Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Extensible Record Format

Protocol field name: erf
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
erf.aal2.cid Unsigned integer, 1 byte Channel Identification Number 1.4.0 to 1.6.5
erf.aal2.hec Unsigned integer, 2 bytes MAAL error 1.4.0 to 1.6.5
erf.aal2.lbe Unsigned integer, 2 bytes first cell received 1.4.0 to 1.6.5
erf.aal2.maale Unsigned integer, 1 byte MAAL error number 1.4.0 to 1.6.5
erf.aal2.res1 Unsigned integer, 2 bytes reserved 1.4.0 to 1.6.5
erf.ehdr.bfs.color Unsigned integer, 2 bytes Filter Color 1.6.0 to 1.6.5
erf.ehdr.bfs.hash Unsigned integer, 1 byte Hash 1.6.0 to 1.6.5
erf.ehdr.bfs.rawhash Unsigned integer, 4 bytes Raw Hash 1.6.0 to 1.6.5
erf.ehdr.class.flags Unsigned integer, 4 bytes Flags 1.2.0 to 1.6.5
erf.ehdr.class.flags.drop Unsigned integer, 4 bytes Drop Steering Bit 1.2.0 to 1.6.5
erf.ehdr.class.flags.res1 Unsigned integer, 4 bytes Reserved 1.2.0 to 1.6.5
erf.ehdr.class.flags.res2 Unsigned integer, 4 bytes Reserved 1.2.0 to 1.6.5
erf.ehdr.class.flags.sh Unsigned integer, 4 bytes Search hit 1.2.0 to 1.6.5
erf.ehdr.class.flags.shm Unsigned integer, 4 bytes Multiple search hits 1.2.0 to 1.6.5
erf.ehdr.class.flags.str Unsigned integer, 4 bytes Stream Steering Bits 1.2.0 to 1.6.5
erf.ehdr.class.flags.user Unsigned integer, 4 bytes User classification 1.2.0 to 1.6.5
erf.ehdr.class.seqnum Unsigned integer, 4 bytes Sequence number 1.2.0 to 1.6.5
erf.ehdr.int.intid Unsigned integer, 2 bytes Intercept ID 1.2.0 to 1.6.5
erf.ehdr.int.res1 Unsigned integer, 1 byte Reserved 1.2.0 to 1.6.5
erf.ehdr.int.res2 Unsigned integer, 4 bytes Reserved 1.2.0 to 1.6.5
erf.ehdr.raw.link_type Unsigned integer, 1 byte Link Type 1.2.0 to 1.6.5
erf.ehdr.raw.rate Unsigned integer, 1 byte Rate 1.2.0 to 1.6.5
erf.ehdr.raw.res Unsigned integer, 4 bytes Reserved 1.2.0 to 1.6.5
erf.ehdr.raw.seqnum Unsigned integer, 2 bytes Sequence number 1.2.0 to 1.6.5
erf.ehdr.types Unsigned integer, 1 byte Extension Type 1.2.0 to 1.6.5
erf.ehdr.unknown.data Unsigned integer, 8 bytes Data 1.2.0 to 1.6.5
erf.eth.off Unsigned integer, 1 byte offset 1.0.0 to 1.6.5
erf.eth.res1 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.flags Unsigned integer, 1 byte flags 1.0.0 to 1.6.5
erf.flags.cap Unsigned integer, 1 byte capture interface 1.0.0 to 1.6.5
erf.flags.dse Unsigned integer, 1 byte ds error 1.0.0 to 1.6.5
erf.flags.res Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.flags.rxe Unsigned integer, 1 byte rx error 1.0.0 to 1.6.5
erf.flags.trunc Unsigned integer, 1 byte truncated 1.0.0 to 1.6.5
erf.flags.vlen Unsigned integer, 1 byte varying record length 1.0.0 to 1.6.5
erf.lctr Unsigned integer, 2 bytes loss counter 1.0.0 to 1.6.5
erf.mcaal2.cid Unsigned integer, 1 byte Channel Identification Number 1.0.0 to 1.6.5
erf.mcaal2.cn Unsigned integer, 2 bytes connection number 1.0.0 to 1.6.5
erf.mcaal2.crc10 Unsigned integer, 1 byte Length error 1.0.0 to 1.6.5
erf.mcaal2.hec Unsigned integer, 1 byte MAAL error 1.0.0 to 1.6.5
erf.mcaal2.lbe Unsigned integer, 1 byte first cell received 1.0.0 to 1.6.5
erf.mcaal2.mul Unsigned integer, 2 bytes reserved for type 1.0.0 to 1.6.5
erf.mcaal2.port Unsigned integer, 1 byte physical port 1.0.0 to 1.6.5
erf.mcaal2.res1 Unsigned integer, 2 bytes reserved for extra connection 1.0.0 to 1.6.5
erf.mcaal2.res2 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcaal5.cn Unsigned integer, 2 bytes connection number 1.0.0 to 1.6.5
erf.mcaal5.crcck Unsigned integer, 1 byte CRC checked 1.0.0 to 1.6.5
erf.mcaal5.crce Unsigned integer, 1 byte CRC error 1.0.0 to 1.6.5
erf.mcaal5.first Unsigned integer, 1 byte First record 1.0.0 to 1.6.5
erf.mcaal5.lenck Unsigned integer, 1 byte Length checked 1.0.0 to 1.6.5
erf.mcaal5.lene Unsigned integer, 1 byte Length error 1.0.0 to 1.6.5
erf.mcaal5.port Unsigned integer, 1 byte physical port 1.0.0 to 1.6.5
erf.mcaal5.res1 Unsigned integer, 2 bytes reserved 1.0.0 to 1.6.5
erf.mcaal5.res2 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcaal5.res3 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcatm.cn Unsigned integer, 2 bytes connection number 1.0.0 to 1.6.5
erf.mcatm.crc10 Unsigned integer, 1 byte OAM Cell CRC10 Error (not implemented) 1.0.0 to 1.6.5
erf.mcatm.first Unsigned integer, 1 byte First record 1.0.0 to 1.6.5
erf.mcatm.hec Unsigned integer, 1 byte HEC corrected 1.0.0 to 1.6.5
erf.mcatm.lbe Unsigned integer, 1 byte Lost Byte Error 1.0.0 to 1.6.5
erf.mcatm.mul Unsigned integer, 2 bytes multiplexed 1.0.0 to 1.6.5
erf.mcatm.oamcell Unsigned integer, 1 byte OAM Cell 1.0.0 to 1.6.5
erf.mcatm.port Unsigned integer, 1 byte physical port 1.0.0 to 1.6.5
erf.mcatm.res1 Unsigned integer, 2 bytes reserved 1.0.0 to 1.6.5
erf.mcatm.res2 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcatm.res3 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mchdlc.afe Unsigned integer, 1 byte Aborted frame error 1.0.0 to 1.6.5
erf.mchdlc.cn Unsigned integer, 2 bytes connection number 1.0.0 to 1.6.5
erf.mchdlc.fcse Unsigned integer, 1 byte FCS error 1.0.0 to 1.6.5
erf.mchdlc.first Unsigned integer, 1 byte First record 1.0.0 to 1.6.5
erf.mchdlc.lbe Unsigned integer, 1 byte Lost byte error 1.0.0 to 1.6.5
erf.mchdlc.lre Unsigned integer, 1 byte Long record error 1.0.0 to 1.6.5
erf.mchdlc.oe Unsigned integer, 1 byte Octet error 1.0.0 to 1.6.5
erf.mchdlc.res1 Unsigned integer, 2 bytes reserved 1.0.0 to 1.6.5
erf.mchdlc.res2 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mchdlc.res3 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mchdlc.sre Unsigned integer, 1 byte Short record error 1.0.0 to 1.6.5
erf.mcraw.first Unsigned integer, 1 byte First record 1.0.0 to 1.6.5
erf.mcraw.int Unsigned integer, 1 byte physical interface 1.0.0 to 1.6.5
erf.mcraw.lbe Unsigned integer, 1 byte Lost byte error 1.0.0 to 1.6.5
erf.mcraw.lre Unsigned integer, 1 byte Long record error 1.0.0 to 1.6.5
erf.mcraw.res1 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcraw.res2 Unsigned integer, 2 bytes reserved 1.0.0 to 1.6.5
erf.mcraw.res3 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcraw.res4 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcraw.res5 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcraw.sre Unsigned integer, 1 byte Short record error 1.0.0 to 1.6.5
erf.mcrawl.cn Unsigned integer, 1 byte connection number 1.0.0 to 1.6.5
erf.mcrawl.first Unsigned integer, 1 byte First record 1.0.0 to 1.6.5
erf.mcrawl.lbe Unsigned integer, 1 byte Lost byte error 1.0.0 to 1.6.5
erf.mcrawl.res1 Unsigned integer, 2 bytes reserved 1.0.0 to 1.4.11
erf.mcrawl.res2 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.mcrawl.res5 Unsigned integer, 1 byte reserved 1.0.0 to 1.6.5
erf.rlen Unsigned integer, 2 bytes record length 1.0.0 to 1.6.5
erf.ts Unsigned integer, 8 bytes Timestamp 1.0.0 to 1.6.5
erf.type Unsigned integer, 1 byte type 1.0.0 to 1.0.16
erf.types Unsigned integer, 1 byte types 1.2.0 to 1.4.11
erf.types.ext_header Unsigned integer, 1 byte Extension header present 1.2.0 to 1.6.5
erf.types.type Unsigned integer, 1 byte type 1.2.0 to 1.6.5
erf.wlen Unsigned integer, 2 bytes wire length 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation