Official certification from the Wireshark Foundation is available! Learn about becoming a Wireshark Certified Analyst.

Display Filter Reference: Post Office Protocol

Protocol field name: pop

Versions: 1.0.0 to 4.6.0

Back to Display Filter Reference

Field name Description Type Versions
pop.data.fragmentDATA fragmentFrame number1.2.0 to 4.6.0
pop.data.fragment.countDATA fragment countUnsigned integer (32 bits)1.6.0 to 4.6.0
pop.data.fragment.errorDATA defragmentation errorFrame number1.2.0 to 4.6.0
pop.data.fragment.multiple_tailsDATA has multiple tail fragmentsBoolean1.2.0 to 4.6.0
pop.data.fragment.overlapDATA fragment overlapBoolean1.2.0 to 4.6.0
pop.data.fragment.overlap.conflictsDATA fragment overlapping with conflicting dataBoolean1.2.0 to 4.6.0
pop.data.fragment.too_long_fragmentDATA fragment too longBoolean1.2.0 to 4.6.0
pop.data.fragmentsDATA fragmentsLabel1.2.0 to 4.6.0
pop.data.reassembled.inReassembled DATA in frameFrame number1.2.0 to 4.6.0
pop.data.reassembled.lengthReassembled DATA lengthUnsigned integer (32 bits)1.4.0 to 4.6.0
pop.requestRequestCharacter string1.0.0 to 4.6.0
pop.request.commandRequest commandCharacter string1.0.0 to 4.6.0
pop.request.dataDataCharacter string1.0.0 to 4.6.0
pop.request.parameterRequest parameterCharacter string1.0.0 to 4.6.0
pop.responseResponseCharacter string1.0.0 to 4.6.0
pop.response.dataDataCharacter string1.0.0 to 4.6.0
pop.response.descriptionResponse descriptionCharacter string1.0.0 to 4.6.0
pop.response.indicatorResponse indicatorCharacter string1.0.0 to 4.6.0
pop.response.tot_len.invalidLength must be a string containing an integerLabel2.4.0 to 4.6.0