Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Distributed Network Protocol 3.0

Protocol field name: dnp3
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
dnp3.al.2bit Unsigned integer, 1 byte Value (two bit) 1.0.0 to 1.6.5
dnp3.al.aiq.b0 Boolean Online 1.0.0 to 1.6.5
dnp3.al.aiq.b1 Boolean Restart 1.0.0 to 1.6.5
dnp3.al.aiq.b2 Boolean Comm Fail 1.0.0 to 1.6.5
dnp3.al.aiq.b3 Boolean Remote Force 1.0.0 to 1.6.5
dnp3.al.aiq.b4 Boolean Local Force 1.0.0 to 1.6.5
dnp3.al.aiq.b5 Boolean Over-Range 1.0.0 to 1.6.5
dnp3.al.aiq.b6 Boolean Reference Check 1.0.0 to 1.6.5
dnp3.al.aiq.b7 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.ana Unsigned integer, 2 bytes Value (16 bit) 1.0.0 to 1.6.5
dnp3.al.anaout Unsigned integer, 2 bytes Output Value (16 bit) 1.0.0 to 1.6.5
dnp3.al.aoq.b0 Boolean Online 1.0.0 to 1.6.5
dnp3.al.aoq.b1 Boolean Restart 1.0.0 to 1.6.5
dnp3.al.aoq.b2 Boolean Comm Fail 1.0.0 to 1.6.5
dnp3.al.aoq.b3 Boolean Remote Force 1.0.0 to 1.6.5
dnp3.al.aoq.b4 Boolean Local Force 1.0.0 to 1.6.5
dnp3.al.aoq.b5 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.aoq.b6 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.aoq.b7 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.biq.b0 Boolean Online 1.0.0 to 1.6.5
dnp3.al.biq.b1 Boolean Restart 1.0.0 to 1.6.5
dnp3.al.biq.b2 Boolean Comm Fail 1.0.0 to 1.6.5
dnp3.al.biq.b3 Boolean Remote Force 1.0.0 to 1.6.5
dnp3.al.biq.b4 Boolean Local Force 1.0.0 to 1.6.5
dnp3.al.biq.b5 Boolean Chatter Filter 1.0.0 to 1.6.5
dnp3.al.biq.b6 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.biq.b7 Boolean Point Value 1.0.0 to 1.6.5
dnp3.al.bit Boolean Value (bit) 1.0.0 to 1.6.5
dnp3.al.boq.b0 Boolean Online 1.0.0 to 1.6.5
dnp3.al.boq.b1 Boolean Restart 1.0.0 to 1.6.5
dnp3.al.boq.b2 Boolean Comm Fail 1.0.0 to 1.6.5
dnp3.al.boq.b3 Boolean Remote Force 1.0.0 to 1.6.5
dnp3.al.boq.b4 Boolean Local Force 1.0.0 to 1.6.5
dnp3.al.boq.b5 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.boq.b6 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.boq.b7 Boolean Point Value 1.0.0 to 1.6.5
dnp3.al.cnt Unsigned integer, 2 bytes Counter (16 bit) 1.0.0 to 1.6.5
dnp3.al.con Boolean Confirm 1.0.0 to 1.6.5
dnp3.al.ctl Unsigned integer, 1 byte Application Control 1.0.0 to 1.6.5
dnp3.al.ctrlstatus Unsigned integer, 1 byte Control Status 1.0.0 to 1.6.5
dnp3.al.ctrq.b0 Boolean Online 1.0.0 to 1.6.5
dnp3.al.ctrq.b1 Boolean Restart 1.0.0 to 1.6.5
dnp3.al.ctrq.b2 Boolean Comm Fail 1.0.0 to 1.6.5
dnp3.al.ctrq.b3 Boolean Remote Force 1.0.0 to 1.6.5
dnp3.al.ctrq.b4 Boolean Local Force 1.0.0 to 1.6.5
dnp3.al.ctrq.b5 Boolean Roll-Over 1.0.0 to 1.6.5
dnp3.al.ctrq.b6 Boolean Discontinuity 1.0.0 to 1.6.5
dnp3.al.ctrq.b7 Boolean Reserved 1.0.0 to 1.6.5
dnp3.al.file.auth Unsigned integer, 4 bytes File Authentication Key 1.6.0 to 1.6.5
dnp3.al.file.blocknum Unsigned integer, 4 bytes File Block Number 1.6.0 to 1.6.5
dnp3.al.file.data Sequence of bytes File Data 1.6.0 to 1.6.5
dnp3.al.file.handle Unsigned integer, 4 bytes File Handle 1.6.0 to 1.6.5
dnp3.al.file.lastblock Boolean File Last Block 1.6.0 to 1.6.5
dnp3.al.file.maxblock Unsigned integer, 2 bytes File Max Block Size 1.6.0 to 1.6.5
dnp3.al.file.mode Unsigned integer, 2 bytes File Control Mode 1.6.0 to 1.6.5
dnp3.al.file.reqID Unsigned integer, 2 bytes File Request Identifier 1.6.0 to 1.6.5
dnp3.al.file.size Unsigned integer, 4 bytes File Size 1.6.0 to 1.6.5
dnp3.al.file.status Unsigned integer, 1 byte File Control Status 1.6.0 to 1.6.5
dnp3.al.fin Boolean Final 1.0.0 to 1.6.5
dnp3.al.fir Boolean First 1.0.0 to 1.6.5
dnp3.al.fragment Frame number DNP 3.0 AL Fragment 1.0.0 to 1.6.5
dnp3.al.fragment.count Unsigned integer, 4 bytes Fragment count 1.6.0 to 1.6.5
dnp3.al.fragment.error Frame number Defragmentation error 1.0.0 to 1.6.5
dnp3.al.fragment.multipletails Boolean Multiple tail fragments found 1.0.0 to 1.6.5
dnp3.al.fragment.overlap Boolean Fragment overlap 1.0.0 to 1.6.5
dnp3.al.fragment.overlap.conflict Boolean Conflicting data in fragment overlap 1.0.0 to 1.6.5
dnp3.al.fragment.reassembled.length Unsigned integer, 4 bytes Reassembled DNP length 1.4.0 to 1.6.5
dnp3.al.fragment.reassembled_in Frame number Reassembled PDU In Frame 1.0.0 to 1.6.5
dnp3.al.fragment.toolongfragment Boolean Fragment too long 1.0.0 to 1.6.5
dnp3.al.fragments Label DNP 3.0 AL Fragments 1.0.0 to 1.6.5
dnp3.al.func Unsigned integer, 1 byte Application Layer Function Code 1.0.0 to 1.6.5
dnp3.al.iin Unsigned integer, 2 bytes Application Layer IIN bits 1.0.0 to 1.6.5
dnp3.al.iin.bmsg Boolean Broadcast Msg Rx 1.0.0 to 1.6.5
dnp3.al.iin.cc Boolean Configuration Corrupt 1.0.0 to 1.6.5
dnp3.al.iin.cls1d Boolean Class 1 Data Available 1.0.0 to 1.6.5
dnp3.al.iin.cls2d Boolean Class 2 Data Available 1.0.0 to 1.6.5
dnp3.al.iin.cls3d Boolean Class 3 Data Available 1.0.0 to 1.6.5
dnp3.al.iin.dol Boolean Digital Outputs in Local 1.0.0 to 1.6.5
dnp3.al.iin.dt Boolean Device Trouble 1.0.0 to 1.6.5
dnp3.al.iin.ebo Boolean Event Buffer Overflow 1.0.0 to 1.6.5
dnp3.al.iin.oae Boolean Operation Already Executing 1.0.0 to 1.6.5
dnp3.al.iin.obju Boolean Requested Objects Unknown 1.0.0 to 1.6.5
dnp3.al.iin.pioor Boolean Parameters Invalid or Out of Range 1.0.0 to 1.6.5
dnp3.al.iin.rst Boolean Device Restart 1.0.0 to 1.6.5
dnp3.al.iin.tsr Boolean Time Sync Required 1.0.0 to 1.6.5
dnp3.al.index Unsigned integer, 1 byte Index (8 bit) 1.0.0 to 1.6.5
dnp3.al.obj Unsigned integer, 2 bytes Object 1.0.0 to 1.6.5
dnp3.al.objq.code Unsigned integer, 1 byte Qualifier Code 1.0.0 to 1.6.5
dnp3.al.objq.index Unsigned integer, 1 byte Index Prefix 1.0.0 to 1.6.5
dnp3.al.ptnum Unsigned integer, 2 bytes Object Point Number 1.0.0 to 1.6.5
dnp3.al.range.abs Unsigned integer, 1 byte Address (8 bit) 1.0.0 to 1.6.5
dnp3.al.range.quantity Unsigned integer, 1 byte Quantity (8 bit) 1.0.0 to 1.6.5
dnp3.al.range.start Unsigned integer, 1 byte Start (8 bit) 1.0.0 to 1.6.5
dnp3.al.range.stop Unsigned integer, 1 byte Stop (8 bit) 1.0.0 to 1.6.5
dnp3.al.reltimestamp Time offset Relative Timestamp 1.0.0 to 1.6.5
dnp3.al.seq Unsigned integer, 1 byte Sequence 1.0.0 to 1.6.5
dnp3.al.size Unsigned integer, 1 byte Size (8 bit) 1.6.0 to 1.6.5
dnp3.al.timestamp Date and time Timestamp 1.0.0 to 1.6.5
dnp3.al.uns Boolean Unsolicited 1.4.0 to 1.6.5
dnp3.ctl Unsigned integer, 1 byte Control 1.0.0 to 1.6.5
dnp3.ctl.dfc Boolean Data Flow Control 1.0.0 to 1.6.5
dnp3.ctl.dir Boolean Direction 1.0.0 to 1.6.5
dnp3.ctl.fcb Boolean Frame Count Bit 1.0.0 to 1.6.5
dnp3.ctl.fcv Boolean Frame Count Valid 1.0.0 to 1.6.5
dnp3.ctl.prifunc Unsigned integer, 1 byte Control Function Code 1.0.0 to 1.6.5
dnp3.ctl.prm Boolean Primary 1.0.0 to 1.6.5
dnp3.ctl.secfunc Unsigned integer, 1 byte Control Function Code 1.0.0 to 1.6.5
dnp3.dst Unsigned integer, 2 bytes Destination 1.0.0 to 1.6.5
dnp3.hdr.CRC Unsigned integer, 2 bytes CRC 1.0.0 to 1.6.5
dnp3.hdr.CRC_bad Boolean Bad CRC 1.0.0 to 1.6.5
dnp3.len Unsigned integer, 1 byte Length 1.0.0 to 1.6.5
dnp3.src Unsigned integer, 2 bytes Source 1.0.0 to 1.6.5
dnp3.start Unsigned integer, 2 bytes Start Bytes 1.0.0 to 1.6.5
dnp3.tr.ctl Unsigned integer, 1 byte Transport Control 1.0.0 to 1.6.5
dnp3.tr.fin Boolean Final 1.0.0 to 1.6.5
dnp3.tr.fir Boolean First 1.0.0 to 1.6.5
dnp3.tr.seq Unsigned integer, 1 byte Sequence 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation