_ms |
Client Delay |
Unsigned 16-bit integer |
dccp.signature |
Signature |
Byte array |
dccp.target |
Target |
Unsigned 32-bit integer |
dccp.trace |
Trace Bits |
Unsigned 32-bit integer |
dccp.trace.admin |
Admin Requests |
Unsigned 32-bit integer |
dccp.trace.anon |
Anonymous Requests |
Unsigned 32-bit integer |
dccp.trace.client |
Authenticated Client |
Unsigned 32-bit integer |
|
Requests |
|
dccp.trace.flood |
Input/Output Flooding |
Unsigned 32-bit integer |
dccp.trace.query |
Queries and Reports |
Unsigned 32-bit integer |
dccp.trace.ridc |
RID Cache Messages |
Unsigned 32-bit integer |
dccp.trace.rlim |
Rate-Limited Requests |
Unsigned 32-bit integer |
Domain Name Service (dns)
Table A-55. Domain Name Service (dns)
Field |
Field Name |
Type |
dns.count.add_rr |
Additional RRs |
Unsigned 16-bit integer |
146