Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Internet Control Message Protocol

Protocol field name: icmp
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
icmp.checksum Unsigned integer, 2 bytes Checksum 1.0.0 to 1.6.5
icmp.checksum_bad Boolean Bad Checksum 1.0.0 to 1.6.5
icmp.code Unsigned integer, 1 byte Code 1.0.0 to 1.6.5
icmp.ident Unsigned integer, 2 bytes Identifier (BE) 1.0.0 to 1.6.5
icmp.mip.b Boolean Busy 1.0.0 to 1.6.5
icmp.mip.challenge Sequence of bytes Challenge 1.0.0 to 1.6.5
icmp.mip.coa IPv4 address Care-Of-Address 1.0.0 to 1.6.5
icmp.mip.f Boolean Foreign Agent 1.0.0 to 1.6.5
icmp.mip.flags Unsigned integer, 2 bytes Flags 1.0.0 to 1.6.5
icmp.mip.g Boolean GRE 1.0.0 to 1.6.5
icmp.mip.h Boolean Home Agent 1.0.0 to 1.6.5
icmp.mip.length Unsigned integer, 1 byte Length 1.0.0 to 1.6.5
icmp.mip.life Unsigned integer, 2 bytes Registration Lifetime 1.0.0 to 1.6.5
icmp.mip.m Boolean Minimal Encapsulation 1.0.0 to 1.6.5
icmp.mip.prefixlength Unsigned integer, 1 byte Prefix Length 1.0.0 to 1.6.5
icmp.mip.r Boolean Registration Required 1.0.0 to 1.6.5
icmp.mip.reserved Unsigned integer, 2 bytes Reserved 1.0.0 to 1.6.5
icmp.mip.rt Boolean Reverse tunneling 1.0.0 to 1.6.5
icmp.mip.seq Unsigned integer, 2 bytes Sequence Number 1.0.0 to 1.6.5
icmp.mip.type Unsigned integer, 1 byte Extension Type 1.0.0 to 1.6.5
icmp.mip.u Boolean UDP tunneling 1.0.0 to 1.6.5
icmp.mip.v Boolean VJ Comp 1.0.0 to 1.6.5
icmp.mip.x Boolean Revocation support 1.0.0 to 1.6.5
icmp.mpls Label ICMP Extensions for MPLS 1.0.0 to 1.6.5
icmp.mpls.checksum Unsigned integer, 2 bytes Checksum 1.0.0 to 1.6.5
icmp.mpls.checksum_bad Boolean Bad Checksum 1.0.0 to 1.6.5
icmp.mpls.class Unsigned integer, 1 byte Class 1.0.0 to 1.6.5
icmp.mpls.ctype Unsigned integer, 1 byte C-Type 1.0.0 to 1.6.5
icmp.mpls.exp Unsigned integer, 3 bytes Experimental 1.0.0 to 1.6.5
icmp.mpls.label Unsigned integer, 3 bytes Label 1.0.0 to 1.6.5
icmp.mpls.length Unsigned integer, 2 bytes Length 1.0.0 to 1.6.5
icmp.mpls.res Unsigned integer, 2 bytes Reserved 1.0.0 to 1.6.5
icmp.mpls.s Boolean Stack bit 1.0.0 to 1.6.5
icmp.mpls.ttl Unsigned integer, 1 byte Time to live 1.0.0 to 1.6.5
icmp.mpls.version Unsigned integer, 1 byte Version 1.0.0 to 1.6.5
icmp.mtu Unsigned integer, 2 bytes MTU of next hop 1.0.0 to 1.6.5
icmp.redir_gw IPv4 address Gateway address 1.0.0 to 1.6.5
icmp.resp_in Frame number Response In 1.6.0 to 1.6.5
icmp.resp_to Frame number Response To 1.6.0 to 1.6.5
icmp.resptime Floating point (double-precision) Response Time 1.6.0 to 1.6.5
icmp.seq Unsigned integer, 2 bytes Sequence number (BE) 1.0.0 to 1.6.5
icmp.seq_le Unsigned integer, 2 bytes Sequence number (LE) 1.4.0 to 1.6.5
icmp.type Unsigned integer, 1 byte Type 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation