Appendix A. Ethereal Display Filter Fields

Field	Field Name	Type
sua.ss7_hop_counter.reservedReserved		Byte array
sua.ssn.number	Subsystem Number	Unsigned 8-bit integer
sua.ssn.reserved	Reserved	Byte array
sua.status.info	Status info	Unsigned 16-bit integer
sua.status.type	Status type	Unsigned 16-bit integer
sua.tid_label.end	End	Unsigned 8-bit integer
sua.tid_label.start	Start	Unsigned 8-bit integer
sua.tid_label.value	Label Value	Unsigned 16-bit integer
sua.traffic_mode_type.type Traffic mode Type		Unsigned 32-bit integer
sua.version	Version	Unsigned 8-bit integer

SSCOP (sscop)

Table A-233. SSCOP (sscop)

Field	Field Name	Type

Secure Socket Layer (ssl)

Table A-234. Secure Socket Layer (ssl)

Field	Field Name	Type
ssl.alert_message	Alert Message	No value
ssl.alert_message.desc	Description	Unsigned 8-bit integer
ssl.alert_message.level	Level	Unsigned 8-bit integer
ssl.app_data	Application Data	No value
ssl.change_cipher_spec	Change Cipher Spec	No value
	Message
ssl.handshake	Handshake Protocol	No value
ssl.handshake.cert_type	Certificate type	Unsigned 8-bit integer
ssl.handshake.cert_types	Certificate types	No value
ssl.handshake.cert_types_	countCertificate types count	Unsigned 8-bit integer

374

Appendix A. Ethereal Display Filter Fields

Field	Field Name			Type
ssl.handshake.certificate	Certificate			Byte array
ssl.handshake.certificate_	lengthCertificate Length			Unsigned 24-bit integer
ssl.handshake.certificates	Certificates			No value
ssl.handshake.certificates_	lengthCertificates Length			Unsigned 24-bit integer
ssl.handshake.challenge	Challenge			No value
ssl.handshake.challenge_	lengthChallenge Length			Unsigned 16-bit integer
ssl.handshake.cipher_spec_	lenCipher Spec Length			Unsigned 16-bit integer
ssl.handshake.cipher_suites	_Cipherlength Suites Length			Unsigned 16-bit integer
ssl.handshake.cipherspec	Cipher Spec			Unsigned 24-bit integer
ssl.handshake.ciphersuite	Cipher Suite			Unsigned 16-bit integer
ssl.handshake.ciphersuites	Cipher Suites			No value
ssl.handshake.clear_key_dataClear Key Data				No value
ssl.handshake.clear_key_lengthClear Key Data Length				Unsigned 16-bit integer
ssl.handshake.comp_methodCompression Method				Unsigned 8-bit integer
ssl.handshake.comp_methodsCompression Methods				No value
ssl.handshake.comp_methodsCompressionlength			Methods	Unsigned 8-bit integer
	Length
ssl.handshake.connection_idConnection ID				No value
ssl.handshake.connection_idConnectionlength		ID Length		Unsigned 16-bit integer
ssl.handshake.dname	Distinguished Name			Byte array
ssl.handshake.dname_len	Distinguished Name			Unsigned 16-bit integer
	Length
ssl.handshake.dnames	Distinguished Names			No value
ssl.handshake.dnames_len	Distinguished Names			Unsigned 16-bit integer
	Length
ssl.handshake.encrypted_keyEncrypted Key				No value
ssl.handshake.encrypted_keyEncryptedlength Key Data				Unsigned 16-bit integer
	Length
ssl.handshake.key_arg	Key Argument			No value

375

Appendix A. Ethereal Display Filter Fields

Field	Field Name	Type
ssl.handshake.key_arg_lengthKey Argument Length		Unsigned 16-bit integer
ssl.handshake.length	Length	Unsigned 24-bit integer
ssl.handshake.md5_hash	MD5 Hash	No value
ssl.handshake.random	Random.bytes	No value
ssl.handshake.random_timeRandom.gmt_unix_time		Date/Time stamp
ssl.handshake.session_id	Session ID	Byte array
ssl.handshake.session_id_hitSession ID Hit		Boolean
ssl.handshake.session_id_lengthSession ID Length		Unsigned 8-bit integer
ssl.handshake.sha_hash	SHA-1 Hash	No value
ssl.handshake.type	Handshake Message Type	Unsigned 8-bit integer
ssl.handshake.verify_data	Verify Data	No value
ssl.handshake.version	Version	Unsigned 16-bit integer
ssl.pct_handshake.type	Handshake Message Type	Unsigned 8-bit integer
ssl.record	Record Layer	No value
ssl.record.content_type	Content Type	Unsigned 8-bit integer
ssl.record.is_escape	Is Escape	Boolean
ssl.record.length	Length	Unsigned 16-bit integer
ssl.record.padding_length	Padding Length	Unsigned 8-bit integer
ssl.record.version	Version	Unsigned 16-bit integer

Sequenced Packet eXchange (spx)

Table A-235. Sequenced Packet eXchange (spx)

Field	Field Name	Type
spx.ack	Acknowledgment Number	Unsigned 16-bit integer
spx.alloc	Allocation Number	Unsigned 16-bit integer
spx.ctl	Connection Control	Unsigned 8-bit integer
spx.dst	Destination Connection ID	Unsigned 16-bit integer
spx.seq	Sequence Number	Unsigned 16-bit integer
spx.src	Source Connection ID	Unsigned 16-bit integer
spx.type	Datastream type	Unsigned 8-bit integer

376

Appendix A. Ethereal Display Filter Fields

Service Advertisement Protocol (ipxsap)

Table A-236. Service Advertisement Protocol (ipxsap)

Field	Field Name	Type
ipxsap.request	Request	Boolean
ipxsap.response	Response	Boolean

Service Location Protocol (srvloc)

Table A-237. Service Location Protocol (srvloc)

Field	Field Name	Type
srvloc.err	Error Code	Unsigned 16-bit integer
srvloc.flags	Flags	Unsigned 8-bit integer
srvloc.function	Function	Unsigned 8-bit integer
srvloc.version	Version	Unsigned 8-bit integer

Session Announcement Protocol (sap)

Table A-238. Session Announcement Protocol (sap)

Field	Field Name	Type
sap.auth	Authentication data	No value
sap.auth.flags	Authentication data flags	Unsigned 8-bit integer
sap.auth.flags.p	Padding Bit	Boolean
sap.auth.flags.t	Authentication Type	Unsigned 8-bit integer
sap.auth.flags.v	Version Number	Unsigned 8-bit integer
sap.flags	Flags	Unsigned 8-bit integer
sap.flags.a	Address Type	Boolean
sap.flags.c	Compression Bit	Boolean
sap.flags.e	Encryption Bit	Boolean
sap.flags.r	Reserved	Boolean
sap.flags.t	Message Type	Boolean
sap.flags.v	Version Number	Unsigned 8-bit integer

377