Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Common Industrial Protocol

Protocol field name: cip
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
cip.attribute Unsigned integer, 1 byte Attribute 1.0.0 to 1.6.5
cip.class Unsigned integer, 1 byte Class 1.0.0 to 1.6.5
cip.connpoint Unsigned integer, 1 byte Connection Point 1.0.0 to 1.6.5
cip.data Sequence of bytes Data 1.2.0 to 1.2.18
cip.devtype Unsigned integer, 2 bytes Device Type 1.0.0 to 1.6.5
cip.epath Sequence of bytes EPath 1.0.0 to 1.6.5
cip.fwo.cmp Unsigned integer, 1 byte Compatibility 1.0.0 to 1.6.5
cip.fwo.consize Unsigned integer, 2 bytes Connection Size 1.0.0 to 1.2.18
cip.fwo.dir Unsigned integer, 1 byte Direction 1.0.0 to 1.2.18
cip.fwo.f_v Unsigned integer, 2 bytes Connection Size Type 1.0.0 to 1.2.18
cip.fwo.major Unsigned integer, 1 byte Major Revision 1.0.0 to 1.6.5
cip.fwo.owner Unsigned integer, 2 bytes Owner 1.0.0 to 1.2.18
cip.fwo.prio Unsigned integer, 2 bytes Priority 1.0.0 to 1.2.18
cip.fwo.transport Unsigned integer, 1 byte Class 1.0.0 to 1.2.18
cip.fwo.trigger Unsigned integer, 1 byte Trigger 1.0.0 to 1.2.18
cip.fwo.type Unsigned integer, 2 bytes Connection Type 1.0.0 to 1.2.18
cip.genstat Unsigned integer, 1 byte General Status 1.0.0 to 1.6.5
cip.instance Unsigned integer, 1 byte Instance 1.0.0 to 1.6.5
cip.linkaddress Unsigned integer, 1 byte Link Address 1.0.0 to 1.6.5
cip.member Unsigned integer, 1 byte Member 1.4.0 to 1.6.5
cip.port Unsigned integer, 1 byte Port 1.0.0 to 1.6.5
cip.rr Unsigned integer, 1 byte Request/Response 1.0.0 to 1.6.5
cip.sc Unsigned integer, 1 byte Service 1.0.0 to 1.6.5
cip.symbol Character string Symbol 1.0.0 to 1.6.5
cip.vendor Unsigned integer, 2 bytes Vendor ID 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation