Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Frame

Protocol field name: frame
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
frame.cap_len Unsigned integer, 4 bytes Frame length stored into the capture file 1.0.0 to 1.6.5
frame.coloring_rule.name Character string Coloring Rule Name 1.0.0 to 1.6.5
frame.coloring_rule.string Character string Coloring Rule String 1.0.0 to 1.6.5
frame.file_off Signed integer, 8 bytes File Offset 1.0.0 to 1.6.5
frame.ignored Boolean Frame is ignored 1.4.0 to 1.6.5
frame.len Unsigned integer, 4 bytes Frame length on the wire 1.0.0 to 1.6.5
frame.link_nr Unsigned integer, 2 bytes Link Number 1.0.0 to 1.6.5
frame.marked Boolean Frame is marked 1.0.0 to 1.6.5
frame.md5_hash Character string Frame MD5 Hash 1.2.0 to 1.6.5
frame.number Unsigned integer, 4 bytes Frame Number 1.0.0 to 1.6.5
frame.p2p_dir Signed integer, 1 byte Point-to-Point Direction 1.0.0 to 1.6.5
frame.pkt_len Unsigned integer, 4 bytes Frame length on the wire 1.0.0 to 1.0.16
frame.protocols Character string Protocols in frame 1.0.0 to 1.6.5
frame.ref_time Label This is a Time Reference frame 1.0.0 to 1.6.5
frame.time Date and time Arrival Time 1.0.0 to 1.6.5
frame.time_delta Time offset Time delta from previous captured frame 1.0.0 to 1.6.5
frame.time_delta_displayed Time offset Time delta from previous displayed frame 1.0.0 to 1.6.5
frame.time_epoch Time offset Epoch Time 1.4.0 to 1.6.5
frame.time_invalid Label Arrival Timestamp invalid 1.0.0 to 1.6.5
frame.time_relative Time offset Time since reference or first frame 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation