Appendix A. Ethereal Display Filter Fields

Internet Message Access Protocol (imap)

Table A-97. Internet Message Access Protocol (imap)

Field	Field Name	Type
imap.request	Request	Boolean
imap.response	Response	Boolean

Internet Printing Protocol (ipp)

Table A-98. Internet Printing Protocol (ipp)

Field	Field Name	Type

Internet Protocol (ip)

Table A-99. Internet Protocol (ip)

Field	Field Name	Type
ip.addr	Source or Destination	IPv4 address
	Address
ip.checksum	Header checksum	Unsigned 16-bit integer
ip.checksum_bad	Bad Header checksum	Boolean
ip.dsfield	Differentiated Services	Unsigned 8-bit integer
	field
ip.dsfield.ce	ECN-CE	Unsigned 8-bit integer
ip.dsfield.dscp	Differentiated Services	Unsigned 8-bit integer
	Codepoint
ip.dsfield.ect	ECN-Capable Transport	Unsigned 8-bit integer
	(ECT)
ip.dst	Destination	IPv4 address
ip.flags	Flags	Unsigned 8-bit integer
ip.flags.df	Don’t fragment	Boolean
ip.flags.mf	More fragments	Boolean
ip.frag_offset	Fragment offset	Unsigned 16-bit integer
ip.fragment	IP Fragment	No value
ip.fragment.error	Defragmentation error	No value

176

Appendix A. Ethereal Display Filter Fields

Field	Field Name	Type
ip.fragment.multipletails	Multiple tail fragments	Boolean
	found
ip.fragment.overlap	Fragment overlap	Boolean
ip.fragment.overlap.conflictConflicting data in		Boolean
	fragment overlap
ip.fragment.toolongfragmentFragment too long		Boolean
ip.fragments	IP Fragments	No value
ip.hdr_len	Header Length	Unsigned 8-bit integer
ip.id	Identification	Unsigned 16-bit integer
ip.len	Total Length	Unsigned 16-bit integer
ip.proto	Protocol	Unsigned 8-bit integer
ip.src	Source	IPv4 address
ip.tos	Type of Service	Unsigned 8-bit integer
ip.tos.cost	Cost	Boolean
ip.tos.delay	Delay	Boolean
ip.tos.precedence	Precedence	Unsigned 8-bit integer
ip.tos.reliability	Reliability	Boolean
ip.tos.throughput	Throughput	Boolean
ip.ttl	Time to live	Unsigned 8-bit integer
ip.version	Version	Unsigned 8-bit integer

Internet Protocol Version 6 (ipv6)

Table A-100. Internet Protocol Version 6 (ipv6)

Field	Field Name	Type
ipv6.addr	Address	IPv6 address
ipv6.class	Traffic class	Unsigned 8-bit integer
ipv6.dst	Destination	IPv6 address
ipv6.flow	Flowlabel	Unsigned 32-bit integer
ipv6.fragment	IPv6 Fragment	No value
ipv6.fragment.error	Defragmentation error	No value
ipv6.fragment.multipletails	Multiple tail fragments	Boolean
	found
ipv6.fragment.overlap	Fragment overlap	Boolean

177

Appendix A. Ethereal Display Filter Fields

Field	Field Name	Type
ipv6.fragment.overlap.conflictConflicting data in		Boolean
	fragment overlap
ipv6.fragment.toolongfragmentFragment too long		Boolean
ipv6.fragments	IPv6 Fragments	No value
ipv6.hlim	Hop limit	Unsigned 8-bit integer
ipv6.mipv6_a_flag	Acknowledge (A)	Boolean
ipv6.mipv6_b_flag	Bicasting all (B)	Boolean
ipv6.mipv6_d_flag	Duplicate Address	Boolean
	Detection (D)
ipv6.mipv6_h_flag	Home Registration (H)	Boolean
ipv6.mipv6_home_address	Home Address	IPv6 address
ipv6.mipv6_length	Option Length	Unsigned 8-bit integer
ipv6.mipv6_life_time	Life Time	Unsigned 32-bit integer
ipv6.mipv6_m_flag	MAP Registration (M)	Boolean
ipv6.mipv6_prefix_length	Prefix Length	Unsigned 8-bit integer
ipv6.mipv6_r_flag	Router (R)	Boolean
ipv6.mipv6_refresh	Refresh	Unsigned 32-bit integer
ipv6.mipv6_sequence_numberSequence Number		Unsigned 16-bit integer
ipv6.mipv6_status	Status	Unsigned 8-bit integer
ipv6.mipv6_sub_alternativeAlternativeCOA Care of		IPv6 address
	Address
ipv6.mipv6_sub_length	Sub-Option Length	Unsigned 8-bit integer
ipv6.mipv6_sub_type	Sub-Option Type	Unsigned 8-bit integer
ipv6.mipv6_sub_unique_IDUnique Identifier		Unsigned 16-bit integer
ipv6.mipv6_type	Option Type	Unsigned 8-bit integer
ipv6.nxt	Next header	Unsigned 8-bit integer
ipv6.plen	Payload length	Unsigned 16-bit integer
ipv6.src	Source	IPv6 address
ipv6.version	Version	Unsigned 8-bit integer

Internet Relay Chat (irc)

Table A-101. Internet Relay Chat (irc)

178

Appendix A. Ethereal Display Filter Fields

Field	Field Name	Type
irc.command	Command	String
irc.request	Request	Boolean
irc.response	Response	Boolean

Internet Security Association and Key Management Protocol (isakmp)

Table A-102. Internet Security Association and Key Management Protocol (isakmp)

Field	Field Name	Type

Internetwork Packet eXchange (ipx)

Table A-103. Internetwork Packet eXchange (ipx)

Field	Field Name	Type
ipx.checksum	Checksum	Unsigned 16-bit integer
ipx.dst.net	Destination Network	IPX network or server
		name
ipx.dst.node	Destination Node	6-byte Hardware (MAC)
		Address
ipx.dst.socket	Destination Socket	Unsigned 16-bit integer
ipx.hops	Transport Control (Hops)	Unsigned 8-bit integer
ipx.len	Length	Unsigned 16-bit integer
ipx.packet_type	Packet Type	Unsigned 8-bit integer
ipx.src.net	Source Network	IPX network or server
		name
ipx.src.node	Source Node	6-byte Hardware (MAC)
		Address
ipx.src.socket	Source Socket	Unsigned 16-bit integer

Java RMI (rmi)

Table A-104. Java RMI (rmi)

179