Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference

Wireshark's most powerful feature is its vast array of display filters (over 103000 fields in 1100 protocols as of version 1.6.5). They let you drill down to the exact traffic you want to see and are the basis of many of Wireshark's other features, such as the coloring rules.

This is a reference. For general help using display filters, please see the wireshark-filter manual page, the User's Guide.

Index

1 2 3 6 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

1

104apci: IEC 60870-5-104-Apci (1.2.0 to 1.6.5, 3 fields)
104asdu: IEC 60870-5-104-Asdu (1.2.0 to 1.6.5, 14 fields)

2

2dparityfec: Pro-MPEG Code of Practice #3 release 2 FEC Protocol (1.0.0 to 1.6.5, 14 fields)

3

3comxns: 3Com XNS Encapsulation (1.0.0 to 1.6.5, 1 field)

6

6lowpan: IPv6 over IEEE 802.15.4 (1.4.0 to 1.6.5, 64 fields)

9

9p: Plan 9 9P (1.0.0 to 1.6.5, 38 fields)

A

a11: 3GPP2 A11 (1.0.0 to 1.6.5, 87 fields)
aal1: ATM AAL1 (1.0.0 to 1.6.5, 0 fields)
aal3_4: ATM AAL3/4 (1.0.0 to 1.6.5, 0 fields)
aarp: Appletalk Address Resolution Protocol (1.0.0 to 1.6.5, 13 fields)
acap: Application Configuration Access Protocol (1.0.0 to 1.6.5, 2 fields)
acn: Architecture for Control Networks (1.0.0 to 1.6.5, 66 fields)
acp133: ACP133 Attribute Syntaxes (1.0.0 to 1.6.5, 79 fields)
acse: ISO 8650-1 OSI Association Control Service (1.0.0 to 1.6.5, 96 fields)
actrace: AudioCodes Trunk Trace (1.0.0 to 1.6.5, 15 fields)
adp: Aruba Discovery Protocol (1.0.0 to 1.6.5, 5 fields)
adwin: ADwin communication protocol (1.6.0 to 1.6.5, 44 fields)
adwin_config: ADwin configuration protocol (1.6.0 to 1.6.5, 43 fields)
afp: Apple Filing Protocol (1.0.0 to 1.6.5, 301 fields)
afs: Andrew File System (AFS) (1.0.0 to 1.6.5, 244 fields)
agentx: AgentX (1.0.0 to 1.6.5, 36 fields)
ah: Authentication Header (1.0.0 to 1.6.5, 3 fields)
aim: AOL Instant Messenger (1.0.0 to 1.6.5, 65 fields)
aim_admin: AIM Administrative (1.0.0 to 1.6.5, 3 fields)
aim_adverts: AIM Advertisements (1.0.0 to 1.6.5, 0 fields)
aim_bos: AIM Privacy Management Service (1.0.0 to 1.6.5, 2 fields)
aim_buddylist: AIM Buddylist Service (1.0.0 to 1.6.5, 1 field)
aim_chat: AIM Chat Service (1.0.0 to 1.6.5, 0 fields)
aim_chatnav: AIM Chat Navigation (1.0.0 to 1.6.5, 0 fields)
aim_dir: AIM Directory Search (1.0.0 to 1.6.5, 0 fields)
aim_email: AIM E-mail (1.0.0 to 1.6.5, 0 fields)
aim_generic: AIM Generic Service (1.0.0 to 1.6.5, 30 fields)
aim_icq: AIM ICQ (1.0.0 to 1.6.5, 6 fields)
aim_invitation: AIM Invitation Service (1.0.0 to 1.6.5, 0 fields)
aim_location: AIM Location (1.0.0 to 1.6.5, 4 fields)
aim_lookup: AIM User Lookup (1.0.0 to 1.6.5, 1 field)
aim_messaging: AIM Messaging (1.0.0 to 1.6.5, 33 fields)
aim_oft: AIM OFT (1.0.0 to 1.6.5, 0 fields)
aim_popup: AIM Popup (1.0.0 to 1.6.5, 0 fields)
aim_signon: AIM Signon (1.0.0 to 1.6.5, 3 fields)
aim_ssi: AIM Server Side Info (1.0.0 to 1.6.5, 15 fields)
aim_sst: AIM Server Side Themes (1.0.0 to 1.6.5, 6 fields)
aim_stats: AIM Statistics (1.0.0 to 1.6.5, 0 fields)
aim_translate: AIM Translate (1.0.0 to 1.6.5, 0 fields)
airopeek: Airopeek encapsulated IEEE 802.11 (1.0.0 to 1.6.5, 8 fields)
ajp13: Apache JServ Protocol v1.3 (1.0.0 to 1.6.5, 19 fields)
alc: Asynchronous Layered Coding (1.0.0 to 1.6.5, 33 fields)
alcap: AAL type 2 signalling protocol (Q.2630) (1.0.0 to 1.6.5, 151 fields)
amqp: Advanced Message Queueing Protocol (1.0.0 to 1.6.5, 287 fields)
amr: Adaptive Multi-Rate (1.0.0 to 1.6.5, 22 fields)
ams: AMS (1.0.0 to 1.6.5, 65 fields)
ancp: Access Node Control Protocol (1.4.0 to 1.6.5, 36 fields)
ans: Intel ANS probe (1.0.0 to 1.6.5, 5 fields)
ansi_637_tele: ANSI IS-637-A (SMS) Teleservice Layer (1.0.0 to 1.6.5, 6 fields)
ansi_637_trans: ANSI IS-637-A (SMS) Transport Layer (1.0.0 to 1.6.5, 4 fields)
ansi_683: ANSI IS-683 (OTA (Mobile)) (1.0.0 to 1.6.5, 4 fields)
ansi_801: ANSI IS-801 (Location Services (PLD)) (1.0.0 to 1.6.5, 36 fields)
ansi_a_bsmap: ANSI A-I/F BSMAP (1.0.0 to 1.6.5, 27 fields)
ansi_a_dtap: ANSI A-I/F DTAP (1.0.0 to 1.6.5, 0 fields)
ansi_map: ANSI Mobile Application Part (1.0.0 to 1.6.5, 744 fields)
ansi_tcap: ANSI Transaction Capabilities Application Part (1.0.0 to 1.6.5, 48 fields)
aodv: Ad hoc On-demand Distance Vector Routing Protocol (1.0.0 to 1.6.5, 28 fields)
aoe: ATAoverEthernet (1.0.0 to 1.6.5, 19 fields)
ap1394: Apple IP-over-IEEE 1394 (1.0.0 to 1.6.5, 3 fields)
apap: Printer Access Protocol (1.0.0 to 1.6.5, 8 fields)
applemidi: Apple Network-MIDI Session Protocol (1.4.0 to 1.6.5, 13 fields)
arcnet: ARCNET (1.0.0 to 1.6.5, 7 fields)
armagetronad: The Armagetron Advanced OpenGL Tron clone (1.0.0 to 1.6.5, 6 fields)
arp: Address Resolution Protocol (1.0.0 to 1.6.5, 34 fields)
artnet: Art-Net (1.0.0 to 1.6.5, 143 fields)
aruba_erm: ARUBA encapsulated remote mirroring (1.4.0 to 1.6.5, 3 fields)
asap: Aggregate Server Access Protocol (1.0.0 to 1.6.5, 54 fields)
ascend: Lucent/Ascend debug output (1.0.0 to 1.6.5, 6 fields)
asf: Alert Standard Forum (1.0.0 to 1.6.5, 14 fields)
asn1: ASN.1 decoding (1.0.0 to 1.6.5, 0 fields)
asp: AppleTalk Session Protocol (1.0.0 to 1.6.5, 34 fields)
at: AT Command (1.6.0 to 1.6.5, 1 field)
atm: Asynchronous Transfer Mode (1.0.0 to 1.6.5, 4 fields)
atmtcp: ATM over TCP (1.6.0 to 1.6.5, 3 fields)
atp: AppleTalk Transaction Protocol packet (1.0.0 to 1.6.5, 19 fields)
atsvc: Microsoft AT-Scheduler Service (1.0.0 to 1.6.5, 66 fields)
auto_rp: Cisco Auto-RP (1.0.0 to 1.6.5, 9 fields)
ax4000: AX/4000 Test Block (1.0.0 to 1.6.5, 7 fields)
ayiya: Anything in Anything Protocol (1.2.0 to 1.6.5, 10 fields)

B

babel: Babel Routing Protocol (1.6.0 to 1.6.5, 17 fields)
bacapp: Building Automation and Control Network APDU (1.0.0 to 1.6.5, 49 fields)
bacnet: Building Automation and Control Network NPDU (1.0.0 to 1.6.5, 29 fields)
bacp: PPP Bandwidth Allocation Control Protocol (1.0.0 to 1.6.5, 0 fields)
banana: Twisted Banana (1.4.0 to 1.6.5, 8 fields)
bap: PPP Bandwidth Allocation Protocol (1.0.0 to 1.6.5, 0 fields)
basicxid: Logical-Link Control Basic Format XID (1.0.0 to 1.6.5, 3 fields)
bat: B.A.T.M.A.N. Layer 3 Protocol (1.2.0 to 1.6.5, 24 fields)
batadv: B.A.T.M.A.N. Advanced Protocol (1.4.0 to 1.6.5, 61 fields)
bcp: PPP Bridging Control Protocol (1.0.0 to 1.6.5, 6 fields)
bctp: BCTP Q.1990 (1.0.0 to 1.6.5, 4 fields)
beep: Blocks Extensible Exchange Protocol (1.0.0 to 1.6.5, 19 fields)
ber: Basic Encoding Rules (ASN.1 X.690) (1.0.0 to 1.6.5, 48 fields)
bfd: Bidirectional Forwarding Detection Control Message (1.0.0 to 1.6.5, 23 fields)
bgp: Border Gateway Protocol (1.0.0 to 1.6.5, 28 fields)
bicc: Bearer Independent Call Control (1.0.0 to 1.6.5, 1 field)
bittorrent: BitTorrent (1.0.0 to 1.6.5, 30 fields)
bjnp: Canon BJNP (1.2.0 to 1.6.5, 7 fields)
bmc: Broadcast/Multicast Control (1.6.0 to 1.6.5, 15 fields)
bofl: Wellfleet Breath of Life (1.0.0 to 1.6.5, 2 fields)
bootp: Bootstrap Protocol (1.0.0 to 1.6.5, 42 fields)
bootparams: Boot Parameters (1.0.0 to 1.6.5, 8 fields)
bossvr: DCE DFS Basic Overseer Server (1.0.0 to 1.6.5, 1 field)
brdwlk: Boardwalk (1.0.0 to 1.6.5, 15 fields)
browser: Microsoft Windows Browser Protocol (1.0.0 to 1.6.5, 62 fields)
bssap: BSSAP/BSAP (1.0.0 to 1.6.5, 58 fields)
bssgp: Base Station Subsystem GPRS Protocol (1.0.0 to 1.6.5, 101 fields)
bsslap: BSS LCS Assistance Protocol (1.2.0 to 1.6.5, 11 fields)
bt-utp: uTorrent Transport Protocol (1.6.0 to 1.6.5, 15 fields)
btamp: Bluetooth AMP Packet (1.4.0 to 1.6.5, 26 fields)
btdun: Bluetooth DUN Packet (1.6.0 to 1.6.5, 0 fields)
btdun.atcmd: AT Cmd (1.6.0 to 1.6.5, 0 fields)
bthci_acl: Bluetooth HCI ACL Packet (1.0.0 to 1.6.5, 7 fields)
bthci_cmd: Bluetooth HCI Command (1.0.0 to 1.6.5, 184 fields)
bthci_evt: Bluetooth HCI Event (1.0.0 to 1.6.5, 130 fields)
bthci_sco: Bluetooth HCI SCO Packet (1.0.0 to 1.6.5, 3 fields)
bthf: Bluetooth Handsfree Packet (1.6.0 to 1.6.5, 2 fields)
btl2cap: Bluetooth L2CAP Protocol (1.0.0 to 1.6.5, 77 fields)
btobex: Bluetooth OBEX Protocol (1.4.0 to 1.6.5, 27 fields)
btrfcomm: Bluetooth RFCOMM Protocol (1.0.0 to 1.6.5, 24 fields)
btsdp: Bluetooth SDP Protocol (1.0.0 to 1.6.5, 7 fields)
btspp: Bluetooth SPP Packet (1.6.0 to 1.6.5, 0 fields)
budb: DCE/DFS BUDB (1.0.0 to 1.6.5, 214 fields)
bundle: Bundle Protocol (1.4.0 to 1.6.5, 91 fields)
butc: DCE/RPC BUTC (1.0.0 to 1.6.5, 122 fields)
bvlc: BACnet Virtual Link Control (1.0.0 to 1.6.5, 14 fields)

