Display Filter Reference: Internet Protocol

Protocol field name: ip

Versions: 1.0.0 to 1.2.6

Field name	Type	Description	Versions
ip.addr	IPv4 address	Source or Destination Address	1.0.0 to 1.2.6
ip.checksum	Unsigned 16-bit integer	Header checksum	1.0.0 to 1.2.6
ip.checksum_bad	Boolean	Bad	1.0.0 to 1.2.6
ip.checksum_good	Boolean	Good	1.0.0 to 1.2.6
ip.dsfield	Unsigned 8-bit integer	Differentiated Services field	1.0.0 to 1.2.6
ip.dsfield.ce	Unsigned 8-bit integer	ECN-CE	1.0.0 to 1.2.6
ip.dsfield.dscp	Unsigned 8-bit integer	Differentiated Services Codepoint	1.0.0 to 1.2.6
ip.dsfield.ect	Unsigned 8-bit integer	ECN-Capable Transport (ECT)	1.0.0 to 1.2.6
ip.dst	IPv4 address	Destination	1.0.0 to 1.2.6
ip.dst_host	String	Destination Host	1.0.0 to 1.2.6
ip.flags	Unsigned 8-bit integer	Flags	1.0.0 to 1.2.6
ip.flags.df	Boolean	Don't fragment	1.0.0 to 1.2.6
ip.flags.mf	Boolean	More fragments	1.0.0 to 1.2.6
ip.flags.rb	Boolean	Reserved bit	1.0.0 to 1.2.6
ip.frag_offset	Unsigned 16-bit integer	Fragment offset	1.0.0 to 1.2.6
ip.fragment	Frame number	IP Fragment	1.0.0 to 1.2.6
ip.fragment.error	Frame number	Defragmentation error	1.0.0 to 1.2.6
ip.fragment.multipletails	Boolean	Multiple tail fragments found	1.0.0 to 1.2.6
ip.fragment.overlap	Boolean	Fragment overlap	1.0.0 to 1.2.6
ip.fragment.overlap.conflict	Boolean	Conflicting data in fragment overlap	1.0.0 to 1.2.6
ip.fragment.toolongfragment	Boolean	Fragment too long	1.0.0 to 1.2.6
ip.fragments	None	IP Fragments	1.0.0 to 1.2.6
ip.geoip.asnum	String	Source or Destination GeoIP AS Number	1.2.1 to 1.2.6
ip.geoip.city	String	Source or Destination GeoIP City	1.2.1 to 1.2.6
ip.geoip.country	String	Source or Destination GeoIP Country	1.2.1 to 1.2.6
ip.geoip.dst_asnum	String	Destination GeoIP AS Number	1.2.1 to 1.2.6
ip.geoip.dst_city	String	Destination GeoIP City	1.2.1 to 1.2.6
ip.geoip.dst_country	String	Destination GeoIP Country	1.2.1 to 1.2.6
ip.geoip.dst_isp	String	Destination GeoIP ISP	1.2.1 to 1.2.6
ip.geoip.dst_lat	String	Destination GeoIP Latitude	1.2.1 to 1.2.6
ip.geoip.dst_lon	String	Destination GeoIP Longitude	1.2.1 to 1.2.6
ip.geoip.dst_org	String	Destination GeoIP Organization	1.2.1 to 1.2.6
ip.geoip.isp	String	Source or Destination GeoIP ISP	1.2.1 to 1.2.6
ip.geoip.lat	String	Source or Destination GeoIP Latitude	1.2.1 to 1.2.6
ip.geoip.lon	String	Source or Destination GeoIP Longitude	1.2.1 to 1.2.6
ip.geoip.org	String	Source or Destination GeoIP Organization	1.2.1 to 1.2.6
ip.geoip.src_asnum	String	Source GeoIP AS Number	1.2.1 to 1.2.6
ip.geoip.src_city	String	Source GeoIP City	1.2.1 to 1.2.6
ip.geoip.src_country	String	Source GeoIP Country	1.2.1 to 1.2.6
ip.geoip.src_isp	String	Source GeoIP ISP	1.2.1 to 1.2.6
ip.geoip.src_lat	String	Source GeoIP Latitude	1.2.1 to 1.2.6
ip.geoip.src_lon	String	Source GeoIP Longitude	1.2.1 to 1.2.6
ip.geoip.src_org	String	Source GeoIP Organization	1.2.1 to 1.2.6
ip.hdr_len	Unsigned 8-bit integer	Header Length	1.0.0 to 1.2.6
ip.host	String	Source or Destination Host	1.0.0 to 1.2.6
ip.id	Unsigned 16-bit integer	Identification	1.0.0 to 1.2.6
ip.len	Unsigned 16-bit integer	Total Length	1.0.0 to 1.2.6
ip.proto	Unsigned 8-bit integer	Protocol	1.0.0 to 1.2.6
ip.reassembled_in	Frame number	Reassembled IP in frame	1.0.0 to 1.2.6
ip.src	IPv4 address	Source	1.0.0 to 1.2.6
ip.src_host	String	Source Host	1.0.0 to 1.2.6
ip.tos	Unsigned 8-bit integer	Type of Service	1.0.0 to 1.2.6
ip.tos.cost	Boolean	Cost	1.0.0 to 1.2.6
ip.tos.delay	Boolean	Delay	1.0.0 to 1.2.6
ip.tos.precedence	Unsigned 8-bit integer	Precedence	1.0.0 to 1.2.6
ip.tos.reliability	Boolean	Reliability	1.0.0 to 1.2.6
ip.tos.throughput	Boolean	Throughput	1.0.0 to 1.2.6
ip.ttl	Unsigned 8-bit integer	Time to live	1.0.0 to 1.2.6
ip.version	Unsigned 8-bit integer	Version	1.0.0 to 1.2.6

Wireshark

Display Filter Reference: Internet Protocol