Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Modbus/TCP

Protocol field name: mbtcp
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
modbus_tcp.and_mask Unsigned integer, 2 bytes AND mask 1.0.0 to 1.6.5
modbus_tcp.bit_cnt Unsigned integer, 2 bytes bit count 1.0.0 to 1.6.5
modbus_tcp.byte_cnt Unsigned integer, 1 byte byte count 1.0.0 to 1.6.5
modbus_tcp.byte_cnt_16 Unsigned integer, 1 byte byte count (16-bit) 1.0.0 to 1.6.5
modbus_tcp.data Sequence of bytes Data 1.6.0 to 1.6.5
modbus_tcp.exception_code Unsigned integer, 1 byte exception code 1.0.0 to 1.6.5
modbus_tcp.func_code Unsigned integer, 1 byte function code 1.0.0 to 1.6.5
modbus_tcp.len Unsigned integer, 2 bytes length 1.0.0 to 1.6.5
modbus_tcp.or_mask Unsigned integer, 2 bytes OR mask 1.0.0 to 1.6.5
modbus_tcp.prot_id Unsigned integer, 2 bytes protocol identifier 1.0.0 to 1.6.5
modbus_tcp.read_reference_num Unsigned integer, 2 bytes read reference number 1.0.0 to 1.6.5
modbus_tcp.read_word_cnt Unsigned integer, 2 bytes read word count 1.0.0 to 1.6.5
modbus_tcp.reference_num Unsigned integer, 2 bytes reference number 1.0.0 to 1.6.5
modbus_tcp.reference_num_32 Unsigned integer, 4 bytes reference number (32 bit) 1.0.0 to 1.6.5
modbus_tcp.reference_type Unsigned integer, 1 byte reference type 1.0.0 to 1.6.5
modbus_tcp.trans_id Unsigned integer, 2 bytes transaction identifier 1.0.0 to 1.6.5
modbus_tcp.unit_id Unsigned integer, 1 byte unit identifier 1.0.0 to 1.6.5
modbus_tcp.word_cnt Unsigned integer, 2 bytes word count 1.0.0 to 1.6.5
modbus_tcp.write_reference_num Unsigned integer, 2 bytes write reference number 1.0.0 to 1.6.5
modbus_tcp.write_word_cnt Unsigned integer, 2 bytes write word count 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation