Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Network Time Protocol
Protocol field name: ntp
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| ntp.ext | Label | Extension | 1.0.0 to 1.6.5 |
| ntp.ext.associd | Unsigned integer, 4 bytes | Association ID | 1.0.0 to 1.6.5 |
| ntp.ext.flags | Unsigned integer, 1 byte | Flags | 1.0.0 to 1.6.5 |
| ntp.ext.flags.error | Unsigned integer, 1 byte | Error bit | 1.0.0 to 1.6.5 |
| ntp.ext.flags.r | Unsigned integer, 1 byte | Response bit | 1.0.0 to 1.6.5 |
| ntp.ext.flags.vn | Unsigned integer, 1 byte | Version | 1.0.0 to 1.6.5 |
| ntp.ext.fstamp | Unsigned integer, 4 bytes | File Timestamp | 1.0.0 to 1.6.5 |
| ntp.ext.len | Unsigned integer, 2 bytes | Extension length | 1.0.0 to 1.6.5 |
| ntp.ext.op | Unsigned integer, 1 byte | Opcode | 1.0.0 to 1.6.5 |
| ntp.ext.sig | Sequence of bytes | Signature | 1.0.0 to 1.6.5 |
| ntp.ext.siglen | Unsigned integer, 4 bytes | Signature length | 1.0.0 to 1.6.5 |
| ntp.ext.tstamp | Unsigned integer, 4 bytes | Timestamp | 1.0.0 to 1.6.5 |
| ntp.ext.val | Sequence of bytes | Value | 1.0.0 to 1.6.5 |
| ntp.ext.vallen | Unsigned integer, 4 bytes | Value length | 1.0.0 to 1.6.5 |
| ntp.flags | Unsigned integer, 1 byte | Flags | 1.0.0 to 1.6.5 |
| ntp.flags.li | Unsigned integer, 1 byte | Leap Indicator | 1.0.0 to 1.6.5 |
| ntp.flags.mode | Unsigned integer, 1 byte | Mode | 1.0.0 to 1.6.5 |
| ntp.flags.vn | Unsigned integer, 1 byte | Version number | 1.0.0 to 1.6.5 |
| ntp.keyid | Sequence of bytes | Key ID | 1.0.0 to 1.6.5 |
| ntp.mac | Sequence of bytes | Message Authentication Code | 1.0.0 to 1.6.5 |
| ntp.org | Date and time | Origin Timestamp | 1.0.0 to 1.6.5 |
| ntp.ppoll | Unsigned integer, 1 byte | Peer Polling Interval | 1.0.0 to 1.6.5 |
| ntp.precision | Signed integer, 1 byte | Peer Clock Precision | 1.0.0 to 1.6.5 |
| ntp.rec | Date and time | Receive Timestamp | 1.0.0 to 1.6.5 |
| ntp.refid | Sequence of bytes | Reference ID | 1.0.0 to 1.6.5 |
| ntp.reftime | Date and time | Reference Timestamp | 1.0.0 to 1.6.5 |
| ntp.rootdelay | Floating point (double-precision) | Root Delay | 1.0.0 to 1.6.5 |
| ntp.rootdispersion | Floating point (double-precision) | Root Dispersion | 1.0.0 to 1.6.5 |
| ntp.stratum | Unsigned integer, 1 byte | Peer Clock Stratum | 1.0.0 to 1.6.5 |
| ntp.xmt | Date and time | Transmit Timestamp | 1.0.0 to 1.6.5 |
| ntpctrl.associd | Unsigned integer, 2 bytes | AssociationID | 1.4.0 to 1.6.5 |
| ntpctrl.clock_status.code | Unsigned integer, 2 bytes | Clock Event Code | 1.4.0 to 1.6.5 |
| ntpctrl.clock_status.status | Unsigned integer, 2 bytes | Clock Status | 1.4.0 to 1.6.5 |
| ntpctrl.count | Unsigned integer, 2 bytes | Count | 1.4.0 to 1.6.5 |
| ntpctrl.data | Label | Data | 1.4.0 to 1.6.5 |
| ntpctrl.err_status | Unsigned integer, 2 bytes | Error Status Word | 1.4.0 to 1.6.5 |
| ntpctrl.flags2 | Unsigned integer, 1 byte | Flags 2 | 1.0.0 to 1.6.5 |
| ntpctrl.flags2.error | Unsigned integer, 1 byte | Error bit | 1.0.0 to 1.6.5 |
| ntpctrl.flags2.more | Unsigned integer, 1 byte | More bit | 1.0.0 to 1.6.5 |
| ntpctrl.flags2.opcode | Unsigned integer, 1 byte | Opcode | 1.0.0 to 1.6.5 |
| ntpctrl.flags2.r | Unsigned integer, 1 byte | Response bit | 1.0.0 to 1.6.5 |
| ntpctrl.item | Label | Item | 1.4.0 to 1.6.5 |
| ntpctrl.offset | Unsigned integer, 2 bytes | Offset | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.authenable | Unsigned integer, 2 bytes | Peer Status | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.authentic | Unsigned integer, 2 bytes | Peer Status | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.code | Unsigned integer, 2 bytes | Peer Event Code | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.config | Unsigned integer, 2 bytes | Peer Status | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.count | Unsigned integer, 2 bytes | Peer Event Counter | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.reach | Unsigned integer, 2 bytes | Peer Status | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.reserved | Unsigned integer, 2 bytes | Peer Status: reserved | 1.4.0 to 1.6.5 |
| ntpctrl.peer_status.selection | Unsigned integer, 2 bytes | Peer Selection | 1.4.0 to 1.6.5 |
| ntpctrl.sequence | Unsigned integer, 2 bytes | Sequence | 1.4.0 to 1.6.5 |
| ntpctrl.status | Unsigned integer, 2 bytes | Status | 1.4.0 to 1.6.5 |
| ntpctrl.sys_status.clksrc | Unsigned integer, 2 bytes | Clock Source | 1.4.0 to 1.6.5 |
| ntpctrl.sys_status.code | Unsigned integer, 2 bytes | System Event Code | 1.4.0 to 1.6.5 |
| ntpctrl.sys_status.count | Unsigned integer, 2 bytes | System Event Counter | 1.4.0 to 1.6.5 |
| ntpctrl.sys_status.li | Unsigned integer, 2 bytes | Leap Indicator | 1.4.0 to 1.6.5 |
| ntpctrl.trapmsg | Character string | Trap message | 1.4.0 to 1.6.5 |
| ntppriv.auth | Unsigned integer, 1 byte | Auth bit | 1.0.0 to 1.6.5 |
| ntppriv.auth_seq | Unsigned integer, 1 byte | Auth, sequence | 1.0.0 to 1.6.5 |
| ntppriv.flags.more | Unsigned integer, 1 byte | More bit | 1.0.0 to 1.6.5 |
| ntppriv.flags.r | Unsigned integer, 1 byte | Response bit | 1.0.0 to 1.6.5 |
| ntppriv.impl | Unsigned integer, 1 byte | Implementation | 1.0.0 to 1.6.5 |
| ntppriv.reqcode | Unsigned integer, 1 byte | Request code | 1.0.0 to 1.6.5 |
| ntppriv.seq | Unsigned integer, 1 byte | Sequence number | 1.0.0 to 1.6.5 |