C

calcappprotocol: Calculation Application Protocol (1.0.0 to 1.6.5, 6 fields)
camel: Camel (1.0.0 to 1.6.5, 482 fields)
can: Controller Area Network (1.4.0 to 1.6.5, 5 fields)
capwap: Control And Provisioning of Wireless Access Points (1.4.0 to 1.6.5, 154 fields)
cast: Cast Client Control Protocol (1.0.0 to 1.6.5, 91 fields)
cba_acco_cb: ICBAAccoCallback (1.0.0 to 1.6.5, 14 fields)
cba_acco_cb2: ICBAAccoCallback2 (1.0.0 to 1.6.5, 0 fields)
cba_acco_mgt: ICBAAccoMgt (1.0.0 to 1.6.5, 44 fields)
cba_acco_mgt2: ICBAAccoMgt2 (1.0.0 to 1.6.5, 0 fields)
cba_acco_server: ICBAAccoServer (1.0.0 to 1.6.5, 14 fields)
cba_acco_server2: ICBAAccoServer2 (1.0.0 to 1.6.5, 0 fields)
cba_acco_server_srt: ICBAAccoServerSRT (1.0.0 to 1.6.5, 0 fields)
cba_acco_sync: ICBAAccoSync (1.0.0 to 1.6.5, 0 fields)
cba_browse: ICBABrowse (1.0.0 to 1.6.5, 20 fields)
cba_browse2: ICBABrowse2 (1.0.0 to 1.6.5, 0 fields)
cba_grouperror: ICBAGroupError (1.0.0 to 1.6.5, 0 fields)
cba_grouperror_event: ICBAGroupErrorEvent (1.0.0 to 1.6.5, 0 fields)
cba_ldev: ICBALogicalDevice (1.0.0 to 1.6.5, 0 fields)
cba_ldev2: ICBALogicalDevice2 (1.0.0 to 1.6.5, 0 fields)
cba_pdev: ICBAPhysicalDevice (1.0.0 to 1.6.5, 17 fields)
cba_pdev2: ICBAPhysicalDevice2 (1.0.0 to 1.6.5, 0 fields)
cba_pdev_pc: ICBAPhysicalDevicePC (1.0.0 to 1.6.5, 0 fields)
cba_pdev_pc_event: ICBAPhysicalDevicePCEvent (1.0.0 to 1.6.5, 0 fields)
cba_persist: ICBAPersist (1.0.0 to 1.6.5, 0 fields)
cba_persist2: ICBAPersist2 (1.0.0 to 1.6.5, 0 fields)
cba_rtauto: ICBARTAuto (1.0.0 to 1.6.5, 0 fields)
cba_rtauto2: ICBARTAuto2 (1.0.0 to 1.6.5, 0 fields)
cba_state: ICBAState (1.0.0 to 1.6.5, 0 fields)
cba_state_event: ICBAStateEvent (1.0.0 to 1.6.5, 0 fields)
cba_sysprop: ICBASystemProperties (1.0.0 to 1.6.5, 0 fields)
cba_time: ICBATime (1.0.0 to 1.6.5, 0 fields)
cbcp: PPP Callback Control Protocol (1.0.0 to 1.6.5, 0 fields)
ccp: PPP Compression Control Protocol (1.0.0 to 1.6.5, 0 fields)
ccsds: CCSDS (1.0.0 to 1.6.5, 28 fields)
ccsrl: H.324/CCSRL (1.0.0 to 1.6.5, 1 field)
cdp: Cisco Discovery Protocol (1.0.0 to 1.6.5, 10 fields)
cdpcp: PPP CDP Control Protocol (1.0.0 to 1.6.5, 0 fields)
cds_clerkserver: CDS Clerk Server Calls (1.0.0 to 1.6.5, 1 field)
cds_solicit: DCE/RPC CDS Solicitation (1.0.0 to 1.6.5, 1 field)
cdt: Compressed Data Type (1.0.0 to 1.6.5, 9 fields)
cflow: Cisco NetFlow/IPFIX (1.0.0 to 1.6.5, 433 fields)
cfm: CFM EOAM 802.1ag/ITU Protocol (1.0.0 to 1.6.5, 103 fields)
cgmp: Cisco Group Management Protocol (1.0.0 to 1.6.5, 5 fields)
chap: PPP Challenge Handshake Authentication Protocol (1.0.0 to 1.6.5, 8 fields)
chargingase: Charging ASE (1.2.0 to 1.6.5, 58 fields)
chdlc: Cisco HDLC (1.0.0 to 1.6.5, 2 fields)
cigi: Common Image Generator Interface (1.0.0 to 1.6.5, 825 fields)
cimd: Computer Interface to Message Distribution (1.0.0 to 1.6.5, 48 fields)
cimetrics: Cimetrics MS/TP (1.2.0 to 1.6.5, 2 fields)
cip: Common Industrial Protocol (1.0.0 to 1.6.5, 25 fields)
cipcco: CIP Connection Configuration Object (1.4.0 to 1.6.5, 0 fields)
cipcls: CIP Class Generic (1.4.0 to 1.6.5, 0 fields)
cipcm: CIP Connection Manager (1.4.0 to 1.6.5, 10 fields)
cipmr: CIP Message Router (1.4.0 to 1.6.5, 0 fields)
clacse: ISO 10035-1 OSI Connectionless Association Control Service (1.4.0 to 1.6.5, 0 fields)
classicstun: Simple Traversal of UDP Through NAT (1.4.0 to 1.6.5, 29 fields)
cldap: Connectionless Lightweight Directory Access Protocol (1.0.0 to 1.6.5, 0 fields)
clearcase: Clearcase NFS (1.0.0 to 1.6.5, 1 field)
clnp: ISO 8473 CLNP ConnectionLess Network Protocol (1.0.0 to 1.6.5, 21 fields)
clpres: ISO 9576-1 OSI Connectionless Presentation Protocol (1.4.0 to 1.6.5, 0 fields)
clsp: ISO 9548-1 OSI Connectionless Session Protocol (1.4.0 to 1.6.5, 0 fields)
cltp: ISO 8602 CLTP ConnectionLess Transport Protocol (1.0.0 to 1.6.5, 2 fields)
cmctrl_tlv: DOCSIS CM-CTRL TLV's (1.6.0 to 1.6.5, 11 fields)
cmip: X711 CMIP (1.0.0 to 1.6.5, 261 fields)
cmp: Certificate Management Protocol (1.0.0 to 1.6.5, 176 fields)
cmpp: China Mobile Point to Point Protocol (1.0.0 to 1.6.5, 47 fields)
cms: Cryptographic Message Syntax (1.0.0 to 1.6.5, 123 fields)
coap: Constrained Application Protocol (1.6.0 to 1.6.5, 19 fields)
collectd: collectd network data (1.4.0 to 1.6.5, 24 fields)
comp_data: PPP Compressed Datagram (1.0.0 to 1.6.5, 0 fields)
componentstatusprotocol: Component Status Protocol (1.0.0 to 1.6.5, 17 fields)
conv: DCE/RPC Conversation Manager (1.0.0 to 1.6.5, 9 fields)
cops: Common Open Policy Service (1.0.0 to 1.6.5, 180 fields)
cosine: CoSine IPNOS L2 debug output (1.0.0 to 1.6.5, 5 fields)
cotp: ISO 8073 COTP Connection-Oriented Transport Protocol (1.0.0 to 1.6.5, 24 fields)
cpfi: Cross Point Frame Injector (1.0.0 to 1.6.5, 21 fields)
cpha: Check Point High Availability Protocol (1.0.0 to 1.6.5, 27 fields)
cprpc_server: DNS Control Program Server (1.0.0 to 1.6.5, 1 field)
crmf: Certificate Request Message Format (1.0.0 to 1.6.5, 81 fields)
crtp: CRTP (1.0.0 to 1.6.5, 6 fields)
csm_encaps: CSM_ENCAPS (1.0.0 to 1.6.5, 54 fields)
ctdb: Cluster TDB (1.0.0 to 1.6.5, 38 fields)
cups: Common Unix Printing System (CUPS) Browsing Protocol (1.0.0 to 1.6.5, 2 fields)
cwids: Cisco Wireless IDS Captures (1.0.0 to 1.6.5, 7 fields)

D

daap: Digital Audio Access Protocol (1.0.0 to 1.6.5, 2 fields)
dap: X.519 Directory Access Protocol (1.0.0 to 1.6.5, 356 fields)
data: Data (1.0.0 to 1.6.5, 4 fields)
data-l1-events: Layer 1 Event Messages (1.2.0 to 1.6.5, 0 fields)
data-text-lines: Line-based text data (1.0.0 to 1.6.5, 0 fields)
daytime: Daytime Protocol (1.0.0 to 1.6.5, 1 field)
db-lsp: Dropbox LAN sync Protocol (1.4.0 to 1.6.5, 7 fields)
db-lsp-disc: Dropbox LAN sync Discovery Protocol (1.4.0 to 1.6.5, 0 fields)
dc: Dublin Core Metadata (DC) (1.0.0 to 1.6.5, 16 fields)
dcc: Distributed Checksum Clearinghouse protocol (1.0.0 to 1.6.5, 28 fields)
dccp: Datagram Congestion Control Protocol (1.0.0 to 1.6.5, 29 fields)
dce_update: DCE/RPC UpServer (1.0.0 to 1.6.5, 1 field)
dcerpc: Distributed Computing Environment / Remote Procedure Call (DCE/RPC) (1.0.0 to 1.6.5, 169 fields)
dcm: DICOM (1.0.0 to 1.0.16, 16 fields)
dcom: DCOM (1.0.0 to 1.6.5, 88 fields)
dcp-af: DCP Application Framing Layer (1.0.0 to 1.6.5, 8 fields)
dcp-etsi: ETSI Distribution & Communication Protocol (for DRM) (1.0.0 to 1.6.5, 1 field)
dcp-pft: DCP Protection, Fragmentation & Transport Layer (1.0.0 to 1.6.5, 28 fields)
dcp-tpl: DCP Tag Packet Layer (1.0.0 to 1.6.5, 2 fields)
dct2000: Catapult DCT2000 packet (1.0.0 to 1.6.5, 47 fields)
ddp: Datagram Delivery Protocol (1.0.0 to 1.6.5, 12 fields)
ddtp: Dynamic DNS Tools Protocol (1.0.0 to 1.6.5, 7 fields)
dec_dna: DEC DNA Routing Protocol (1.0.0 to 1.6.5, 58 fields)
dec_stp: DEC Spanning Tree Protocol (1.0.0 to 1.6.5, 17 fields)
dect: DECT Protocol (1.2.0 to 1.6.5, 126 fields)
dhcpfo: DHCP Failover (1.0.0 to 1.6.5, 34 fields)
dhcpv6: DHCPv6 (1.0.0 to 1.6.5, 24 fields)
diameter: Diameter Protocol (1.0.0 to 1.6.5, 1347 fields)
diameter.3gpp.ipaddr: IPv4 Address (1.0.0, 0 fields)
diameter.3gpp.mbms_required_qos_prio: Allocation/Retention Priority (1.0.0, 0 fields)
diameter.3gpp.mbms_service_id: MBMS Service ID (1.0.0, 0 fields)
diameter.3gpp.tmgi: TMGI (1.0.0, 0 fields)
diameter3gpp: Diameter 3GPP (1.0.0 to 1.6.5, 60 fields)
dicom: DICOM (1.2.0 to 1.6.5, 45 fields)
dis: Distributed Interactive Simulation (1.0.0 to 1.6.5, 64 fields)
disp: X.519 Directory Information Shadowing Protocol (1.0.0 to 1.6.5, 109 fields)
dispatch: DCOM IDispatch (1.0.0 to 1.6.5, 63 fields)
distcc: Distcc Distributed Compiler (1.0.0 to 1.6.5, 8 fields)
dlm3: Distributed Lock Manager (1.0.0 to 1.6.5, 123 fields)
dlr: Device Level Ring (1.4.0 to 1.6.5, 22 fields)
dlsw: Data Link SWitching (1.0.0 to 1.6.5, 0 fields)
dmp: Direct Message Profile (1.0.0 to 1.6.5, 144 fields)
dnp3: Distributed Network Protocol 3.0 (1.0.0 to 1.6.5, 117 fields)
dns: Domain Name Service (1.0.0 to 1.6.5, 66 fields)
dnsserver: DNS Server (1.0.0 to 1.6.5, 141 fields)
docsis: DOCSIS 1.1 (1.0.0 to 1.6.5, 24 fields)
docsis_bintrngreq: DOCSIS Bonded Initial Ranging Message (1.4.0 to 1.6.5, 6 fields)
docsis_bpkmattr: DOCSIS Baseline Privacy Key Management Attributes (1.0.0 to 1.6.5, 28 fields)
docsis_bpkmreq: DOCSIS Baseline Privacy Key Management Request (1.0.0 to 1.6.5, 3 fields)
docsis_bpkmrsp: DOCSIS Baseline Privacy Key Management Response (1.0.0 to 1.6.5, 3 fields)
docsis_cmctrlreq: DOCSIS CM Control Request (1.6.0 to 1.6.5, 1 field)
docsis_cmctrlrsp: DOCSIS CM Control Response (1.6.0 to 1.6.5, 1 field)
docsis_cmstatus: DOCSIS CM-STATUS Report (1.6.0 to 1.6.5, 15 fields)
docsis_dbcack: DOCSIS Dynamic Bonding Change Acknowledge (1.6.0 to 1.6.5, 1 field)
docsis_dbcreq: DOCSIS Dynamic Bonding Change Request (1.6.0 to 1.6.5, 3 fields)
docsis_dbcrsp: DOCSIS Dynamic Bonding Change Response (1.6.0 to 1.6.5, 2 fields)
docsis_dccack: DOCSIS Downstream Channel Change Acknowledge (1.0.0 to 1.6.5, 3 fields)
docsis_dccreq: DOCSIS Downstream Channel Change Request (1.0.0 to 1.6.5, 21 fields)
docsis_dccrsp: DOCSIS Downstream Channel Change Response (1.0.0 to 1.6.5, 6 fields)
docsis_dcd: DOCSIS Downstream Channel Descriptor (1.0.0 to 1.6.5, 28 fields)
docsis_dpvreq: DOCSIS Path Verify Request (1.6.0 to 1.6.5, 9 fields)
docsis_dpvrsp: DOCSIS Path Verify Response (1.6.0 to 1.6.5, 9 fields)
docsis_dsaack: DOCSIS Dynamic Service Addition Acknowledge (1.0.0 to 1.6.5, 2 fields)
docsis_dsareq: DOCSIS Dynamic Service Addition Request (1.0.0 to 1.6.5, 1 field)
docsis_dsarsp: DOCSIS Dynamic Service Addition Response (1.0.0 to 1.6.5, 2 fields)
docsis_dscack: DOCSIS Dynamic Service Change Acknowledgement (1.0.0 to 1.6.5, 2 fields)
docsis_dscreq: DOCSIS Dynamic Service Change Request (1.0.0 to 1.6.5, 1 field)
docsis_dscrsp: DOCSIS Dynamic Service Change Response (1.0.0 to 1.6.5, 2 fields)
docsis_dsdreq: DOCSIS Dynamic Service Delete Request (1.0.0 to 1.6.5, 3 fields)
docsis_dsdrsp: DOCSIS Dynamic Service Delete Response (1.0.0 to 1.6.5, 3 fields)
docsis_intrngreq: DOCSIS Initial Ranging Message (1.0.0 to 1.6.5, 3 fields)
docsis_map: DOCSIS Upstream Bandwidth Allocation (1.0.0 to 1.6.5, 14 fields)
docsis_mdd: DOCSIS Mac Domain Description (1.2.0 to 1.6.5, 37 fields)
docsis_mgmt: DOCSIS Mac Management (1.0.0 to 1.6.5, 9 fields)
docsis_regack: DOCSIS Registration Acknowledge (1.0.0 to 1.6.5, 2 fields)
docsis_regreq: DOCSIS Registration Requests (1.0.0 to 1.6.5, 1 field)
docsis_regreqmp: DOCSIS Registration Request Multipart (1.2.0 to 1.6.5, 3 fields)
docsis_regrsp: DOCSIS Registration Responses (1.0.0 to 1.6.5, 2 fields)
docsis_regrspmp: DOCSIS Registration Response Multipart (1.2.0 to 1.6.5, 4 fields)
docsis_rngreq: DOCSIS Range Request Message (1.0.0 to 1.6.5, 3 fields)
docsis_rngrsp: DOCSIS Ranging Response (1.0.0 to 1.6.5, 9 fields)
docsis_sync: DOCSIS Synchronisation Message (1.2.0 to 1.6.5, 1 field)
docsis_tlv: DOCSIS Appendix C TLV's (1.0.0 to 1.6.5, 259 fields)
docsis_type29ucd: DOCSIS Upstream Channel Descriptor Type 29 (1.0.0 to 1.6.5, 37 fields)
docsis_uccreq: DOCSIS Upstream Channel Change Request (1.0.0 to 1.6.5, 1 field)
docsis_uccrsp: DOCSIS Upstream Channel Change Response (1.0.0 to 1.6.5, 1 field)
docsis_ucd: DOCSIS Upstream Channel Descriptor (1.0.0 to 1.6.5, 28 fields)
docsis_vsif: DOCSIS Vendor Specific Encodings (1.0.0 to 1.6.5, 7 fields)
dop: X.501 Directory Operational Binding Management Protocol (1.0.0 to 1.6.5, 185 fields)
dplay: DirectPlay Protocol (1.0.0 to 1.6.5, 161 fields)
dpnss: Digital Private Signalling System No 1 (1.0.0 to 1.6.5, 24 fields)
dpnss_link: Digital Private Signalling System No 1 Link Layer (1.2.0 to 1.6.5, 8 fields)
drda: DRDA (1.0.0 to 1.6.5, 17 fields)
drsuapi: DRSUAPI (1.0.0 to 1.6.5, 415 fields)
dsi: Data Stream Interface (1.0.0 to 1.6.5, 44 fields)
dsp: X.519 Directory System Protocol (1.0.0 to 1.6.5, 139 fields)
dssetup: Active Directory Setup (1.0.0 to 1.6.5, 20 fields)
dtls: Datagram Transport Layer Security (1.0.0 to 1.6.5, 57 fields)
dtp: Dynamic Trunking Protocol (1.0.0 to 1.6.5, 4 fields)
dtpt: DeskTop PassThrough Protocol (1.0.0 to 1.6.5, 72 fields)
dtsprovider: DCE Distributed Time Service Provider (1.0.0 to 1.6.5, 2 fields)
dtsstime_req: DCE Distributed Time Service Local Server (1.0.0 to 1.6.5, 1 field)
dua: DPNSS/DASS2-User Adaptation Layer (1.0.0 to 1.6.5, 30 fields)
dvb-ci: DVB Common Interface (1.6.0 to 1.6.5, 28 fields)
dvmrp: Distance Vector Multicast Routing Protocol (1.0.0 to 1.6.5, 42 fields)

E

e.212: ITU-T E.212 number (1.0.0 to 1.0.16, 3 fields)
e100: E100 Encapsulation (1.2.0 to 1.6.5, 8 fields)
e164: ITU-T E.164 number (1.0.0 to 1.6.5, 2 fields)
e212: ITU-T E.212 number (1.2.0 to 1.6.5, 3 fields)
eap: Extensible Authentication Protocol (1.0.0 to 1.6.5, 16 fields)
eapol: 802.1X Authentication (1.0.0 to 1.6.5, 28 fields)
ecat: EtherCAT datagram(s) (1.0.0 to 1.6.5, 180 fields)
ecat_mailbox: EtherCAT Mailbox Protocol (1.0.0 to 1.6.5, 143 fields)
echo: Echo (1.0.0 to 1.6.5, 3 fields)
edonkey: eDonkey Protocol (1.0.0 to 1.6.5, 73 fields)
edp: Extreme Discovery Protocol (1.0.0 to 1.6.5, 83 fields)
efs: EFS (pidl) (1.0.0 to 1.6.5, 32 fields)
egd: Ethernet Global Data (1.2.0 to 1.6.5, 9 fields)
ehs: EHS (1.2.0 to 1.6.5, 120 fields)
eigrp: Enhanced Interior Gateway Routing Protocol (1.0.0 to 1.6.5, 143 fields)
enc: OpenBSD Encapsulating device (1.0.0 to 1.6.5, 3 fields)
enip: EtherNet/IP (Industrial Protocol) (1.0.0 to 1.6.5, 43 fields)
enrp: Endpoint Handlespace Redundancy Protocol (1.0.0 to 1.6.5, 50 fields)
enttec: ENTTEC (1.0.0 to 1.6.5, 17 fields)
epl: Ethernet POWERLINK (1.0.0 to 1.6.5, 121 fields)
epl_v1: ETHERNET Powerlink V1.0 (1.0.0 to 1.6.5, 33 fields)
epm: DCE/RPC Endpoint Mapper (1.0.0 to 1.6.5, 30 fields)
epm4: DCE/RPC Endpoint Mapper v4 (1.0.0 to 1.6.5, 0 fields)
epmd: Erlang Port Mapper Daemon (1.0.0 to 1.6.5, 15 fields)
erf: Extensible Record Format (1.0.0 to 1.6.5, 100 fields)
erldp: Erlang Distribution Protocol (1.6.0 to 1.6.5, 11 fields)
erspan: Encapsulated Remote Switch Packet ANalysis (1.0.0 to 1.6.5, 15 fields)
esio: SAIA Ether-S-I/O protocol (1.6.0 to 1.6.5, 18 fields)
esis: ISO 9542 ESIS Routeing Information Exchange Protocol (1.0.0 to 1.6.5, 7 fields)
esl: EtherCAT Switch Link (1.4.0 to 1.6.5, 4 fields)
esp: Encapsulating Security Payload (1.0.0 to 1.6.5, 5 fields)
ess: Extended Security Services (1.0.0 to 1.6.5, 73 fields)
etch: Apache Etch Protocol (1.6.0 to 1.6.5, 20 fields)
eth: Ethernet (1.0.0 to 1.6.5, 12 fields)
ethercat: EtherCAT frame header (1.0.0 to 1.6.5, 3 fields)
etheric: Etheric (1.0.0 to 1.2.18, 27 fields)
etherip: Ethernet over IP (1.0.0 to 1.6.5, 1 field)
eventlog: Event Logger (1.0.0 to 1.6.5, 96 fields)
evrc: Enhanced Variable Rate Codec (1.2.0 to 1.6.5, 16 fields)
exec: Remote Process Execution (1.0.0 to 1.6.5, 4 fields)
expert: Expert Info (1.2.0 to 1.6.5, 3 fields)

F

fc: Fibre Channel (1.0.0 to 1.6.5, 49 fields)
fcct: Fibre Channel Common Transport (1.0.0 to 1.6.5, 11 fields)
fcdns: Fibre Channel Name Server (1.0.0 to 1.6.5, 62 fields)
fcels: FC Extended Link Svc (1.0.0 to 1.6.5, 130 fields)
fcfzs: Fibre Channel Fabric Zone Server (1.0.0 to 1.6.5, 27 fields)
fcgi: FastCGI (1.6.0 to 1.6.5, 12 fields)
fcip: FCIP (1.0.0 to 1.6.5, 26 fields)
fcoe: Fibre Channel over Ethernet (1.0.0 to 1.6.5, 7 fields)
fcoib: Fibre Channel over Infiniband (1.6.0 to 1.6.5, 7 fields)
fcp: Fibre Channel Protocol for SCSI (1.0.0 to 1.6.5, 43 fields)
fcs: FC Fabric Configuration Server (1.0.0 to 1.6.5, 31 fields)
fcsof: Fibre Channel Delimiters (1.4.0 to 1.6.5, 3 fields)
fcsp: Fibre Channel Security Protocol (1.0.0 to 1.6.5, 30 fields)
fddi: Fiber Distributed Data Interface (1.0.0 to 1.6.5, 8 fields)
fefd: Far End Failure Detection (1.2.0 to 1.6.5, 8 fields)
ff: FOUNDATION Fieldbus (1.0.0 to 1.6.5, 582 fields)
fileexp: DCE DFS File Exporter (1.0.0 to 1.6.5, 158 fields)
fip: FCoE Initialization Protocol (1.2.0 to 1.6.5, 41 fields)
fix: Financial Information eXchange Protocol (1.0.0 to 1.6.5, 975 fields)
fldb: DCE DFS Fileset Location Server (1.0.0 to 1.6.5, 123 fields)
flip: NSN FLIP (1.4.0 to 1.6.5, 9 fields)
fmp: File Mapping Protocol (1.0.0 to 1.6.5, 57 fields)
fmp_notify: File Mapping Protocol Nofity (1.0.0 to 1.6.5, 12 fields)
fp: FP (1.0.0 to 1.6.5, 131 fields)
fp_hint: FP Hint (1.4.0 to 1.6.5, 22 fields)
fr: Frame Relay (1.0.0 to 1.6.5, 26 fields)
fractalgeneratorprotocol: Fractal Generator Protocol (1.0.0 to 1.6.5, 16 fields)
frame: Frame (1.0.0 to 1.6.5, 20 fields)
frsapi: Microsoft File Replication Service API (1.0.0 to 1.6.5, 1 field)
frsrpc: Microsoft File Replication Service (1.0.0 to 1.6.5, 16 fields)
frstrans: File Replication Service DFS-R (1.4.0 to 1.6.5, 98 fields)
ftam: ISO 8571 FTAM (1.0.0 to 1.6.5, 378 fields)
ftp: File Transfer Protocol (FTP) (1.0.0 to 1.6.5, 12 fields)
ftp-data: FTP Data (1.0.0 to 1.6.5, 0 fields)
ftserver: FTServer Operations (1.0.0 to 1.6.5, 1 field)
fw1: Checkpoint FW-1 (1.0.0 to 1.6.5, 5 fields)

G

g723: G.723 (1.0.0 to 1.6.5, 2 fields)
gdsdb: Firebird SQL Database Remote Protocol (1.0.0 to 1.6.5, 101 fields)
gift: giFT Internet File Transfer (1.0.0 to 1.6.5, 2 fields)
giop: General Inter-ORB Protocol (1.0.0 to 1.6.5, 50 fields)
giop-coseventcomm: Coseventcomm Dissector Using GIOP API (1.0.0 to 1.6.5, 0 fields)
giop-cosnaming: Cosnaming Dissector Using GIOP API (1.0.0 to 1.6.5, 0 fields)
giop-parlay: Parlay Dissector Using GIOP API (1.0.0 to 1.6.5, 0 fields)
giop-tango: Tango Dissector Using GIOP API (1.0.0 to 1.6.5, 0 fields)
git: Git Smart Protocol (1.4.0 to 1.6.5, 3 fields)
glbp: Gateway Load Balancing Protocol (1.4.0 to 1.6.5, 38 fields)
gmhdr: Gigamon Header (1.4.0 to 1.6.5, 11 fields)
gmrp: GARP Multicast Registration Protocol (1.0.0 to 1.6.5, 6 fields)
gnm: ITU M.3100 Generic Network Information Model (1.0.0 to 1.6.5, 180 fields)
gnutella: Gnutella Protocol (1.0.0 to 1.6.5, 32 fields)
goose: GOOSE (1.2.0 to 1.6.5, 53 fields)
gopher: Gopher (1.6.0 to 1.6.5, 8 fields)
gpef: GPEF (1.2.0 to 1.6.5, 8 fields)
gprs-ns: GPRS Network Service (1.4.0 to 1.6.5, 26 fields)
gprs_ns: GPRS Network service (1.0.0 to 1.2.18, 8 fields)
gprscdr: GPRS CDR (1.6.0 to 1.6.5, 154 fields)
gre: Generic Routing Encapsulation (1.0.0 to 1.6.5, 37 fields)
gryphon: DG Gryphon Protocol (1.0.0 to 1.6.5, 6 fields)
gsm-sms-ud: GSM Short Message Service User Data (1.0.0 to 1.6.5, 19 fields)
gsm_a_bssmap: GSM A-I/F BSSMAP (1.0.0 to 1.6.5, 225 fields)
gsm_a_ccch: GSM CCCH (1.0.0 to 1.6.5, 315 fields)
gsm_a_common: GSM A-I/F COMMON (1.2.0 to 1.6.5, 146 fields)
gsm_a_dtap: GSM A-I/F DTAP (1.0.0 to 1.6.5, 79 fields)
gsm_a_gm: GSM A-I/F GPRS Mobility and Session Management (1.2.0 to 1.6.5, 143 fields)
gsm_a_rp: GSM A-I/F RP (1.0.0 to 1.6.5, 3 fields)
gsm_a_sacch: GSM SACCH (1.2.0 to 1.6.5, 1 field)
gsm_bssmap_le: Lb-I/F BSSMAP LE (1.2.0 to 1.6.5, 29 fields)
gsm_ipa: GSM over IP protocol as used by ip.access (1.4.0 to 1.6.5, 3 fields)
gsm_map: GSM Mobile Application (1.0.0 to 1.6.5, 1440 fields)
gsm_rlcmac: Radio Link Control, Medium Access Control, 3GPP TS44.060 (1.6.0 to 1.6.5, 836 fields)
gsm_sms: GSM SMS TPDU (GSM 03.40) (1.0.0 to 1.6.5, 41 fields)
gsm_um: GSM Um Interface (1.2.0 to 1.6.5, 8 fields)
gsmtap: GSM Radiotap (1.4.0 to 1.6.5, 17 fields)
gss-api: GSS-API Generic Security Service Application Program Interface (1.0.0 to 1.6.5, 11 fields)
gtp: GPRS Tunneling Protocol (1.0.0 to 1.6.5, 153 fields)
gtpv2: GPRS Tunneling Protocol V2 (1.2.0 to 1.6.5, 233 fields)
gvcp: GigE Vision Control Protocol (1.4.0 to 1.6.5, 17 fields)
gvrp: GARP VLAN Registration Protocol (1.0.0 to 1.6.5, 5 fields)

H

h1: Sinec H1 Protocol (1.0.0 to 1.6.5, 16 fields)
h221nonstd: H221NonStandard (1.0.0 to 1.6.5, 0 fields)
h223: ITU-T Recommendation H.223 (1.0.0 to 1.6.5, 41 fields)
h223_bitswapped: Bitswapped ITU-T Recommendation H.223 (1.0.0 to 1.4.11, 0 fields)
h225: H323-MESSAGES (1.0.0 to 1.6.5, 721 fields)
h235: H235-SECURITY-MESSAGES (1.0.0 to 1.6.5, 108 fields)
h245: MULTIMEDIA-SYSTEM-CONTROL (1.0.0 to 1.6.5, 1233 fields)
h248: H.248 MEGACO (1.0.0 to 1.6.5, 314 fields)
h2483gpp: H.248 3GPP (1.0.0 to 1.6.5, 24 fields)
h248an: H.248.7 (1.0.0 to 1.6.5, 13 fields)
h248c: H.248 Annex C (1.0.0 to 1.6.5, 123 fields)
h248chp: H.248.10 (1.0.0 to 1.6.5, 2 fields)
h248e: H.248 Annex E (1.0.0 to 1.6.5, 22 fields)
h248q1950: H.248 Q.1950 Annex A (1.0.0 to 1.6.5, 29 fields)
h261: ITU-T Recommendation H.261 (1.0.0 to 1.6.5, 10 fields)
h263: ITU-T Recommendation H.263 (1.0.0 to 1.6.5, 45 fields)
h263data: ITU-T Recommendation H.263 (1.0.0 to 1.0.16, 0 fields)
h263p: ITU-T Recommendation H.263 RTP Payload header (RFC4629) (1.0.0 to 1.6.5, 12 fields)
h264: H.264 (1.0.0 to 1.6.5, 128 fields)
h323: H.323 (1.0.0 to 1.6.5, 27 fields)
h450: H.450 Supplementary Services (1.0.0 to 1.6.5, 294 fields)
h450.ros: H.450 Remote Operations Apdus (1.0.0 to 1.6.5, 15 fields)
h460: H.460 Supplementary Services (1.0.0 to 1.6.5, 178 fields)
h501: H.501 Mobility (1.0.0 to 1.6.5, 244 fields)
hci_h1: Bluetooth HCI (1.0.0 to 1.6.5, 2 fields)
hci_h4: Bluetooth HCI H4 (1.0.0 to 1.6.5, 2 fields)
hclnfsd: Hummingbird NFS Daemon (1.0.0 to 1.6.5, 36 fields)
hi2operations: HI2Operations (1.4.0 to 1.6.5, 299 fields)
hilscher: Hilscher analyzer dissector (1.0.0 to 1.6.5, 3 fields)
hip: Host Identity Protocol (1.4.0 to 1.6.5, 94 fields)
hnbap: UTRAN Iuh interface HNBAP signalling (1.4.0 to 1.6.5, 90 fields)
homeplug: HomePlug protocol (1.0.0 to 1.6.5, 145 fields)
hp_erm: HP encapsulated remote mirroring (1.4.0 to 1.6.5, 1 field)
hpext: HP Extended Local-Link Control (1.0.0 to 1.6.5, 2 fields)
hpsw: HP Switch Protocol (1.0.0 to 1.6.5, 4 fields)
hpteam: HP NIC Teaming Heartbeat (1.4.0 to 1.6.5, 1 field)
hsrp: Cisco Hot Standby Router Protocol (1.0.0 to 1.6.5, 40 fields)
http: Hypertext Transfer Protocol (1.0.0 to 1.6.5, 36 fields)
hyperscsi: HyperSCSI (1.0.0 to 1.6.5, 6 fields)

I

i2c: Inter-Integrated Circuit (1.2.0 to 1.6.5, 4 fields)
iap: Information Access Protocol (1.0.0 to 1.6.5, 18 fields)
iapp: Inter-Access-Point Protocol (1.0.0 to 1.6.5, 2 fields)
iax2: Inter-Asterisk eXchange v2 (1.0.0 to 1.6.5, 112 fields)
ib_sdp: Infiniband Sockets Direct Protocol (1.6.0 to 1.6.5, 35 fields)
icap: Internet Content Adaptation Protocol (1.0.0 to 1.6.5, 5 fields)
icep: Internet Communications Engine Protocol (1.0.0 to 1.6.5, 17 fields)
icl_rpc: DCE DFS ICL RPC (1.0.0 to 1.6.5, 1 field)
icmp: Internet Control Message Protocol (1.0.0 to 1.6.5, 43 fields)
icmpv6: Internet Control Message Protocol v6 (1.0.0 to 1.6.5, 352 fields)
icp: Internet Cache Protocol (1.0.0 to 1.6.5, 4 fields)
icq: ICQ Protocol (1.0.0 to 1.6.5, 7 fields)
idmp: X.519 Internet Directly Mapped Protocol (1.6.0 to 1.6.5, 39 fields)
idp: Internetwork Datagram Protocol (1.0.0 to 1.6.5, 12 fields)
ieee1722: IEEE 1722 Protocol (1.4.0 to 1.6.5, 29 fields)
ieee8021ad: IEEE 802.1ad (1.0.0 to 1.6.5, 5 fields)
ieee8021ah: IEEE 802.1ah (1.0.0 to 1.6.5, 11 fields)
ieee802a: IEEE802a OUI Extended Ethertype (1.0.0 to 1.6.5, 2 fields)
ifcp: iFCP (1.0.0 to 1.6.5, 21 fields)
igap: Internet Group membership Authentication Protocol (1.0.0 to 1.6.5, 11 fields)
igmp: Internet Group Management Protocol (1.0.0 to 1.6.5, 41 fields)
igrp: Cisco Interior Gateway Routing Protocol (1.0.0 to 1.6.5, 2 fields)
ilmi: ILMI (1.0.0 to 1.6.5, 0 fields)
image-gif: Compuserve GIF (1.0.0 to 1.6.5, 24 fields)
image-jfif: JPEG File Interchange Format (1.0.0 to 1.6.5, 32 fields)
imap: Internet Message Access Protocol (1.0.0 to 1.6.5, 2 fields)
imf: Internet Message Format (1.0.0 to 1.6.5, 75 fields)
inap: Intelligent Network Application Protocol (1.0.0 to 1.6.5, 569 fields)
infiniband: InfiniBand (1.0.0 to 1.6.5, 482 fields)
infiniband_link: InfiniBand Link (1.4.0 to 1.6.5, 5 fields)
initshutdown: Init shutdown service (1.0.0 to 1.6.5, 19 fields)
interlink: Interlink Protocol (1.4.0 to 1.6.5, 10 fields)
ioraw: TwinCAT IO-RAW (1.0.0 to 1.6.5, 3 fields)
ip: Internet Protocol Version 4 (1.0.0 to 1.6.5, 63 fields)
ipaccess: GSM over IP ip.access CCM sub-protocol (1.4.0 to 1.6.5, 3 fields)
ipars: International Passenger Airline Reservation System (1.0.0 to 1.6.5, 0 fields)
ipcomp: IP Payload Compression (1.0.0 to 1.6.5, 2 fields)
ipcp: PPP IP Control Protocol (1.0.0 to 1.6.5, 0 fields)
ipdc: IP Device Control (SS7 over IP) (1.0.0 to 1.6.5, 7 fields)
ipfc: IP Over FC (1.0.0 to 1.6.5, 2 fields)
ipmi: Intelligent Platform Management Interface (1.0.0 to 1.6.5, 1314 fields)
ipmi-session: Intelligent Platform Management Interface (Session Wrapper) (1.2.0 to 1.6.5, 11 fields)
ipnet: Solaris IPNET (1.4.0 to 1.6.5, 8 fields)
ipp: Internet Printing Protocol (1.0.0 to 1.6.5, 1 field)
ipsictl: IPSICTL (1.2.0 to 1.6.5, 7 fields)
ipv6: Internet Protocol Version 6 (1.0.0 to 1.6.5, 95 fields)
ipv6cp: PPP IPv6 Control Protocol (1.0.0 to 1.6.5, 0 fields)
ipvs: IP Virtual Services Sync Daemon (1.0.0 to 1.6.5, 19 fields)
ipx: Internetwork Packet eXchange (1.0.0 to 1.6.5, 16 fields)
ipxmsg: IPX Message (1.0.0 to 1.6.5, 2 fields)
ipxrip: IPX Routing Information Protocol (1.0.0 to 1.6.5, 2 fields)
ipxsap: Service Advertisement Protocol (1.0.0 to 1.6.5, 2 fields)
ipxwan: IPX WAN (1.0.0 to 1.6.5, 19 fields)
irc: Internet Relay Chat (1.0.0 to 1.6.5, 2 fields)
ircomm: IrCOMM Protocol (1.0.0 to 1.6.5, 6 fields)
irlap: IrDA Link Access Protocol (1.0.0 to 1.6.5, 30 fields)
irlmp: IrDA Link Management Protocol (1.0.0 to 1.6.5, 14 fields)
isakmp: Internet Security Association and Key Management Protocol (1.0.0 to 1.6.5, 249 fields)
iscsi: iSCSI (1.0.0 to 1.6.5, 104 fields)
isdn: ISDN (1.0.0 to 1.6.5, 1 field)
isis: ISO 10589 ISIS InTRA Domain Routeing Information Exchange Protocol (1.0.0 to 1.6.5, 43 fields)
isl: Cisco ISL (1.0.0 to 1.6.5, 19 fields)
ismacryp: ISMACryp Protocol (1.2.0 to 1.6.5, 31 fields)
ismp: InterSwitch Message Protocol (1.0.0 to 1.6.5, 19 fields)
isns: iSNS (1.0.0 to 1.6.5, 101 fields)
isup: ISDN User Part (1.0.0 to 1.6.5, 191 fields)
isup_thin: ISUP Thin Protocol (1.0.0 to 1.2.18, 15 fields)
isystemactivator: ISystemActivator ISystemActivator Resolver (1.0.0 to 1.6.5, 2 fields)
itdm: Internal TDM (1.2.0 to 1.6.5, 23 fields)
itunes: iTunes podCast rss elements (1.0.0 to 1.6.5, 10 fields)
iua: ISDN Q.921-User Adaptation Layer (1.0.0 to 1.6.5, 30 fields)
iuup: IuUP (1.0.0 to 1.6.5, 1323 fields)
iwarp_ddp_rdmap: iWARP Direct Data Placement and Remote Direct Memory Access Protocol (1.2.0 to 1.6.5, 47 fields)
iwarp_mpa: iWARP Marker Protocol data unit Aligned framing (1.2.0 to 1.6.5, 19 fields)

J

jabber: Jabber XML Messaging (1.0.0 to 1.6.5, 2 fields)
jmirror: Juniper Packet Mirror (1.4.0 to 1.6.5, 2 fields)
jpeg: RFC 2435 JPEG (1.0.0 to 1.6.5, 18 fields)
json: JavaScript Object Notation (1.6.0 to 1.6.5, 8 fields)
juniper: Juniper (1.0.0 to 1.6.5, 18 fields)
jxta: JXTA P2P (1.0.0 to 1.6.5, 49 fields)
jxta.message: JXTA Message (1.0.0 to 1.6.5, 0 fields)

K

k12: K12xx (1.0.0 to 1.6.5, 6 fields)
kadm5: Kerberos Administration (1.0.0 to 1.6.5, 1 field)
kdp: Kontiki Delivery Protocol (1.2.0 to 1.6.5, 31 fields)
kerberos: Kerberos (1.0.0 to 1.6.5, 181 fields)
kf: Kingfisher (1.0.0 to 1.6.5, 9 fields)
kink: Kerberized Internet Negotiation of Key (1.0.0 to 1.6.5, 8 fields)
kismet: Kismet Client/Server Protocol (1.0.0 to 1.6.5, 2 fields)
klm: Kernel Lock Manager (1.0.0 to 1.6.5, 10 fields)
kpasswd: MS Kpasswd (1.0.0 to 1.6.5, 9 fields)
krb4: Kerberos v4 (1.0.0 to 1.6.5, 21 fields)
krb5rpc: DCE/RPC Kerberos V (1.0.0 to 1.6.5, 18 fields)

L

l2tp: Layer 2 Tunneling Protocol (1.0.0 to 1.6.5, 46 fields)
lane: ATM LAN Emulation (1.0.0 to 1.6.5, 0 fields)
lanforge: LANforge Traffic Generator (1.2.0 to 1.6.5, 12 fields)
lanman: Microsoft Windows Lanman Remote API Protocol (1.0.0 to 1.6.5, 80 fields)
lapb: Link Access Procedure Balanced (LAPB) (1.0.0 to 1.6.5, 10 fields)
lapbether: Link Access Procedure Balanced Ethernet (LAPBETHER) (1.0.0 to 1.6.5, 1 field)
lapd: Link Access Procedure, Channel D (LAPD) (1.0.0 to 1.6.5, 19 fields)
lapdm: Link Access Procedure, Channel Dm (LAPDm) (1.2.0 to 1.6.5, 28 fields)
laplink: Laplink (1.0.0 to 1.6.5, 5 fields)
lcp: PPP Link Control Protocol (1.0.0 to 1.6.5, 0 fields)
lct: H.283 Logical Channel Transport (1.0.0 to 1.6.5, 33 fields)
ldap: Lightweight Directory Access Protocol (1.0.0 to 1.6.5, 211 fields)
ldp: Label Distribution Protocol (1.0.0 to 1.6.5, 217 fields)
ldss: Local Download Sharing Service (1.2.0 to 1.6.5, 21 fields)
lge_monitor: LGE Monitor (1.0.0 to 1.6.5, 3 fields)
linx: ENEA LINX (1.0.0 to 1.6.5, 42 fields)
lisp: Locator/ID Separation Protocol (1.6.0 to 1.6.5, 33 fields)
lisp-data: Locator/ID Separation Protocol (Data) (1.6.0 to 1.6.5, 14 fields)
list: Event Notification for Resource Lists (RFC 4662) (1.0.0 to 1.6.5, 21 fields)
llap: LocalTalk Link Access Protocol (1.0.0 to 1.6.5, 3 fields)
llb: DCE/RPC NCS 1.5.1 Local Location Broker (1.0.0 to 1.6.5, 1 field)
llc: Logical-Link Control (1.0.0 to 1.6.5, 24 fields)
llcgprs: Logical Link Control GPRS (1.0.0 to 1.6.5, 45 fields)
lldp: Link Layer Discovery Protocol (1.0.0 to 1.6.5, 46 fields)
llt: Veritas Low Latency Transport (LLT) (1.0.0 to 1.6.5, 5 fields)
lmi: Local Management Interface (1.0.0 to 1.6.5, 11 fields)
lmp: Link Management Protocol (LMP) (1.0.0 to 1.6.5, 173 fields)
log: Log Message (1.0.0 to 1.6.5, 2 fields)
logotypecertextn: Logotype Certificate Extensions (1.0.0 to 1.6.5, 46 fields)
loop: Configuration Test Protocol (loopback) (1.0.0 to 1.6.5, 4 fields)
lpd: Line Printer Daemon Protocol (1.0.0 to 1.6.5, 2 fields)
lsa: Microsoft Local Security Architecture (1.0.0 to 1.0.16, 93 fields)
lsarpc: Local Security Authority (1.2.0 to 1.6.5, 418 fields)
lsc: Pegasus Lightweight Stream Control (1.0.0 to 1.6.5, 11 fields)
lte_rrc: LTE Radio Resource Control (RRC) protocol (1.2.0 to 1.6.5, 1371 fields)
ltp: Licklider Transmission Protocol (1.4.0 to 1.6.5, 35 fields)
lwapp: LWAPP Encapsulated Packet (1.0.0 to 1.6.5, 14 fields)
lwapp-cntl: LWAPP Control Message (1.0.0 to 1.6.5, 0 fields)
lwapp-l3: LWAPP Layer 3 Packet (1.0.0 to 1.6.5, 0 fields)
lwres: Light Weight DNS RESolver (BIND9) (1.0.0 to 1.6.5, 35 fields)

