Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Encapsulated Remote Switch Packet ANalysis
Protocol field name: erspan
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| erspan.direction | Unsigned integer, 2 bytes | Direction | 1.0.0 to 1.6.5 |
| erspan.direction2 | Unsigned integer, 2 bytes | Direction2 | 1.6.0 to 1.6.5 |
| erspan.priority | Unsigned integer, 2 bytes | Priority | 1.0.0 to 1.6.5 |
| erspan.spanid | Unsigned integer, 2 bytes | SpanID | 1.0.0 to 1.6.5 |
| erspan.timestamp | Unsigned integer, 4 bytes | Timestamp | 1.6.0 to 1.6.5 |
| erspan.truncated | Unsigned integer, 2 bytes | Truncated | 1.6.0 to 1.6.5 |
| erspan.unknown1 | Unsigned integer, 2 bytes | Unknown1 | 1.0.0 to 1.4.11 |
| erspan.unknown2 | Unsigned integer, 2 bytes | Unknown2 | 1.0.0 to 1.6.5 |
| erspan.unknown3 | Unsigned integer, 2 bytes | Unknown3 | 1.0.0 to 1.6.5 |
| erspan.unknown4 | Sequence of bytes | Unknown4 | 1.0.0 to 1.6.5 |
| erspan.unknown5 | Unsigned integer, 2 bytes | Unknown5 | 1.6.0 to 1.6.5 |
| erspan.unknown6 | Sequence of bytes | Unknown6 | 1.6.0 to 1.6.5 |
| erspan.unknown7 | Sequence of bytes | Unknown7 | 1.6.0 to 1.6.5 |
| erspan.version | Unsigned integer, 2 bytes | Version | 1.6.0 to 1.6.5 |
| erspan.vlan | Unsigned integer, 2 bytes | Vlan | 1.0.0 to 1.6.5 |