Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Remote Packet Capture
Protocol field name: rpcap
Versions: 1.2.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| rpcap.addr | Label | Address | 1.2.0 to 1.6.5 |
| rpcap.auth | Label | Authentication | 1.2.0 to 1.6.5 |
| rpcap.auth_len1 | Unsigned integer, 2 bytes | Authentication item length 1 | 1.2.0 to 1.6.5 |
| rpcap.auth_len2 | Unsigned integer, 2 bytes | Authentication item length 2 | 1.2.0 to 1.6.5 |
| rpcap.auth_type | Unsigned integer, 2 bytes | Authentication type | 1.2.0 to 1.6.5 |
| rpcap.broadaddr | Label | Broadcast | 1.2.0 to 1.6.5 |
| rpcap.bufsize | Unsigned integer, 4 bytes | Buffer size | 1.2.0 to 1.6.5 |
| rpcap.cap_len | Unsigned integer, 4 bytes | Capture length | 1.2.0 to 1.6.5 |
| rpcap.client_port | Unsigned integer, 2 bytes | Client Port | 1.2.0 to 1.6.5 |
| rpcap.desclen | Unsigned integer, 4 bytes | Description length | 1.2.0 to 1.6.5 |
| rpcap.dstaddr | Label | P2P destination address | 1.2.0 to 1.6.5 |
| rpcap.dummy | Unsigned integer, 2 bytes | Dummy | 1.2.0 to 1.6.5 |
| rpcap.error | Character string | Error | 1.2.0 to 1.6.5 |
| rpcap.error_value | Unsigned integer, 2 bytes | Error value | 1.2.0 to 1.6.5 |
| rpcap.filter | Label | Filter | 1.2.0 to 1.6.5 |
| rpcap.filterbpf_insn | Label | Filter BPF instruction | 1.2.0 to 1.6.5 |
| rpcap.filtertype | Unsigned integer, 2 bytes | Filter type | 1.2.0 to 1.6.5 |
| rpcap.findalldevs_reply | Label | Find all devices | 1.2.0 to 1.6.5 |
| rpcap.flags | Unsigned integer, 2 bytes | Flags | 1.2.0 to 1.6.5 |
| rpcap.flags.dgram | Boolean | Use Datagram | 1.2.0 to 1.6.5 |
| rpcap.flags.inbound | Boolean | Inbound | 1.2.0 to 1.6.5 |
| rpcap.flags.outbound | Boolean | Outbound | 1.2.0 to 1.6.5 |
| rpcap.flags.promisc | Boolean | Promiscuous mode | 1.2.0 to 1.6.5 |
| rpcap.flags.serveropen | Boolean | Server open | 1.2.0 to 1.6.5 |
| rpcap.if | Label | Interface | 1.2.0 to 1.6.5 |
| rpcap.if.af | Unsigned integer, 2 bytes | Address family | 1.2.0 to 1.6.5 |
| rpcap.if.flags | Unsigned integer, 4 bytes | Interface flags | 1.2.0 to 1.6.5 |
| rpcap.if.ip | IPv4 address | IP address | 1.2.0 to 1.6.5 |
| rpcap.if.padding | Sequence of bytes | Padding | 1.2.0 to 1.6.5 |
| rpcap.if.port | Unsigned integer, 2 bytes | Port | 1.2.0 to 1.6.5 |
| rpcap.if.unknown | Sequence of bytes | Unknown address | 1.2.0 to 1.6.5 |
| rpcap.ifaddr | Label | Interface address | 1.2.0 to 1.6.5 |
| rpcap.ifdesc | Character string | Description | 1.2.0 to 1.6.5 |
| rpcap.ifdrop | Unsigned integer, 4 bytes | Dropped by network interface | 1.2.0 to 1.6.5 |
| rpcap.ifname | Character string | Name | 1.2.0 to 1.6.5 |
| rpcap.ifrecv | Unsigned integer, 4 bytes | Received by kernel filter | 1.2.0 to 1.6.5 |
| rpcap.instr_value | Unsigned integer, 4 bytes | Instruction value | 1.2.0 to 1.6.5 |
| rpcap.jf | Unsigned integer, 1 byte | JF | 1.2.0 to 1.6.5 |
| rpcap.jt | Unsigned integer, 1 byte | JT | 1.2.0 to 1.6.5 |
| rpcap.krnldrop | Unsigned integer, 4 bytes | Dropped by kernel filter | 1.2.0 to 1.6.5 |
| rpcap.len | Unsigned integer, 4 bytes | Payload length | 1.2.0 to 1.6.5 |
| rpcap.linktype | Unsigned integer, 4 bytes | Link type | 1.2.0 to 1.6.5 |
| rpcap.naddr | Unsigned integer, 4 bytes | Number of addresses | 1.2.0 to 1.6.5 |
| rpcap.namelen | Unsigned integer, 2 bytes | Name length | 1.2.0 to 1.6.5 |
| rpcap.netmask | Label | Netmask | 1.2.0 to 1.6.5 |
| rpcap.nitems | Unsigned integer, 4 bytes | Number of items | 1.2.0 to 1.6.5 |
| rpcap.number | Unsigned integer, 4 bytes | Frame number | 1.2.0 to 1.6.5 |
| rpcap.opcode | Unsigned integer, 2 bytes | Op code | 1.2.0 to 1.6.5 |
| rpcap.open_reply | Label | Open reply | 1.2.0 to 1.6.5 |
| rpcap.open_request | Character string | Open request | 1.2.0 to 1.6.5 |
| rpcap.packet | Label | Packet | 1.2.0 to 1.6.5 |
| rpcap.password | Character string | Password | 1.2.0 to 1.6.5 |
| rpcap.read_timeout | Unsigned integer, 4 bytes | Read timeout | 1.2.0 to 1.6.5 |
| rpcap.sampling_method | Unsigned integer, 1 byte | Method | 1.2.0 to 1.6.5 |
| rpcap.sampling_request | Label | Sampling | 1.2.0 to 1.6.5 |
| rpcap.sampling_value | Unsigned integer, 4 bytes | Value | 1.2.0 to 1.6.5 |
| rpcap.server_port | Unsigned integer, 2 bytes | Server port | 1.2.0 to 1.6.5 |
| rpcap.snaplen | Unsigned integer, 4 bytes | Snap length | 1.2.0 to 1.6.5 |
| rpcap.srvcapt | Unsigned integer, 4 bytes | Captured by rpcapd | 1.2.0 to 1.6.5 |
| rpcap.startcap_reply | Label | Start capture reply | 1.2.0 to 1.6.5 |
| rpcap.startcap_request | Label | Start capture request | 1.2.0 to 1.6.5 |
| rpcap.stats_reply | Label | Statistics | 1.2.0 to 1.6.5 |
| rpcap.time | Date and time | Arrival time | 1.2.0 to 1.6.5 |
| rpcap.type | Unsigned integer, 1 byte | Message type | 1.2.0 to 1.6.5 |
| rpcap.tzoff | Unsigned integer, 4 bytes | Timezone offset | 1.2.0 to 1.6.5 |
| rpcap.username | Character string | Username | 1.2.0 to 1.6.5 |
| rpcap.value | Unsigned integer, 2 bytes | Message value | 1.2.0 to 1.6.5 |
| rpcap.version | Unsigned integer, 1 byte | Version | 1.2.0 to 1.6.5 |