M

m2m: WiMax Mac to Mac Packet (1.0.0 to 1.6.5, 22 fields)
m2pa: MTP2 Peer Adaptation Layer (1.0.0 to 1.6.5, 24 fields)
m2tp: MTP 2 Transparent Proxy (1.0.0 to 1.6.5, 17 fields)
m2ua: MTP 2 User Adaptation Layer (1.0.0 to 1.6.5, 37 fields)
m3ua: MTP 3 User Adaptation Layer (1.0.0 to 1.6.5, 60 fields)
mac: MAC (1.4.0 to 1.6.5, 5 fields)
mac-lte: MAC-LTE (1.2.0 to 1.6.5, 124 fields)
macc: MAC Control (1.0.0 to 1.6.5, 21 fields)
mactelnet: MikroTik MAC-Telnet Protocol (1.6.0 to 1.6.5, 17 fields)
mailslot: SMB MailSlot Protocol (1.0.0 to 1.6.5, 5 fields)
malformed: Malformed Packet (1.0.0 to 1.6.5, 0 fields)
manolito: Blubster/Piolet MANOLITO Protocol (1.0.0 to 1.6.5, 5 fields)
mapi: Exchange 5.5 EMSMDB (1.0.0 to 1.6.5, 105 fields)
mate: Meta Analysis Tracing Engine (1.0.0 to 1.6.5, 0 fields)
mbtcp: Modbus/TCP (1.0.0 to 1.6.5, 20 fields)
mdshdr: MDS Header (1.0.0 to 1.6.5, 8 fields)
media: Media Type (1.0.0 to 1.6.5, 0 fields)
megaco: MEGACO (1.0.0 to 1.6.5, 47 fields)
memcache: Memcache Protocol (1.2.0 to 1.6.5, 33 fields)
mesh: Mesh Header (1.2.0 to 1.6.5, 2 fields)
message-http: Media Type: message/http (1.0.0 to 1.6.5, 0 fields)
messenger: Microsoft Messenger Service (1.0.0 to 1.6.5, 5 fields)
meta: Metadata (1.4.0 to 1.6.5, 28 fields)
mgcp: Media Gateway Control Protocol (1.0.0 to 1.6.5, 82 fields)
mgmt: DCE/RPC Remote Management (1.0.0 to 1.6.5, 1 field)
mibs: MIBs (1.0.3 to 1.0.5, 1.0.9 to 1.0.16, 1.2.1 to 1.2.18, 759 fields)
mikey: Multimedia Internet KEYing (1.0.0 to 1.6.5, 99 fields)
mime_multipart: MIME Multipart Media Encapsulation (1.0.0 to 1.6.5, 9 fields)
miop: Unreliable Multicast Inter-ORB Protocol (1.2.0 to 1.6.5, 8 fields)
mip: Mobile IP (1.0.0 to 1.6.5, 71 fields)
mipv6: Mobile IPv6 / Network Mobility (1.0.0 to 1.6.5, 86 fields)
mms: MMS (1.0.0 to 1.6.5, 446 fields)
mmse: MMS Message Encapsulation (1.0.0 to 1.6.5, 43 fields)
mndp: Mikrotik Neighbor Discovery Protocol (1.6.0 to 1.6.5, 14 fields)
mongo: Mongo Wire Protocol (1.6.0 to 1.6.5, 40 fields)
mount: Mount Service (1.0.0 to 1.6.5, 54 fields)
mp: PPP Multilink Protocol (1.0.0 to 1.6.5, 3 fields)
mp2t: ISO/IEC 13818-1 (1.0.0 to 1.6.5, 58 fields)
mp4v-es: MP4V-ES (1.2.0 to 1.6.5, 15 fields)
mpeg: Moving Picture Experts Group (1.0.0 to 1.6.5, 0 fields)
mpeg-pes: Packetized Elementary Stream (1.0.0 to 1.6.5, 82 fields)
mpeg.audio: Moving Picture Experts Group Audio (1.0.0 to 1.6.5, 26 fields)
mpeg1: RFC 2250 MPEG1 (1.0.0 to 1.6.5, 13 fields)
mpls: MultiProtocol Label Switching Header (1.0.0 to 1.6.5, 19 fields)
mpls-echo: Multiprotocol Label Switching Echo (1.0.0 to 1.6.5, 88 fields)
mplscp: PPP MPLS Control Protocol (1.0.0 to 1.6.5, 0 fields)
mplspwatm11_or_aal5pdu: MPLS PW ATM One-to-One or AAL5 PDU encapsulation (1.4.0 to 1.6.5, 3 fields)
mplspwatmaal5sdu: MPLS PW ATM AAL5 CPCS-SDU mode encapsulation (1.4.0 to 1.6.5, 1 field)
mplspwatmcell: ATM Cell (1.4.0 to 1.6.5, 1 field)
mplspwatmcellheader: MPLS PW ATM Cell Header (1.4.0 to 1.6.5, 7 fields)
mplspwatmcontrolword: MPLS PW ATM Control Word (1.4.0 to 1.6.5, 9 fields)
mplspwatmn1cw: MPLS PW ATM N-to-One encapsulation, with CW (1.4.0 to 1.6.5, 1 field)
mplspwatmn1nocw: MPLS PW ATM N-to-One encapsulation, no CW (1.4.0 to 1.6.5, 2 fields)
mq: WebSphere MQ (1.0.0 to 1.6.5, 238 fields)
mqpcf: WebSphere MQ Programmable Command Formats (1.0.0 to 1.6.5, 9 fields)
mrdisc: Multicast Router DISCovery protocol (1.0.0 to 1.6.5, 11 fields)
mrp-mmrp: Multiple Mac Registration Protocol (1.6.0 to 1.6.5, 12 fields)
mrp-msrp: Multiple Stream Reservation Protocol (1.4.0 to 1.6.5, 29 fields)
mscml: Media Server Control Markup Language - draft 07 (1.0.0 to 1.6.5, 719 fields)
msdp: Multicast Source Discovery Protocol (1.0.0 to 1.6.5, 17 fields)
msmms: Microsoft Media Server (1.0.0 to 1.6.5, 57 fields)
msnip: MSNIP: Multicast Source Notification of Interest Protocol (1.0.0 to 1.6.5, 11 fields)
msnlb: MS Network Load Balancing (1.0.0 to 1.6.5, 6 fields)
msnms: MSN Messenger Service (1.0.0 to 1.6.5, 0 fields)
msproxy: MS Proxy Protocol (1.0.0 to 1.6.5, 16 fields)
msrp: Message Session Relay Protocol (1.0.0 to 1.6.5, 27 fields)
mstp: BACnet MS/TP (1.2.0 to 1.6.5, 11 fields)
mtp2: Message Transfer Part Level 2 (1.0.0 to 1.6.5, 9 fields)
mtp3: Message Transfer Part Level 3 (1.0.0 to 1.6.5, 16 fields)
mtp3mg: Message Transfer Part Level 3 Management (1.0.0 to 1.6.5, 26 fields)
mux27010: MUX27010 Protocol (1.6.0 to 1.6.5, 75 fields)
mysql: MySQL Protocol (1.0.0 to 1.6.5, 116 fields)

N

nas-eps: Non-Access-Stratum (NAS)PDU (1.2.0 to 1.6.5, 143 fields)
nasdaq_itch: Nasdaq TotalView-ITCH (1.2.0 to 1.6.5, 25 fields)
nasdaq_soup: Nasdaq-SoupTCP version 2.0 (1.2.0 to 1.6.5, 9 fields)
nat-pmp: NAT Port Mapping Protocol (1.2.0 to 1.6.5, 9 fields)
nb_rtpmux: 3GPP Nb Interface RTP Multiplex (1.4.0 to 1.6.5, 9 fields)
nbap: UTRAN Iub interface NBAP signalling (1.0.0 to 1.6.5, 3198 fields)
nbd: Network Block Device (1.0.0 to 1.6.5, 10 fields)
nbdgm: NetBIOS Datagram Service (1.0.0 to 1.6.5, 7 fields)
nbipx: NetBIOS over IPX (1.0.0 to 1.6.5, 0 fields)
nbns: NetBIOS Name Service (1.0.0 to 1.6.5, 14 fields)
nbp: Name Binding Protocol (1.0.0 to 1.6.5, 11 fields)
nbss: NetBIOS Session Service (1.0.0 to 1.6.5, 3 fields)
ncp: NetWare Core Protocol (1.0.0 to 1.6.5, 2305 fields)
ncs: Novell Cluster Services (1.0.0 to 1.6.5, 2 fields)
ndmp: Network Data Management Protocol (1.0.0 to 1.6.5, 185 fields)
ndp: Nortel Discovery Protocol (1.6.0 to 1.6.5, 6 fields)
ndps: Novell Distributed Print System (1.0.0 to 1.6.5, 283 fields)
netbios: NetBIOS (1.0.0 to 1.6.5, 33 fields)
netdfs: Settings for Microsoft Distributed File System (1.0.0 to 1.6.5, 169 fields)
netdump: Netdump Protocol (1.2.0 to 1.6.5, 9 fields)
netmon_802_11: NetMon 802.11 capture header (1.4.0 to 1.6.5, 14 fields)
netsync: Monotone Netsync (1.0.0 to 1.6.5, 39 fields)
nettl: HP-UX Network Tracing and Logging (1.0.0 to 1.6.5, 5 fields)
newmail: Microsoft Exchange New Mail Notification (1.0.0 to 1.6.5, 1 field)
nfs: Network File System (1.0.0 to 1.6.5, 431 fields)
nfsacl: NFSACL (1.0.0 to 1.6.5, 11 fields)
nfsauth: NFSAUTH (1.0.0 to 1.6.5, 1 field)
nhrp: NBMA Next Hop Resolution Protocol (1.0.0 to 1.6.5, 65 fields)
nisplus: NIS+ (1.0.0 to 1.6.5, 118 fields)
nispluscb: NIS+ Callback (1.0.0 to 1.6.5, 3 fields)
njack: 3com Network Jack (1.0.0 to 1.6.5, 23 fields)
nlm: Network Lock Manager Protocol (1.0.0 to 1.6.5, 27 fields)
nlsp: NetWare Link Services Protocol (1.0.0 to 1.6.5, 18 fields)
nmas: Novell Modular Authentication Service (1.0.0 to 1.6.5, 30 fields)
nmpi: Name Management Protocol over IPX (1.0.0 to 1.6.5, 0 fields)
nntp: Network News Transfer Protocol (1.0.0 to 1.6.5, 2 fields)
norm: Negative-acknowledgment Oriented Reliable Multicast (1.0.0 to 1.6.5, 63 fields)
npmp: NetPerfMeter Protocol (1.4.0 to 1.6.5, 54 fields)
ns: NetScaler Trace (1.4.0 to 1.6.5, 7 fields)
ns_cert_exts: NetScape Certificate Extensions (1.0.0 to 1.6.5, 19 fields)
nsip: Network Service Over IP (1.0.0 to 1.2.18, 21 fields)
nspi: Exchange 5.5 Name Service Provider (1.0.0 to 1.6.5, 110 fields)
nsrp: Juniper Netscreen Redundant Protocol (1.0.0 to 1.6.5, 26 fields)
ntlmssp: NTLM Secure Service Provider (1.0.0 to 1.6.5, 150 fields)
ntp: Network Time Protocol (1.0.0 to 1.6.5, 65 fields)
null: Null/Loopback (1.0.0 to 1.6.5, 2 fields)
nw_mtp: NexusWare C7 MTP (1.4.0 to 1.6.5, 5 fields)
nw_serial: NetWare Serialization Protocol (1.0.0 to 1.6.5, 0 fields)

O

oamaal: ATM OAM AAL (1.0.0 to 1.6.5, 0 fields)
ocsp: Online Certificate Status Protocol (1.0.0 to 1.6.5, 55 fields)
oicq: OICQ - IM software, popular in China (1.0.0 to 1.6.5, 6 fields)
olsr: Optimized Link State Routing Protocol (1.0.0 to 1.6.5, 38 fields)
omapi: ISC Object Management API (1.0.0 to 1.6.5, 17 fields)
omron: OMRON FINS Protocol (1.4.0 to 1.6.5, 306 fields)
opcua: OpcUa Binary Protocol (1.0.0 to 1.6.5, 470 fields)
opensafety: openSAFETY (1.6.0 to 1.6.5, 47 fields)
opsi: Open Policy Service Interface (1.0.0 to 1.6.5, 41 fields)
osi: OSI (1.0.0 to 1.6.5, 0 fields)
osicp: PPP OSI Control Protocol (1.0.0 to 1.6.5, 0 fields)
ospf: Open Shortest Path First (1.0.0 to 1.6.5, 104 fields)
oxid: DCOM OXID Resolver (1.0.0 to 1.6.5, 30 fields)

P

p1: X.411 Message Transfer Service (1.6.0 to 1.6.5, 491 fields)
p22: X.420 Information Object (1.6.0 to 1.6.5, 327 fields)
p3: X.411 Message Access Service (1.4.0 to 1.6.5, 0 fields)
p7: X.413 Message Store Service (1.0.0 to 1.6.5, 342 fields)
p772: STANAG 4406 Message (1.6.0 to 1.6.5, 73 fields)
p_mul: P_Mul (ACP142) (1.0.0 to 1.6.5, 63 fields)
packetbb: PacketBB Protocol (1.4.0 to 1.6.5, 57 fields)
packetlogger: PacketLogger (1.2.0 to 1.6.5, 2 fields)
pagp: Port Aggregation Protocol (1.0.0 to 1.6.5, 26 fields)
paketcable_avps: PacketCable AVPs (1.0.0 to 1.6.5, 66 fields)
paltalk: Paltalk Messenger Protocol (1.2.0 to 1.6.5, 4 fields)
pana: Protocol for carrying Authentication for Network Access (1.0.0 to 1.6.5, 30 fields)
pap: PPP Password Authentication Protocol (1.0.0 to 1.6.5, 11 fields)
papi: Aruba PAPI (1.6.0 to 1.6.5, 20 fields)
pcap: UTRAN Iupc interface Positioning Calculation Application Part (PCAP) (1.0.0 to 1.6.5, 1069 fields)
pcep: Path Computation Element communication Protocol (1.0.0 to 1.6.5, 73 fields)
pcli: Packet Cable Lawful Intercept (1.0.0 to 1.6.5, 1 field)
pcnfsd: PC NFS (1.0.0 to 1.6.5, 15 fields)
pdcp-lte: PDCP-LTE (1.2.0 to 1.6.5, 114 fields)
per: Packed Encoding Rules (ASN.1 X.691) (1.0.0 to 1.6.5, 26 fields)
pflog: OpenBSD Packet Filter log file (1.0.0 to 1.6.5, 4 fields)
pflog-old: OpenBSD Packet Filter log file, pre 3.4 (1.0.0 to 1.6.5, 6 fields)
pgm: Pragmatic General Multicast (1.0.0 to 1.6.5, 75 fields)
pgsql: PostgreSQL (1.0.0 to 1.6.5, 38 fields)
pim: Protocol Independent Multicast (1.0.0 to 1.6.5, 24 fields)
pingpongprotocol: Ping Pong Protocol (1.0.0 to 1.6.5, 8 fields)
pipe: SMB Pipe Protocol (1.0.0 to 1.6.5, 23 fields)
pkcs-1: PKCS#1 (1.0.0 to 1.6.5, 11 fields)
pkcs12: PKCS#12: Personal Information Exchange (1.0.0 to 1.6.5, 57 fields)
pkinit: PKINIT (1.0.0 to 1.6.5, 22 fields)
pkix-cert: PKIX CERT File Format (1.0.0 to 1.6.5, 1 field)
pkix1explicit: PKIX1Explicit (1.0.0 to 1.6.5, 46 fields)
pkix1implicit: PKIX1Implitit (1.0.0 to 1.6.5, 18 fields)
pkixac: PKIX Attribute Certificate (1.4.0 to 1.6.5, 48 fields)
pkixproxy: PKIXProxy (RFC3820) (1.0.0 to 1.6.5, 5 fields)
pkixqualified: PKIX Qualified (1.0.0 to 1.6.5, 23 fields)
pkixtsp: PKIX Time Stamp Protocol (1.0.0 to 1.6.5, 29 fields)
pkt_ccc: PacketCable Call Content Connection (1.0.0 to 1.6.5, 2 fields)
pktc: PacketCable (1.0.0 to 1.6.5, 34 fields)
pktgen: Linux Kernel Packet Generator (1.0.0 to 1.6.5, 5 fields)
pn_dcp: PROFINET DCP (1.0.0 to 1.6.5, 34 fields)
pn_io: PROFINET IO (1.0.0 to 1.6.5, 357 fields)
pn_mrp: PROFINET MRP (1.0.0 to 1.6.5, 15 fields)
pn_mrrt: PROFINET MRRT (1.0.0 to 1.6.5, 6 fields)
pn_ptcp: PROFINET PTCP (1.0.0 to 1.6.5, 31 fields)
pn_rt: PROFINET Real-Time Protocol (1.0.0 to 1.6.5, 30 fields)
png: Portable Network Graphics (1.0.0 to 1.6.5, 31 fields)
pnp: Microsoft Plug and Play service (1.0.0 to 1.6.5, 1 field)
pnrp: Peer Network Resolution Protocol (1.4.0 to 1.6.5, 77 fields)
poc-settings: poc-settings XML doc (RFC 4354) (1.0.0 to 1.6.5, 32 fields)
pop: Post Office Protocol (1.0.0 to 1.6.5, 18 fields)
portmap: Portmap (1.0.0 to 1.6.5, 19 fields)
ppi: PPI Packet Header (1.0.0 to 1.6.5, 98 fields)
ppi_antenna: PPI antenna decoder (1.6.0 to 1.6.5, 34 fields)
ppi_gps: PPI Geotagging GPS tag decoder (1.6.0 to 1.6.5, 40 fields)
ppi_vector: PPI vector decoder (1.6.0 to 1.6.5, 62 fields)
ppp: Point-to-Point Protocol (1.0.0 to 1.6.5, 4 fields)
ppp_hdlc: PPP In HDLC-Like Framing (1.0.0 to 1.6.5, 0 fields)
pppmux: PPP Multiplexing (1.0.0 to 1.6.5, 0 fields)
pppmuxcp: PPPMux Control Protocol (1.0.0 to 1.6.5, 0 fields)
pppoe: PPP-over-Ethernet (1.2.0 to 1.6.5, 5 fields)
pppoed: PPP-over-Ethernet Discovery (1.0.0 to 1.6.5, 60 fields)
pppoes: PPP-over-Ethernet Session (1.0.0 to 1.6.5, 5 fields)
pptp: Point-to-Point Tunnelling Protocol (1.0.0 to 1.6.5, 49 fields)
pres: ISO 8823 OSI Presentation Protocol (1.0.0 to 1.6.5, 77 fields)
presence: presence XML doc (RFC 3863) (1.0.0 to 1.6.5, 19 fields)
prism: Prism capture header (1.0.0 to 1.6.5, 22 fields)
prp: Parallel Redundancy Protocol (IEC62439 Part 3) (1.0.0 to 1.6.5, 12 fields)
ptp: Precision Time Protocol (IEEE1588) (1.0.0 to 1.6.5, 385 fields)
pvfs: Parallel Virtual File System (1.0.0 to 1.6.5, 81 fields)
pw_atm_n2o_cw: ATM PW, N-to-one Cell Mode Control Word (1.2.0 to 1.2.18, 3 fields)
pw_atm_n2o_nocw: ATM PW, N-to-one Cell Mode (no CW) (1.2.0 to 1.2.18, 0 fields)
pw_hdlc_nocw_fr: HDLC PW, FR port mode (no CW) (1.2.0 to 1.6.5, 6 fields)
pw_hdlc_nocw_hdlc_ppp: HDLC-like framing for PPP (1.2.0 to 1.6.5, 0 fields)
pwach: PW Associated Channel Header (1.2.0 to 1.6.5, 0 fields)
pwcesopsn: CESoPSN basic NxDS0 mode (no RTP support) (1.2.0 to 1.6.5, 11 fields)
pwethcw: PW Ethernet Control Word (1.2.0 to 1.6.5, 3 fields)
pwethheuristic: Ethernet PW (CW heuristic) (1.2.0 to 1.6.5, 0 fields)
pwethnocw: Ethernet PW (no CW) (1.2.0 to 1.6.5, 0 fields)
pwfr: PW Frame Relay DLCI Control Word (1.2.0 to 1.6.5, 7 fields)
pwmcw: PW MPLS Control Word (generic/preferred) (1.2.0 to 1.6.5, 0 fields)
pwpadding: Pseudowire Padding (1.4.0 to 1.6.5, 1 field)
pwsatopcw: SAToP (no RTP support) (1.2.0 to 1.6.5, 12 fields)

Q

q2931: Q.2931 (1.0.0 to 1.6.5, 9 fields)
q708: ITU-T Q.708 ISPC Analysis (1.4.0 to 1.6.5, 3 fields)
q931: Q.931 (1.0.0 to 1.6.5, 47 fields)
q932: Q.932 (1.0.0 to 1.6.5, 39 fields)
q932.ros: Q.932 Operations Service Element (1.0.0 to 1.6.5, 19 fields)
q933: Q.933 (1.0.0 to 1.6.5, 23 fields)
qllc: Qualified Logical Link Control (1.0.0 to 1.6.5, 2 fields)
qsig: QSIG (1.0.0 to 1.6.5, 744 fields)
quake: Quake Network Protocol (1.0.0 to 1.6.5, 26 fields)
quake2: Quake II Network Protocol (1.0.0 to 1.6.5, 22 fields)
quake3: Quake III Arena Network Protocol (1.0.0 to 1.6.5, 13 fields)
quakeworld: QuakeWorld Network Protocol (1.0.0 to 1.6.5, 22 fields)

R

r-stp: Retix Spanning Tree Protocol (1.0.0 to 1.6.5, 5 fields)
r3: Assa Abloy R3 (1.4.0 to 1.6.5, 617 fields)
radio: 802.11 radio information (1.0.0 to 1.6.5, 0 fields)
radiotap: IEEE 802.11 Radiotap Capture header (1.0.0 to 1.6.5, 101 fields)
radius: Radius Protocol (1.0.0 to 1.6.5, 8601 fields)
ranap: Radio Access Network Application Part (1.0.0 to 1.6.5, 613 fields)
raw: Raw packet data (1.0.0 to 1.6.5, 0 fields)
raw_sigcomp: Decompressed SigComp message as raw text (1.0.0 to 1.6.5, 0 fields)
raw_sip: Session Initiation Protocol (SIP as raw text) (1.0.0 to 1.6.5, 1 field)
rdaclif: DCE/RPC Directory Acl Interface (1.0.0 to 1.6.5, 1 field)
rdc: H.282 Remote Device Control (1.0.0 to 1.6.5, 423 fields)
rdm: Remote Device Management (1.0.0 to 1.6.5, 16 fields)
rdt: Real Data Transport (1.0.0 to 1.6.5, 68 fields)
redback: Redback (1.0.0 to 1.6.5, 9 fields)
redbackli: Redback Lawful Intercept (1.0.0 to 1.6.5, 8 fields)
reginfo: Reginfo XML doc (RFC 3680) (1.0.0 to 1.6.5, 42 fields)
reload: REsource LOcation And Discovery (1.6.0 to 1.6.5, 143 fields)
reload-framing: REsource LOcation And Discovery Framing (1.6.0 to 1.6.5, 10 fields)
remact: DCOM IRemoteActivation (1.0.0 to 1.6.5, 22 fields)
remunk: IRemUnknown (1.0.0 to 1.6.5, 18 fields)
remunk2: IRemUnknown2 (1.0.0 to 1.6.5, 0 fields)
rep_proc: DCE DFS Replication Server (1.0.0 to 1.6.5, 1 field)
rfc2190: H.263 RTP Payload header (RFC2190) (1.2.0 to 1.6.5, 21 fields)
rfr: Exchange 2003 Directory Request For Response (1.2.0 to 1.6.5, 10 fields)
rgmp: Router-port Group Management Protocol (1.0.0 to 1.6.5, 4 fields)
rip: Routing Information Protocol (1.0.0 to 1.6.5, 11 fields)
ripng: RIPng (1.0.0 to 1.6.5, 8 fields)
rlc: RLC (1.4.0 to 1.6.5, 29 fields)
rlc-lte: RLC-LTE (1.2.0 to 1.6.5, 53 fields)
rlm: Redundant Link Management Protocol (1.0.0 to 1.6.5, 5 fields)
rlogin: Rlogin Protocol (1.0.0 to 1.6.5, 15 fields)
rmcp: Remote Management Control Protocol (1.0.0 to 1.6.5, 4 fields)
rmi: Java RMI (1.0.0 to 1.6.5, 10 fields)
rmp: HP Remote Maintenance Protocol (1.0.0 to 1.6.5, 9 fields)
rnsap: UTRAN Iur interface Radio Network Subsystem Application Part (1.0.0 to 1.6.5, 2628 fields)
rohc: RObust Header Compression (ROHC) (1.6.0 to 1.6.5, 50 fields)
roofnet: Roofnet Protocol (1.0.0 to 1.6.5, 17 fields)
ros: X.880 OSI Remote Operations Service (1.0.0 to 1.6.5, 26 fields)
roverride: Remote Override interface (1.0.0 to 1.6.5, 1 field)
rpc: Remote Procedure Call (1.0.0 to 1.6.5, 65 fields)
rpc_browser: RPC Browser (1.0.0 to 1.6.5, 6 fields)
rpc_netlogon: Microsoft Network Logon (1.0.0 to 1.6.5, 310 fields)
rpcap: Remote Packet Capture (1.2.0 to 1.6.5, 68 fields)
rpl: Remote Program Load (1.0.0 to 1.6.5, 20 fields)
rpriv: Privilege Server operations (1.0.0 to 1.6.5, 8 fields)
rquota: Remote Quota (1.0.0 to 1.6.5, 18 fields)
rras: Microsoft Routing and Remote Access Service (1.0.0 to 1.6.5, 1 field)
rrc: Radio Resource Control (RRC) protocol (1.0.0 to 1.6.5, 5143 fields)
rrlp: Radio Resource LCS Protocol (RRLP) (1.0.0 to 1.6.5, 793 fields)
rs_acct: DCE/RPC RS_ACCT (1.0.0 to 1.6.5, 7 fields)
rs_attr: Registry Server Attributes Manipulation Interface (1.0.0 to 1.6.5, 1 field)
rs_attr_schema: DCE/RPC Registry Server Attributes Schema (1.0.0 to 1.6.5, 1 field)
rs_bind: DCE/RPC RS_BIND (1.0.0 to 1.6.5, 1 field)
rs_misc: DCE/RPC RS_MISC (1.0.0 to 1.6.5, 5 fields)
rs_pgo: DCE Name Service (1.0.0 to 1.6.5, 67 fields)
rs_plcy: RS Interface properties (1.0.0 to 1.6.5, 1 field)
rs_prop_acct: DCE/RPC RS_PROP_ACCT (1.0.0 to 1.6.5, 1 field)
rs_prop_acl: DCE/RPC Registry server propagation interface - ACLs (1.0.0 to 1.6.5, 1 field)
rs_prop_attr: DCE/RPC Prop Attr (1.0.0 to 1.6.5, 1 field)
rs_prop_pgo: DCE/RPC Registry server propagation interface - PGO items (1.0.0 to 1.6.5, 1 field)
rs_prop_plcy: DCE/RPC Registry server propagation interface - properties and policies (1.0.0 to 1.6.5, 1 field)
rs_pwd_mgmt: DCE/RPC Registry Password Management (1.0.0 to 1.6.5, 1 field)
rs_repadm: Registry server administration operations. (1.0.0 to 1.6.5, 1 field)
rs_replist: DCE/RPC Repserver Calls (1.0.0 to 1.6.5, 1 field)
rs_repmgr: DCE/RPC Operations between registry server replicas (1.0.0 to 1.6.5, 1 field)
rs_unix: DCE/RPC RS_UNIX (1.0.0 to 1.6.5, 1 field)
rsec_login: Remote sec_login preauth interface. (1.0.0 to 1.6.5, 1 field)
rsh: Remote Shell (1.0.0 to 1.6.5, 2 fields)
rsip: Realm Specific IP Protocol (1.6.0 to 1.6.5, 27 fields)
rsl: Radio Signalling Link (RSL) (1.0.0 to 1.6.5, 68 fields)
rsp: RMCP Security-extensions Protocol (1.0.0 to 1.6.5, 2 fields)
rss: rss (1.0.0 to 1.6.5, 122 fields)
rstat: RSTAT (1.0.0 to 1.6.5, 4 fields)
rsvp: Resource ReserVation Protocol (RSVP) (1.0.0 to 1.6.5, 89 fields)
rsync: RSYNC File Synchroniser (1.0.0 to 1.6.5, 7 fields)
rtcfg: RTcfg (1.0.0 to 1.6.5, 23 fields)
rtcp: Real-time Transport Control Protocol (1.0.0 to 1.6.5, 153 fields)
rtmac: Real-Time Media Access Control (1.0.0 to 1.6.5, 38 fields)
rtmp: Routing Table Maintenance Protocol (1.0.0 to 1.6.5, 8 fields)
rtmpt: Real Time Messaging Protocol (1.0.0 to 1.6.5, 55 fields)
rtp: Real-Time Transport Protocol (1.0.0 to 1.6.5, 38 fields)
rtpevent: RFC 2833 RTP Event (1.0.0 to 1.6.5, 5 fields)
rtps: Real-Time Publish-Subscribe Wire Protocol (1.0.0 to 1.6.5, 51 fields)
rtps2: Real-Time Publish-Subscribe Wire Protocol 2.x (1.2.0 to 1.6.5, 47 fields)
rtse: X.228 OSI Reliable Transfer Service (1.0.0 to 1.6.5, 35 fields)
rtsp: Real Time Streaming Protocol (1.0.0 to 1.6.5, 12 fields)
rua: UTRAN Iuh interface RUA signalling (1.4.0 to 1.6.5, 61 fields)
rudp: Reliable UDP (1.0.0 to 1.6.5, 13 fields)
rwall: Remote Wall protocol (1.0.0 to 1.6.5, 2 fields)
rx: RX Protocol (1.0.0 to 1.6.5, 41 fields)

S

s1ap: S1 Application Protocol (1.0.0 to 1.6.5, 482 fields)
s4406: STANAG 4406 Message (1.0.0 to 1.4.11, 87 fields)
s5066: STANAG 5066 (SIS layer) (1.0.0 to 1.6.5, 98 fields)
sabp: UTRAN IuBC interface SABP signaling (1.0.0 to 1.6.5, 76 fields)
sadmind: SADMIND (1.0.0 to 1.6.5, 3 fields)
sametime: Sametime Protocol (1.6.0 to 1.6.5, 28 fields)
samr: SAMR (pidl) (1.0.0 to 1.6.5, 648 fields)
sap: Session Announcement Protocol (1.0.0 to 1.6.5, 12 fields)
sasp: Server/Application State Protocol (1.4.0 to 1.6.5, 67 fields)
sb3: Fibre Channel Single Byte Command (1.0.0 to 1.6.5, 68 fields)
sbus: SAIA S-Bus (1.0.0 to 1.6.5, 67 fields)
sccp: Signalling Connection Control Part (1.0.0 to 1.6.5, 84 fields)
sccpmg: Signalling Connection Control Part Management (1.0.0 to 1.6.5, 10 fields)
scop: ZigBee SCoP (1.6.0 to 1.6.5, 6 fields)
scsi: SCSI (1.0.0 to 1.6.5, 199 fields)
scsi_mmc: SCSI_MMC (1.0.0 to 1.6.5, 145 fields)
scsi_osd: SCSI_OSD (1.0.0 to 1.6.5, 82 fields)
scsi_sbc: SCSI_SBC (1.0.0 to 1.6.5, 72 fields)
scsi_smc: SCSI_SMC (1.0.0 to 1.6.5, 17 fields)
scsi_ssc: SCSI_SSC (1.0.0 to 1.6.5, 41 fields)
sctp: Stream Control Transmission Protocol (1.0.0 to 1.6.5, 132 fields)
sdlc: Synchronous Data Link Control (SDLC) (1.0.0 to 1.6.5, 10 fields)
sdp: Session Description Protocol (1.0.0 to 1.6.5, 64 fields)
sebek: SEBEK - Kernel Data Capture (1.0.0 to 1.6.5, 19 fields)
secidmap: DCE Security ID Mapper (1.0.0 to 1.6.5, 1 field)
sercosiii: SERCOS III V1.1 (1.2.0 to 1.6.5, 53 fields)
serialization: Java Serialization (1.0.0 to 1.6.5, 0 fields)
ses: ISO 8327-1 OSI Session Protocol (1.0.0 to 1.6.5, 62 fields)
sflow: InMon sFlow (1.0.0 to 1.6.5, 246 fields)
sgimount: SGI Mount Service (1.0.0 to 1.6.5, 0 fields)
sgsap: SGs Application Part (SGsAP) (1.6.0 to 1.6.5, 12 fields)
short: Short Frame (1.0.0 to 1.6.5, 0 fields)
sigcomp: Signaling Compression (1.0.0 to 1.6.5, 61 fields)
simulcrypt: SIMULCRYPT Protocol (1.2.0 to 1.6.5, 84 fields)
sip: Session Initiation Protocol (1.0.0 to 1.6.5, 190 fields)
sipfrag: Sipfrag (1.0.0 to 1.6.5, 1 field)
sir: Serial Infrared (1.0.0 to 1.6.5, 7 fields)
sita: Societe Internationale de Telecommunications Aeronautiques (1.0.0 to 1.6.5, 26 fields)
skinny: Skinny Client Control Protocol (1.0.0 to 1.6.5, 231 fields)
slarp: Cisco SLARP (1.0.0 to 1.6.5, 4 fields)
slimp3: SliMP3 Communication Protocol (1.0.0 to 1.6.5, 11 fields)
sll: Linux cooked-mode capture (1.0.0 to 1.6.5, 10 fields)
slow: Slow Protocols (1.0.0 to 1.6.5, 118 fields)
slsk: SoulSeek Protocol (1.0.0 to 1.6.5, 59 fields)
sm: Cisco Session Management (1.0.0 to 1.6.5, 11 fields)
smb: SMB (Server Message Block Protocol) (1.0.0 to 1.6.5, 641 fields)
smb2: SMB2 (Server Message Block Protocol version 2) (1.0.0 to 1.6.5, 219 fields)
smb_netlogon: Microsoft Windows Logon Protocol (Old) (1.0.0 to 1.6.5, 46 fields)
smil: Synchronized Multimedia Integration Language (1.0.0 to 1.6.5, 256 fields)
smpp: Short Message Peer to Peer (1.0.0 to 1.6.5, 135 fields)
smrse: Short Message Relaying Service (1.0.0 to 1.6.5, 29 fields)
smtp: Simple Mail Transfer Protocol (1.0.0 to 1.6.5, 16 fields)
smux: SNMP Multiplex Protocol (1.0.0 to 1.6.5, 2 fields)
sna: Systems Network Architecture (1.0.0 to 1.6.5, 200 fields)
sna_xid: Systems Network Architecture XID (1.0.0 to 1.6.5, 0 fields)
snaeth: SNA-over-Ethernet (1.0.0 to 1.6.5, 2 fields)
sndcp: Subnetwork Dependent Convergence Protocol (1.0.0 to 1.6.5, 20 fields)
sndcpxid: Subnetwork Dependent Convergence Protocol XID (1.2.0 to 1.6.5, 52 fields)
snmp: Simple Network Management Protocol (1.0.0 to 1.6.5, 98 fields)
socks: Socks Protocol (1.0.0 to 1.6.5, 13 fields)
sonmp: Nortel SONMP (1.0.0 to 1.4.11, 6 fields)
spnego: Simple Protected Negotiation (1.0.0 to 1.6.5, 38 fields)
spnego-krb5: SPNEGO-KRB5 (1.0.0 to 1.6.5, 0 fields)
spoolss: Microsoft Spool Subsystem (1.0.0 to 1.6.5, 323 fields)
spp: Sequenced Packet Protocol (1.0.0 to 1.6.5, 12 fields)
spray: SPRAY (1.0.0 to 1.6.5, 6 fields)
spx: Sequenced Packet eXchange (1.0.0 to 1.6.5, 12 fields)
srp: H.324/SRP (1.0.0 to 1.6.5, 4 fields)
srvloc: Service Location Protocol (1.0.0 to 1.6.5, 91 fields)
srvsvc: Server Service (1.0.0 to 1.6.5, 751 fields)
sscf-nni: SSCF-NNI (1.0.0 to 1.6.5, 2 fields)
sscop: SSCOP (1.0.0 to 1.6.5, 8 fields)
ssh: SSH Protocol (1.0.0 to 1.6.5, 44 fields)
ssl: Secure Sockets Layer (1.0.0 to 1.6.5, 91 fields)
ssp: Scripting Service Protocol (1.0.0 to 1.6.5, 9 fields)
sss: Novell SecretStore Services (1.0.0 to 1.6.5, 45 fields)
starteam: StarTeam (1.0.0 to 1.6.5, 17 fields)
stat: Network Status Monitor Protocol (1.0.0 to 1.6.5, 15 fields)
statnotify: Network Status Monitor CallBack Protocol (1.0.0 to 1.6.5, 4 fields)
stp: Spanning Tree Protocol (1.0.0 to 1.6.5, 41 fields)
stun: Session Traversal Utilities for NAT (1.0.0 to 1.6.5, 62 fields)
stun2: Session Traversal Utilities for NAT (1.0.0 to 1.2.18, 55 fields)
sua: SS7 SCCP-User Adaptation Layer (1.0.0 to 1.6.5, 98 fields)
sv: IEC61850 Sampled Values (1.4.0 to 1.6.5, 28 fields)
svcctl: Microsoft Service Control (1.0.0 to 1.6.5, 41 fields)
swils: Fibre Channel SW_ILS (1.0.0 to 1.6.5, 123 fields)
symantec: Symantec Enterprise Firewall (1.0.0 to 1.6.5, 2 fields)
synergy: Synergy (1.0.0 to 1.6.5, 60 fields)
synphasor: IEEE C37.118 Synchrophasor Protocol (1.2.0 to 1.6.5, 28 fields)
syslog: Syslog message (1.0.0 to 1.6.5, 4 fields)

T

t125: MULTIPOINT-COMMUNICATION-SERVICE T.125 (1.0.0 to 1.6.5, 115 fields)
t30: T.30 (1.0.0 to 1.6.5, 103 fields)
t38: T.38 (1.0.0 to 1.6.5, 39 fields)
tacacs: TACACS (1.0.0 to 1.6.5, 13 fields)
tacplus: TACACS+ (1.0.0 to 1.6.5, 12 fields)
tali: Transport Adapter Layer Interface v1.0, RFC 3094 (1.0.0 to 1.6.5, 3 fields)
tapa: Trapeze Access Point Access Protocol (1.0.0 to 1.6.5, 28 fields)
tapi: Microsoft Telephony API Service (1.0.0 to 1.6.5, 6 fields)
tc_nv: TwinCAT NV (1.0.0 to 1.6.5, 12 fields)
tcap: Transaction Capabilities Application Part (1.0.0 to 1.6.5, 132 fields)
tcp: Transmission Control Protocol (1.0.0 to 1.6.5, 152 fields)
tcpcl: DTN TCP Convergence Layer Protocol (1.4.0 to 1.6.5, 0 fields)
tcpencap: TCP Encapsulation of IPsec Packets (1.0.0 to 1.6.5, 8 fields)
tdma: TDMA RTmac Discipline (1.0.0 to 1.6.5, 0 fields)
tdmoe: Digium TDMoE Protocol (1.6.0 to 1.6.5, 7 fields)
tds: Tabular Data Stream (1.0.0 to 1.6.5, 75 fields)
tei_management: TEI Management Procedure, Channel D (LAPD) (1.0.0 to 1.6.5, 5 fields)
teklink: TEKLINK (1.6.0 to 1.6.5, 18 fields)
telkonet: Telkonet powerline (1.0.0 to 1.6.5, 1 field)
telnet: Telnet (1.0.0 to 1.6.5, 11 fields)
teredo: Teredo IPv6 over UDP tunneling (1.0.0 to 1.6.5, 10 fields)
tetra: TETRA Protocol (1.6.0 to 1.6.5, 414 fields)
tftp: Trivial File Transfer Protocol (1.0.0 to 1.6.5, 9 fields)
time: Time Protocol (1.0.0 to 1.6.5, 1 field)
tipc: Transparent Inter Process Communication(TIPC) (1.0.0 to 1.6.5, 111 fields)
tivoconnect: TiVoConnect Discovery Protocol (1.0.0 to 1.6.5, 7 fields)
tkn4int: DCE DFS Token Server (1.0.0 to 1.6.5, 1 field)
tn3270: TN3270 Protocol (1.4.0 to 1.6.5, 345 fields)
tn5250: TN5250 Protocol (1.4.0 to 1.6.5, 544 fields)
tnef: Transport-Neutral Encapsulation Format (1.0.0 to 1.6.5, 59 fields)
tns: Transparent Network Substrate Protocol (1.0.0 to 1.6.5, 91 fields)
tpcp: Alteon - Transparent Proxy Cache Protocol (1.0.0 to 1.6.5, 12 fields)
tpkt: TPKT - ISO on TCP - RFC1006 (1.0.0 to 1.6.5, 3 fields)
tpncp: AudioCodes TPNCP (TrunkPack Network Control Protocol) (1.0.0 to 1.6.5, 11416 fields)
tr: Token-Ring (1.0.0 to 1.6.5, 19 fields)
trill: TRILL (1.4.0 to 1.6.5, 8 fields)
trksvr: Microsoft Distributed Link Tracking Server Service (1.0.0 to 1.6.5, 2 fields)
trmac: Token-Ring Media Access Control (1.0.0 to 1.6.5, 18 fields)
ts2: Teamspeak2 Protocol (1.2.0 to 1.6.5, 58 fields)
tsp: Time Synchronization Protocol (1.0.0 to 1.6.5, 7 fields)
tte: TTEthernet (1.2.0 to 1.6.5, 6 fields)
tte_pcf: TTEthernet Protocol Control Frame (1.2.0 to 1.6.5, 9 fields)
ttp: Tiny Transport Protocol (1.0.0 to 1.6.5, 4 fields)
turbocell: Turbocell Header (1.2.0 to 1.6.5, 10 fields)
turbocell_aggregate: Turbocell Aggregate Data (1.2.0 to 1.6.5, 5 fields)
turnchannel: TURN Channel (1.2.0 to 1.6.5, 2 fields)
tuxedo: BEA Tuxedo (1.0.0 to 1.6.5, 2 fields)
tzsp: Tazmen Sniffer Protocol (1.0.0 to 1.6.5, 17 fields)

U

ubikdisk: DCE DFS FLDB UBIK TRANSFER (1.0.0 to 1.6.5, 1 field)
ubikvote: DCE DFS FLDB UBIKVOTE (1.0.0 to 1.6.5, 1 field)
ucp: Universal Computer Protocol (1.0.0 to 1.6.5, 106 fields)
udld: Unidirectional Link Detection (1.0.0 to 1.6.5, 8 fields)
udp: User Datagram Protocol (1.0.0 to 1.6.5, 15 fields)
udpencap: UDP Encapsulation of IPsec Packets (1.0.0 to 1.6.5, 0 fields)
udplite: Lightweight User Datagram Protocol (1.0.0 to 1.6.5, 2 fields)
ulp: OMA UserPlane Location Protocol (1.0.0 to 1.6.5, 554 fields)
uma: Unlicensed Mobile Access (1.0.0 to 1.6.5, 103 fields)
unistim: UNISTIM Protocol (1.0.0 to 1.6.5, 320 fields)
unreassembled: Unreassembled Fragmented Packet (1.0.0 to 1.6.5, 0 fields)
usb: USB (1.0.0 to 1.6.5, 84 fields)
usbhid: USB HID (1.4.0 to 1.6.5, 52 fields)
usbhub: USB HUB (1.4.0 to 1.6.5, 17 fields)
usbms: USB Mass Storage (1.0.0 to 1.6.5, 14 fields)
user_dlt: DLT User (1.0.0 to 1.6.5, 0 fields)
uts: Unisys Transmittal System (1.0.0 to 1.6.5, 11 fields)

V

v120: Async data over ISDN (V.120) (1.0.0 to 1.6.5, 11 fields)
v52: V5.2 (1.4.0 to 1.6.5, 67 fields)
v5ua: V5.2-User Adaptation Layer (1.0.0 to 1.6.5, 82 fields)
vcdu: VCDU (1.2.0 to 1.6.5, 26 fields)
vicp: LeCroy VICP (1.2.0 to 1.6.5, 6 fields)
vines_arp: Banyan Vines ARP (1.0.0 to 1.6.5, 0 fields)
vines_echo: Banyan Vines Echo (1.0.0 to 1.6.5, 0 fields)
vines_frp: Banyan Vines Fragmentation Protocol (1.0.0 to 1.6.5, 0 fields)
vines_icp: Banyan Vines ICP (1.0.0 to 1.6.5, 0 fields)
vines_ip: Banyan Vines IP (1.0.0 to 1.6.5, 1 field)
vines_ipc: Banyan Vines IPC (1.0.0 to 1.6.5, 0 fields)
vines_llc: Banyan Vines LLC (1.0.0 to 1.6.5, 0 fields)
vines_rtp: Banyan Vines RTP (1.0.0 to 1.6.5, 0 fields)
vines_spp: Banyan Vines SPP (1.0.0 to 1.6.5, 0 fields)
vj: PPP VJ Compression (1.0.0 to 1.6.5, 15 fields)
vlan: 802.1Q Virtual LAN (1.0.0 to 1.4.11, 1.6.3 to 1.6.5, 6 fields)
vmlab: VMware Lab Manager (1.4.0 to 1.6.5, 9 fields)
vnc: Virtual Network Computing (1.0.0 to 1.6.5, 143 fields)
vrrp: Virtual Router Redundancy Protocol (1.0.0 to 1.6.5, 13 fields)
vsncp: Vendor Specific Control Protocol (1.4.0 to 1.6.5, 0 fields)
vsnp: Vendor Specific Network Protocol (1.4.0 to 1.6.5, 3 fields)
vtp: VLAN Trunking Protocol (1.0.0 to 1.6.5, 24 fields)
vxi11async: VXI-11 Asynchronous Abort (1.4.0 to 1.6.5, 1 field)
vxi11core: VXI-11 Core Protocol (1.4.0 to 1.6.5, 31 fields)
vxi11intr: VXI-11 Interrupt (1.4.0 to 1.6.5, 2 fields)

W

wai: WAI Protocol (1.6.0 to 1.6.5, 72 fields)
wap-sir: WAP Session Initiation Request (1.0.0 to 1.6.5, 14 fields)
wassp: Wireless Access Station Session Protocol (1.2.0 to 1.6.5, 264 fields)
watcherinfo: watcherinfo XML doc (RFC 3858) (1.0.0 to 1.6.5, 20 fields)
wbxml: WAP Binary XML (1.0.0 to 1.6.5, 4 fields)
wccp: Web Cache Communication Protocol (1.0.0 to 1.6.5, 6 fields)
wcp: Wellfleet Compression (1.0.0 to 1.6.5, 25 fields)
whdlc: Wellfleet HDLC (1.0.0 to 1.6.5, 2 fields)
who: Who (1.0.0 to 1.6.5, 14 fields)
wifi_p2p: Wi-Fi Peer-to-Peer (1.6.0 to 1.6.5, 118 fields)
wimaxasncp: WiMAX ASN Control Plane Protocol (1.0.0 to 1.6.5, 773 fields)
winreg: Remote Registry Service (1.0.0 to 1.6.5, 112 fields)
winsrepl: WINS (Windows Internet Name Service) Replication (1.0.0 to 1.6.5, 28 fields)
wkssvc: Workstation Service (1.0.0 to 1.6.5, 376 fields)
wlan: IEEE 802.11 wireless LAN (1.0.0 to 1.6.5, 115 fields)
wlan_aggregate: IEEE 802.11 wireless LAN aggregate frame (1.0.0 to 1.6.5, 1 field)
wlan_mgt: IEEE 802.11 wireless LAN management frame (1.0.0 to 1.6.5, 697 fields)
wlancap: AVS WLAN Capture header (1.0.0 to 1.6.5, 14 fields)
wlancertextn: Wlan Certificate Extension (1.0.0 to 1.6.5, 3 fields)
wlccp: Cisco Wireless LAN Context Control Protocol (1.0.0 to 1.6.5, 156 fields)
wmx: WiMax Protocol (1.0.0 to 1.6.5, 168 fields)
wmx.aas: WiMax AAS-FEEDBACK/BEAM Messages (1.0.0 to 1.6.5, 29 fields)
wmx.arq: WiMax ARQ Feedback/Discard/Reset Messages (1.0.0 to 1.6.5, 21 fields)
wmx.cd: WiMax DCD/UCD Messages (1.0.0 to 1.6.5, 129 fields)
wmx.clk: WiMax CLK-CMP Message (1.0.0 to 1.6.5, 7 fields)
wmx.dreg: WiMax DREG-REQ/CMD Messages (1.0.0 to 1.6.5, 24 fields)
wmx.ds: WiMax DSA/C/D Messages (1.0.0 to 1.6.5, 15 fields)
wmx.dsx: WiMax DSX-RVD Message (1.0.0 to 1.6.5, 3 fields)
wmx.fpc: WiMax FPC Message (1.0.0 to 1.6.5, 6 fields)
wmx.hdr: WiMax Generic/Type1/Type2 MAC Header Messages (1.0.0 to 1.6.5, 172 fields)
wmx.map: WiMax DLMAP/ULMAP Messages (1.0.0 to 1.6.5, 86 fields)
wmx.pkm: WiMax PKM-REQ/RSP Messages (1.0.0 to 1.6.5, 4 fields)
wmx.pmc: WiMax PMC-REQ/RSP Messages (1.0.0 to 1.6.5, 9 fields)
wmx.prc: WiMax PRC-LT-CTRL Message (1.0.0 to 1.6.5, 4 fields)
wmx.reg: WiMax REG-REQ/RSP Messages (1.0.0 to 1.6.5, 162 fields)
wmx.rep: WiMax REP-REQ/RSP Messages (1.0.0 to 1.6.5, 99 fields)
wmx.res: WiMax RES-CMD Message (1.0.0 to 1.6.5, 3 fields)
wmx.rng: WiMax RNG-REQ/RSP Messages (1.0.0 to 1.6.5, 88 fields)
wmx.sbc: WiMax SBC-REQ/RSP Messages (1.0.0 to 1.6.5, 222 fields)
wmx.sub: WiMax Sub-TLV Messages (1.0.0 to 1.6.5, 148 fields)
wol: Wake On LAN (1.0.0 to 1.6.5, 3 fields)
wow: World of Warcraft (1.2.0 to 1.6.5, 35 fields)
wpan: IEEE 802.15.4 Low-Rate Wireless PAN (1.0.0 to 1.6.5, 87 fields)
wpan-nonask-phy: IEEE 802.15.4 Low-Rate Wireless PAN non-ASK PHY (1.2.0 to 1.6.5, 0 fields)
wps: Wifi Protected Setup (1.0.0 to 1.6.5, 141 fields)
wsmp: Wave Short Message Protocol(IEEE P1609.3) (1.2.0 to 1.6.5, 9 fields)
wsp: Wireless Session Protocol (1.0.0 to 1.6.5, 177 fields)
wtls: Wireless Transport Layer Security (1.0.0 to 1.6.5, 69 fields)
wtp: Wireless Transaction Protocol (1.0.0 to 1.6.5, 35 fields)
wzcsvc: Wireless Configuration Service (1.0.0 to 1.6.5, 1 field)

X

x.25: X.25 (1.0.0 to 1.0.16, 17 fields)
x.29: X.29 (1.0.0 to 1.0.16, 3 fields)
x11: X11 (1.0.0 to 1.6.5, 6659 fields)
x224: ITU-T Rec X.224 (1.0.0 to 1.6.5, 8 fields)
x25: X.25 (1.2.0 to 1.6.5, 19 fields)
x29: X.29 (1.2.0 to 1.6.5, 3 fields)
x2ap: EUTRAN X2 Application Protocol (X2AP) (1.0.0 to 1.6.5, 305 fields)
x411: X.411 Message Transfer Service (1.0.0 to 1.4.11, 531 fields)
x420: X.420 Information Object (1.0.0 to 1.4.11, 357 fields)
x509af: X.509 Authentication Framework (1.0.0 to 1.6.5, 73 fields)
x509ce: X.509 Certificate Extensions (1.0.0 to 1.6.5, 198 fields)
x509if: X.509 Information Framework (1.0.0 to 1.6.5, 132 fields)
x509sat: X.509 Selected Attribute Types (1.0.0 to 1.6.5, 166 fields)
xcap-caps: XML Configuration Access Protocol Server Capabilities (1.0.0 to 1.6.5, 3 fields)
xcap-error: XCAP Error XML doc (RFC 4825) (1.0.0 to 1.6.5, 30 fields)
xcsl: Call Specification Language (Xcsl) (1.0.0 to 1.6.5, 6 fields)
xdmcp: X Display Manager Control Protocol (1.0.0 to 1.6.5, 9 fields)
xml: eXtensible Markup Language (1.0.0 to 1.6.5, 12 fields)
xot: X.25 over TCP (1.0.0 to 1.6.5, 17 fields)
xtp: Xpress Transport Protocol (1.2.0 to 1.6.5, 59 fields)
xyplex: Xyplex (1.0.0 to 1.6.5, 6 fields)

Y

yhoo: Yahoo Messenger Protocol (1.0.0 to 1.6.5, 10 fields)
ymsg: Yahoo YMSG Messenger Protocol (1.0.0 to 1.6.5, 10 fields)
ypbind: Yellow Pages Bind (1.0.0 to 1.6.5, 8 fields)
yppasswd: Yellow Pages Passwd (1.0.0 to 1.6.5, 11 fields)
ypserv: Yellow Pages Service (1.0.0 to 1.6.5, 16 fields)
ypxfr: Yellow Pages Transfer (1.0.0 to 1.6.5, 1 field)

Z

zbee.apf: ZigBee Application Framework (1.2.0 to 1.6.5, 2 fields)
zbee.aps: ZigBee Application Support Layer (1.2.0 to 1.6.5, 43 fields)
zbee.nwk: ZigBee Network Layer (1.2.0 to 1.6.5, 75 fields)
zbee.zcl: ZigBee Cluster Library (1.4.0 to 1.6.5, 44 fields)
zbee.zdp: ZigBee Device Profile (1.2.0 to 1.6.5, 78 fields)
zebra: Zebra Protocol (1.0.0 to 1.6.5, 27 fields)
zep: ZigBee Encapsulation Protocol (1.2.0 to 1.6.5, 9 fields)
ziop: Zipped Inter-ORB Protocol (1.2.0 to 1.6.5, 8 fields)
zip: Zone Information Protocol (1.0.0 to 1.6.5, 18 fields)
zrtp: ZRTP (1.2.0 to 1.6.5, 44 fields)

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation